Article URL: https://metedata.substack.com/p/what-meta-got-right-with-muse Comments URL: https://news.ycombinator.com/item?id=49946526 Points: 5 # Comments: 1
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Article URL: https://simonwillison.net/2026/Oct/3/default-hard-budget-caps/ Comments URL: https://news.ycombinator.com/item?id=49949235 Points: 34 # Comments: 6
Anthropic posted on September 23 that Claude agents found a new enzyme system hiding in phage DNA. The numbers in the post: roughly 950 agents, 21 hours, 210 million tokens, one giant database of DNA sequences. One agent noticed a repeating pattern next to a gene that looked odd. Humans did the lab work, named the system ART, and released a pre-print. When I checked around 1 PM Singapore time the Hacker News thread sat at 567 points and 588 comments, and most of the fight is about one word: discovery.
Added card-surcharging logic for a US merchant: debit cards skip the 3% fee, credit cards get it, per the usual state rules. Classification ran off a static BIN range table refreshed quarterly from our processor. Surcharge complaints started trickling in — cardholders insisting their debit card got charged a credit surcharge. Pulled the flagged transactions: roughly 1 in 180 had a BIN that our table listed as credit, but the issuer's own authorization response carried a debit indicator in the response fields. Turns out prepaid and co-branded cards get reissued under ranges that shift between d
Last week the official MCP Python SDK shipped a fix for a credential theft bug, and the fix itself has a trap that a version check will not catch. I was researching the disclosure for my own MCP servers and the remediation notes stopped me cold: patch the package, and part of the vulnerability survives unless you also change how you construct your OAuth providers. Here is the short version. On September 28, a GitHub advisory landed on the modelcontextprotocol python-sdk repo: GHSA-qx49-fqc8-xw99, titled "OAuth client could send credentials to an authorization server chosen by the MCP server."
Discussion (0)
Log in to join the discussion and vote.
Log in