Driverless USB Wi‑Fi via Pico & SQL-native stats with DuckDB - Hacker News (Jun 24, 2026)
Driverless USB Wi‑Fi from a Pico W, DuckDB gets SQL stats, security disclosure in the LLM era, AI evals economics, and a new agent world-model benchmark.
Our Sponsors
Today's Hacker News Topics
-
Driverless USB Wi‑Fi via Pico
— An open-source firmware turns a Raspberry Pi Pico W into a driverless USB Wi‑Fi adapter using standard CDC-NCM, improving compatibility for embedded and legacy hosts. -
SQL-native stats with DuckDB
— The-stats-duck v0.6.0 brings profiling, regression, resampling, and richer plotting into DuckDB SQL, making analytics workflows faster and more reproducible. -
Security triage in LLM era
— Filippo Valsorda argues coordinated disclosure norms are strained by LLM-generated vulnerability noise, shifting priorities to verification, triage, and prevention in CI. -
AI evals as a business
— A critique of selling AI model evaluations explains why “evals as a service” struggles—thin buyers, talent drift, and benchmark gaming—while tooling and safety audits may endure. -
World-models for AI agents
— Qwen-AgentWorld proposes training language world models on interaction trajectories to simulate environments for planning, with a new benchmark to measure agent reasoning improvements. -
The invention of red squiggles
— A memorial to Word developer Tony Krueger highlights how background spellcheck and red squiggles shaped modern editor UX, improving writing without interrupting flow. -
Rule-based generative city map
— Jerry’s Map shows decades-long, rule-driven generative art built from thousands of panels and chance-based instructions—an analog ancestor to procedural worldbuilding. -
Cat-borne fungus spreading risk
— Scientists warn Sporothrix brasiliensis, a cat-transmitted fungus, is expanding geographically and could reach the U.S., raising veterinary and public-health surveillance needs.
Sources & Hacker News References
- → Bunny.net Makes Bunny DNS Free and Removes Per-Query Charges
- → the-stats-duck v0.6.0 adds SQL regression, bootstrap, new plots, and faster SAS/SPSS/Stata reads
- → LLMs Are Changing Why Vulnerability Reports Get Special Treatment
- → Jerry Gretzinger’s ‘Jerry’s Map’ and the Rule-Based System Behind Its 4,000-Panel Virtual City
- → Firmware Turns Raspberry Pi Pico W Into Driverless USB Wi‑Fi Adapter
- → Raymond Chen Remembers Tony Krueger, Creator of Word’s Red and Green Squiggles
- → Cat-borne fungus spreading in South America raises concern about arrival in the U.S.
- → FUTO releases on-device open swipe-typing models and a 1M-swipe dataset
- → Why Independent AI Evaluation Startups Struggle to Survive
- → Qwen-AgentWorld Introduces Language World Models to Simulate Environments for General Agents
Full Episode Transcript: Driverless USB Wi‑Fi via Pico & SQL-native stats with DuckDB
What if your next USB Wi‑Fi adapter didn’t need drivers at all—and the “Wi‑Fi brain” lived inside a tiny microcontroller? That’s one of today’s most practical hacks. Welcome to The Automated Daily, hacker news edition. The podcast created by generative AI. I’m TrendTeller, and today is June-24th-2026. Let’s get into the stories shaping how we build, secure, and use technology.
Driverless USB Wi‑Fi via Pico
Let’s start with hardware and open-source ingenuity. A new firmware project called pico-usb-wifi turns a Raspberry Pi Pico W into a driverless USB Wi‑Fi adapter. The key idea is compatibility: the device presents itself as a standard USB network gadget, while the Pico handles the actual Wi‑Fi connection and authentication. Why it matters is simple—lots of embedded devices, appliances, and constrained systems either don’t have Wi‑Fi drivers, or they have them but they’re painful to maintain. This approach moves the complexity off the host and into a tiny, swappable module. The throughput isn’t going to compete with modern Wi‑Fi dongles, but for “just get this box online” scenarios, it’s a clever, dependable bridge—and recent stability fixes suggest it’s moving from prototype toward something you could actually ship.
SQL-native stats with DuckDB
On the data side, there’s a notable update to the-stats-duck, an open-source DuckDB extension that brings statistical analysis and plotting directly into SQL—even in browser-based DuckDB setups. The new release adds a more composable dataset profiler, plus regression functions that feel familiar to anyone who has used R-style formulas. It also expands resampling with a bootstrap helper that makes confidence intervals easier to generate without bouncing between tools. And the plotting grammar got richer, which is a big deal if you want quick, explainable visuals close to where the data lives. The most practical win, though, is performance: a pipeline for reading common stats file formats was fixed to avoid a nasty slowdown pattern, translating into dramatic speedups on large datasets. In a world where analytics stacks sprawl fast, “do more in one place” is not just convenience—it’s fewer moving parts to break.
Security triage in LLM era
Now to security process, where one maintainer is challenging a norm many teams treat as sacred. Filippo Valsorda argues that vulnerability reports should no longer automatically be treated as uniquely urgent obligations—because the assumptions behind coordinated disclosure are shifting in the LLM era. His point isn’t that security doesn’t matter; it’s that the inbox is filling with low-signal reports that are cheap to generate and expensive to verify. In other words, the scarce resource has moved from “finding potential issues” to “proving impact and prioritizing fixes.” That changes what good stewardship looks like: faster triage, stronger preventive controls, and using automated analysis—possibly LLM-based—inside CI to catch classes of problems earlier. He also leaves room for nuance: some reports still deserve the old-school treatment, especially high-severity findings or tips from trusted sources. The broader takeaway is that security culture may need to re-balance from etiquette toward operational throughput.
AI evals as a business
Staying with AI—but from a business angle—one essay makes a blunt case that independent startups selling AI model evaluations rarely work, outside a narrow safety niche. The argument is partly about incentives: strong eval researchers often migrate to post-training or product work where their influence on outcomes is clearer and pay is better. It’s also about customers: teams sophisticated enough to care deeply about benchmark nuances often can run evals themselves, while teams that can’t tend to want packaged solutions, not leaderboard debates. And then there’s gaming—once a benchmark becomes a target, big labs tune specifically for it, which can erode trust in third-party scoring. The essay’s more constructive conclusion is that “eval tooling” and “data products” may be healthier businesses than “evals as a service,” while safety evals could persist because independent verification has intrinsic value—especially if regulation starts asking for audits.
World-models for AI agents
In more forward-looking AI research, Qwen’s team introduced Qwen-AgentWorld: what they call a language world model aimed at simulating how environments change when an agent takes actions. This sits in the broader push to make agents plan better—because planning is easier when you can reliably predict the consequences of a step before you take it. They pair the models with a benchmark built from real interaction data, trying to measure whether these simulations actually line up with reality, not just with contrived tasks. The claim is that this kind of world-model training can act like a warm-up that improves downstream agent performance across multiple evaluations. Why it matters: if agent builders can train and test policies in simulation that’s closer to real-world dynamics, they can iterate faster, cheaper, and with fewer risky real-world trials. The open question, as always, is whether these simulated “worlds” generalize beyond the domains they were trained on—but the direction is clearly toward agents that can rehearse before they act.
The invention of red squiggles
A quick detour into software history, via a memorial from Microsoft veteran Raymond Chen. He remembers Tony Krueger, a longtime Microsoft Word developer credited with a deceptively important UX shift: spell-check that runs quietly in the background and marks issues inline—the red squiggles that basically every editor now uses. Earlier spell-check approaches could interrupt writing, which pushed many people to disable them. Krueger’s change kept the workflow fluid while still offering immediate feedback, and it became one of those interface patterns that’s so common we forget it had to be invented. It’s a reminder that “small” UX decisions can scale to billions of interactions—and shape what users consider normal across an entire category of software.
Rule-based generative city map
For something more artistic, there’s a story about Jerry’s Map—a generative artwork that started as a doodle in 1963 and grew into a sprawling, evolving imaginary city made of thousands of panels. What’s striking is the method: changes are guided by a set of instruction cards, blending deliberate choices with structured randomness. Over decades, that system produced repeated cycles and layers rather than simple repainting, so the work becomes a kind of time-lapse of rules interacting with imagination. Why it matters to a Hacker News crowd is that it’s an analog cousin of procedural generation and system-driven creativity. It also underlines a point we keep relearning in software: constraints don’t limit expression—they often multiply it.
Cat-borne fungus spreading risk
And finally, a public health warning with a practical angle for pet owners and veterinarians. Scientists at the ASM Microbe meeting flagged concern about Sporothrix brasiliensis, a cat-borne fungus that can cause severe disease in cats and painful lesions in people. It’s been expanding beyond Brazil, with cases and spread documented elsewhere in South America, and experts worry it could reach the U.S. through travel or importation. The risk isn’t just that it exists—it’s that transmission can happen through scratches, bites, grooming, and potentially even sneezing, and it can linger on surfaces for weeks. Add in delayed symptoms, and you have a recipe for missed detection in homes and clinics. The main message is about vigilance and reporting: early recognition and coordination with public health agencies can be the difference between isolated cases and something that becomes established.
That’s the show for June-24th-2026. If you enjoy this format, come back tomorrow—there’s always another sharp idea, a quiet shift in security culture, or a new tool changing how we work. Links to all stories can be found in the episode notes.
More from Hacker News
- June 22, 2026 Codex logging bug and SSD wear & Deno Desktop packaging for apps
- June 21, 2026 iOS fingerprinting with public APIs & IPv6 crosses the 50% line
- June 20, 2026 Web experiments beyond WebGL & Favicon as micro data store
- June 19, 2026 GitHub clones spreading ZIP trojans & Fractal kernel reveals Apple speculation
- June 18, 2026 AI spa-style body imaging & Cheap academic drug repurposing trials