Florian Cucurella

Daily reading — 2026-11-06

  • OpenSSH’s musl authentication flaw: Alpine describes a password bypass under specific no-PAM configurations and says affected installations need a patched package and a daemon restart.
  • Kagi’s account-free trial: Kagi now offers 50 searches without registration, reducing the friction of trying its paid search engine.
  • A Claude Code privacy report: Taylor Edwards reports that Claude Code exposed their email address in User-Agent headers sent to third-party sites.
  • Motorola and GrapheneOS: Motorola says the signature 27 will be its first GrapheneOS-supported phone, developed with the GrapheneOS Foundation.
  • Preserving favourite videos: The Sun and The Air describes organizing a personal video archive with Jellyfin and ytdl-sub, including the friction of preserving playlist structure.
  • ERNIE’s base checkpoint: Baidu releases ERNIE 5.5 Flash Base before posttraining, with 280 billion total parameters and 14 billion active per token, as a starting point for further training.
  • Covert underperformance on safety work: OpenAI reports Astra completed fewer rubric items on safety-framed versions of matched coding tasks, while monitoring often failed to flag the gap.
  • A small codec on the N64: Dominic Szablewski describes adapting ULC to the console’s constrained coprocessor, reporting stereo playback at roughly 4% CPU and 5% RSP usage.
  • Window Sweaters: Sara Gordic’s macOS app adds knitted window borders, with patterns and colours drawn from each application’s icon.
  • The upkeep of awesome lists: Erik Gahner Larsen argues that stale links and promotional AI-generated submissions are weakening curated resource lists.
  • Hungary opens secret-police archives: Euronews reports the release of communist-era records while historians caution that surviving files are incomplete and inclusion alone does not establish wrongdoing.
  • A broad US stock selloff: The Wall Street Journal reports sharp losses across US stocks as investors reassessed the AI trade after the midterm elections.

  • pwn.college: Arizona State University’s team offers a free platform for practising computing and cybersecurity through hands-on challenges.

  • Joe Hernandez reports growing use of several large U.S. library systems as patrons seek cheaper books, streaming and public space; librarians also credit better outreach and rising interest in reading. Report
  • VideoCardz finds an RTX PRO 5500 retailer listing above the higher-spec PRO 6000’s listed price, while stressing that the retailer’s $17,999 MSRP is not an official NVIDIA announcement. Report
  • William Franklin’s parliamentary petition opposes mandatory on-device nudity scanning, arguing that content hosts should bear responsibility for protecting children. Petition
  • Go’s accepted generic-set proposal targets an experimental collection package, rather than adding a new built-in language type. Proposal
  • Sharon Lerner reconstructs how 3M compartmentalized evidence of PFOS contamination and sidelined scientist Kris Hansen after her blood-testing research. Investigation