CTO Andrew Bosworth answered a worried Meta engineer on internal Workplace this week with one line: “We basically have no option to opt out on your corporate laptop.” His follow-up was worse. “Gmail is an approved context so if you have concerns it may be best not to check personal email.”
Two weeks before the May 20 layoff round, that’s what 78,000 employees got told about the keylogger Meta is using to train its agents on them. The talent funnel for indie founders just opened.
In today’s indie hacker news:
- 📉 Meta is keylogging 78K U.S. staff to train AI before layoffs
- 🚫 EU Parliament’s research arm called VPNs “a loophole”
- 🍎 Apple killed the 256GB Mac Studio config until October
- 🎮 First Dollar: a Valorant coach hit $400 MRR with $0 marketing
- 🔌 Stack: Modafinil keeps your Mac agents alive with the lid closed
TOP STORIES
NO OPT-OUT ON CORPORATE LAPTOP
Meta’s MCI keylogger has no opt-out on a corporate laptop, and May 20 layoffs cut 10% of staff.
The story: Casey Newton’s Platformer broke the surveillance specifics: the Model Capability Initiative records every mouse click, keystroke, and periodic screenshot on every U.S.-based employee laptop. European staff are exempt under GDPR. After Bosworth’s reply on internal Workplace, hundreds filed complaints; one drew 100+ angry-emoji reactions with the line “Your callousness to the concerns of your own employees is concerning.”
The NYT inside-look that hit HN (333 points, 325 comments) confirmed the morale collapse. Meta is also formally adding “AI-driven impact” to every 2026 performance review and pointing staff at Metamate plus Gemini to draft their own self-assessments. The Creation org’s stated target: 65% of engineers producing 75%+ of their code via AI by H1.
The details:
- May 20 cuts: 8,000 employees (~10% of headcount), plus 6,000 open roles canceled. Largest single round since November 2022’s 11,000 (TheNextWeb)
- 2026 AI capex guidance: $125B to $145B, near double the $72.2B spent in 2025. Total annual cost of the entire 78K workforce sits at $27B (247WallSt)
- Yann LeCun left late 2025 after the FAIR cuts and raised €1.03B for AMI Labs the next quarter (CNBC)
- Bosworth on personal data leaking into the training set: “Gmail is an approved context so if you have concerns it may be best not to check personal email”
- Senior execs were granted up to $921M each in stock options tied to a $9T market cap target by March 2031, awarded the same quarter the cuts hit
Why builders care: The pitch writes itself. “We don’t track your keystrokes, your AI usage isn’t on your perf review, and your laptop closes when you close it.” Meta engineers have rare distributed-infra and ML skills, and thousands will be liquid and emotionally checked out within weeks. Top HN commenter @menloshark put it bluntly: average tenure under two years, real work gatekept for political allies, avoid despite the pay. The window is May 20 to roughly mid-June.
Work from any WiFi like it's your home network. NordVPN's Meshnet runs a free private mesh between your laptop, dev box, and home server. SSH from a café without exposing a port, the way you'd use Tailscale. The paid VPN on top lets you test geo-fenced Stripe checkouts or feature flags from any country.
We get a cut if you sign up. Only added for tools we use ourselves.
A LOOPHOLE THAT NEEDS CLOSING
EU Parliament’s research arm published a paper labeling VPNs a loophole as Proton signups spiked 1,400%.
The story: The EPRS “At a Glance” briefing authored by Maria Del Mar Negreiro Achiaga is structured around four sections, the first titled “A loophole that needs closing.” It’s a research note for MEPs with no legislative force, but it reads like a roadmap. EC Executive Vice-President Henna Virkkunen made it canonical at a May 1 press conference: “VPN must not allow the system to be circumvented.” The Commission’s age-verification app went technically ready April 15, with December 31, 2026 set as the deployment deadline for all Member States.
The market is voting with downloads. Proton VPN reported a 1,400% signup spike after UK age-assurance enforcement, one app developer logged an 1,800% download jump in month one, and Florida saw a 1,150% VPN demand spike within hours of Pornhub blocking its state. May 6, Mozilla, Mullvad, Proton, Tor, EFF and 14 other groups signed a joint letter against the UK plan to mandate age checks for VPN access.
The details:
- The “loophole” framing is an EPRS section header attributed to UK Children’s Commissioner positions, not an EPRS recommendation. No EU law currently bans VPNs (Heise breakdown)
- DSA Article 28 already requires platforms to take “appropriate and proportionate measures” for minors, enforced by Member State Digital Services Coordinators. Reddit was fined £14.47M in February 2026 for non-compliance
- Utah SB 73 went live May 6 as the first U.S. jurisdiction to define user location by physical presence not IP, holding sites liable when a user masks via VPN (EFF)
- Cryptographer Matthew Green on the synchronicity: “There’s something ominous about the speed with which the entire world has marched to require identification on platforms”
- France’s preferred technical model is “double-blind” zero-knowledge proof: user proves age to a verifier without revealing identity to the platform, and the verifier never sees which site
Why builders care: Any EU-facing product with an age-restricted surface (adult, gambling, social with 16+ thresholds) needs DSA Article 28 compliance now. The EPRS paper points at the revised Cybersecurity Act as the next vehicle for VPN-aware obligations, so IP geo-restriction stops counting. Evaluate ZKP age-attestation providers before Member States start fining you. The kicker: every regulatory crackdown on VPN access is a marketing event for the VPN companies, and Proton has the conversion data to prove it.
THE LOCAL-LLM BOX SHRANK
Apple removed the 256GB Mac Studio config, leaving 96GB until M5 Ultra ships in October.
The story: Basic Apple Guy flagged it on X May 5 and 9to5Mac confirmed: the 256GB M3 Ultra Mac Studio config disappeared from the online store. The 512GB option was already pulled in early March. Only 96GB remains for new M3 Ultra purchases, with the M4 Max topping out at 128GB. Same day, Apple killed the 64GB and 32GB Mac mini configs, pushing the Mac mini base price from $599 to $799.
Tim Cook flagged it on the Q2 earnings call: “Mac mini and Mac Studio may take several months to reach supply demand balance” and “significantly higher memory costs ahead.” Memory makers shifted production to HBM for AI server accelerators, so consumer DRAM dried up. Mark Gurman now expects M5 Mac Studio in October 2026, pushed from a previously expected mid-year window.
The details:
- The removal sequence: 512GB pulled March 4-6 ($9,499 config gone), 256GB upgrade repriced from $1,600 to $2,000 the same week, 256GB pulled May 5
- M5 Ultra is expected at 256GB max with ~1,200 GB/s bandwidth (vs 819 GB/s on M3 Ultra), combining two M5 Max dies. M4 Ultra was apparently skipped
- The r/LocalLLaMA megathread on the cut hit 517 points and 132 comments in three days
- Top commenter u/Anbeeld (291 pts): “Probably because they want to use all this RAM for upcoming M5.” Read: inventory clearing, not permanent
- One builder reported running 3x M3 Ultra nodes (1.28TB combined unified memory) via Thunderbolt 5 + JACCL RDMA as the cluster workaround
Why builders care: If you run Qwen 70B+, DeepSeek R1, or multi-agent stacks locally, the 256GB tier just vanished from new sales. Four real choices: buy a used 256GB on eBay before resale prices spike, bridge with the M4 Max at 128GB, wait roughly five months for M5 Ultra, or build an RTX 5090 box at ~$3,700 for 32GB VRAM with CUDA. The kicker: a MacBook Pro now ships with more unified memory than the desktop Mac Studio. (Speaking of running agents on a closed laptop, today’s Stack of the Day is the workaround.)
TRENDING TODAY
🛠️ Five Show HN posts in 24 hours wrapped tools around Claude Code on Mac. Remind by @olliewagner schedules prompts to fire locally with no telemetry. Tokenyst tracks token spend per session. draft-cli-plugin keeps persistent product context across sessions, framing the bug as “context amnesia plus context rot.” Plus Simon Willison’s “Unreasonable Effectiveness of HTML” hit 426 HN points arguing you should ask Claude for HTML instead of Markdown so it can render SVG and interactive widgets. The indie-tooling layer is forming around long-running coding agents.
⚡ Qwen3.6 35B A3B is now hitting 80 tok/sec on a single 12GB GPU. A llama.cpp MTP pull request (multi-token prediction) lands ~75% draft acceptance for a 2x speedup. The thread hit 483 upvotes on r/LocalLLaMA. Companion launches: BeeLlama.cpp ships DFlash + TurboQuant for Qwen 3.6 27B Q5 with 200K context on a 3090 (peak 135 tps), and NVIDIA’s Nemotron-Elastic-12B packs one checkpoint with nested 6B/9B variants you slice without retraining. 12GB consumer cards are now production-grade for inference.
💸 r/SaaS turned into a $0-to-$1 confession booth this weekend. u/utsav_0 satirized the genre (“I made my first $1 after working my a** off for 3 days straight. Here are the lessons”). Askmeety hit 4 paying users on day one of paid launch (373 upvotes, 126 comments). An anonymous Android dev hit $300 MRR on a screen-time app. The pattern shift: more under-$1K MRR builders are publishing playbooks instead of asking for advice.
DRAMA
THE NOTARIZATION CORTISOL TAX
A Mac developer who shipped real software wrote 2,000 words on why Apple gives him heart palpitations.
Kristiāns Kronis published the tour of pain: $99/year before you can sign anything, ID verification through the MacBook webcam with no document-upload alternative, the eventual-consistency hell where your account is active in one Apple system but not another, and the opaque permanent ban with no appeal. His closer: “Apple, fuck you and your forsaken ecosystem. This sucks.” 229 HN points and 158 comments, a 0.69 comment-to-upvote ratio (anything over 0.5 is heat).
Why builders care: The top reply (233 pts) noted Gatekeeper takes 30 seconds to disable in terminal, but that’s not the sting. The sting is the ID-verification roulette and the silent ban. Pair it with the Mac Studio cut and the narrative writes itself: shipping for Apple in 2026 is getting more expensive and more fragile in the same week.
FIRST DOLLAR
IMMORTAL RANK SHIPPED
Sagar Jain reached Immortal in Valorant, then built Valocoach.ai and hit 15K users plus $400 MRR in 30 days with $0 marketing.
u/venatorgamer’s r/startups post opened with the credibility move: “I reached Immortal rank, but the grind was incredibly painful. I watched hours of generic tutorials that completely missed what I actually needed to fix in my own gameplay.” So he wired LangChain plus an LLM to analyze match clips in under 60 seconds and ship personalized fixes. The pricing is $1/mo, the moat is the “AI Battle Pass” mechanic that turns weaknesses into daily quests with real rewards (Valorant Points, gear). 4K MAU, 70% Month 1 retention. Now raising. The replicable pattern: pick a skill-based game with public match APIs (CS2, League, Apex), wrap LLM coaching in a quest loop, price near zero, raise once retention proves out.
STACK OF THE DAY
🔌 Modafinil
Modafinil is a tiny macOS menu-bar app that prevents your MacBook from sleeping when the lid is closed. Display stays off, but Claude Code, Codex, or any background agent keeps running so you can throw the laptop in a bag mid-task. Solves the exact pmset-suspends-my-agent problem most of us hit on day one of long sessions. Install via .dmg from Releases (no Homebrew or npm), grant App Background Activity permission, done. Swift, MIT, no telemetry. Built by narcotic-sh, who hit the problem yesterday and shipped today.
Not sponsored. We just feature tools builders would actually use.
BOOKMARKED TODAY
📄 LLMs Corrupt Your Documents When You Delegate. Microsoft Research benchmark across 19 models and 52 professional domains. Even frontier models silently corrupt ~25% of document content by the end of long delegated workflows. Errors are sparse, severe, and compound; agentic tool use doesn’t help. 370 HN points.
🇨🇭 Internet Archive Switzerland launches in St. Gallen. New independent non-profit foundation focused on preserving endangered archives globally and collecting generative AI models. The day’s most-upvoted single article (561 HN points). Bookmark as the template for civic infrastructure hedging against jurisdictional risk.
🧪 DeepSeek V4 full paper drops. FP4 quantization-aware training baked into pre-training (FP32 master → FP4 → dequantized to FP8 for compute), so inference matches training exactly. 73% fewer FLOPs and 90% smaller KV cache at the million-token mark vs the prior version. Reference material if you fine-tune at scale.
Curated by AI, built by a human.