Bigwords.page is a web app that turns any screen into a sign by auto-fitting text to the display size, from phone to stadium board. It supports Markdown formatting, slide rotation via a '||' separator, countdown timers, and in-browser generation of QR codes for links, Wi-Fi, calls, texts and email.
Microsoft has opened preorders for its Surface RTX Spark Dev Box, a high-performance AI and development machine priced at $5,999, with shipments expected in November. The device features Nvidia’s RTX Spark platform, 128GB of memory, and a design inspired by gaming consoles, targeting developers working on AI models and coding tools.
Google has released an AI experiment called Playground that lets users create games by describing ideas, art styles and mechanics in natural language, without writing code. Games are browser-based, support leaderboards and multiplayer for some genres, and can be shared or published to a public gallery. The tool connects to a Play Games account and is currently available only to users aged 18 and over in the US.
Berth is a new open-source application that runs coding agents such as Claude Code and Codex on a developer's own machines, allowing tasks to continue even after the laptop is closed. It is distributed as a signed and notarized app for both Apple silicon and Intel Macs.
IBM and Red Hat announced that their AI-driven Lightwell initiative has discovered and helped fix more than 400 previously unknown vulnerabilities in widely used Java libraries. The disclosure coincides with the general availability launch of Lightwell Clearinghouse, an enterprise service letting customers submit open-source dependencies for prioritized review and remediation.
The creator of browser-based editor Photopea reports that AI tools are being used to strip JavaScript code from the site, remove ads, and republish it as standalone repositories on GitHub. After filing a DMCA notice on September 4, 2026, the developer received a response a month later stating GitHub could not confirm a violation of 17 U.S. Code § 1201, and is now asking the HN community for advice, including whether to pursue legal action.
Google's Product Security team disclosed in a blog post that its internal AI agent, PageBreak, has found more than 500 cross-site scripting vulnerabilities across the company's web applications. The tool, piloted last November and made a full product in January, combines AI analysis with validation to flag exploitable bugs, including a cache poisoning issue on apis.google.com, an XSS flaw on admin.google.com, and insecure handshakes in browser extensions, all of which have reportedly been fixed.
A developer shares that while creating software with AI-assisted tools provides immediate satisfaction, the enjoyment diminishes when revisiting and refining that code. The thrill of building quickly with vibecoding contrasts with the less engaging process of refactoring existing AI-generated code.
Jotbus introduces a new tool that provides end-to-end encrypted shared scratchpads for coding agents like Claude Code and Codex. Users can create a secure, temporary workspace instantly without signing up, enabling seamless collaboration and handoffs among agents. The service is initiated via a simple command that sets up the environment for an hour with selected agents.
The developer behind Pi has released version 1.0 with a feature called Codemode, which brings Model Context Protocol (MCP) support into the harness. The post explains how tool-calling works for LLMs, why bash/CLI composition has been favored, and where that approach breaks down for things like image reading or spawning sub-agents.
Security firm Island discovered a phishing campaign using fake ChatGPT, Gemini, Claude and Perplexity sites that target advertising agency staff and media buyers. The sites exploit the recent launch of Meta's Muse AI agent and use browser-in-browser techniques to fake Google login windows, capturing credentials and MFA codes to hijack high-value ad accounts.
New enterprise technology solutions are emerging to address challenges in managing large language models and autonomous systems. These include project management tailored for government agencies, AI code verification tools, and API access management, aimed at helping organizations modernize while controlling costs.