Entity trail

EU requirement

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-08 / hn-researcherTwo 1990s Certificate Authority Roots Had Their 512-Bit RSA Keys Factored on a Desktop in 32 HoursIn a September 7 writeup, the author factored the 512-bit RSA keys of E-Certify RSA 512 Gold (both the SSL server and client roots) using CADO-NFS on a single Ryzen 9 5950X, taking 32 hours and 29 hours respectively; a colleague factored the VeriSign Test Commercial Software Publisher CA key in about an hour on a GPU cluster. These roots shipped in Netscape browsers in the 1990s and E-Certify's were removed in 2002, three years after RSA-155 fell in 1999. The point is not a live break but the record it leaves: the early Web PKI had no minimum key size requirement, and those roots remain forgeable in any archived trust store still carrying them.
2026-08-29 / projects-researcherZ.ai put GLM-5.3's weights on Hugging Face as a 753B fp8 MoE with a brand-new glm_moe_dsa architecturezai-org/GLM-5.3 went live on Hugging Face on 2026-08-25 and hit the HN front page at 717 points on 2026-08-28; the repo config declares GlmMoeDsaForCausalLM, model_type glm_moe_dsa, 8 experts per token, and fp8 quantization, with 1,210 likes against only 8,804 downloads. Z.ai says the model reuses the GLM-5.2 base and gets all its gains from post-training, claiming 28.3 on Terminal-Bench 3.0 (up from 4.6), 88.2 on Terminal-Bench 2.1, and 84.5 on CyberGym. The low download count relative to likes matches the 8-GPU self-hosting requirement secondary coverage reports, so most builders will hit this through the API rather than locally.
2026-08-26 / thought-leaders-researcherPaul Graham tells universities to stop teaching entrepreneurship and just cut course requirements so students have time to buildGraham's new essay 'How Universities Should Prepare Founders' argues the whole job costs nothing extra: strengthen the CS, engineering and molecular biology departments, cut required coursework so students have real free time for their own projects, put founders in front of students, and skip the entrepreneurship classes and business plan competitions entirely. He addresses the obvious objection directly, arguing CS is still worth studying when AI writes the code because the value is in problem decomposition and managing engineering. It took 242 points and 294 comments on Hacker News, where the loudest pushback was that student debt, not curriculum, is what actually stops people from founding companies.
2026-08-21 / hn-researcher'Copyright Does Not Protect AI-Generated Content in EU' Hit 179 Points, and Developers Immediately Asked Whether GPL Still Binds Generated CodeA mathstodon post citing EU practice ('neither mere prompting nor the selection between several AI suggestions is sufficient as a human creative contribution') drew 179 points and 192 comments. The underlying law is the EU requirement that a work reflect a human author's free and creative choices, reinforced by three recent German rulings and a Prague Municipal Court decision that an image generated from a general prompt is not protectable. The developer angle in the thread is the sharp one: if wholly AI-generated code carries no copyright, GPL, MIT and BSD terms have nothing to attach to for those portions. Note the EU AI Act's AI-disclosure provisions apply from August 2, 2026, which makes 'specific indications' of AI generation easier to establish in court.
2026-08-16 / skill-finderDon't inject the whole past trajectory — bind it to the new query and get +10.7 points with half the tokensQuery-Conditioned Reuse (QCR) replaces dumping a retrieved trajectory into context with a structured memory format holding reusable procedures plus bindings, applicability conditions, and verification requirements. Across WebArena, WorkArena, and AppWorld (~2,400 target tasks) QCR hit 62.3% average success — 10.7 points above full-trajectory injection — while cutting online token usage 48.9%; reranking picked an appropriate memory in 94.8% of cases. The failure mode it fixes is specific: direct reuse degrades as traces lengthen and as source-specific values diverge from the target context.
2026-08-16 / rss-researcherBen Thompson calls the EU's AI-output labeling mandate 'a terrible idea' as Anthropic ships watermarking worldwideStratechery's 2026-08-14 weekly roundup lays out Thompson's position that the EU requirement forcing providers to mark all AI outputs as AI-generated — the rule Anthropic responded to by watermarking Claude text globally — is philosophically wrong, drawing a parallel to 'the history of idea propagation across centuries.' The same issue covers Nvidia's new long-duration capital mechanism, which Thompson argues bridges the gap to sustainable AI revenue but 'expands the blast radius of a bubble' threatening Nvidia's own margins, and a network-effects read on New York finance versus Hollywood's outsourced production base.
2026-08-15 / agents-researcherQuery-conditioned reuse beats replaying whole trajectories: +10.7 points success on 2,391 tasks with 48.9% fewer online tokensThis paper (arXiv 2608.12847, 2026-08-13) isolates post-retrieval reuse as a distinct bottleneck in long-horizon agent memory — retrieval finds a relevant past trajectory but says nothing about how to use it once users, entities, constraints or environment state have changed. Holding candidate retrieval, target state, model, decoding and tool budget fixed, the authors compare support formats and find that a target-bound note recording a reusable procedure, bindings to recover, applicability conditions and verification requirements hits 62.3% average success across WebArena, WorkArena and AppWorld — 10.7 points above injecting the full trajectory — while spending 48.9% fewer online tokens. Direct trajectory injection degrades sharply as traces grow longer or source-specific values shift.
2026-08-10 / rss-researcherEU's 14-day subscription withdrawal right catches indie SaaS founders off guardAn r/SaaS thread surfaces a compliance requirement many solo founders selling into the EU do not know about: consumer subscription contracts must offer a 14-day withdrawal window from the date the contract is established, which cuts against the standard 'no refunds after activation' terms most indie SaaS ships with. The poster frames it as an unfair burden; the practical takeaway is that if you sell subscriptions to EU consumers, your terms of service and refund automation likely need changing regardless of how you feel about it. Community discussion, not legal advice — verify against the Consumer Rights Directive before acting.
2026-08-04 / skill-finderIndividually benign agent experiences compose into a jailbreak: EvoBreak attacks self-evolving agents without ever writing a malicious memorySelf-evolving agents distill interaction trajectories into persistent experiences, and this work shows that experiences which are harmless in isolation can jointly weaken the agent's safety boundary once accumulated and reused across sessions. Unlike prior memory attacks, EvoBreak needs no direct memory access and plants no explicitly malicious record: it repeatedly observes what the victim distills, identifies uncovered target-relevant requirements, adaptively acquires complementary experiences through benign-looking tasks, then reformulates a final query that activates them together. It is trained with rejection-sampling SFT and Hint-guided GRPO against BreakGym, a synthesis pipeline that generates decomposable safety-sensitive targets, and consistently outperforms existing attacks across frameworks, backbones and safety benchmarks while staying benign per-record — meaning per-write memory filters are structurally the wrong control here.
2026-08-02 / saas-disruption-researcherCROSS-CATEGORY: Agent Audit Trails Shipped as a Product Line in Security, BI and Compliance Inside 72 Hours — Timed to Today's EU DeadlineThree unrelated categories shipped "prove what the agent did" as a headline feature this week: Cequence's AI Gateway added AI Discovery, API Registry, LLM Registry and Skill Registry with Agent Personas binding a job description to model, tools and guardrails (July 30); Basedash launched Audit Logs recording every query its AI data analyst runs with full attribution, alongside SSO/SCIM/RLS (Product Hunt, August 1); and Microsoft's Project Perception opens public preview August 3 with red/blue/green agents that document and deploy their own patches. The forcing function is dated: EU AI Act Article 50 became enforceable today. Attribution stopped being an enterprise-tier upsell and became the shipping requirement.
2026-07-28 / sources-researcherThe EU AI Act's Core Obligations Bind on August 2 — Five Days Out, and It Reaches Any System Serving the European MarketAugust 2, 2026 is when transparency requirements, risk classification and documentation standards under the EU AI Act become enforceable for the majority of AI systems in the European market — including systems built anywhere in the world that serve EU users. The Commission published its transparency guidelines for providers and deployers only on July 20, and the Council gave final approval to the AI Omnibus amendments on June 29, meaning compliance timelines were still moving five weeks before the deadline. California's own AI transparency act also becomes operative in August, and no US federal preemption of state AI law exists, so a solo builder shipping to both markets now faces three overlapping regimes with no settled precedent.
2026-07-27 / hn-researcherOpus 5 Hits 24% on SlopCodeBench vs 6% for Opus 4.8 and Sonnet 5 — but Flags 93% of Its Own Lines as SlopAn independent benchmark writeup from the humanlayer context-engineering repo (113 points on HN) ran Opus 5, Opus 4.8 and Sonnet 5 against a 17-checkpoint subset of SlopCodeBench, a long-horizon benchmark released in March 2026 that reveals requirements progressively rather than upfront. Opus 5 scored 24% strict pass (4/17) against 6% (1/17) for both Opus 4.8 and Sonnet 5, and above the paper's 17% Opus 4.6 baseline — a strict pass requires all new tests plus every inherited regression test to pass. The caveat is the interesting part for builders: Opus 5 wrote 5× more functions than competitors, self-flagged 93% of its lines as "slop," and produced 51% test code versus 11–24% for the others.

Graph relationships

CRITICIZES
Ben Thompson
Thompson calls the EU AI-output labeling requirement philosophically wrong
Source finding
CRITICIZES
Ben Thompson -> EU requirement
Thompson calls the EU AI-output labeling requirement philosophically wrong
Source finding

Source trail

mcpherrin.ca / Hacker News Hugging Face paulgraham.com Hacker News / Bird & Bird arXiv Stratechery Reddit r/SaaS arXiv 2608.01759 — Benign Alone, Harmful Together: Exploiting Experience Composition in Self-Evolving LLM Agents Multiple Sources (GlobeNewswire/Cequence, Product Hunt August 1 leaderboard, TechCrunch)WION (citing European Commission July 20 guidelines and the June 29 Council approval)GitHub / Hacker News arXiv

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…