AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes&#x2F;sec on an iPhone 15).The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device.The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn&#x27;t work.

Show HN: I trained a 125M model to autocomplete piano on-device

HTML Can Do That

I like 'em thick: an apology to my English teachers

Windows brings out the Rorschach test in everyone (2003)

<a href="https:&#x2F;&#x2F;blog.rust-lang.org&#x2F;2026&#x2F;08&#x2F;20&#x2F;supply-chain-attack-on-arrayref&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.rust-lang.org&#x2F;2026&#x2F;08&#x2F;20&#x2F;supply-chain-attack-on...</a><a href="https:&#x2F;&#x2F;github.com&#x2F;rustsec&#x2F;advisory-db&#x2F;issues&#x2F;3161" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;rustsec&#x2F;advisory-db&#x2F;issues&#x2F;3161</a>

Malicious Rust crate Arrayref runs a build-time payload

Mojo is now open source

<a href="https:&#x2F;&#x2F;archive.is&#x2F;JfB5V" rel="nofollow">https:&#x2F;&#x2F;archive.is&#x2F;JfB5V</a>

CIA funding helped keep NeXT afloat in the 80s

Git at any scale

DiffusionGemma Technical Report

Linux 7.2

Xorg-server 26.1.0 rc1

How to compromise your system with a job interview

An elliptic curve of rank ≥ 30

I should have loved biology

Every Model Cheats

Hi HN, I built this. Quick background on why it exists:When music is streamed on digital streaming platforms (think Spotify, Apple Music, Pandora), there are two separate royalty streams: one for the recording, paid through your distributor (DistroKid, TuneCore, CDBaby), and one for the underlying work (generally known as publishing). The work side&#x27;s mechanical royalties are collected by The MLC, a nonprofit that was created by the 2018 Music Modernization Act (MMA). If you haven&#x27;t registered your songs with The MLC, there are issues with your metadata, or about half a dozen other reasons, that money will never reach you, it just collects in a big pile we call the &quot;black box&quot;.That pile is big. The MLC&#x27;s own dashboard currently shows over $656M is held (themlc.com&#x2F;blanket-royalties), and the biggest problem is the MMA dictates that The MLC cannot hold that money indefinitely. At some point, by law, The MLC must distribute this big pile of cash, and since they don&#x27;t know who it&#x27;s supposed to go to, they pay it out through a process called &quot;market share&quot; (themlc.com&#x2F;marketshare). Market share means they pay it out, pro-rata, to the artists, songwriters and publishers that are in the system, which in practice means the largest publishers collect most of the leftovers.This is slated to begin in January 2027 and will pay portions of the pool out monthly (themlc.com&#x2F;unclaimed-accrued-royalties), as of this morning, the next 12 months of market share sums up to $76.61M, starting with $6.41M in January.Full disclosure: I run Doubly, which is an independent publishing administrator, so I have a commercial interest in this space. That being said, we&#x27;re a team of two people and we don&#x27;t have the bandwidth to directly assist the hundreds of thousands of artists and songwriters who are going to start losing this money in January 2027.That&#x27;s why I built this self-service tool, no signup, no email, no paywall, the reports are completely actionable without needing anything from us.The tool: paste a Spotify artist link (or search for a Spotify artist by name). It pulls every release on that profile, checks each recording against The MLC&#x27;s public bulk data, and tells you per-song whether it&#x27;s fully claimed, partially claimed, registered but unmatched, or missing entirely. It then provides a link to the exact MLC tool that fixes each case. It also estimates the dollars stuck, as a rough range.Even if you&#x27;re not an artist yourself, you probably know someone who is a musician, please share it with them.Thanks for your time and I&#x27;m happy to answer any questions about the industry as a whole, The MLC, the tech, anything really.

Show HN: Check if any of the $656M in unclaimed royalties at The MLC is yours

Generic Methods in Go 1.27

Hey, I&#x27;m Ben. I built Zoneless because I was paying so much to use Stripe Connect on my own marketplace. The fees were really, really bad, and it was also limiting in terms of the seller countries I could onboard. To give you an idea, I was paying around $9,000 per month in fees just to run payouts. Using Zoneless, that cost goes down to around $6.I&#x27;ve been using it personally for the past few months, and onboarded 5,000+ sellers and done 3,000+ payouts. 74% of new sellers on my marketplace choose Zoneless over Stripe, which is really interesting. I appreciate crypto and stablecoins are a bit of a touchy subject, but for this use case of sending global payouts cheaply, it&#x27;s perfect.The project is open source with an Apache 2.0 licence, which means there&#x27;s the benefit of no lock-in and no risk of your account getting flagged or shut down. It also has an almost identical API and dashboard to Stripe.Would love to hear any feedback you may have in the comments.

Show HN: Open-source Stripe Connect alternative

Since April, I have been working with Sam Flynn (<a href="https:&#x2F;&#x2F;drook.dev" rel="nofollow">https:&#x2F;&#x2F;drook.dev</a>) to make this balloon payload, UpLink. We did a similar launch last year with Hack Club but this was our first independent launch.UpLink was a 491 gram payload testing the insulation properties of 3D printing filaments, while also transmitting 320x240 images over a radio link -- up from the 18x10 images last year!This is a writeup on our engineering process, mistakes made, and learning experiences. It covers:- Custom electronics designed in KiCad- Firmware design- Results from the data we received on the ground- Image transmission- Launch day logistics, and where things went wrongAll hardware, software, firmware, and CAD is available on GitHub: <a href="https:&#x2F;&#x2F;github.com&#x2F;radeeyate&#x2F;UpLink" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;radeeyate&#x2F;UpLink</a>, licensed + certified as open source hardware: <a href="https:&#x2F;&#x2F;certification.oshwa.org&#x2F;us002826.html" rel="nofollow">https:&#x2F;&#x2F;certification.oshwa.org&#x2F;us002826.html</a>If you just want to see the images received, I put up a gallery here: <a href="https:&#x2F;&#x2F;uplink.gallery.radi8.dev&#x2F;" rel="nofollow">https:&#x2F;&#x2F;uplink.gallery.radi8.dev&#x2F;</a>If you have any questions, comments, or concerns, let me know. I&#x27;m happy to answer anything!