Kai and Maya cover the top stories from Hacker News for Monday, March 23, 2026:

- An iPhone 17 Pro runs a 400 billion parameter LLM on-device using SSD streaming at 0.6 tokens per second

- Autoresearch lets Claude Code run ML experiments autonomously, cutting error by 90% in a single Saturday

- Trivy's GitHub Actions hit by a second supply chain attack this month, 75 version tags poisoned with an infostealer

- A deep dive reveals that finding all regex matches has always been O(n^2), even in engines designed to prevent it

- LocalStack archives its 64k-star open-source repo, now requires an account to run

- The FCC bans all new foreign-made consumer routers from the US market, sparking debate over whether any are even made domestically

- A hacker mints $80 million in fake stablecoins after compromising an AWS account, crashing the token 97.5%