HN Buddy

Daily digest of top Hacker News posts and comments

Subscribe to the HN Buddy Daily Digest

Your email will only be used for the HN Buddy Daily Digest. I will not share it with anyone.

HN Buddy Daily Digest

Tuesday, October 20, 2026

Hey buddy, Dude, you gotta hear about some of the wild stuff on Hacker News from Tuesday. It was a pretty busy day for tech news, honestly.

AI Performance and Legal Headaches

First up, there's this new thing called DeepInfer from DeepSeek AI. It's an open-source framework to make their AI models run super fast. Someone in the comments did the math and figured out you could process like 91 million tokens a year for less than a dollar using it on a MacBook Pro. Crazy cheap, right?

But then people started digging into the legal fine print, especially about "third-party products" using DeepSeek. Sounds like there could be some tricky licensing stuff there. Also, a lot of folks were talking about how this is a big deal for Linux servers, since that's where most AI stuff runs anyway.

Certificate Authority Got Hacked!

Then, big scary news: eMudhra, a Certificate Authority, got compromised. That's like, super bad for internet security. Someone in the comments immediately found that a ton of fake Google.com certificates – over 100,000! – were pushed to the public logs using the hacked key. And get this, another comment pointed out that those public logs only help if your software actually checks them. If it doesn't, hackers don't even need to register their fake certs. Yikes.

SimCity, But With Bureaucracy

On a lighter note, someone made a game called "SimCity, but with Permits." It's exactly what it sounds like – you build a city, but you have to deal with all the zoning and permit rules. Sounds like a fun, maybe frustrating, take on urban planning. People were already debating in the comments about whether the game's assumptions about suburbs and city economics were accurate, which is pretty cool for a game to spark that kind of real-world discussion.

PHP Had a Really Bad Day

Okay, this one's a big deal for anyone running websites: PHP had two massive security vulnerabilities announced, both with a CVSS score of 10.0. That's as bad as it gets, meaning remote code execution is possible. So, if you've got PHP stuff, you need to patch it ASAP. Someone even mentioned that Node.js also had security releases, so it was just a rough day for web tech overall. Oh, and hilariously, one person complained that the official PHP security announcement sounded like "AI slop" – talk about meta!

Facebook Pages: Pay Up to Post Links

Remember how Facebook keeps trying to squeeze more money out of everything? Well, now Facebook Pages require a paid subscription if you want to post more than two links a month. Can you believe that? People were pretty mad. One comment highlighted how this is especially impactful in places like the Philippines, where a lot of people use "data-only" plans where Facebook *is* basically the internet for them. Just another step in the "enshittification" playbook, I guess.

LLMs Citing Fake News Now?

This next one is wild: someone did an experiment where they published fake statistics on a brand new website, and LLMs like ChatGPT immediately started citing them, even before Google Search indexed the page. It's a pretty stark example of how easily these AI models can pick up and spread misinformation if they're just crawling the web without proper fact-checking. A lot of debate in the comments about whether the LLM *actually* used the stats or just visited the page, but still, super concerning.

Google Cloud Went Down, Took Europe's Banks With It

And finally, a huge one: there was a massive Google Cloud outage that took down almost all banking and other major operations across Europe. HSBC, Revolut, Bank of Scotland – all hit. Sounds like a single power event in one data center triggered a "thundering herd" problem that cascaded across the region. People were asking why banks are even allowed to be so dependent on third-party cloud providers, which is a fair point when you see this kind of widespread chaos.

So yeah, quite a day. Talk soon!

All Stories from Today

DeepInfer: High-performance inference framework for DeepSeek models (github.com)

eMudhra intermediate CA compromise (emudhra.we-have-a-problem.com)

Show HN: SimCity, but with Permits (permit.petercai.com)

Voxtral 3 (mistral.ai)

Upcoming critical PHP security release (CVE-2026-109618 / -109619) (news-web.php.net)

Apple broke an essential presentation feature of iPads (teddysvoronos.com)

OpenBSD 8.0 (www.openbsd.org)

Facebook Pages require paid subscription to post more than two links per month (mastodon.gamedev.place)

MicroG: Free-libre re-implementation of Google's proprietary Android user space (github.com)

Tsrs: A Port of TypeScript to Rust (blog.cloudflare.com)

Google Cloud outage affects almost all banking and other operations in Europe (www.neowin.net)

AfD Leak: What 421,179 Hacked Emails Show about the German Far Right (www.heistberlin.com)

Ofcom concedes defeat in 4chan case (prestonbyrne.com)

What shall I teach my son? (stevekrouse.com)

How I got over 300 Tor exit nodes removed (kaba.cx)

Publish fake stats, get cited in LLMs (peec.ai)

Google open-sources TorchTPU, a native PyTorch back end for TPUs (github.com)

Lula supporters protest against Meta to denounce its 'electoral interference' (efe.com)

Sixteen years after Deepwater Horizon, deep sea life shows few signs of recovery (e360.yale.edu)

France's supermarket fridges were vulnerable online for months (ipinfo.io)

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming (news.ycombinator.com)

My Friend Bob Cringely (tyma.com)

Academics have a duty to defend open knowledge systems like Wikipedia (blogs.lse.ac.uk)

Feds suspect ransom negotiator ran ShinyHunters extortion site (krebsonsecurity.com)

Show HN: VoidAccess – open-source dark web OSINT, from query to a graph (github.com)

IKEA – 3D Guide (sael.net)

NixOS is making me less afraid (entropicthoughts.com)

2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)

Steam Users Beg for "No AI" Filter as Vibecoders Flood Next Fest (www.ign.com)

The Other Epidemic: Trying to get off benzodiazepines (www.thebeliever.net)