June 18, 2026

# Morning memo — 2026-06-18

**Source failures (if any):** None apparent

## Worth attention

1. **SpaceX to buy Cursor (Anysphere) for $60B** — https://www.reuters.com/legal/transactional/spacex-buy-anysphere-60-billion-2026-06-16/
   Reuters reports SpaceX is acquiring Anysphere (the company behind Cursor) for $60B. A seismic shift for AI-assisted coding — if you rely on Cursor, watch for changes to roadmap, pricing, or access under SpaceX ownership.

2. **Running local models is good now** — https://vickiboykis.com/2026/06/15/running-local-models-is-good-now/
   Vicki Boykis argues local LLMs have crossed a quality threshold for practical daily work. Directly relevant if you run Ollama — you may no longer need to compromise much on quality vs. cloud APIs for most tasks.

3. **Stop Using JWTs** — https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452
   Detailed argument for server-side sessions over JWTs: JWTs add complexity without meaningful benefit for most web apps and make revocation harder. Worth reading before any auth decisions on CalenCall or ContractorVerify.

4. **Google Chrome ending popular ad blockers** — https://9to5google.com/2026/06/15/google-chromes-next-update-will-mark-the-end-of-popular-ad-blockers/
   Chrome's next update completes Manifest V3, disabling extensions like uBlock Origin that relied on the old blocking API. Switch to uBlock Origin Lite or Firefox now if you rely on ad blocking for development or privacy.

5. **Backdoor in a LinkedIn job offer** — https://roman.pt/posts/linkedin-backdoor/
   A developer received a fake job offer via LinkedIn containing a link to a backdoored coding challenge repo. Social engineering via job offers is an active attack vector — treat unsolicited repo links from recruiters as hostile.

6. **Memory safety CVEs differ between Rust and C/C++** — https://kobzol.github.io/rust/2026/06/15/how-memory-safety-cves-differ-between-rust-and-c-cpp.html
   Research showing Rust changes the nature of memory CVEs, not just the count — Rust eliminates corruption bugs but logic-level issues remain. Useful context for evaluating security claims about Rust rewrites.

7. **datasette 1.0a34 — row editing in the UI** — https://simonwillison.net/2026/Jun/16/datasette/#atom-everything
   Datasette adds insert, edit, and delete row UI in this alpha. Moves it closer to a lightweight database admin tool. If you use datasette for data browsing on any project, this is worth an upgrade.

8. **Claude API — three elevated-error incidents Jun 16-17** — https://status.claude.com/incidents/xmhsglsz3h3w
   Anthropic logged three separate error-rate incidents in two days affecting Sonnet and Opus (all resolved). Notable reliability pattern if you're building on Claude's API — consider retry/fallback logic.

## Full digest
- [P] [hn-top] SpaceX to buy Cursor for $60B — https://www.reuters.com/legal/transactional/spacex-buy-anysphere-60-billion-2026-06-16/ — Major acquisition changes AI coding tool landscape
- [P] [lobsters] Running local models is good now — https://vickiboykis.com/2026/06/15/running-local-models-is-good-now/ — Local LLMs now practical for daily dev work
- [P] [hn-top] Stop Using JWTs — https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452 — Argument for sessions over JWTs for most web auth
- [P] [lobsters] Chrome ending ad blockers — https://9to5google.com/2026/06/15/google-chromes-next-update-will-mark-the-end-of-popular-ad-blockers/ — Manifest V3 kills extension-based ad blocking
- [P] [lobsters] Backdoor in LinkedIn job offer — https://roman.pt/posts/linkedin-backdoor/ — Malicious code repo sent via fake LinkedIn recruiter
- [P] [lobsters] Memory safety CVEs Rust vs C/C++ — https://kobzol.github.io/rust/2026/06/15/how-memory-safety-cves-differ-between-rust-and-c-cpp.html — Rust changes bug types, not just reduces count
- [P] [simon-willison] datasette 1.0a34 — https://simonwillison.net/2026/Jun/16/datasette/#atom-everything — Row insert/edit/delete now in datasette UI
- [P] [claude-status] Claude API repeated errors Jun 16-17 — https://status.claude.com/incidents/xmhsglsz3h3w — Three incidents, all resolved; pattern worth noting
- [M] [lobsters] zlib-rs in Firefox — https://trifectatech.org/blog/zlib-rs-in-firefox/ — Rust zlib landing in Firefox
- [M] [simon-willison] Georgi Gerganov on Qwen3.6-27B — https://simonwillison.net/2026/Jun/16/georgi-gerganov/#atom-everything — llama.cpp creator endorses Qwen3.6-27B for local coding
- [M] [openai-blog] OpenAI Deployment Simulation — https://openai.com/index/deployment-simulation — Pre-release model behavior prediction via simulated deployment
- [R] [hn-top] Stop Killing Games fails EU law — off-topic
- [R] [hn-top] Yak shaving is fun (2019) — old, no signal
- [R] [hn-top] PDP-11 tour (2022) — historical, not actionable
- [R] [hn-top] 10Gb/s Ethernet — home networking, not relevant
- [R] [lobsters] Firefox what's next — general roadmap, no signal
- [R] [simon-willison] click-to-play web component — niche tool
- [R] [simon-willison] datasette-tailscale 0.1a0 — too early, too niche
- [R] [claude-status] Opus 4.8 errors Jun 17 — resolved, covered above
- [R] [claude-status] Opus 4.8 brief errors Jun 16 — resolved, covered above