2026-04-05 Supply chain collapse! Cisco source code stolen. Microsoft Copilot naming battle. Gemma 4 case overturned?

Today's DAVID888 Daily will take you from the core game of building GPUs from the underlying transistor to discuss Microsoft's confusing Copilot naming, Karpathy's new AI wiki thinking, and the supply chain security crisis encountered by Cisco. Mvidia: A hard-core game that starts with transistors and rubs the GPU by hand (https://news.ycombinator.com/item?id=47640728) If you feel that writing code is too abstract, this game called Mvidia can let you get back the feeling of "touching the hardware." It is an educational simulator that allows players to start from the lowest level NMOS/PMOS transistors and build logic gates, ALUs, and processors all the way. The ultimate goal is to create a GPU that can run Shader. The "Turing Complete" challenge game of digital circuits currently has Act 1 and Act 2 open, covering everything from basic logic to processor architecture. Developers must deal with Bus Contention and High-impedance (Z) states in real hardware. The rise of this type of game reflects the trend of software developers eager to take root and understand the underlying logic of parallel computing in the era of AI computing power inflation. Community Feedback: Hardcore gamers are picky. Although the concept is stunning, senior IC designers pointed out some UX problems in the comment area, such as the background grid lines and wire colors being too close, causing visual fatigue. The author also admitted that for the convenience of simulation, some compromises were made in the processing of capacitors. If you want to challenge your digital circuit logic, this is definitely the best choice right now. OpenScreen: Screen Studio's open source alternative (https://news.ycombinator.com/item?id=47595695) For developers who feel that Screen Studio's $29 monthly subscription fee is too expensive, OpenScreen is a savior. It is based on the PixiJS rendering engine and focuses on making product demo videos with automatic scaling and smooth animation. Focusing on "opinionated" screen recording is different from OBS's omnipotence and complexity. OpenScreen takes the "opinionated" route. It has built-in Motion Blur and custom zoom depth to make your screen recordings look like they have been professionally edited. Although it is still necessary to manually bypass the Gatekeeper security check on macOS, as an open source project under the MIT protocol, it shows the strong potential of using Web technology (Electron + PixiJS) to challenge commercial SaaS. Microsoft's Copilot universe: How many Copilots are there? (https://news.ycombinator.com/item?id=47642569) Microsoft seems to have a soft spot for the name "Copilot", even to the point of abuse. According to statistics, there are currently more than 75 products or functions under Microsoft named Copilot. The disaster of brand marketing From GitHub Copilot to Windows Copilot, and then to Copilot+ PC hardware buttons, this overextension has led to extreme confusion among users on billing and functional boundaries. The community ridiculed this, which is very similar to the dark history of Microsoft forcing everything to be labeled ".NET" or "Live". For developers, this is not only a name issue, but also means that extreme care must be taken to distinguish the source of the underlying model when calling the API. Karpathy's LLM Wiki: Moving from RAG to persistent knowledge synthesis (https://news.ycombinator.com/item?id=47640875) The great master Andrej Karpathy recently shared his "idea file" management model. He believes that instead of using RAG (Retrieval Enhanced Generation) to retrieve fragmented information every time, it is better to let LLM act as a "wiki maintainer" and actively integrate new information into a persistent, interconnected Markdown wiki. This model of automation of knowledge compounding transforms LLM from a "conversational tool" to a "collaborative editor". Using Obsidian as the interface, LLM will automatically Ingest new data and Lint the contradictions. Although the community is worried that this will lead to "outsourcing of thinking" and the loss of human insight, for engineers who need to process massive amounts of technical documents, this automated knowledge synthesis can undoubtedly produce a huge compound interest effect. Self-distillation (SSD): Let LLM become stronger through "left-hand to right-hand" (https://news.ycombinator.com/item?id=47637757) Apple's research team recently published a counter-intuitive discovery: LLM can greatly improve its code generation capabilities simply by fine-tuning the "unverified" output it generates. This technology is called SSD (Self-Distillation). Challenging the "Model Collapse" Theory The traditional view is that models will degrade when trained on their own data, but SSD proves that in the field of programming code, by adjusting the Token distribution, the model can learn to "consolidate" the correct grammatical structure. This is analogous to the sleep consolidation process in humans, where existing knowledge is optimized without the input of new information. This means that in the future we may no longer need expensive manual annotation, and the model itself can "enlighten" stronger reasoning capabilities. sllm: The "shared house" era of GPU computing power is back (https://news.ycombinator.com/item?id=47639779) If you want to run a 685B giant model like DeepSeek V3, you usually need an 8xH100 node with a monthly rent of tens of thousands of dollars. sllm has launched a "Cohort" model that allows developers to "share" computing power at a price of US$10-40 per month. The temptation of unlimited tokens Based on vLLM's continuous batch processing technology, sllm provides unlimited token services. This is very attractive for developers who need to run Agentic workflows for long periods of time. Although there is a risk of delay fluctuations caused by "neighbor interference", this "computing power virtual host" model undoubtedly lowers the threshold for individual developers to access top open source models. Ruckus: Write Lisp elegantly on iPad (https://news.ycombinator.com/item?id=47614532) For Lisp/Scheme enthusiasts, Ruckus fills the gap in mobile development. This is an IDE that runs Racket language natively on iOS and supports rainbow brackets and smart indentation. It even integrates iOS Shortcuts, allowing you to execute scripts directly from the home screen. Although niche, it proves that iPad Pro can also be productive in functional programming scenarios. Social Worker Record: When a hacker pretends to be a VP and calls you (https://www.reddit.com/r/sysadmin/comments/1sbsjiv/i_almost_screwed_up_and_let_a_hacker_get_away/) An L1 customer service member shared his thrilling experience of almost being defrauded of his password by an advanced social engineering attack. The attacker had the target VP's personal details and attempted to reset the password over the phone. Teams verification saved a life. The key turning point was when the technician discovered that the other party's Teams status showed "in meeting", so he directly sent a message to the real VP in Teams for confirmation, and successfully intercepted the attack. This once again reminds us that people are always the most vulnerable link in the security chain. It is crucial to adhere to the bottom line of "not giving passwords over the phone" and the multi-layer verification process. Cisco source code leak: When security tools become attack backdoors (https://www.reddit.com/r/netsec/comments/1sa8nld/cisco_source_code_stolen_by_shinyhunters_via/) Cisco recently suffered a serious source code leak. Ironically, the source of the attack turned out to be a malicious plug-in for the open source security scanning tool Trivy. By tainting the GitHub Action plug-in, the attacker stole AWS keys and copied more than 300 private repositories. A wake-up call for supply chain attacks The leak contained the core code of Cisco AI Assistant. This proves that the development environment and CI/CD process must be as secure as the production environment. When the “security tools” you trust are themselves tainted, traditional defensive perimeters evaporate. Gemma 4 can’t run? It may be the fault of the inference engine (https://www.reddit.com/r/LocalLLaMA/comments/1sc4gui/gemma_4_fixes_in_llamacpp/) In the early days of the release of Google's Gemma 4, many users complained that the model would fall into an infinite loop or fail to call tools correctly. It turns out that this is not a problem with the model itself, but rather that llama.cpp has not yet adapted to its special Tool-call format. Tracking PRs is a must for developers. With the merging of multiple PRs for llama.cpp, these issues have been resolved. This incident tells us not to rush to conclusions in the early stages of AI model release. Bugs on the inference side often cover up the true strength of the model. For local LLM players, compiling the latest version of the runtime at any time is a necessary skill. Related links: • Show HN: A game where you build a GPU (https://news.ycombinator.com/item?id=47640728) • OpenScreen is an open-source alternative to Screen Studio (https://news.ycombinator.com/item?id=47595695) • How many products does Microsoft have named 'Copilot'? (https://news.ycombinator.com/item?id=47642569) • LLM Wiki – example of an "idea file" (https://news.ycombinator.com/item?id=47640875) • Embarrassingly simple self-distillation improves code generation (https://news.ycombinator.com/item?id=47637757) • Show HN: sllm – Split a GPU node with other developers, unlimited tokens (https://news.ycombinator.com/item?id=47639779) • Ruckus: Racket for iOS (https://news.ycombinator.com/item?id=47614532) • I almost screwed up and let a hacker get away with credentials (r/sysadmin) (https://www.reddit.com/r/sysadmin/comments/1sbsjiv/i_almost_screwed_up_and_let_a_hacker_get_away/) • Cisco source code stolen by ShinyHunters via Trivy supply-chain attack. AWS keys breached, 300+ repos cloned and more (r/netsec) (https://thecybersecguru.com/news/cisco-source-code-stolen/) • Gemma 4 fixes in llama.cpp (r/LocalLLaMA) (https://www.reddit.com/r/LocalLLaMA/comments/1sc4gui/gemma_4_fixes_in_llamacpp/)