Let's Encrypt shortens certificate lifetimes and OpenAI withdraws math papers

In this issue

Cactus releases Whistle, a 16.9 MB speech recognition model for on-device use
Analysis quantifies single-maintainer risk in critical internet infrastructure
OpenAI withdraws three math papers over a sign error
Jane Street intern cuts message bus CPU usage by 30% with new indexing
Let's Encrypt to issue 64-day certificates by default in February 2027
Anthropic updates usage policy to ban abusive behavior toward Claude
and 4 more in brief

Top stories

Cactus releases Whistle, a 16.9 MB speech recognition model for on-device use

Cactus has released Whistle, an open speech recognition model designed for mobile devices, wearables, and microcontrollers. The model is a single 16.9 MB file that runs on CPU with no external dependencies. It transcribes audio in seven languages, with the first token generated in 11 ms for a 10-second clip. Whistle integrates into the same C++ engine as Needle, allowing a single binary to process audio clips and generate tool calls directly on the device.

cactuscompute.com HN discussion

Analysis quantifies single-maintainer risk in critical internet infrastructure

A new analysis of 23 critical software projects reveals that billions of devices rely on code maintained by a handful of unpaid volunteers. The study counted changes from October 2025 to October 2026, finding that many projects have one or two people handling regular work. For example, Paul Eggert, a UCLA lecturer, has coordinated the time zone database since 2012, a file used by every Android and iPhone. The researchers note that while some projects like curl have funding, others like xz are unpaid hobby projects. This highlights a significant fragility in the digital infrastructure that underpins modern computing.

sheets.works HN discussion

OpenAI withdraws three math papers over a sign error

OpenAI has withdrawn three mathematical manuscripts from its public repository after identifying a sign error in the foundational paper, “Algebraicity of Weil classes on split abelian eightfolds.” This error invalidated a key stabilization-trace cancellation argument and affected two dependent papers. The withdrawn manuscripts now carry notices explaining the gap and linking to archived versions. Additionally, the team revised 14 other manuscripts to repair proofs, correct statements, and clarify hypotheses, while updating 13 further papers to cite these revised editions. These changes bring the total percentage of top-line results formalized to approximately 42%.

github.com HN discussion

Jane Street intern cuts message bus CPU usage by 30% with new indexing

Jane Street intern Theodor Totev reduced CPU usage by 30% on the firm’s Aria message bus by replacing linear filtering with topic-partition indexes. Aria, which processes multiple terabytes of data, previously struggled when many clients recovered from the in-memory ring buffer, causing some servers to hit 100% CPU. Totev’s approach indexes messages by two-segment topic prefixes rather than per-topic, enabling efficient n-way merges. The optimization maintained the high correctness bar required for this critical system while handling production workloads.

blog.janestreet.com HN discussion

Let's Encrypt to issue 64-day certificates by default in February 2027

Let's Encrypt will move all subscribers to 64-day certificate lifetimes by default on February 10, 2027. Users can still opt for shorter 45-day or 6-day periods. The organization will not revoke existing valid certificates, with the final 90-day certificate expected to expire on May 11, 2027. Staging environments will support the new duration starting October 14, 2026, allowing administrators to test automation before the production rollout.

letsencrypt.org HN discussion

Anthropic updates usage policy to ban abusive behavior toward Claude

Anthropic has updated its usage policy for the first time in over a year, introducing a ban on sustained and needless abusive or cruel behavior toward Claude. The company states this rule applies only to extreme cases where users repeatedly act cruelly with no discernible purpose, excluding common frustration or model testing. Terminating conversations remains the primary enforcement mechanism, though Anthropic did not clarify if user bans will follow. The update also expands restrictions on weapons development, surveillance, and deceptive political campaigns.

theverge.com HN discussion

In brief

Zerobrew claims up to 6.6x faster Homebrew installs. Zerobrew, a performance-optimized client for the Homebrew ecosystem, reports median install speeds 5.3x faster cold and 56x faster warm than Homebrew. The project describes itself as experimental and recommends running it alongside Homebrew rather than as a replacement.

github.com HN discussion

Infinite loop in Durable Object alarm triggers $10,811 Cloudflare bill. A developer paid a $10,811.41 Cloudflare bill after a Durable Object alarm entered an infinite loop, executing six trillion reads and writes. The author states Cloudflare has no hard spending limit and that support offered no refund, leading to a full migration to self-hosted VPS.

serverlesshorrors.com HN discussion

Paris court rejects Canal+ penalties against Cloudflare over DNS blocking. The Paris Judicial Court rejected Canal+'s request for daily penalties against Cloudflare. The court accepted that Cloudflare complied with blocking orders through its CDN, noting that its public DNS resolver architecture does not support such measures. Consequently, Cloudflare faces no fines for not blocking sites via 1.1.1.1.

torrentfreak.com HN discussion

demoscene-recomp runs classic PC demos natively in the browser. The project recompiles original DOS demo code instruction-by-instruction into C, then compiles it to WebAssembly. This allows productions to run directly in the browser with exact cycle timing and hardware models for VGA and Sound Blaster.

treylorswift.github.io HN discussion