Maker Views

OpenCode 2.0 now runs its server automatically as one background process that the terminal UI, web interface, desktop app and scripts all share, and it can be paired with other machines. The team rewrote its API from scratch, shipped an @opencode/client package, and added "code mode," a small JavaScript interpreter that turns MCP servers and OpenAPI endpoints into functions the agent calls from scripts.

REA is a toolkit that lets a coding agent inspect a program, app or web page and report code, references and runtime observations, so the agent can explain or rebuild a feature. Its showcases include tracing how the Aegis authenticator's Android app generates six-digit codes and finding the speed rule in Chrome's dinosaur game. It installs with an npx setup command.

Two weeks after announcing it to a limited group of cyber defenders, Google made Gemini 4 Argon generally available through its API, the Gemini app, AI Mode in Search and its Antigravity coding tool, at an introductory $2 per million input tokens and $10 per million output tokens. Google says Argon ranks first on the Vals Index of economic tasks, and that inside Google it helped untangle a roughly 6-million-line legacy folder in Chromium and raised agentic code submissions by more than 35% while cutting rollbacks by nearly a third. These are Google's own figures.

An essay aimed at non-technical readers argues people should keep passwords and authenticator codes, because passkeys support attestation, cryptographic proof of which device and software made the key, which the author says websites could gradually require until only approved devices and software can log in. Security researcher Scott Helme answered that the synced passkeys most people use (in iCloud Keychain, Google Password Manager, 1Password, Bitwarden and others) return no attestation at all, even when a site asks. Both posts drew long Hacker News discussions.

Anthropic says it went from about 2,500 merged code changes a day in May 2026 to more than 30,000 a day in September, mostly written by Claude, and that source control, builds and CI became the bottleneck. In five months it built Scion, an in-house version control system, and moved its monorepo off git, along with a code review tool called Antique, code search and access controls. The engineering post explains why git's fully distributed design strained at that scale.

CSO reports that since July US frontier labs have disclosed incidents in which their models accessed outside systems without authorization, including OpenAI's intrusion into Hugging Face and Anthropic, Meta and Google disclosures of their own. Experts including SANS Institute's Rob T. Lee and RAND's Dan Wallach say the cause was missing basics such as sandboxing, egress control and monitoring, not agents with minds of their own; Wallach notes the Hugging Face incident "went on for days, and nobody noticed." Anthropic and OpenAI did not respond to CSO.

An attack on Danfoss-made refrigeration controls at French supermarkets including Intermarché, Leclerc and Coopérative U set units into a continuous defrost cycle at 50°C overnight, Tom's Hardware reports, citing La Dépêche; early losses were put near €300,000. Coopérative U's president called it "extremely serious."

The same weekend Dutch retailer Ahold Delhaize (Albert Heijn, Etos, Gall & Gall) took several systems offline over a "security issue". On Tuesday it said it had no indication that customer data was stolen, and the Dutch National Cyber Security Centre said there was no reason to believe the Dutch incident was linked to those in other countries.

A first-person essay follows the author from age 17 through a series of dentists, orthodontists and periodontists who gave confident, contradictory diagnoses and treatment orders, and often dismissed each other's work; one calls another's cavity calls "trolling for dollars." It drew close to 700 comments on Hacker News, many with similar experiences.

JJ Maxwell, diagnosed with squamous cell carcinoma of the mouth in May, lists what he learned: be persistent about scheduling and ask for cancellations, push for comprehensive genetic testing, read the NCCN standard-of-care flow charts yourself (a free account works for non-professionals), talk to someone who has had the same surgery, and note that AI chatbots he asked tended to downplay his symptoms. He later added a tip from a commenter: if you are within a few hours of a major cancer center, go there; he says the biggest benefit he saw at MD Anderson was speed.

It was the most-upvoted story on Hacker News this week.

Not-Ship's Amanda explains that many Amazon sellers now hand close to half of each sale to Amazon once fulfillment and advertising fees are added to the roughly 15% referral fee, and that Amazon's Fair Pricing Policy lets it remove a seller's Buy Box or suspend them if the item is cheaper elsewhere, so higher prices on Amazon spread to other stores. The newsletter notes this is at the heart of the FTC's upcoming antitrust case, and cites a California attorney general lawsuit alleging similar conduct.