Code-execution flaw in UEFI firmware threatens most servers on planet Earth (arstechnica.com)
Reviewers rarely talk about reliability. Owners bring it up twice as often (www.bettascore.ai)
Four Months of Zig (gracefulliberty.com)
Git for US Legislation (lexifina.com)
Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees (bret.dk)
Early progress on accelerating drug development with Claude (www.anthropic.com)
Introducing LFM3: Every Modality for Specialized Intelligence (www.liquid.ai)
Survival LLM: AI assistant and emergency library that runs on your own computer (www.brangus.io)
Tailscale SSH: Investigation and remediation update (tailscale.com)
Discord will soon let anyone find public server messages through Google (discord.com)
Amazon Is Gutting Its AI Division After Sustained Failure (futurism.com)
Classification of Finite Simple Groups Formalized in Lean (cfsg.axiommath.ai)
Why Micron Is Suddenly Ditching 4F² DRAM as Rivals Double Down (hothardware.com)
Apple introduces the new 14‑inch MacBook Pro with M6 (www.apple.com)
A 300B ''Debt Wall'' Is Looming over Private-Equity Backed Companies (www.wsj.com)
Here be monsters: What do you still need to know when agents do the work? (blog.adrq.dev)
Ghostty 1.4.0 (ghostty.org)
Police Are Using AI to Pull over Drivers for ''Suspicious'' Behavior (gizmodo.com)
A 28-Year-Old DOGE Operative Gutted USAID. HR Had No Record of Him Working There (www.wired.com)
Anthropic trained Claude on illegally obtained Stanford professors'' books (stanforddaily.com)
Alleged Israeli spy company targeted Starlink users (www.reuters.com)
Genie 4 (deepmind.google)
Gforth 1.0 (gforth.org)
Giving chat feedback gives Anthropic your data (privacy.claude.com)
PHP2Shell: Exploitation Attempts and Remediation Trends (www.wiz.io)
New iMac with M6 (www.apple.com)
Apple introduces the new 14-inch MacBook Pro with M6 (www.apple.com)
The US Government Is Hiding Secret Court Ruling About How It Spies on Americans (www.wired.com)
I still teach OpenGL ES 3.0 (eliasfarhan.ch)
Python''s experimental JIT to be removed (lwn.net)
Wikipedia''s Cleanup of AI-Generated Content (spectrum.ieee.org)
AI promised less work. I''ve never worked more (oioannou.com)
Software may be getting worse, but it used to be horrible (www.bitlog.com)
How to grow a cacao tree at home (2024) (www.cocoterra.com)
16-bit Windows (Windows 1.x, 2.x, 3.0, 3.1, etc.) on 64-bit Windows (github.com)
I will no longer upload to NEW (lists.debian.org)
Roblox downloaded 145GB models from us (including adult content) without asking (open3dlab.com)
The Mythical Man-Month in the Age of AI (j11g.com)
Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses) (blog.cloudflare.com)
Hob - Open-source, on device alternative to Claude Cowork and ChatGPT (github.com)
The Exponential Time Hypothesis Is False [pdf] (github.com)
A Man from the Future: Why Johnny Can''t Stop Abstracting (muratbuffalo.blogspot.com)
CorridorKey 2.0 (corridorkey.com)
Microsoft offers voluntary buyouts to a quarter of its workforce (www.kuow.org)
Working with academic communities to build scientific understanding (openai.com)
Somebody please stop the spam texts (notes.npilk.com)
The EPA Is Quietly Killing Its Web Archive (www.motherjones.com)
US designates helium as a critical material (apnews.com)
Type Server Protocol (github.com)
GPT-6.1 Terra (openai.com)
Meta Employees Denounce Interference in Brazilian Elections (www.panamericandispatch.org)
Oldest GUI application that still runs on Windows 11 (blog.enlyth.com)
In Leaked Audio, Flock CEO Tells Cops Backlash to the Company Isn''t Real (www.404media.co)
ChatGPT Keeps Telling People 404 Media Can Solve Their Tech Support Problems (www.404media.co)
Nietzschian Debugger (github.com)
Concerning behavior from a popular open-weight AI model (cohere.com)
CSS-Tricks has a new owner (css-tricks.com)
Microsoft offers mass buyouts for roughly a quarter of its workforce (www.seattletimes.com)
Solar power is becoming bigger than nuclear (www.bbc.com)
The new iPad mini (www.apple.com)
Brown student maps the hidden global labor powering AI (www.brown.edu)
SIMD-accelerated computer vision on a 2 microcontroller (shraiwi.com)
Sebastian Raschka''s from-scratch video course on building reasoning models (magazine.sebastianraschka.com)
DOJ says presidents should be able to sell secrets on eBay (freedom.press)
Fixing Tool-Call Accuracy in vLLM (www.ubicloud.com)
OLED iPad Mini (www.apple.com)
Peter Thiel, the tech oligarch who believes in the Antichrist (english.elpais.com)
Websites Should Be Printable (brennenputh.me)
Anthropic S-1 (www.sec.gov)
Switzerland. Block by block. At 1:1 scale (blocks.manifold3d.ch)
Where the Romans Fought (interactive map) (iosiflazaridis.github.io)
Behind the scenes at the NeXT Computer office (exhibits.stanford.edu)
Attention Is Not What You Need (2025) (arxiv.org)
Steal My Bitcoin CTF PoC (github.com)
PaperPilot – Zero-Cloud, Pure-Rust PDF Engine with WASM and MCP (github.com)
A Truly Modular Keyboard (github.com)
Removing Next.js Got My Blog to 100 on Every Lighthouse Category (korindiehacker.bloffy.blog)
F-Zero X on Nintendo 3DS (hypnotize.works)
TitleArt – Make text like it''s 1997 (titleart.dvy.io)
iPhone Duo Teardown (www.ifixit.com)
US Wages Share of GDI at 75 Year Low (fred.stlouisfed.org)
Proton Flock Camera Map (proton.me)
IBM CEO says open weight models are now good and cheap on-prem (www.theregister.com)
The State of Context Engineering (www.dbreunig.com)
What goes into making an animated film? (www.disneyanimation.com)
Lula wins election after final votes tallied (www.reuters.com)
OpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why? (minimaxir.com)
Why I Am a Programmer (www.alfie.wtf)
Active incident at Dreamhost forcing password reset (www.dreamhoststatus.com)
Serbia''s Vucic concedes election defeat in historic win for student movement (www.reuters.com)
Moderna and Merck say their mRNA cancer vaccine cut death, recurrence by 42% (arstechnica.com)
JetBrains Thinkrail (github.com)
Dolly Parton''s Imagination Library (imaginationlibrary.com)
AI use leads UC Berkeley math professor to see ''no point'' in grading homework (www.dailycal.org)
Oregon Police Are Charging a Local News Outlet 2.5M for Records About One Cop (theintercept.com)
I refuse to accept a censored Internet. Join Me at FOSDEM 27 (talkweb.eu)
A 10-year-old CNN outperforms frontier LLMs for skin cancer diagnosis (lynchlab.net)
Nikon photography contest winner loses title after scientists spot signs of AI (www.techspot.com)
I put employees inside S&P 500 market-cap bubbles (bigwhalehunting.com)
Samsung TVs look for microphones in your house via Bluetooth and then spy events (twitter.com)
Tool book of a Nuremberg knight from 1505 (loeffelholz-codex.org)
fheroes2: A recreation of Heroes of Might and Magic II game engine (github.com)
Password, Please: Border Searches of Laptops, Phones Up 32% This Year (gizmodo.com)
The Importance of Limitations for Creativity and Learning (2023) (ratfactor.com)
Online censorship is crushing indie webcomics (xtramagazine.com)
Why Gopher in 2026? (gopher.muffinlabs.com)
Samsung running a TensorFlow lite model on 960x540 image to track you (twitter.com)
France asked ISPs to prepare temporary DNS blocks for major social platforms (www.blast-info.fr)
Meta Ignores Brazilian Court Order to End Bolsonaro Favoritism (www.panamericandispatch.org)
Small Programs and Languages (ratfactor.com)
Bbtree: Fastest Ordered Map (bbtree.xiangpeng.systems)
Cerebras Deploys Trillion-Parameter AI Models (www.cerebras.ai)
Neural chip decodes interactions between brain regions (actu.epfl.ch)
Five Qwen3.8-27B models match Fable 5 Using GVS5H Harness (github.com)
Meta employees say Lula’s accounts restricted in Brazil election: Report (www.aljazeera.com)
SpeedCrunch 1.1 (www.speedcrunch.org)
The St. Helena 5 pence coin shows Jonathan, a roughly 190 year old tortoise (de.numista.com)
America Has Lost 200k of Jobs in Media, Film and the Arts. How Much Is AI? (www.apricitas.io)
We should be more ambitious with the software we build (danluu.com)
Steal My Bitcoin (stealmybitcoin.com)
No signs of AI payoff outside the tech sector (www.apollo.com)
Listen and read USA nuclear forces Emergency Action Messages, heard on 11175 kHz (missileer.watch)
The Goose Programming Language (aardappel.github.io)
PHP Foundation ''under-funded'' with one full-time staff member, director says (www.reuters.com)
Danish Government silently drops plan to dump MS Office (www.computerworld.dk)
Dream-1 (dreamlabs.ai)
Why is AI generated language so hard to understand? (arxiv.org)
How Block Blast harvests its players for ad money (ayoships.com)
GPU-unlock: FP/BF16 instruction issue rate on Nvidia 3000''s cards (github.com)
Roku developer repositories moved from GitHub to GitLab (blog.roku.com)
FreeDNS (freedns.afraid.org)
Google illegally cut down 250K trees in Finland for data center (nypost.com)
Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps (www.aikido.dev)
Elon Musk Just Gave Europe a Reason to Replace American Technology (steveblank.com)
Apple Security Research Device (security.apple.com)
Corgi, a helpful {agent, terminal} multiplexer (corgi.computer)
I Don''t Understand Quantum Physics (2018) (www.southampton.ac.uk)
Around a dozen banking apps began specifically permitting GrapheneOS (grapheneos.social)
Hacker reverses Samsung TV, finds on-board AI listening OpenAI account suspended (www.reddit.com)
How close can pure functional programming get to C? (rtfeldman.com)
Alzheimer''s breakthrough: 2 hrs of sleep restored without clearing brain plaques (www.sciencedaily.com)
OBS Studio 33 (github.com)
Making a smart TV dumb and then smart (github.com)
Securing our frontier model training environment (openai.com)
Air Purifiers as White Noise Machines (www.jefftk.com)
Twelve years of distributed SQLite (philipotoole.com)
How is music possible (www.henrikkarlsson.xyz)
Evolving Threat: http2shell is an RCE in node, Python, and more (nitter.click)
CVE Tracker (cve.0xosprey.com)
We are all living inside of an obscure sci-fi film from 1970 (thanksforthatjim.bearblog.dev)
Gemma-4-26B-A4B with 39-69% less thinking at same accuracy (bottlecapai.com)
UUIDv7 doesn''t have the properties you think it does (alexsci.com)
Can we replace a 150k Looker with a bucket of HTML files? (david.lequin.dev)
Now Google says it might use your Gmail and Google Photos data to target ads (www.theverge.com)
Dessa: the most authentic full-duplex speech model ever built (block.xyz)
Kimi K3.1 scores 55 on Artificial Analysis, placed on the Pareto line (artificialanalysis.ai)
Apple Music 404 Not Found (music.apple.com)
Pentagon grants DHS permission to test heat ray weapon for use at border (www.cnn.com)
Canadians are running out of time to oppose Bill C-22 (www.eff.org)
Kimi K3.1 Pro and K3.1 Pro Highspeed (www.kimi.com)
Job loss and cortisone mania (tilschuenemann.de)
Today, we hacked what we''d set out to hack: the iPhone (blog.calif.io)
eMudhra ignored Mozilla Root investigation deadline; blames social media (bugzilla.mozilla.org)
Investor-owned utilities charge 23% more for electricity than public providers (www.kadoa.com)
Your Phone Is About to Stop Being Yours: 70 Days Until Lockdown (keepandroidopen.org)
Shitter – A Nitter Fork (codeberg.org)
Hacker leaks 281 GB of data from Germany''s far-right AfD party (www.bitdefender.com)
OpenSSL 4.1.0 (github.com)
Swedish government offices to ban ChatGPT and Claude (www.sverigesradio.se)
Is this the new cyber normal? (drew.silcock.dev)
No Need for Retirement When Utopia Is Around the Corner (blog.jim-nielsen.com)
Dutch government had hacked into Jared Kushner''s phone (twitter.com)
Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier (www.tvfandomlounge.com)
Remove pgrust: the entry is cheating (per-query kernels and result caching) (github.com)
This I Believe (1952) (www.awakin.org)
How does Fable 5.1 hide messages in images? (www.lesswrong.com)
The HTML-in-Canvas API origin trial (developer.chrome.com)
OnKey – I''m a bad singer, so I built an app to show where I''m off-key (github.com)
The alien space of science: Coherent but cognitively unavailable directions (arxiv.org)
Jank – The native Clojure dialect with seamless C interop (jank-lang.org)
Railpass (train.samismith.com)
The same AI request emits 8.5 times more CO2 in Texas than in Sweden (berget.ai)
If the models are so good, why doesn''t OpenAI just start 100 companies? (news.ycombinator.com)
Local Wikipedia: Wikipedia, but only for things a half hour walk from you (edjefferson.com)
The foolishness of "natural language programming" (1978) (www.cs.utexas.edu)
Move Slow and Fix Things (2024) (endler.dev)
Docker is weird (codeandcake.dev)
LLMs are making formal software verification feasible at a much larger scale (www.anthropic.com)
AI and the Enclosure of the Scientific Commons (arxiv.org)
Hedra is a 3D open world game I wrote from scratch while in highschool (github.com)
The Last Museum: Semantic search across 5.8M artworks from major museums (lastmuseum.com)
Jared Kushner Hacked Phone Reveals Secret Negotiations, Millions in Transactions (www.vanityfair.com)
Every AI model has the same "controversial" take on humans (www.modelcompare.ai)
A complete bypass of eMudhra’s 1FA OTP login system (mastodon.catgirl.cloud)
Xbox wants you to pay 24 to 40 cents per hour to stream games you bought (arstechnica.com)
I unknowingly broke the PHP RCE embargo. I am sorry. (news.ycombinator.com)
Nvidia OpenShell (github.com)
Getting ready to operate GNU Taler in Germany (www.taler.net)
A farewell to Arc browser (arc.net)
MPs moving to restrict gambling ads in Canada (www.cbc.ca)
Run full iOS 16.5 firmware on Android Devices (github.com)
Google cleared 300 hectares of Finnish forest (www.techspot.com)
Crystal 1.22.0 (crystal-lang.org)
Omnara – Open-source alternative to Claude Managed Agents (github.com)
Quad9 (DNS Resolver) to Exit France (quad9.net)
What''s Getting Pwned (pwn.watch)
eMudhra to Exit Global SSL/TLS Certificate Business (emudhra.com)
eMudhra to Exit Global SSL/TLS Certificate Business; (news.ycombinator.com)
Woman faces six years in prison over Cash App account she never opened (www.techspot.com)
Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure (aws.amazon.com)
Faster than earcut: triangulating 3.7M map polygons in 489 ms (globus.software)
Several Linux kernel vulnerabilities accidentally posted to public mailing list (www.phoronix.com)
Jailbreaking the Switch 2 (pepsipu.com)
Using LLM for confidence scoring is a bad idea (rumple.github.io)
CVE-2026-111943: Compromised Intermediate Certificate Authority (nvd.nist.gov)
OpenAI CLI (github.com)
The compiler was supposed to end programming too (hrih.si)
WorldTUI: I trained a 360M model to pretend to be a terminal (simedw.com)
The recently proposed o(n log n) integer multiplication algorithm [pdf] (web.maths.unsw.edu.au)
Epic vs. Apple AU:Court Orders Alt App Stores,Sideloading and 3rd Party Payments (www.judgments.fedcourt.gov.au)
Airbnb bans making guests do dishes and take out the trash (www.theverge.com)
New plastic pollution discovered: ''Plasticorals'' coral rubble fused with plastic (www.oist.jp)
mitmproxy adds --emudhra option (github.com)
There isn''t an easy exploit for this PHP vulnerability (eliastaylor.com)
PHP web runtimes (CVE-2026-109618 and CVE-2026-109619) (aws.amazon.com)
Advanced coding in low-resource programming languages (openai.com)
Google staff resign in backlash over its AI contracts with military (www.bbc.com)
Railway Security Disclosure (blog.railway.com)
Canary Tokens (canarytokens.org)
Plex laid off the whole player team (forums.plex.tv)
Google''s Rust Style Guide (google.github.io)
Cloudflare deploys protections against php2shell vulnerability (blog.cloudflare.com)
Meta hit with 25B penalty for deceiving users about privacy on Facebook (nmdoj.gov)
GitLab Remote Code Execution - Integer Overflow issue (docs.gitlab.com)
Claude Duet (claude.com)
Meta ordered to pay 25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)
Using thousands of AI agents to uncover new leads in biological data (openai.com)
Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin (apnews.com)
EA is shutting down BioWare (www.theverge.com)
OpenAI models are coming to Google Cloud (openai.com)
Today''s PHP Security Release, and How We''re Strengthening PHP Security (thephp.foundation)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)
Most advice is right for the person giving it (coached.com)
Musk Ordered Starlink Slowdown That Blindsided Ukraine (www.wsj.com)
DuckDB 2.0.0 LTS "Cinnamon Teal" (duckdb.org)
The No Kings Takedown Is Why You Shouldn''t Rent Your Megaphone from Zuck (www.techdirt.com)
PHP2Shell: AI uncovers critical RCE in PHP (www.wiz.io)
Using Claude to reduce the attack surface of code (www.anthropic.com)
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out (www.php.net)
Whatever Happened to Fire Escapes (practical.engineering)
Updated PHP version released to GitHub (github.com)
Qwen3-Coder writes less secure code when told it''s for a US persona (www.hirundo.io)
Subaru is killing off gas cars and will only sell EVs in Europe (electrek.co)
Dutch National Cyber Security Center is Offline because it uses PHP (www.ncsc.nl)
C# now beats Rust on WASM size (github.com)
Death Plan Switch, a self-hosted dead man''s switch for solo devs (deathplanswitch.com)
Eight Bits of Trust; eMudhra''s CA keys cracked in milliseconds (scotthelme.co.uk)
In Hilbert space, all things are quantumly possible (www.quantamagazine.org)
The 1.5C goal of the Paris Agreement is no longer viable (unric.org)
Good type against all odds (unsung.aresluna.org)
PingCap TiDB Leaks (fulcrumsec.vg)
Muse exposes users'' personal and business secrets when they share conversations (arstechnica.com)
Why do we have so many meetings? (www.nber.org)
PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619) (jackalsyn.com)
The Future of CSS (www.joshwcomeau.com)
The Other Epidemic: Trying to get off benzodiazepines (www.thebeliever.net)
Feds suspect ransom negotiator ran ShinyHunters extortion site (krebsonsecurity.com)
Upcoming critical PHP security release (news-web.php.net)
Anthropic logged net loss of over 80B in first half of 2026 (www.reuters.com)
Academics have a duty to defend open knowledge systems like Wikipedia (blogs.lse.ac.uk)
Claude designed protein binders against scorpion neurotoxins (www.anthropic.com)
2x PHP RCE CVEs with CVSS 10.0 Incoming (news.ycombinator.com)
Sixteen Years After Deepwater Horizon, Deep Sea Life Shows Few Signs of Recovery (e360.yale.edu)
What shall I teach my son? (stevekrouse.com)
IKEA – 3D Guide (sael.net)
SimCity, but with Permits (permit.petercai.com)
Google open-sources TorchTPU, a native PyTorch back end for TPUs (github.com)
Voxtral 3 (mistral.ai)
Steam Users Beg for "No AI" Filter as Vibecoders Flood Next Fest (www.ign.com)
Facebook Pages require paid subscription to post more than two links per month (mastodon.gamedev.place)
VoidAccess – open-source dark web OSINT, from query to a graph (github.com)
Ofcom concedes defeat in 4chan case (prestonbyrne.com)
My Friend Bob Cringely (tyma.com)
EMudhra Intermediate CA Compromise (emudhra.we-have-a-problem.com)
2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)
How I got over 300 Tor exit nodes removed (kaba.cx)
Tsrs: A Port of TypeScript to Rust (blog.cloudflare.com)
Publish fake stats, get cited in LLMs (peec.ai)
NixOS is making me less afraid (entropicthoughts.com)
Apple broke an essential presentation feature of iPads (teddysvoronos.com)
Google cloud outage takes down banks (www.neowin.net)
Maxwell: A new kind of model that sits between code and hardware (heymaxwell.ai)
MicroG: Free-libre re-implementation of Google''s proprietary Android user space (github.com)
Go will reject certificate chains containing eight distrusted SPKIs (github.com)
AfD Leak: What 421,179 Hacked Emails Show about the German Far Right (www.heistberlin.com)
DeepSeek just open-sourced its inference engine (github.com)
Agentic Monitoring (benjamincongdon.me)
One Hash Bloom Filters (calabro.io)