HN Buddy Daily Digest
Tuesday, October 20, 2026
AI Performance and Legal Headaches
First up, there's this new thing called DeepInfer from DeepSeek AI. It's an open-source framework to make their AI models run super fast. Someone in the comments did the math and figured out you could process like 91 million tokens a year for less than a dollar using it on a MacBook Pro. Crazy cheap, right?
But then people started digging into the legal fine print, especially about "third-party products" using DeepSeek. Sounds like there could be some tricky licensing stuff there. Also, a lot of folks were talking about how this is a big deal for Linux servers, since that's where most AI stuff runs anyway.
Certificate Authority Got Hacked!
Then, big scary news: eMudhra, a Certificate Authority, got compromised. That's like, super bad for internet security. Someone in the comments immediately found that a ton of fake Google.com certificates – over 100,000! – were pushed to the public logs using the hacked key. And get this, another comment pointed out that those public logs only help if your software actually checks them. If it doesn't, hackers don't even need to register their fake certs. Yikes.
SimCity, But With Bureaucracy
On a lighter note, someone made a game called "SimCity, but with Permits." It's exactly what it sounds like – you build a city, but you have to deal with all the zoning and permit rules. Sounds like a fun, maybe frustrating, take on urban planning. People were already debating in the comments about whether the game's assumptions about suburbs and city economics were accurate, which is pretty cool for a game to spark that kind of real-world discussion.
PHP Had a Really Bad Day
Okay, this one's a big deal for anyone running websites: PHP had two massive security vulnerabilities announced, both with a CVSS score of 10.0. That's as bad as it gets, meaning remote code execution is possible. So, if you've got PHP stuff, you need to patch it ASAP. Someone even mentioned that Node.js also had security releases, so it was just a rough day for web tech overall. Oh, and hilariously, one person complained that the official PHP security announcement sounded like "AI slop" – talk about meta!
Facebook Pages: Pay Up to Post Links
Remember how Facebook keeps trying to squeeze more money out of everything? Well, now Facebook Pages require a paid subscription if you want to post more than two links a month. Can you believe that? People were pretty mad. One comment highlighted how this is especially impactful in places like the Philippines, where a lot of people use "data-only" plans where Facebook *is* basically the internet for them. Just another step in the "enshittification" playbook, I guess.
LLMs Citing Fake News Now?
This next one is wild: someone did an experiment where they published fake statistics on a brand new website, and LLMs like ChatGPT immediately started citing them, even before Google Search indexed the page. It's a pretty stark example of how easily these AI models can pick up and spread misinformation if they're just crawling the web without proper fact-checking. A lot of debate in the comments about whether the LLM *actually* used the stats or just visited the page, but still, super concerning.
Google Cloud Went Down, Took Europe's Banks With It
And finally, a huge one: there was a massive Google Cloud outage that took down almost all banking and other major operations across Europe. HSBC, Revolut, Bank of Scotland – all hit. Sounds like a single power event in one data center triggered a "thundering herd" problem that cascaded across the region. People were asking why banks are even allowed to be so dependent on third-party cloud providers, which is a fair point when you see this kind of widespread chaos.
So yeah, quite a day. Talk soon!