News
What happened, and why it matters.
Sora Dies in 5 Days — Here's What Solo Creators Should Do Before April 26
OpenAI announced on March 24 that the Sora app shuts down April 26 and the API shuts down September 24. Seven months from launch to grave for a product that was supposed to own AI video. If you built a pipeline on Sora, you have a long weekend to migrate — and a specific lesson to take with you about building on anyone's consumer AI app.
A Roblox Auto-Farm Script Took Down Vercel: Your AI Tool Supply Chain Is the New Attack Surface
A Context.ai employee got infected with Lumma infostealer while downloading Roblox cheats. Two months later, ShinyHunters was selling Vercel customer tokens on BreachForums. The attack path is a straight line through the AI productivity tools you've been clicking "Allow all" on. Here's the 30-minute OAuth audit every solo operator should run this week.
You Can Now Run State-of-the-Art Image-to-3D on Your Mac: No GPU, No Cloud, No Subscription
Microsoft's TRELLIS.2 is a 4B-param image-to-3D model that normally needs a CUDA box. A one-person Show HN just ported it to Apple Silicon via PyTorch MPS. 400K-vertex meshes from a single photo, about 3.5 minutes on an M4 Pro, completely offline. For solo operators shipping 3D-adjacent products, this changes the unit economics overnight.
There Is an iTerm2 RCE Where `cat readme.txt` Gets You Owned: Patch Before Monday
CVE-2026-41253 was disclosed April 18. Opening a plain .txt file with cat can execute shell as you. No click, no download, no signature. It affects every iTerm2 through 3.6.9. Here's the 20-minute solo-operator patch plan.