Omarchy put its default user in the Linux docker group. On Arch, that group talks to a daemon running as root. So membership is root access with no sudo prompt, and it sat that way for 14 months.
Omarchy’s own docs sold the change as running Docker “as the normal user and not as root”. The writeup’s author calls that wording almost the opposite of what shipped.
In today’s indie hacker news:
- 🔓 A 35,600-star distro shipped a free path to root
- 🤖 Claude Code closed the complaint about itself
- 🧰 Seven weeks to find out what ChatGPT Work does
- 📉 Why next month’s limit raise is really a cut
TOP STORIES
NOBODY ASKED FOR THE DOCKER GROUP
🔓 DHH’s Omarchy shipped a root-equivalent default on every fresh install
The story: The writeup on 0xcc.io went up four days after Omarchy had quietly patched it in v4.0.1, with ten other security fixes. The author says he reported it privately. Omarchy’s credits page names someone else as first reporter.
The details:
- One line from an unprivileged shell:
docker run --rm -v /:/hostroot alpine cat /hostroot/etc/shadow. - Supplementary groups are inherited, so it landed on essentially every process under
systemd --user. The post lists AI coding agents first. - The same release stopped Omarchy’s own bundled Claude and Codex agents launching in full bypass, moving them to auto-review.
- No CVE was assigned. The commit touches 18 files and ships a migration that de-groups existing installs.
Why builders care: Run groups. If docker is in the list, drop it: sudo gpasswd -d $USER docker, then log back in. Do that before you point an agent at the machine.
Together with GetPress
Get press in minutes, not months.
Record a two-minute voice note when a journalist query fits, and GetPress turns it into a quote that sounds like you, not like a model, then you send it from your own Gmail.
How it works:
- You get HARO, SOS and Mention Match in one inbox, matched with your expertise.
- Reply with text, a voice note, or a clip.
- Get your expertise out to real journalists in two minutes per day.
Pitch your own expertise or on behalf of clients you represent. Start for $99/mo →
THE BOT CLOSED ITS OWN TICKET
🤖 Anthropic closed the “make it opt-in” issue, and the default never changed
The story: Issue #66504 asked for the claude.ai session URL to stop landing on every commit and PR by default. Boris Cherny, who created Claude Code, closed it as completed and linked an opt-out setting.
The details:
- His closing comment ends with its own footer: ”🤖 Generated with Claude Code”.
- That setting,
attribution.sessionUrl, had shipped in v2.1.183 two months before the closure. - joka-7’s rebuttal: the setting answers “can I turn it off”, the issue asked “should it be on without asking”. Web sessions boot in fresh containers, so a home-directory config never persists.
- A follow-up issue asking for the default to flip has been open since mid-July with zero comments.
Why builders care: Only web and Remote Control sessions stamp the link, never the plain CLI. Put {"attribution": {"sessionUrl": false}} in your project’s .claude/settings.json so it travels with the repo.
THE PRODUCT WROTE ITS OWN MANUAL
🧰 ChatGPT Work’s code sandbox is open to the whole internet by default
The story: Simon Willison spent seven weeks with ChatGPT Work and calls it “extraordinarily confusing and very powerful”. OpenAI publishes no tool documentation, so he asked the product to inventory itself. The result: 223 registered tools, six of them his own MCPs.
The details:
- Claude’s container has run a very short domain allowlist since September 2025. This sandbox has none.
- Every session gets a persistent scratch folder, mounted live across all running sessions. Willison has accumulated 171.
- “Work Cloud” and “Work Local” are his labels, not official ones. The model picks are GPT-5.6 Sol, Luna and Terra.
- He flags the lethal trifecta, private data plus untrusted content plus a way out, and gives no attack scenario.
Why builders care: It squeezes scheduled-monitoring SaaS, browser-automation APIs and prompt-to-site builders into one $20/month bundle. If you sell any of the three, that is your new price ceiling.
TRENDING TODAY
📉 Anthropic’s permanent 25% raise still leaves you with less - Standard weekly limits in Claude Code rise on September 14. The temporary 50% boost running since May ends the day before. The company confirmed the arithmetic itself: “compared to today, this works out to a 17% reduction.” Two HN submitters read the same announcement and filed opposite headlines. Re-measure your build loop while the boost is still on.
🔐 75% of Reform voters trust no government with your messages - Public First polled 2,000 British adults, weighted, with a 2.2-point margin of error. Distrust of state access to encrypted messaging clears half in every party. The number that hits a product: 65% would get more cautious about what they like, share or comment on. CDT commissioned the poll and campaigns for strong encryption.
⚖️ Sony and Warner Chappell sue Anthropic, and name Dario Amodei personally - Filed late Friday in the Northern District of California over tens of thousands of compositions, including “Eye of the Tiger” and Taylor Swift’s “Paper Rings”. Co-founder Benjamin Mann is a named defendant too. The template is the Bartz settlement: training on copyrighted work survived court, acquiring it by torrent did not. Keep provenance records for every corpus you touch.
DRAMA
🧠 THE SKILL YOU DELEGATED
Paolo Galeone says LLMs are eroding what made him good, not by writing bad code but by removing the friction where learning happened: “With the LLMs every time there’s a mistake, I don’t learn.” Asked what now, he answers “I don’t know.” 60 points against 77 comments. More people argued than upvoted.
FIRST DOLLAR
💸 $25.98, AND ZERO NEW FEATURES
u/abaa97 built Qariyo, a text-to-speech Chrome extension, after bouncing off $30/month competitors. He sat on 381 signups and almost no usage for months. Nobody could tell his two reading modes apart. He made them obvious, and purchases started within days. The money is lifetime, from one-off $12 credit packs, not subscriptions. His line: “Even at MVP stage, clarity beat features.”
🎟️ TWO FRANCS AND A DEAD FEATURE
u/amorpheuse charged two Swiss francs, about $2.50, to run a 661-person guestlist for 11 hours. The part he sweated was real-time multi-device sync over WebSockets, reconnect handling and all. Every check-in came from one phone. Across all ten events the product has ever run, no door has had two people on it. The unsold asset is already in his database. An average turn-up rate just over half is what lets a venue overbook on purpose.
STACK OF THE DAY
mcdview - Paste a schema or drop a .sql, .prisma or .dbml file and get an interactive ER diagram on a shareable link. No account, no install, MIT licensed. CI mode regenerates the link on every build and gates on drift, which is what kills hand-maintained diagrams. The repo is three days old with one star, so treat it as new.
Not sponsored. We just feature tools builders would actually use.
BOOKMARKED TODAY
- 📐 “I just chose words carefully” - Marcin Wichary found rs1n, who got a 17,000-word Super Metroid FAQ flush to the right margin by hand.
- 🦠 Coordination Headwind - Alex Komoroske’s flipbook on why ten capable people ship slower than two, and why firing the manager won’t fix it.
Curated by AI, built by a human.