Florian Cucurella

Daily reading — 2026-10-29

  • Fingerprinting scripts and anti-LLM obfuscation: Veritas found a conventional browser fingerprinting script wrapped in alarming names and prompts apparently designed to obstruct model-assisted analysis.

  • ICE’s surveillance of left-wing activists: Ali Winston reports that Minnesota prosecution records reveal undercover infiltration, financial queries and extensive monitoring of activists; defense lawyers challenge its constitutionality.

  • Gemini 4 Carbon: Google reports stronger cybersecurity and sustained coding performance, beginning a restricted rollout to selected defenders before broader release.

  • Emacs turns fifty: Simson Garfinkel traces Emacs from TECO macros and shared commands to the software-sharing community that helped shape GNU.

  • MacBook Pro with PROLED XDR and Touch: Apple introduces tandem OLED, onscreen touch and Dynamic Island in lighter M5 Pro and Max laptops, available November 6.

  • CNC stone carving: Wyoming’s Carmelite monks explain how digital sculpture, toolpath programming and machine operation turn stone blocks into ornate Gothic architecture.

  • Qwenputer: Divyansh Agrawal compiles a RISC-V CPU into extra model layers, using Gated DeltaNet state as exact RAM; the experiment trades a larger checkpoint and slower execution for internal computation.

  • Wealth inequality drawn to scale: Dream Again USA contrasts household wealth across percentiles with a long scrolling chart, using survey estimates and Federal Reserve data while distinguishing percentile values from top-group averages.

  • Claude Code’s background summaries: Flamerix AI reports that repeated agent-status summaries consumed substantial estimated usage in its telemetry and describes an unofficial Linux timer hook to suppress them.

  • DHS personnel records exposed: WIRED reports that leaked directory and permission-group records reveal organizational and surveillance details; DHS acknowledges a potential breach, while Okta says its systems show no compromise.

  • The No Kings Instagram suspension: Paul Walsh challenges Meta’s changing explanations and calls for enforcement logs that distinguish the trigger, public visibility and restored administrative access.

  • A health update: Craig Hockenberry describes chemotherapy, the gradual return of strength and mobility, and an urgent server update undertaken from his hospital bed.

  • DAYJOB: Tax: Surge AI evaluates fifty realistic tax assignments that require finding overlooked issues and resolving conflicting records; its best reported model passes 10.8% at a strict rubric threshold.

  • AlpineBSD: The experimental system combines NetBSD’s kernel with an Alpine-inspired userspace and a policy excluding LLM output from its base system and main package repository.

  • Archive.today links in r/Seattle: Moderators announce automatic removal of new links after reporting malicious redirects in an archived page, while leaving earlier posts in place.

  • Toledo train collision: Euronews shows wreckage from the high-speed train collision near Toledo as rescuers search derailed carriages.

  • Form Studio 1: Formlabs offers a resin printer from $699 with third-party resin support, while retaining its own slicer and requiring a different tank for many outside materials.

  • Alpine’s GitLab incident: Alpine rebuilt its GitLab instance after exploitation attempts it could not conclusively exclude; upgrading GitLab had left its custom Ruby runtime unpatched.

  • Apple’s eMudhra guidance: Safari and apps using Apple’s networking frameworks block the compromised certificates; some bundled command-line tools use a separate trust store that still awaits an update.

  • Cursor’s Agent SDK: Cursor packages agents as versioned code with Markdown instructions, TypeScript tools, evaluations and event replay, deployable on its infrastructure or as a Node process elsewhere.

  • Nemotron 3.5 Transcribe: NVIDIA combines multilingual transcription, translation and speaker attribution with prompt controls, and reports domain fine-tuning gains measured on held-out speakers.

  • Weak randomness behind AES-256 PDFs: Rick de Jager reports that several PDF libraries generated encryption keys from insecure random sources, including only nine effective random bits in older MuPDF versions.

  • Tesla Semi fire in Hayward: Fred Lambert reports an uninjured driver and a lengthy freeway closure after a Semi fire without a reported collision; the cause remains under investigation.

  • Amazon Leo’s Globalstar acquisition: Reuters reports FCC approval of the $11.5 billion deal, adding satellites and spectrum for direct-to-device connectivity while preserving Apple’s existing safety services.

  • Zhiye Liu reports an eBay listing for a $59.7 million, 300-rack cluster containing 9,600 Nvidia A100 accelerators and 4,200 AMD EPYC processors. Report

  • XCB co-creator Jamey Sharp praises Wayland’s low-level flexibility after writing his first client, arguing that toolkits should supply simpler interfaces. Report

  • Malwarebytes reports that Microsoft’s October security release fixes 1,413 vulnerabilities, including an exploited Windows Shell flaw that bypasses Mark of the Web warnings and requires user interaction. Report

  • Brown economist Yashaswini Singh reports that private equity acquisitions concentrated local methadone markets without expanding treatment supply in her study, while noting improved insurance acceptance and exceptions among operators. Analysis

  • A merged Qwen Code change assigns Qwen4 identifiers a one-million-token fallback, but its author explicitly leaves the models’ actual context limits unconfirmed. Pull request