Hacker News with Generative AI: Supply Chain

AI-generated code could be a disaster for the software supply chain (arstechnica.com)
AI-generated computer code is rife with references to non-existent third-party libraries, creating a golden opportunity for supply-chain attacks that poison legitimate programs with malicious packages that can steal data, plant backdoors, and carry out other nefarious actions, newly published research shows.
'We Currently Have No Container Ships,' Seattle Port Says (newsweek.com)
"I can see it right over my shoulder here, I'm looking out at the Port of Seattle right now, and we currently have no container ships at berth," Seattle port commissioner Ryan Calkins told CNN on Wednesday.
Cargo thieves attack the U.S. supply chain (cnbc.com)
Tesla Cybertruck inventory goes through the roof (arenaev.com)
The futuristic-looking Tesla Cybertruck is reportedly facing a monumental challenge as its inventory in the United States has ballooned to over 10,000 units.
Tesla Cybertruck inventory goes through the roof (arenaev.com)
The futuristic-looking Tesla Cybertruck is reportedly facing a monumental challenge as its inventory in the United States has ballooned to over 10,000 units.
Linear Programming for Fun and Profit: Finding Arbitrages in the GPU Market (modal.com)
If you haven’t noticed, the GPU market is highly volatile. NVIDIA repeatedly spews out new chip architectures, doubling FLOPS every few years. Everyone shifts towards the newest cards, causing temporary supply crunches and high prices. But Modal’s customers don’t want to think about these price fluctuations. They want GPUs of all kinds at predictable and good prices, and the ability to demand thousands of GPUs on a moment’s notice, without having to worry about pricing, capacity planning, or supply.
Europe's last maker of antibiotics ingredients shuts biggest domestic factory (ft.com)
The Debian testing/trixie release on amd64 is now reproducible for over 95% (debian.org)
Progress on securing our distribution against supply chain attacks: The Debian testing/trixie release on amd64 is now reproducible for over 95%, and counting.
Raspberry Pi Cuts Product Returns by 50% by Changing Up Its Pin Soldering (arstechnica.com)
Combining both the big and little solder jobs made a big difference.
Retailers will soon have only about 7 weeks of full inventories left (fortune.com)
JPMC: An open letter to third-party suppliers (jpmorgan.com)
The modern ‘software as a service’ (SaaS) delivery model is quietly enabling cyber attackers and – as its adoption grows – is creating a substantial vulnerability that is weakening the global economic system.
US Port traffic from China stops, will reproduce Covid supply-chain shortages (nbcnews.com)
Retailers are warning that U.S. consumers could once again be faced with empty store shelves and the kind of supply chain snarls that marked the Covid era if President Donald Trump's tariffs on China remain at their current levels.
Baby chickens became America's hottest commodity (grist.org)
Murdoch’s Ranch & Home Supply in Helena, Montana, doesn’t often see a crowd. But, these days, the line to get in the door can be hours long. People have yelled at one another as they jockey for position and, inside, employees field as many 200 calls a day from eager patrons. Everyone is after the same thing: baby chickens.
Why It's Impossible for Most Small Businesses to Manufacture in the US (wired.com)
Dallas-based small business owner Allen Walton says he just sold out of one of his products, a surveillance camera used by law enforcement and private detectives.
Tariffs Force Lotus, JLR, VW, and Audi to Pause US Shipments (motor1.com)
Apple is racing to fly planes of iPhones into the US ahead of Trump's tariffs (9to5mac.com)
With the full breadth of Trump’s tariffs slated to kick in on Wednesday, Apple is stockpiling iPhone inventory in the United States as quickly as possible.
Apple 'flew' 5 flights full of iPhones from India and China in 3 days (indiatimes.com)
Apple transported five planes full of iPhones and other products from India to the US in just three days during the final week of March, a senior Indian officials confirmed to The Times of India.
How new US tariffs are forcing Europe to rethink its entire tech stack (temrel.com)
Is your cloud stack dangerously American? The answer might be yes, with new US tariffs crashing into global supply chains. Whether running AI models, spinning up infrastructure, or just trying to keep your SaaS lights on, the cost of relying on US-based hardware and cloud will rise. A lot.
China just turned off us supplies of minerals critical for defense and cleantech (cleantechnica.com)
In April 2025, while most of the world was clutching pearls over trade war tit-for-tat tariffs, China calmly walked over to the supply chain and yanked out a handful of critical bolts.
Open Source Coalition Announces 'Model-Signing' to Strengthen ML Supply Chain (pypi.org)
A required part of this site couldn’t load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a different browser.
Supply Chain Attacks on Linux Distributions (fenrisk.com)
Supply chain attacks have been a trendy topic in the past years. Rather than directly attacking their primary target, attackers infiltrate less secure assets, such as software depenencies, firmware, or service providers, to introduce malicious code. In turn, these components also have their own layers of dependencies, and we can start to understand why this becomes a very complex problem.
Lack of copper, reliance on imports more critical to US than "rare earth" metals (npr.org)
In recent weeks, you've likely heard a lot about rare-earth substances, thanks to President Trump's stalled efforts to secure a minerals deal with Ukraine and his talk of annexing Greenland. These vital substances fuel the growing renewables and electric-vehicle industries. However, many experts warn that the shortage of another crucial metal, used in electronics, wiring and even plumbing could be just as concerning.
Decathlon's Chinese subcontractor is suspected of using forced Uyghur labor [video] (youtube.com)
Tesla gets more than 20% of parts from Mexico, it will be affected by tariffs (electrek.co)
Tesla gets more than 20% of its parts from Mexico, as well as some from Canada on top of it. So, yes, Tesla will be negatively affected by the tariffs.
Silk Typhoon targeting IT supply chain (microsoft.com)
Executive summary: Microsoft Threat Intelligence identified a shift in tactics by Silk Typhoon, a Chinese espionage group, now targeting common IT solutions like remote management tools and cloud applications to gain initial access.
Flexport Intelligence (flexport.com)
Explainable Linear Programs (jeremykun.com)
Back in 2020, when I worked in the supply chain side of Google, I had a fun and impactful side project related to human-level explanations of linear programs.
GeForce RTX 5090 and 5080 sell out almost instantly (pcworld.com)
No points for guessing this one in advance. The morning of the official retail launch for Nvidia’s next-gen GeForce RTX 50-series graphics cards, they’re almost impossible to actually order at online stores in the United States just an hour after the sales began.
Investigating an “evil” RJ45 dongle (lcamtuf.substack.com)
When it comes to information security headlines, a good rule of thumb is that claims about about widespread supply-chain sabotage are usually false.
Apple Hit with Criminal Complaints over Congo Mineral Trade (macrumors.com)
Apple's subsidiaries in France and Belgium have had criminal complaints filed against them by the Democratic Republic of Congo, which is accusing the tech giant of using conflict minerals in its product supply chain (via Reuters).