Security on Dev Digest · Daily Tech Curation

April 30 · Today's 10 Dev Picks

Thu, 30 Apr 2026 07:00:00 +0900

A telling Thursday on HN. Zed 1.0 lands with the day’s highest score (1319 pts, HN #2) — but the #1 slot belongs to a GitHub issue inside anthropics/claude-code: a config file called HERMES.md, an internal A/B experiment, double-charged a customer ~$200 and Anthropic refused the refund (836 pts). HN #13 ‘We need a federation of forges’ (488 pts) keeps yesterday’s Ghostty-leaving-GitHub thread burning. AI: Mistral Medium 3.5 ships remote agents (HN #24). Security double feature: Copy Fail / CVE-2026-31431 (HN #3) and Ramp’s Sheets AI exfiltrating financials via prompt injection (HN #9). Japan’s Zenn delivers two strong Claude Code field reports — LayerX’s ‘ccgate’ auto-approves 97% of permission prompts; Finatext warns against handing Google accounts to AI agents. China’s V2EX is consumed by Xiaomi’s MiMo Token Plan.

April 28 · Today's 10 Dev Picks

Tue, 28 Apr 2026 07:00:00 +0900

A heavy Tuesday. HN’s #1 is the formal end of Microsoft and OpenAI’s exclusive partnership and revenue-share — the AGI clause is now history. GitHub Copilot moves to usage-based billing (HN 532 pts, 408 comments). Mercor’s 4TB voice-sample leak puts 40k AI annotators on the public web. pgbackrest stops maintenance and the Postgres community begins migrating. Microsoft drops VibeVoice on MIT — a Whisper-class ASR model with diarization that runs on a Mac with one uv line. Two strong Japan picks: Matz’s own Ruby AOT compiler Spinel, and the CAMPFIRE GitHub-credentials breach postmortem.

April 24 · Today's 10 Dev Picks

Fri, 24 Apr 2026 07:00:00 +0900

The GPT-5.5 dust settles and the interesting news moves one layer down the stack: Google puts PyTorch natively on TPUs (TorchTPU), ships Spanner Omni that runs on your laptop, and the Claude Code ecosystem keeps maturing with a code-search MCP hitting GitHub Trending.

April 23 · Today's 10 Dev Picks

Thu, 23 Apr 2026 07:00:00 +0900

GPT-5.5 ships, Anthropic posts a Claude Code postmortem, and Google Cloud Next debuts Gemini Enterprise Agent Platform — all on the same day. Plus a Bitwarden CLI supply-chain breach and Crawshaw’s ‘I am building a cloud’ manifesto.