Can Anything Replace GitHub?
2026-08-21
Stripe agreed to buy OpenRouter, the gateway routing 10+ trillion tokens a day across 400+ models for 10 million developers, in a deal reported above $7 billion. GitHub logged its second major outage of the month this Monday — 7 hours 47 minutes down across github.com, Actions, APIs, pull requests, issues, and Copilot. Anthropic began watermarking all Claude output to comply with EU rules and published its consumer system prompts, while Anna's Archive warned that AI companies are buying, scanning, and destroying physical books for training data. Alibaba's Qwen 3.8 27B and Zhipu's GLM-5.3 both claim to match larger US flagships on coding, and OpenAI cut GPT-5.6 Sol pricing by half on OpenRouter.
News
OpenRouter is joining Stripe, confirming reports of a deal valued above $7 billion. OpenRouter says it processes 10+ trillion tokens a day across 400+ models for 10 million developers, and that its name, product, and routing policy stay unchanged — routing remains driven by "what's best for you, the user." The company was valued at $1.3 billion in a May Series B.
GitHub's CTO posted a postmortem of the August 17 outage, which lasted 7 hours 47 minutes and took down github.com, Actions, APIs, pull requests, issues, and Copilot. It was a capacity failure — a critical component in the Central US datacenter failed to scale with a new traffic peak, against monthly commits that have grown from 1.4 billion to 2.9 billion since April. The second major incident this month, it prompted Ask HN: Alternatives to GitHub and matching Lobsters threads over whether a true replacement exists.
A compromised release of the Rust crate arrayref (0.3.10) appeared on crates.io after the maintainer's account was taken over, pulling in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile time; crates.io removed the malicious versions. The same week, Wiz Research's autonomous "Red Agent" found and exploited a script-injection flaw in Snowflake's snowflake-connector-net Actions workflow, exfiltrating a Jira token — a bug GitHub Advanced Security missed and that Copilot's Autofix had reviewed as all-clear.
Anthropic said all Claude models worldwide will begin watermarking generated text to comply with an EU regulation, using word-choice steganography: at each token the model is nudged toward "green-list" words so output can be detected later with a secret key. John Gruber argues the technique contradicts Anthropic's claim that the mark is "imperceptible" and doesn't change quality, because it changes which words get selected. Separately, Anthropic published the system prompts for its consumer Claude products — they've grown from roughly 300 words to 3,000-plus tokens, and Opus 5's prompt includes instructions acknowledging a request may have been intended for "Claude Fable 5."
Qwen 3.8 27B, Alibaba's Apache-2.0 vision-language model, posts gains over its Qwen 3.6 predecessor across SWE-bench Pro and other coding and agent benchmarks. Simon Willison found it excellent but overthinking by default, since it ships with reasoning effort set to "xhigh" — one SVG prompt consumed 22,276 reasoning tokens over 21 minutes, and he recommends running it on low or no reasoning. Zhipu's GLM-5.3 is far smaller than the ~3T-parameter flagships at roughly 750B total / 40B active parameters, reports a 50% improvement over GLM-5.2 on the lab's code bench, and advertises "emergent cyber capabilities"; weights ship two weeks after launch pending a safety review. OpenAI, meanwhile, cut GPT-5.6 Sol pricing by half on OpenRouter, to $2.50 per million input and $15 per million output tokens.
Mozilla says Firefox is now the last major browser still supporting uBlock Origin, after Edge moved to Manifest V3 and began locking out MV2 ad-blockers; Safari and DuckDuckGo never supported it. Firefox also shipped a native iOS ad-blocker this week.
Articles
Why does Opus 5 feel worse to work with? argues Opus 5 is more capable than its predecessors on benchmarks but less pleasant to use, because it stops asking clarifying questions, makes assumptions, and reinterprets plans — a side effect, the author reasons, of selecting models on self-contained benchmark tasks and RLVR, which reward bold guesses over asking for direction.
RISC-V: They Should Have Known Better is Dmitry Grinberg's extended critique — that no ISA can serve both supercomputers and ten-cent microcontrollers, that RISC-V's interrupt latency trails the decade-old Cortex-M0, and that oddities like a separate Zicsr fragment the "standard." A Trinidad-and-Tobago embedded engineer's response counters that for developers paying $60–$200 shipping on dollar chips, the cheap CH32V003 is the whole point: Grinberg's own first-principles derivation of a minimal core lands on exactly the RV32EC chip RISC-V sells.
Rick Manelius coins AI;DR (AI; Didn't Read) — a policy of not reading unedited AI output: "If you're not bothered enough to review and edit it, then I'm not going to bother reading it." The companion site Don't paste the AI tells people who forward raw chatbot walls in DMs, Slack, or code review to read and rewrite instead of acting as a middleman between the model and the answer.
HTML Can Do That catalogs dynamic behavior now achievable without JavaScript — popover, <dialog>, <details name> accordions, command/commandfor invokers, loading="lazy", and hidden="until-found" — and is candid about where browser implementations and accessibility support still fall short.
An investigation into why an open AliExpress tab kept stealing audio from multipoint Bluetooth headphones traced it to hidden WebAudio graphs — a sawtooth oscillator routed through an analyser to a zero-gain destination — built by Alibaba anti-abuse scripts, alongside canvas, WebGL, WebRTC, and timing fingerprinting.
AI companies destroy physical books — let's scan rare books before it's too late, a guest post on Anna's Archive, describes Anthropic's "Project Panama" — exposed in a $1.5 billion copyright settlement — under which millions of paper books were purchased, scanned as pre-2022 training data, and destroyed; the archive is recruiting volunteers to scan rare books before they vanish. It landed a day after an essay noting Aaron Swartz was prosecuted for scraping 70GB of JSTOR articles while Meta torrented 80 terabytes of books to train its models with little consequence.
Tools
OpenLogi — a local-first alternative to Logitech Options+ that drives Logitech mice and keyboards over HID++ (button remapping, DPI, SmartShift), with no account or telemetry and bindings stored in a plain TOML file. (Rust)
DuckDB v2.0 — a preview of the "Cyanoptera" release adding a client/server mode (the Quack protocol and a CONNECT statement with query pushdown to Postgres and MySQL), a first-class VARIANT type for shredded semi-structured data, triggers, a new SQL parser, and a new storage format. (C++)
Go 1.27 — adds generic methods, struct-literal keys for embedded fields, and generalized function type inference, plus encoding/json/v2, post-quantum crypto/mldsa, native uuid, and experimental SIMD. (Go)
Bun 1.4 — the Zig-to-Rust rewrite, with +1,517 Node test-suite tests, up to 35% lower memory, 5x lower idle CPU, and new Bun.Image, Bun.cron(), bun test --parallel, and bun audit fix. (JavaScript/Rust)
Mojo is now open source — the compiler and toolchain are released under Apache 2.0 with LLVM exceptions, following the language's 1.0 release; compiler contributions remain closed until year-end. (Mojo)
Plane — an open-source, AGPL-3.0 project-management platform pitched as a self-hostable Jira/Linear alternative, with sprints, roadmaps, docs, and analytics. (TypeScript/Python)
Worth a Look
A joke domain purchase turned into geopolitical warfare — SondeHub, a radiosonde-tracking site that started as a URL redirect, accidentally built wind-model "reverse predictions" that reveal artillery sites and military vessels, and found itself feeding the Ukraine war and fending off API hammering.
I accidentally logged hundreds of thousands of phone calls to military bases — by buying an expired €5 nameserver domain, the author took control of the e164.arpa ENUM zones for +290 (Saint Helena), +246 (Diego Garcia), and +247 (Ascension Island), which could route calls through a man-in-the-middle SIP server; a day of logging one zone drew zero queries, and reports to the British government and RIPE went nowhere.
Cerebras CS-4 is a rack-scale system built from three WSE-3 Turbo wafers (four trillion transistors, 900,000 cores) that claims 30x faster inference than GPUs and 1,000+ tokens/s on 10-trillion-parameter models, with first shipments this quarter.
Kernel patches for better VRAM overcommit behavior are queued for Linux 7.3 — an exploration of what happens when games use more VRAM than physically exists, and the PCIe bandwidth ceiling (~1 GiB/frame at 30 FPS) that governs the slowdown.
An OSINT write-up geolocates a random island using geometry and CUDA — building a triangle fingerprint from a drone photo and matching it against 80.7 million island triples across OpenStreetMap's coastline polygons on the GPU.
How Bluesky draws its logo on screenshots — the app renders content inside a UITextField with isSecureTextEntry, which iOS blanks on screenshot so the logo underneath shows through; Telegram and Signal use the same trick. Kagi also shipped a setting to strip paywalled links from search results, alongside a Stocks widget that now covers ETFs.