AI & Tech News Digest — November 11, 2026

AI NewsTop 5

• Anthropic Turns Claude Into an Office Suite — Hours Into Its IPO Roadshow (Nov 10)

  AnthropicCNBC

  Claude Sheets (beta, all paid plans) generates workbooks with tabs, formulas, formatting and dropdowns from a prompt and edits cells with tracked annotations; Claude Whiteboards turns brainstorms into boards with owners and dates, exportable to docs, decks, Lucid or Miro; Claude Dashboards goes GA as Claude Data with certified metric queries, live sharing, caching and version history. Interactive connectors now run Adobe, Atlassian, Box and Notion as full apps beside the conversation, and the marketplace lists 9,000+ MCP connectors; per Bloomberg’s recap, enterprise sessions run in isolated VMs with a Compliance API covering 100+ security tools, and Claude Meetings joins Google Meet calls as a participant on Team and Enterprise. The timing: the same day Anthropic opened its IPO roadshow — 825 million Class A shares at $70–78 (a $57.8–64.4B raise at a ~$1.3T valuation, ticker ANT on Nasdaq, trading expected Nov 19), TSMC’s board approving up to $500M of IPO shares plus $500M of OpenAI preferred, and Microsoft sliding over 3% intraday. Admins: on Enterprise plans Whiteboards and Sheets are off by default, and Claude Data flips on by default November 19 — change it in Organization settings before it lands.

• Gemini 4 Carbon Is Now Generally Available (Nov 10)

  Google blogHN, 281 points

  Google’s cyber-focused frontier model moved from the two-week Fairwind preview to everyone: API in AI Studio and Gemini for business, plus AI Ultra subscribers in the Gemini app, AI Mode and Antigravity. Intro pricing matches Argon at $2/M input and $10/M output — until November 30, when it jumps to $4/$20. Google claims #1 on CursorBench 4.0, Perplexity’s WANDR and Zapier’s AutomationBench at more than 2x lower cost per task than the next best external model, #2 on the new Multimodal Knowledge Agent benchmark at 6x lower cost, and a 0% prompt-injection success rate on Gray Swan’s benchmark with the breach rate down to 0.8% (3.1% on Argon). The /swarm preview in Antigravity turns one prompt into a tracked team of agents pairing Carbon with cheaper models and adversarial verifiers. Practical move: run your Carbon-vs-Argon-vs-Claude benchmarks this month while the intro rate makes large test runs cheap.

• DeepMind’s AlphaProof Code Formally Verified Signal’s Protocol Code (Nov 10)

  DeepMind blogHN, 600 points

  The new agentic framework for formal verification translated Signal’s cryptographic protocol security goals into mathematical theorems, then used Gemini 4 Carbon agents to generate millions of lines of Lean proof code — proving key security properties of real production code in weeks, a task Google says takes expert teams years. It was built by researchers inside Google and shipped alongside the Carbon announcement as the flagship proof-of-work. The relevance for ordinary engineering teams: formal verification of critical code paths is moving from academic years-long projects toward something that can sit in a CI pipeline for the code that actually matters — auth, crypto, consensus.

• OpenAI Opens Businesses in ChatGPT With Business Agents (Nov 10)

  OpenAI announcementAI Daily Digest

  Businesses can now claim a profile through Business Hub — update details, upload product feeds with pricing and availability, and see aggregated insights (mentions, clicks, discovery topics) drawn from the 1.2B weekly users’ conversations where their site is cited. The agentic piece: Business Agents let a verified brand run clearly-labeled conversations with users, grounded in the business’s own information, with Shopify merchants connecting their stores first and US ecommerce/service businesses in the initial rollout; businesses can sponsor their agent as a ChatGPT Ads destination. OpenAI tried direct commerce with carts last year and killed it in March — this is the pivot to a search-and-discovery model instead. Verification specifics are deliberately undisclosed, which is exactly the part to watch: the whole product rests on users trusting that an agent really represents the brand it claims.

• Fireworks AI Breach Exposes Notion AI Chat Transcripts (Nov 10)

  Notion noticeHN, 161 points

  Notion disclosed that its AI vendor Fireworks AI suffered a security incident affecting fewer than 1% of Notion workspaces — and the detail that matters is contractual: Notion had a zero-data-retention agreement, “unfortunately, during our investigation we learned that data was retained from the Fireworks endpoints that we used.” Fireworks ran Notion’s Insights classification jobs and served open-weight models, so exposed chat transcripts include everything typed into Notion AI. Notion disconnected on November 3, deleted all data in Fireworks systems, halted training runs and disabled Insights; workspace owners with verified domains can download the affected content as annotated CSVs with an __analysis column flagging credentials to rotate. If you pasted secrets into Notion AI recently, rotate them now — and treat vendor ZDR promises as unverified until audited, which is exactly what Notion says it will do.

Also tracked: Google shipped two more eighth-gen TPU configurations Monday — TPU 8tx for confidential computing and TPU 8i Max with double the compute, SRAM and HBM bandwidth for massive contexts — four TPU variants in one year; Bloomberg Intelligence projects TPU revenue from ~$12B this year to $135B+ by 2028 — AI Daily Digest.

Developer & DevOps NewsTop 5

• .NET 11 Ships — and .NET 8/9 Hit End of Support the Same Day (Nov 10)

  Microsoft devblogsHN, 194 comments

  .NET 11 is a Standard Term Support release (two years) with C# 15 union types and closed hierarchies, asynchronous validation and OpenAPI 3.2 in ASP.NET Core, built-in Zstandard compression, a LINQ FullJoin, EF Core 11 with experimental SQL Server vector search, and an MCP server template (dotnet new mcpserver) plus Microsoft.Extensions.AI and Agent Framework for agentic apps; Runtime Async remains preview. The ops half of the announcement: .NET 8 — an LTS release — and .NET 9 both reached end of support on November 10, so they stop receiving security fixes today. If you own .NET fleets, the C# 15 features are the headline but the EOL deadline is the work item: inventory runtimes, and .NET 10 is the LTS migration path. .NET Conf runs November 10–13.

• Modern Web Guidance 1.0: Chrome, Firefox and Edge Ship a Skill for Your Coding Agent (Nov 10)

  Chrome for DevelopersHN, 320 points

  What started as a Chrome I/O preview is now a cross-browser effort — Firefox and Edge joined, alongside MDN — shipping 200+ expert-vetted web-platform guides with embedded Baseline compatibility data as an agent skill plus a ~7MB RAG CLI with ~10ms search. The numbers are the story: on 200 tasks with ~1,700 Playwright/AST assertions, coding agents went from 55% pass unguided to 92% guided, and the new legacy-scan (trained on 30k GitHub repos, 92% precision) flags dated patterns — <div>+JS where <dialog>, CSS.highlights or field-sizing would do. Case studies claim WeTV auto-resolves 90% of failed performance checks and MetaMask’s PR bot landed 43 fixes in five weeks. Install with npx modern-web-guidance@latest install — it’s the first browser-vendor answer to “agents write 2019 JavaScript”, and your frontend agents should get it.

• Val Town Is Winding Down (Nov 10)

  Val Town blogHN, 343 points

  The serverless JavaScript sandbox that hosted vals, SQLite apps and cron scripts is shutting down: new signups closed November 10, read-only mode starts December 10 (sqlite and blob storage excepted), all services end January 10, 2027, and the code will be open-sourced February 1, 2027. Billing is paused today, annual plans get partial refunds, and the team published migration guides to Cloudflare, Vercel, Netlify and Render — noting that today’s LLMs are good at exactly this kind of migration. The founder’s diagnosis is blunt: “we couldn’t compete in the cloud computing space.” If you still run anything on Val Town, export this week; the broader lesson about building on small platform-as-a-service startups keeps repeating.

• Verisign Backs Off Terminating the .name TLD — 22,000 Domains Grandfathered (Nov 10)

  Neil FraserHN, 744 points

  “We won” — after the September plan (547-comment HN thread) to terminate all third-level .name domains and email redirects, Verisign is retracting it. Existing domains and email redirects — 22,000 of them, including Neil Fraser’s long-running site — remain indefinitely; the trade-off is that new third-level registrations close. The reversal came through formal ICANN reconsideration requests, in-person advocacy, and lawyers, with letters of support from users whose two-decade-old email addresses hung on the TLD. It’s a rare win for incumbents of infrastructure nobody wanted to build a business on — and a reminder to check what happens to your domains when a registry’s economics change.

• ClickHouse Acquires Xata — and Takes Postgres Branching for Agents Mainstream (Nov 9)

  Xata blogHN, 98 points

  Xata, the Postgres platform behind instant copy-on-write branching (a ~3-second branch of a multi-terabyte database, paying only for the diff, with ~1-second wake from scale-to-zero), is joining ClickHouse the same day ClickHouse Managed Postgres goes GA. The pitch is aimed straight at the agentic workflow: a database branch per pull request and per agent run, with Xata’s Xatastor engine exposing ZFS zvols over NVMe/TCP so unmodified vanilla Postgres runs on it; AI-native customers already create thousands of branches a week. Xata customers keep working as-is until migration to ClickHouse Managed Postgres; its open-source pgstream and pgroll continue. Postgres-per-agent is becoming the default dev workflow, and the infrastructure vendors are now consolidating around it.

Also tracked: the Node.js security releases for the 26.x, 24.x and 22.x lines — top severity HIGH on all three — land on or shortly after today, November 11; queue rebuilds now if you ship pinned images — nodejs.org.

Self-Hosting & HomelabTop 4

• Ten Years of Smart Home Rules: Nothing Core Needs the Vendor’s Server (Nov 10)

  Do Code That MattersHN, 798 points

  A ten-year home-automation veteran lays out 11 rules, starting with rule one: if the internet goes down, the house keeps running — no core function depends on a vendor’s server, after a Nest integration died when Google broke the API. The stack is deliberately boring: Tasmota on ESP boards, MQTT pub/sub, Node-RED and Grafana on a Pi, a wall tablet dashboard that replaced five vendor apps. The reader submissions are the best part — a fridge whose temperature can’t be changed because of a broken phone app, a heating system that doesn’t work from the local network, a meat thermometer that died with its company. Practical takeaways: prefer Zigbee/Z-Wave over cloud Wi-Fi devices, demand an API with logs before installing anything cloud-connected, and there’s open-source firmware (No Longer Evil) for old Nest thermostats.

• Immich v3.4.0 Adds JPEG XL, Mobile Tags and a Batch of Security Fixes (Nov 10)

  GitHub releasesImmich blog

  The photo platform’s latest stable release landed November 10 after two release candidates: workflow improvements, JPEG XL support — long the top feature request, and timely given the storage math — tags on mobile (“finally?!”), and what the team calls a plethora of security fixes. The community is already testing the JPEG XL angle: a companion FOSS tool trending on r/selfhosted converts Immich libraries to JPEG-XL/AV1 in place for 20–50% smaller libraries while keeping albums intact. Standard warning applies: read the upgrade notes for breaking changes before running the compose pull on a production instance, and take a backup first.

• AdGuard Home Opens a v1.0 Beta With a Modernized UI (Nov 5)

  AdGuard blogGitHub releases

  The self-hosted DNS blocker is marking a shift to active development with a v1.0 beta: a modernized, faster interface that keeps the familiar layout, plus the usual beta-channel churn — v1.0.0-b.2 followed quickly on the first beta. Meanwhile the stable branch shipped 0.107.80 on November 3, a dependency-and-security refresh for anyone staying on the release channel. For homelab DNS that everything else depends on, the advice is the usual: keep production on 0.107.80, kick the beta’s tires on a secondary instance, and check the changelog before switching your network’s resolver over.

• Microsoft Ports Process Explorer to macOS (Nov 9)

  GitHubHN, 168 points

  Sysinternals’ classic Process Explorer — the task manager that power users actually run on Windows — now exists for macOS as an open-source Microsoft repo, showing processes, resource use and parent-child trees natively. The HN thread is part nostalgia, part practical: Mac admin finishing the diagnostics gap between ps, Activity Monitor, and the everything-at-once commercial tools. For anyone managing Mac fleets alongside Linux and Windows boxes, having the same process-forensics mental model cross-platform is a small but real win — watch the repo’s release cadence before depending on it.

Trending GitHub RepositoriesTop 10, last 7 days

Also tracked: the trending list is again flooded by a pirate-installer wave — a dozen ~773★ “desktop suite” repos (SPSS, Quicken, Cinebench, Melodyne “pre-activated”) with zero forks — plus a gaming-utility family with random-word org names; the MobileGestalt editor family keeps climbing (GestaltX 5.3k★ at a 0.39 fork ratio). Verify before you star.

Hacker News Top Stories

1. AI usage generates a fragile codebase(447 points, 449 comments)

   evanxmerz.comdiscussion

   A working developer’s case that agent-written code passes its tests but breaks under change — the 449-comment thread turned it into this week’s best practices debate.

2. Ableton Live 13(297 points, 310 comments)

   ableton.comdiscussion

   The music-production staple shipped a new major version; the discussion is mostly working producers comparing upgrade notes.

3. Your TV can see through walls (2025)(262 points, 128 comments)

   maurycyz.comdiscussion

   Motion sensing through walls using nothing but Wi-Fi signal-strength fluctuations from pings to devices already on your LAN — no extra hardware, resurfaced this week.

4. Horrible public key tricks(243 points, 85 comments)

   maurycyz.comdiscussion

   From the same author: a tour of hostile public-key and certificate edge cases — exactly the malformed inputs that break TLS parsers and crypto libraries.

5. AMD’s Zen 6 Family: Feeding the Beast(210 points, 79 comments)

   Chips and Cheesediscussion

   A microarchitecture teardown of Zen 6 focused on how AMD feeds its wider execution — the comments add the Intel comparison nobody paid for.

6. Six Math Essentials(189 points, 32 comments)

   teorth.github.iodiscussion

   Terence Tao’s short list of the six mathematical essentials on his own site; the thread extends it into a free reading list.

Also tracked: Queens Public Library is under a ransomware attack, with systems down and a notice up (195 points) — library notice | discussion.

Reddit HighlightsTop 5

• r/claude — Introducing Claude Whiteboards, Claude Sheets, and Claude Data

  Thread

  First reactions to Claude becoming an office suite, on the same day the IPO price range dropped.

• r/LocalLLaMA — Apple has new Mac app coming to make running local AI models easy

  Thread

  The local-AI crowd sizing up what a first-party Apple app means for Ollama, LM Studio and MLX workflows.

• r/selfhosted — [FOSS] A tool to shrink Immich libraries 20-50% by converting to JPEG-XL/AV1

  Thread

  Pairs directly with Immich v3.4.0’s new JPEG XL support; real numbers on library-size savings.

• r/Tailscale — Tailscale’s DNS IPv6 spells out “Tailscale”

  Thread

  An easter egg in Tailscale’s IPv6 addresses doubles as the best hands-on IPv6 hex lesson this week.

• r/Artificials — Gemini 4 Carbon beats Claude and GPT on most benchmarks

  Thread

  The community benchmark fight to read alongside Carbon’s general availability and its November 30 price jump.