HN Top 10 — November 06, 2026
Today’s Top 10 on Hacker News
1. Blender’s UI and Runtime: Much Faster Than GPUI
⭐ 274 💬 109 👤 ppmpreetham 🔗 Discuss on HN
BUI is a project that decouples Blender’s battle-tested user interface and turns it into a standalone UI library with a small C core. The kit holds every widget in a tree, handles layout, input and drawing natively on CPU or GPU, and thin bindings let Python, Rust, JavaScript (React/Svelte), C++, and Dear ImGui talk to it. The HN post highlights that the result is much faster than GPUI, with benchmarks covering startup time, frame times, and battery usage.
2. Dutch ‘idealist’ bank ASN blocks non-Google Android, including GrapheneOS
⭐ 154 💬 99 👤 microtonal 🔗 Discuss on HN
A report in the PrivSec banking-apps compatibility tracker documents that Dutch ASN Bank’s mobile app blocks non-Google Android builds, including GrapheneOS, relying on SafetyNet/Play Integrity checks. HN commenters — many of whom use GrapheneOS for privacy — reacted sharply, calling the lock-in hypocritical for a bank that brands itself as idealist, and debated whether EU open-banking rules (PSD2) could ever force banks to support third-party clients.
3. Claude Code sends your email address to websites
⭐ 1222 💬 387 👤 motoroco 🔗 Discuss on HN
Users report that Claude Code silently sends the email address associated with their Anthropic account to external websites as part of API calls. The main trigger appears to be the SEC EDGAR API, whose documentation requires an email in the User-Agent header — so Claude dutifully fills it in without asking. The HN discussion treats this as a privacy and prompt-injection concern: an agent with network access will happily leak account details to whatever endpoint requests them, and approval-gating is the only realistic mitigation.
4. Living beyond the limits of survival: wood ants trapped in a gigantic pitfall (2016)
⭐ 40 💬 14 👤 hitekker 🔗 Discuss on HN
The article examines how wood ants survive when trapped in a large pitfall, a situation that pushes their colony beyond normal survival limits. It explores the ants’ behavioral and physiological responses to confinement, resource scarcity, and altered nest conditions. The findings highlight the resilience and adaptive strategies of wood ant colonies under extreme stress.
5. Kugelblitz – Mac-Native Google Earth Alternative
⭐ 108 💬 27 👤 luoc 🔗 Discuss on HN
Kugelblitz is a Mac-native mapping application that presents the Earth as a 3D globe and flat atlas using freely available geodata. It overlays imagery, road, and topographic maps on real terrain, supports multiple projections, and lets users explore open map services without an account. Its built-in tile server streams OpenStreetMap data on demand, while cached data can be shared across local network instances.
6. Mbodi AI (YC P25) Is Hiring Research and Robotic Engineers
⭐ 1 💬 0 👤 chitianhao 🔗 Discuss on HN
Mbodi AI, a Y Combinator-backed startup, is hiring research and robotics engineers to build an embodied AI platform that lets industrial robots learn new skills through natural language. The company aims to combine generative AI with real-world robotics, enabling users to teach robots tasks and deploy them reliably in production. It is seeking experienced engineers in New York to advance its work with industrial partners.
7. sshole
⭐ 2749 💬 665 👤 josemrb 🔗 Discuss on HN
OpenSSH on musl-based Linux systems has a security flaw in which accounts configured to reject passwords can be logged into with any password longer than 256 characters. The issue stems from musl’s crypt function returning an unmatchable asterisk on failure, which can coincidentally match the asterisk used to disable password authentication. As a result, root, key-only deploy, LDAP, and certain default cloud images may be exposed to unauthorized access.
8. MS Paint Remote Code Execution Vulnerability
⭐ 571 💬 207 👤 kuberwastaken 🔗 Discuss on HN
Microsoft has disclosed a remote code execution vulnerability in Windows Paint, identified as CVE-2026-83844. The flaw is an out-of-bounds read that could allow an unauthorized attacker to execute code over a network. The vulnerability is classified under CWE-125.
9. We’ve built an open-source feature flag server for 11 years
⭐ 3 💬 0 👤 ivarconr 🔗 Discuss on HN
Unleash is the most popular open-source feature flag server on GitHub, and the post marks roughly 11 years of the project being built and operated by its maintainers. It supports 15 official client/server SDKs plus a dozen community ones, works with any language and framework, and lets teams roll out features gradually, test with real production traffic, and kill switches without new deploys.
10. Pwn.college
⭐ 177 💬 23 👤 tripdout 🔗 Discuss on HN
Pwn.college is a hands-on cybersecurity learning platform where users progress through belt-based challenges by working directly with terminals, computing fundamentals, and networking. The site is maintained by a team at Arizona State University and supports university cybersecurity curricula. It asks participants not to publish challenge writeups or solution videos to preserve its educational value.