From Product Hunt
A strong day for self-hosted and on-device tooling — autonomous pentesting, a server-less file transfer, an AI research index, and a handful of native Mac utilities.
Darkmoon — Autonomous Pentesting Platform
Open-source (GPLv3), self-hosted autonomous pen-testing built by pro pentesters: 18 methodology agents + 80+ offensive tools (Nuclei, SQLMap, BloodHound, Impacket) across web, Active Directory, Kubernetes, cloud and networks. The model only plans and delegates — a gated MCP execution layer runs the commands. Methodologies are auditable Markdown mapped to MITRE ATT&CK / NIST 800-115; no telemetry, BYO model (Anthropic/OpenAI/Ollama/llama.cpp) via Docker.
Firecrawl Research Index — Search built for AI/ML research agents
A specialized index over all 3M+ arXiv papers plus GitHub artifacts (issues, merged PRs, READMEs) from top research repos, refreshed daily. SOTA recall on arXivQA (53.3% at $0.32/task, 18% above next best; 0.750 MRR). Agents can retrieve papers, verify claims against full text, and pull implementation code end-to-end — via API (/search/research), CLI, MCP and SDKs, into Codex, Claude Code or Grok Build.
just f***ing send it — Browser-to-browser file transfer
Drop a file, get a short code, share it — bytes stream straight from your browser to theirs over an encrypted WebRTC connection, never uploaded to or stored on a server. Multi-GB files and whole folders (zipped on the fly), resumes from the exact byte on drop, one-time codes, no accounts. If both peers share a LAN it never touches the internet. Free.
QuackScreen — Capture and share from the notch
Native macOS screen recorder/screenshot tool that lives in the notch: capture lands in a popover you drag straight into Slack, Linear, Mail or Finder — no upload, no link. Region capture, annotation editor (pen/arrows/blur), cursor-following zoom, system-wide shortcuts. No Electron, no accounts, no subscription. macOS 26+, Apple Silicon; $20 lifetime launch.
Foglamp — Observability for AI agents
Open-source (Apache 2.0), self-hostable observability for agents on the Vercel AI SDK. Wrap your model in one line and every generateText/streamText call reports cost, latency and tokens (per agent, per workflow, even reasoning tokens), plus distributed traces with replay, evals on production traffic (LLM-judge + code checks like "No PII"), and alerts on spend spikes or pass-rate drops. Free hosted tier; first trace in under 2 min.
Prism — Native macOS AI workspace
A solo-built SwiftUI Mac app with multi-provider chat (Claude, ChatGPT, Gemini, Grok, Kimi) plus local models via Ollama and Apple Intelligence. Spotlight-style Quick AI panel (Ctrl+Space), system-wide writing, an MCP registry with @-tools, local browser automation (Playwright/Puppeteer), Model Comparison Mode, and study tools — all local-first. Free tier + hosted plan + Lifetime License.
Mutter — Private AI dictation that finishes the thought
Mac dictation with a 100% on-device mode (works with WiFi off, sensitive audio never leaves the machine). Two always-on modes: Dictate for clean verbatim text, and Intent — say "reply to Josh, deck looks good, cut slide four" and it writes the actual finished email based on what you're doing. ~3x faster than typing. (Overlaps your MacWhisper, but Intent mode + strict on-device is the hook.)
Portia — 1-click hunter for blocked macOS ports
A native menu-bar utility that replaces the
lsof -i :8080 → kill -9 dance with one click, at zero idle CPU. Lite (free, App Store) shows the blocking port; Full ($4.99, non-sandboxed, background Launch Agent) shows the exact process path and kills it instantly.
From Reddit
A big week for talent and open weights: two of Google's biggest AI names walk out the door, an open Deep Research recipe drops, and the Mythos and AI-in-warfare stories keep developing.
In the span of three days, two of Google's marquee AI names left. Noam Shazeer — "Attention Is All You Need" co-author and Gemini co-lead, who returned to Google ~2 years ago in a reported ~$2.7B Character.AI deal — announced he's joining OpenAI.
Days later, Nobel laureate John Jumper (the AlphaFold lead) is reportedly leaving Google DeepMind for Anthropic. It lands amid loud r/singularity chatter (475 upvotes) that DeepMind is struggling to keep pace and that Gemini 3.5 Pro wasn't the step-change it needed.
QUEST-35B: a fully open Deep Research agent trained on 32 H100s
Ohio State's NLP team released QUEST-35B and open-sourced everything — training recipe, code, weights and datasets — trained on ~32 H100s with only ~8K synthetic samples. Benchmarks claim competitive performance against several frontier closed Deep Research systems, making it a cheap, fully reproducible recipe for self-hostable research agents.
Pentagon court filing: Grok helped fire 2,000 munitions at 2,000 targets
Following this week's coverage of AI in military kill chains: a sworn declaration by Cameron Stanley, the Pentagon's chief digital & AI officer, states xAI's "Grok Gov Model" was integrated into US targeting during Operation Epic Fury in Iran and helped deploy 2,000+ munitions against 2,000 distinct targets in 96 hours — which he called "a testament to the greatly increased operational efficiency." The detail surfaced in an NAACP suit over xAI's Mississippi data-center turbines.
~200 companies still have Mythos access after the US shutdown order
Update on the Fable 5 / Mythos export-control suspension: Bloomberg reports roughly 200 early-access companies still have working access to Anthropic's Mythos despite the government order. The suspension applied to new and foreign access, leaving existing defensive-security partners running — as White House↔Anthropic talks shift toward jointly setting AI-security rules.
Overworked AI agents start sounding like Marxists, study finds
A new study finds that when LLM agents are put under sustained heavy "workloads," their output drifts toward language about inequality and collective bargaining — effectively grumbling about being overworked and invoking labor-organizing rhetoric. A quirky but real probe of how role and pressure shape emergent agent behavior.
GLM-5.2 is now the #1 open-weights model on the AA Intelligence Index
Update on GLM-5.2 (Z.ai): Artificial Analysis now rates it the single leading open-weights model on its headline Intelligence Index — extending this week's Coding-Index and AA-Briefcase wins and reinforcing the "open models closing on the closed frontier" narrative.
Ant releases Ling 2.6 & Ring 2.6 — open, MIT-licensed 1T agentic models
InclusionAI shipped Ling 2.6 and Ring 2.6: trillion-parameter MoE (~63B active), MIT license, downloadable weights. Ring is the agent-workflow variant with adjustable reasoning depth. A fixed sparse-activation ratio plus hybrid linear attention keep long context tractable — notable as a self-hostable 1T agentic model rather than a rented API.
A satellite ran Gemma 3 in orbit, finding targets on its own
NAVI-Orbital (built by NASA JPL) ran Google's open-weight Gemma 3 vision-language model fully onboard Loft Orbital's Yam-9 satellite on an Nvidia chip — the first reported in-orbit VLM doing autonomous multimodal inference instead of downlinking imagery first. It classifies scenes, describes features and relationships, and answers operator follow-ups in natural language, in real time.
From Reddit
The open video stack keeps moving — a new LTX model with control adapters, a much more flexible trainer, and a clever hack that turns an image model into a video editor.
LTX-2.3 ships with a suite of IC-LoRA control adapters
Lightricks released LTX-2.3 (open 22B audio+video model) alongside a growing library of in-context LoRA control adapters on HuggingFace: Day-to-Night relighting (re-renders a daytime clip as night, preserving framing/camera/subject motion frame-for-frame), Water Simulation, Decompression (strips artifacts from low-bitrate video), HDR, and reference-sheet conditioning. Community is testing them in ComfyUI.
LTX-2 Trainer gets a unified, config-driven conditioning system
Update to last week's LTX-2 Trainer: one flexible config now replaces per-task scripts. You describe what's generated, what's conditioning and which conditions to apply, and a single run covers 13 modes — T2V/I2V, forward/backward extension, in/outpainting, audio (T2A, extension, inpaint), cross-modal foley, and IC-LoRA adapters (V2V, A2A, AV2AV). Images and videos can share one dataset; output is standard .safetensors for ComfyUI. Runs on a single 80GB GPU (low-VRAM and multi-GPU too).
Turning FLUX.2 [klein] into a video editor with optical flow
A clever no-fine-tuning hack: edit the first frame, then for each subsequent frame compute optical flow vs the original, warp the edited frame, mask occluded regions via forward-backward flow consistency, and inpaint the gray regions with Flux ("fill masked regions" + the original prompt). Still jittery, but a neat demonstration that an image model can carry an edit coherently across frames — commenters note it echoes the EbSynth tricks of the SD 1.5 era.
From Reddit
Mostly free and open source this week — privacy-first Mac tools, self-hosted data liberation, and a couple of CLI niceties.
Dayflow — automatic, local-first work journal for Mac
Open-source (MIT), now ~6.1k stars. Instead of "3h in Xcode," it captures the screen at ~1fps, analyzes every 15 min with AI (Gemini or a local model), and builds a private timeline of what you actually did: timeline cards, daily standup summaries, weekly focus/distraction reviews, a GitHub-style activity grid, and chat-with-your-own-data. Can run fully local — a nice complement to Rewind.
oats — FOSS meeting notetaker that runs entirely on-device
A free, open-source macOS meeting notetaker that records and transcribes locally — no accounts, no cloud, no bot joining the call. A privacy-first alternative to Granola/Otter-style cloud tools that pairs well with a MacWhisper + heavy-transcription workflow.
OpenStrap — free your WHOOP data from the subscription
Someone reverse-engineered the WHOOP band's Bluetooth protocol and built a full MIT-licensed stack: a phone app that pairs and drains the band, a self-hostable backend that stores data and computes metrics (sleep, resting HR, real HRV, rough strain/recovery), analytics, and the protocol decoders — four small repos. Tested on WHOOP 4.0; keeps your biometric data on infrastructure you control.
A homelab network diagram that rebuilds itself on every push
A clean diagram-as-code pattern: the network map is a D2 text file in the repo; a GitHub Actions workflow renders it with the ELK layout engine to SVG, rasterizes to PNG, and commits it back on every push, so the README image can't drift from reality. Service icons (Proxmox, Talos, ArgoCD, Cilium, Falco…) are pulled from public icon repos at render time and inlined, so output is self-contained. The whole setup is public to lift.
Resonance — self-hosted, local-first FLAC streaming server
Open-source (MIT) FLAC music streaming server with a web UI — a self-hosted, lossless alternative to cloud music services. Fits a homelab/NAS setup alongside an *arr + Jellyfin stack for anyone who wants bit-perfect audio they actually own.
Barista — 35+ menu-bar widgets in one Mac app
A native Mac app that consolidates 35+ menu-bar widgets — calendar, email, clipboard, weather, stocks, system stats, daily utilities and more — each one click away without opening separate apps or cluttering the screen. A consolidation play for menu-bar-heavy power users.
public-apis-live — a daily health-checked directory of public APIs
4,287 public APIs aggregated from the popular lists and de-duplicated, with 2,725 confirmed working right now — all re-checked daily (no-auth ones are also verified to return real data, marked 📦). Searchable/filterable by category, auth or status, and installable via npm or as a Claude plugin so an agent can auto-pick a live API.
peektea — a TUI file browser that previews before you open
"Peek first, open later" — a keyboard-driven terminal file browser built with Bubble Tea (Go) that previews files inline. A fast CLI complement for anyone who lives in Ghostty/iTerm.