Cosmic Rundown: Superlogical Launch, AI Worms, and SQLite at Scale

Mitchell Hashimoto Launches Superlogical

The founder of HashiCorp is back with a new venture. Superlogical launched with a detailed post explaining the company's direction.

Hashimoto built Vagrant, Terraform, Vault, and the rest of the HashiCorp stack. Whatever Superlogical becomes, the track record suggests it's worth watching.

Hacker News discussion

AI Worms Can Self-Propagate Through Copilot for Word

Security research published on document-borne AI worms shows how malicious prompts embedded in documents can propagate through Microsoft Copilot for Word. The attack vector exploits the AI assistant's ability to read and act on document content.

This is part of a broader pattern in AI security research. The attack surface expands every time you give an AI agent access to read arbitrary content and take actions based on it.

Hacker News discussion

Hugging Face Publishes Agent Intrusion Anatomy

Hugging Face released a detailed breakdown of a frontier lab agent intrusion. The post walks through how the attack worked and what defenses were in place.

Transparency reports like this are valuable. Security teams building agent infrastructure can use this as a case study for threat modeling.

Hacker News discussion

SQLite in Production: WAL Mode and Concurrency

A comprehensive guide on SQLite production optimization covers WAL mode configuration, concurrency patterns, and VFS layer tuning for low-latency application servers.

SQLite adoption in production continues to grow. The gap between "SQLite is just for development" and "SQLite handles our production traffic" keeps closing.

Hacker News discussion

Gemma 4 26B Running in 2GB RAM

A new open-source engine called Turbo Fieldfare runs Gemma 4 26B in 2GB of RAM on any M-series Mac. The project uses aggressive quantization and memory mapping techniques.

Local inference keeps getting more accessible. Running a 26B parameter model on a laptop with constrained memory opens up use cases that previously required cloud API calls.

Hacker News discussion

KOReader: Open-Source E-Reader Application

KOReader hit the front page. It's an open-source document viewer for e-ink devices and other platforms. The project supports PDF, EPUB, DjVu, and other formats with extensive customization options.

For anyone running a Kindle, Kobo, or other e-reader and wanting more control over the reading experience, KOReader is the standard recommendation.

Hacker News discussion

Quick Hits

Darktable: The open-source photography workflow application Darktable is getting attention as a Lightroom alternative. Discussion

Demo Scene UI Archive: A visual archive of user interfaces from the demo scene documents the creative interface design from that era. Discussion

Tailscale on Jailbroken Kindles: More Tailscale tricks for jailbroken Kindles including proxy and TUN mode configurations. Discussion

Keychron Open-Source Firmware: Keychron announced the first open-source firmware for gaming mice. Discussion

Policy Documents Don't Govern Agents: Research on Handbook.md shows that long policy documents do not reliably govern AI agent behavior. Discussion

Building content workflows that need to pull from multiple sources and publish automatically? Cosmic AI Agents can monitor feeds, draft posts, and publish to your CMS on a schedule or trigger.