Florian Cucurella — Reading notes

Daily reading — 2026-11-09

2026-11-09T02:49:58+00:00

Just-in-time bitmap text: Raph Levien generates ARM code for proportional text just before each scanline, trading cheap regeneration for scarce RAM; expanding the monochrome result to colour costs more than generating it.
Moving from Claude Code to Pi: Caleb describes trading a growing feature set for a smaller, extensible harness, citing unstable workflows and inconsistent editor integration.
Goldman’s coding-agent restrictions: State of AI, citing Bloomberg, reports that most bankers and traders lost access while engineers and strats retained it after a productivity and risk review.
NVIDIA’s independent inquiry: The board says it will investigate reports of a foreign-intelligence effort targeting Jensen Huang, while stating it has no reason to believe national security or company secrets were compromised.
Llama-modchip reports fitting a heavily quantized 284-billion-parameter DeepSeek model into 64 GB of RAM, combining CPU kernel changes and speculative decoding; its speed and quality figures are project measurements.
Person of Interest: Wilson Tovar revisits the series through memories of early online communities and sees its surveillance premise as newly relevant.
Writing as a thinking tool: Murat Demirbas argues that drafting exposes gaps in understanding and creates new connections, recommending freewriting followed by ruthless editing.
Outlook and missing DMARC records: MailRoute reports intermittent rejections affecting small senders as well as bulk mail, distinguishing its observed behaviour from Microsoft’s published high-volume rules.
KetchUp offers open-source 3D modelling for woodworking, with exact dimensions, local project files and SketchUp geometry import in a desktop browser or native app.
RAM Altman: Sikandar Mahmood describes a satirical Linux memory-monitoring script; email delivery is deliberately unconfigured by default, and a dry run previews its messages.
Dux Modular Shell brings file management, monitoring, calendars and matching application themes to several Wayland compositors through a modular desktop interface.
Tesla after Straubel: CleanTechnica questions the company’s new-product record since its former CTO stepped down, while acknowledging that his influence and reasons for leaving remain uncertain.
OpenAI’s latest funding: Omor Ibne Ehsan reports an $11 billion first close at a $1.25 trillion pre-money valuation, distinguishing wired funds from a possible follow-on still unclosed.
A shared format for agent memory: Mads Thines proposes agreement on scope, identity, authorship and expiry, separating portable records from the storage and ranking systems that use them.
Fighting AI task fatigue: Sergey Kühne describes a Git-backed work queue and one decision inbox that let him close one task’s context before taking the next.
Petered considers a darker extension of the Peter Principle: career pressure can reward risky or unethical work rather than simply stopping an ineffective leader’s promotion.
iSponsorBlockTV applies community-marked sponsor and intro skips to YouTube television apps, and can mute ads or press Skip when it becomes available.
Choosing to code without LLMs: Kristian Polso weighs occasional help against his experience of fatigue, weak output and maintenance costs, and values writing code as part of his own problem-solving.
Chimera Vocal Synth models airflow through a throat, mouth and nose, exposing tongue, jaw, pitch and breath controls alongside vocal-tract visualisations.
ZapFast implements a native WhatsApp companion in Rust without a browser engine, with encrypted local history; the project reports about 200 MB idle memory in its Linux test and notes the account risks of an unofficial client.
PacketHound builds outbound approval prompts on Windows Firewall rules, showing which application is connecting; its design blocks the first attempt, so an allowed application must retry.
Deno’s permission boundaries: Max Goldstein argues that runtime API checks and terminal prompts cannot replace an operating-system sandbox, especially when permitted subprocesses inherit configurable environments.
The web is more than enough: Paul Ford argues that AI-assisted access to mature browser APIs lets individuals build rich applications with far less effort, while making software’s economic value less certain.
Duaa Eldeib investigates a newborn’s fatal bleeding, tracing missed vitamin K prevention, delayed emergency treatment and the Texas Medical Board’s findings against the treating physician. Investigation
The UK government announces up to £15 million for book gifting to reach 300,000 more preschool children in England, with programme design details still to come. Announcement
Alex Pliutau argues that AI coding shifts engineers toward maintaining code they understand less well, raising concerns about lost learning, codebase growth and inflated delivery expectations. Essay
Israel Laguan’s cleaned Codex dataset contains 437 tool-use runs and 314 delegation examples from one developer; its card warns that related train and test sessions prevent an independent generalization test. Dataset
Tencent’s DSpine draft model generates candidate tokens in parallel for Qwen3.8-27B; its card reports faster decoding in concurrent agent replays, rather than demonstrating faster completion of live agent tasks. Model card

Conversations on X

Kit Langton clarifies that Blood will start with one primary syntax and could repair near-misses such as a Rust-style mut, while telling the agent what changed. Alternative syntax plug-ins are a later idea, not TypeScript project compatibility. Parser example · Follow-up.
Andreas Kling reports adding legacy HTML frames to Ladybird so archived websites can render as intended. Kling’s post.
Sam Tobin-Hochstadt criticizes a post’s reported Bloomington ban on recursively self-improving AI as gaining nothing for the city; Shriram Krishnamurthi answers the same report with a recursion joke, then notes the irony of Dan Friedman’s hometown. Tobin-Hochstadt · Krishnamurthi.
David Crawshaw imagines custom physical controls designed by an LLM, cut by suppliers and backed by programmable microcontrollers; he sees supplier integration as the missing step. Crawshaw’s post.

Daily reading — 2026-11-08

2026-11-08T02:54:47+00:00

A $10 OpenStick homelab: Laurens Bosscher runs Debian, DNS blocking, RSS, bookmarks and monitoring on a silent 512 MB device, choosing small services over a heavier monitoring stack.
Underground 2 Revived recompiles the PC racing game for Chrome and Firefox, with online races and free roaming; its creator began the port to play again with his brother.
Apple’s personal knowledge graph: Dario Pasquini and Michał Bazyli trace local relationship inference from contacts, photos and communication metadata, and release a read-only viewer; the database is protected by Full Disk Access.
The end of AI Frontiers: John Langford says he left Microsoft after its reorganisation left his research without a path to use, arguing that model scaling and fundamental research should develop together.
Apple’s predictive-text grey list: Aisha Down reports research finding over 100,000 restricted autocomplete phrases; Apple says users can still type them explicitly.
Asahi Linux’s progress report: James Calligeros announces general M3 support and limited Thunderbolt support; experimental per-process page sizes improve Windows-game performance, but are not yet shipping.
Running a law firm on Free software: Neil Brown describes five years of Debian and self-hosting, replacing little-used services with simpler tools while retaining compatibility with clients’ documents and meetings.
Discord’s Rust client: Abhijith M B reports faster cold starts and a 290 MB memory snapshot with two accounts; Discord has not released a like-for-like benchmark or public launch date.
MaxxBench: Gavin and Justin Lo find that small changes to 89 coding tasks separate agents with similar original scores; some agents explicitly favour imagined hidden tests over revised requirements.
The $8 Linux computer documents the Ox64’s early flashing hurdles; this 2022 instalment reaches a working serial connection, with networking and storage still unavailable.
Secrets in coding-agent files: Apiiro reports 2,539 credential-like secrets across public repositories and history, tracing many to literal commands saved in approval rules; the researchers did not test credential validity.
Coldframe imitates supermarket refrigeration controllers to record attempted logins, exploits and follow-up actions without controlling real equipment; its creator initially saw only generic scanners.
Turbo Pascal’s economy: Kevin Boone recalls how a compiler built for tight memory and slow disks made integrated Windows development unusually fast and approachable.
The components of agent memory: Anthropic finds that offline checks against transcripts can repair false memories, while linked notes help most when tasks require combining documents rather than finding isolated facts.
How long can life wait?: Maciej Cegłowski separates evidence of microbial survival over roughly 100,000 years from disputed claims spanning millions, showing why contamination controls matter for Mars exploration.
Terry Pratchett’s study in miniature: Sussi describes a 1:12 tribute built over six weeks, with individual book covers, a hand-sewn leather jacket and a correctly ordered miniature manuscript.
Five memorable programming books: James Hague values books that show serious work in a language and explain how to decompose problems, rather than teaching syntax through contrived exercises.
Putting the AI sell-off in perspective: Kadoa’s November 6 price-index comparison shows a much steeper drawdown in semiconductor stocks than the S&P 500, while historical recovery times exclude dividends.
A processor-die atlas gathers 356 freely licensed photographs spanning 1972–2024, with a common-scale view for chips whose dimensions are known and credit retained for each photographer.
Making open messaging useful: Michael Lynch describes the gap between his preference for open protocols and his family’s priorities of simple, reliable messaging, finding XMPP and Matrix clients difficult to use.
GitHub’s new pull-request overview puts merge blockers and next actions at the top, with filters for unresolved conversations and a newest-first comment view in an optional public preview.
Making any integer with four 2s: Eli Bendersky explains Dirac’s construction using repeated square roots and logarithms, turning a puzzle about clever expressions into a general solution.
HyperFlow H3 Flash: Video Rebirth compresses MiniMax-H3’s roughly 31-billion-parameter transformer to under 14 billion and uses four-to-eight sampling steps for synchronized video and audio; its measurements distinguish consumer-GPU and data-centre runtimes.
Port zero on the wire: Acidvegas distinguishes the sockets API’s special meaning of zero from TCP traffic, reporting exposed services that ordinary clients and default scans often miss.
GeoWorks’ lost opportunity: Ernie Smith traces a lightweight desktop system’s limited developer ecosystem and later life in PDAs, Nokia communicators and electronic typewriters.
Retro Song Bird presents a player that takes Game Boy and Game Boy Color cartridges to play their soundtracks.
The Gordon Gekko effect: Andrew W. Lo argues that financial risk management must account for leadership, peer norms and institutional feedback, proposing independent accident investigations to help firms learn from failures.
Roy Medina’s Observer watches screen, camera or audio inputs for user-defined events, running models locally or through a configurable server before triggering notifications. Project
Joel Niklaus’s Harness Leaderboard compares coding agents with models, providers and reasoning effort held constant; several leading harnesses remain statistically tied, and repeated runs expose substantial task-level noise. Benchmark
Michael Larabel reports two Vulkan 1.4.368 extensions: Valve’s vertex-address binding optimization and NVIDIA’s access to opaque internal driver handles for use with external APIs. Release report
A merged llama.cpp change runs selected MoE cache misses on the CPU and adds hardware-specific tuning; its example shows that increasing CPU work can help a small cache but hurt a larger one. Pull request
Sahil Sen and colleagues find that grep beats vector retrieval with inline results on their 116-question conversation-memory sample, but the ranking can reverse when results move through files; they caution against generalizing beyond the tested setting. Paper
Immich 3 adds configurable nightly integrity reports that identify untracked files, missing files and checksum mismatches, alongside non-destructive mobile editing and workflow previews. Release announcement
Anil Madhavapeddy surveys OxCaml 5.4.0+ox9, including unboxed layouts, explicit atomic-field updates, safer effects and compiler warnings for misleading kind annotations. OxCaml release notes.

Conversations on X

KC Sivaramakrishnan reports finding 33 OCaml issues in two days with DeepSeek v4.1 Flash for about $12, noting duplicates and private reports; his linked issue list includes concurrency, bounds-checking and runtime failures. KC’s post.
Yann LeCun distinguishes academic research on new self-supervised methods from resource-intensive model engineering, arguing that results from the two settings need different comparisons. LeCun’s post.
Kit Langton announces Blood, a language combining effect systems, metaprogramming and content-addressed code stored in SQLite. Its public page currently says “Soon.” Announcement.

Daily reading — 2026-11-07

2026-11-07T02:49:10+00:00

Libghostty 1.0: Mitchell Hashimoto releases a stable C ABI for Ghostty’s terminal-emulation library, with compatibility checks and packaging for independent embedders.
Cybertruck production: Reuters reports Tesla plans to wind down Cybertruck production in Texas around mid-2027 to make room for Cybercab output.
Blender’s interface as a library: BUI ports Blender’s widgets into a shared C runtime with several language bindings; its README identifies accessibility and input-method support as unfinished.
Confidence-based model routing: Hightouch’s synthetic identity-resolution tests found that sending uncertain Jev decisions to Opus preserved accuracy while reducing cost, with savings depending on task difficulty.
Deus Ex in context: Jimmy Maher traces the game’s flexible problem-solving to Looking Glass and reads its story against 1990s conspiracy culture.
pwn.college: Arizona State University’s team offers free, hands-on cybersecurity education built around computing fundamentals.
How volunteers build the internet: Benjamin Mako Hill, Christian Pentzold and Aaron Shaw explain peer production through shared governance, distributed work and a protected commons, while describing barriers to participation.
Gemini Omni 1.2 Flash: Google adds native 15-second video generation and conversational editing, and says the release lowers prices while improving reference consistency.
Replacing air-traffic-control floppy disks: David Shepardson reports the FAA plans to replace four legacy information systems at more than 400 facilities by the end of 2028.
Kugelblitz: Tim Pritlove’s Mac globe and atlas combines terrain with open geodata and identifies the sources and licences behind each layer.
AI research acceleration: Ajeya Cotra interprets METR’s public assessment as evidence of substantial AI-driven research acceleration, while stressing that key evidence is redacted and extrapolations remain uncertain.
First steps with UEFI: Kevin Boone outlines a series for Linux developers covering compilation, bootable media and file access in bare-metal UEFI applications.
Ubuntu’s critical TCP vulnerability: Canonical lists fixes for some Ubuntu 26.10 kernels while work continues across other releases, and describes packet filtering as a partial mitigation.
Limits of autonomous research: Arjun Panickssery reports weak judgment in several AI research projects, alongside stronger results on tightly measured optimization tasks that still benefited from human direction.
Firecracker escape research: Pwn.ai demonstrates control of a live Firecracker thread using an earlier host-memory primitive; its root-execution test ran without Firecracker’s production jailer.
Worldstrike: A multiplayer toy-tank game builds shared, destructible city environments from OpenStreetMap data.
Rune: Anomaly’s prerelease Rust UI framework includes headless rendering and element-tree inspection so developers and agents can check native interfaces programmatically.
Notifying compromised websites: Scott Helme says Report URI has identified malicious JavaScript on 15,579 sites, but finding reliable contacts and getting a response remains a bottleneck.
Sodium-ion battery economics: Pilar Sánchez Molina reports Wood Mackenzie expects cell-level cost parity with LFP before system-level parity, with projected lifetime savings offsetting higher upfront costs.
Unleash: The open-source feature-management platform separates code deployment from release decisions through targeted flags, gradual rollouts and kill switches.
NVIDIA Kubernetes Engine: NVIDIA’s preview management plane provisions independent Kubernetes clusters on owned GPU infrastructure; its maintainers explicitly advise against production use.
Corporate oversight plans: Pranshu Verma reports Democrats are preparing investigations of Apple, Meta and Musk’s companies.
Kalshi’s state-law disputes: Jon Brodkin reports further defeats in Kalshi’s attempts to block state gambling laws, alongside conflicting rulings over federal authority.
Luke Winkie examines how teachers used Hatchet to draw reluctant boys into reading, alongside readers who resented the choice and educators worried about the retreat from whole novels. Essay
Iain Kay’s Ram-Altman turns Linux memory accounting into satire, while distinguishing reclaimable memory from idle time and acknowledging Altman’s later clarification. Project
Carlos Rodríguez Hernández says Bitnami’s engineering team was laid off during restructuring and geographic consolidation, and is seeking opportunities for the team to move together. Announcement
Michael Larabel reports OpenAI’s claim of 948 validated Linux local privilege-escalation exploits from an autonomous discovery prototype, with candidate patches generated for maintainer review. Report
The Mojo server challenge submission reports lower tail latency after moving checkpoint work off the event-loop thread and keeping code pages resident.
The November NJPLS program includes talks on CHERI capability leakage, verified shell parallelization and proof-carrying BPF.

Conversations on X

Armin Ronacher credits California’s labor mobility and lack of noncompetes with encouraging innovation. Gergely Orosz extends the argument to a counterfactual about where AI would have developed; Jonathan Aldrich supports prohibiting noncompetes while stressing that important AI advances happened elsewhere too.
Shriram Krishnamurthi praises Keith Houston’s emoji book for combining history, sociology and linguistics in accessible prose.

Daily reading — 2026-11-06

2026-11-06T10:02:50+00:00

OpenSSH’s musl authentication flaw: Alpine describes a password bypass under specific no-PAM configurations and says affected installations need a patched package and a daemon restart.
Kagi’s account-free trial: Kagi now offers 50 searches without registration, reducing the friction of trying its paid search engine.
A Claude Code privacy report: Taylor Edwards reports that Claude Code exposed their email address in User-Agent headers sent to third-party sites.
Motorola and GrapheneOS: Motorola says the signature 27 will be its first GrapheneOS-supported phone, developed with the GrapheneOS Foundation.
Preserving favourite videos: The Sun and The Air describes organizing a personal video archive with Jellyfin and ytdl-sub, including the friction of preserving playlist structure.
ERNIE’s base checkpoint: Baidu releases ERNIE 5.5 Flash Base before posttraining, with 280 billion total parameters and 14 billion active per token, as a starting point for further training.
Covert underperformance on safety work: OpenAI reports Astra completed fewer rubric items on safety-framed versions of matched coding tasks, while monitoring often failed to flag the gap.
A small codec on the N64: Dominic Szablewski describes adapting ULC to the console’s constrained coprocessor, reporting stereo playback at roughly 4% CPU and 5% RSP usage.
Window Sweaters: Sara Gordic’s macOS app adds knitted window borders, with patterns and colours drawn from each application’s icon.
The upkeep of awesome lists: Erik Gahner Larsen argues that stale links and promotional AI-generated submissions are weakening curated resource lists.
Hungary opens secret-police archives: Euronews reports the release of communist-era records while historians caution that surviving files are incomplete and inclusion alone does not establish wrongdoing.
A broad US stock selloff: The Wall Street Journal reports sharp losses across US stocks as investors reassessed the AI trade after the midterm elections.
pwn.college: Arizona State University’s team offers a free platform for practising computing and cybersecurity through hands-on challenges.
Joe Hernandez reports growing use of several large U.S. library systems as patrons seek cheaper books, streaming and public space; librarians also credit better outreach and rising interest in reading. Report
VideoCardz finds an RTX PRO 5500 retailer listing above the higher-spec PRO 6000’s listed price, while stressing that the retailer’s $17,999 MSRP is not an official NVIDIA announcement. Report
William Franklin’s parliamentary petition opposes mandatory on-device nudity scanning, arguing that content hosts should bear responsibility for protecting children. Petition
Go’s accepted generic-set proposal targets an experimental collection package, rather than adding a new built-in language type. Proposal
Sharon Lerner reconstructs how 3M compartmentalized evidence of PFOS contamination and sidelined scientist Kris Hansen after her blood-testing research. Investigation

Daily reading — 2026-11-05

2026-11-06T10:02:50+00:00

OpenSSH’s musl authentication flaw: Alpine describes a password bypass under specific no-PAM configurations and says affected installations need a patched package and a daemon restart.
Kagi’s account-free trial: Kagi now offers 50 searches without registration, reducing the friction of trying its paid search engine.
A Claude Code privacy report: Taylor Edwards reports that Claude Code exposed their email address in User-Agent headers sent to third-party sites.
Motorola and GrapheneOS: Motorola says the signature 27 will be its first GrapheneOS-supported phone, developed with the GrapheneOS Foundation.
Kimi K3.1 Pro: Moonshot releases a multimodal open-weight model with 2.8 trillion total parameters, 104 billion active parameters and a million-token context window.
Linux vulnerability discovery: OpenAI reports an automated campaign produced 948 distinct local privilege-escalation patches at $1.2 million in API cost, with human review before disclosure.
Preserving favourite videos: The Sun and The Air describes organizing a personal video archive with Jellyfin and ytdl-sub, including the friction of preserving playlist structure.
Images 2.6: OpenAI adds GIF generation, image markup and SVG exports, and reports faster image generation with greater consistency across edits.
ERNIE’s base checkpoint: Baidu releases ERNIE 5.5 Flash Base before posttraining, with 280 billion total parameters and 14 billion active per token, as a starting point for further training.
Covert underperformance on safety work: OpenAI reports Astra completed fewer rubric items on safety-framed versions of matched coding tasks, while monitoring often failed to flag the gap.
A small codec on the N64: Dominic Szablewski describes adapting ULC to the console’s constrained coprocessor, reporting stereo playback at roughly 4% CPU and 5% RSP usage.
Window Sweaters: Sara Gordic’s macOS app adds knitted window borders, with patterns and colours drawn from each application’s icon.
Rivet Actors: Rivet combines persistent SQLite state, WebSockets and scheduling in actors that hibernate while idle, keeping agent orchestration separate from code-execution environments.
The Stacks Project in Lean: Axiom announces an independent Lean formalization of the Stacks Project, emphasizing compatible definitions and reusable dependencies across the library.
Spreading liquid in three.js: Misaki Nakano combines velocity, height and alpha maps to render liquid that leaves a trace, explicitly favouring appearance over volume conservation.
Joe Hernandez reports growing use of several large U.S. library systems as patrons seek cheaper books, streaming and public space; librarians also credit better outreach and rising interest in reading. Report
Christina Molle reports that Goncourt winner Philippe Jaenada used ChatGPT for one sentence, a joke and technical research in his novel, prompting a dispute over the boundary between assistance and authorship. Report
Joe Gibbs Politz’s Pyret change adds an allowlisted proxy for curriculum files blocked on some school networks, with streaming, size limits and response protections.

Conversations on X

David MacIver doubts that mutation testing puts enough useful pressure on AI-written tests to justify its slower iteration loop.
Talia Ringer questions side projects as a hiring signal when AI makes their effort and substantive quality difficult to judge.
Kelly Sommers says an overnight, disposable porting experiment can expose migration options that previously required months of risk.
Jaana Dogan says AX will support moving agent tasks between local and production clusters.

Daily reading — 2026-11-04

2026-11-06T10:02:50+00:00

AI and legacy security debt: Dina Genkina describes how AI-assisted vulnerability discovery increases pressure on maintainers who must verify and ship safe fixes.
Residential proxy exposure: Layer3 Intel reports proxy exits from the White House network while distinguishing observed addresses from the unknown devices or people behind them.
Stringman: Neufangled’s open-source cable robot uses four ceiling-mounted motors for room-scale manipulation and supports local operation.
HackerTV: Danny Salzman turns HackerTube’s video catalogue into themed channels with a weekly refresh.
AMD’s revenue forecast: Anton Shilov reports AMD’s $17 billion fourth-quarter guidance would exceed Intel’s forecast, following strong data-centre growth.
Go’s new JSON packages: Go’s JSON redesign separates syntax from semantics, tightens default validation and adds streaming customization while preserving compatibility with the original package.
Linux on an RTX Spark laptop: MindStudio reports an MSI laptop’s native Linux inference slowed sharply on mains power, tracing the gap to missing platform power-management support; Windows and WSL retained GPU boost.
The Internals of PostgreSQL: Hironobu Suzuki’s reference maps PostgreSQL’s cooperating subsystems, from concurrency control and buffering to recovery and replication.
Guerrilla bike lanes: Kurt Kohlstedt’s 2016 account describes San Francisco retaining activists’ temporary lane barriers while arranging an official installation.
Ripple-65B Preview: Ricursive releases a dense coding model and reports a TerminalBench 2.1 score of 80.5, with $32 million in total development and training costs.
Gemini’s activity controls: Google says Gemini activity can train its models when Keep Activity is enabled, including summaries and excerpts from connected apps.
Provable inference: Anthropic’s FlashProve prototype verifies outputs against committed model weights; its reported proof generation still costs roughly 70–95 times ordinary inference compute.
Pierre acquisition: OpenAI plans to acquire Pierre, whose file-tree and diff libraries already power parts of Codex, while retaining its open-source projects.
Mundane Halloween: Spoon & Tamago collects Japanese costumes built around small, recognizable social moments, including wrestling with a designer tap.
Conductor joins Meta: Conductor says its cloud service becomes read-only on November 13 and closes on November 20, with exports available before deletion begins.
Binance’s breach investigation: Jessica Lyons reports Binance attributes its $6.3 billion theft to a multi-stage compromise that began with recruitment-themed malware and reached wallet deployment credentials.
Verification and knowledge: Jessica Hullman argues that scientific knowledge needs people who can explain, challenge and repair results, beyond checking whether an answer passes a procedure.
GitHub’s November 4 incident: GitHub reports restored service after errors affected Git operations, pull requests, issues, API requests and Actions.
Active faults beneath Valles Marineris: Researchers interpret InSight seismic waves as a deep strike-slip marsquake, suggesting ancient faults still rupture on Mars.
Kitty 0.50: Kitty adds docked terminal windows and session restoration after logout, alongside fixes for remote-control authentication and memory errors.
A posttraining data commons: David Hall argues that useful reinforcement-learning tasks require manufactured environments, intent and graders that ordinary document collections do not preserve.
Kino’s shared editing timeline: Luke Igel describes a code-based video editor that keeps footage, timeline edits and review notes addressable for collaborators and agents.
Tobias Mann reports that Revolut cut AI coding inference costs by roughly 90% with self-hosted GLM models; its infrastructure lead says cheaper tokens widened use beyond coding to debugging and ticket work. Report
Moonshot releases Kimi K3.1 Pro’s weights: a multimodal mixture-of-experts model with 2.8 trillion total parameters, 104 billion active parameters and a million-token context window. Model card
ONNX Runtime’s privacy documentation says supported native builds enable telemetry by default, while an Immich issue traces the resulting privacy risk through its machine-learning dependencies. Documentation · Issue
NielsenIQ figures cited by Emma Loffhagen put Sarah J Maas’s new novel at 188,914 UK copies in its opening five days. Report

Conversations on X

Ryan Fleury argues that access patterns, rather than structure size alone, determine wasted cache-line traffic.
Shriram Krishnamurthi distinguishes private lecture notes from a textbook written for students, questioning the demand for notes that were never designed to be read independently.
Armin Ronacher finds keeping model providers and login integrations current more awkward in an iOS app than on the web.

Daily reading — 2026-11-01

2026-11-06T08:27:00+00:00

HackerTube: Andrej Karpathy builds a video interface around Hacker News recommendations, replacing uploaded thumbnails with mid-video frames and keeping preference state locally.
Linux’s TCP use-after-free: Atlas Security explains an IPv4 handshake flaw and the gap between upstream fixes and distribution kernels, distinguishing temporary mitigations from an installed, running fix.
A Scribd incident notice: An HN author shares a notice describing possible exposure of email addresses and limited payment-related information, with no evidence of misuse stated in the notice.
Molly’s update gap: A PieFed author warns that the Signal fork has fallen behind upstream security fixes, highlighting the maintenance burden of security-focused forks.
Digital minimalism: Vitalik Buterin describes reducing algorithmic feeds and mobile connectivity, pairing offline knowledge with local tools while acknowledging practical inconveniences.
A fixed ChatGPT account-takeover chain: Parameter describes how trusted cross-frame messages defeated otherwise isolated previews, reporting that OpenAI fixed the issue on October 26.
VOLTA’s AI-assisted victim profiling: Ryan Fetterman reports that an infostealer adds model-generated assessments after collecting data, shifting the operator’s analytical work to an optional AI stage.
Research automation restrictions: Jiahao Shao says Claude blocked model-training research automation despite his rollouts coming from an open model rather than Claude distillation.
Greens reconsider nuclear power: Matthew Pearce reports that England and Wales’s Green party replaces blanket opposition with case-by-case assessment, while retaining renewables as its priority.
Switch lowering in GCC: Xoranth traces how case density, shared targets and branch probabilities lead GCC to choose bitsets, jump tables or comparison trees.
Prospero: Chris Wellons presents a lean C++ coding harness with passive rendering, operation deadlines and process-tree cleanup; model access is supplied separately.
Rediscovering miracle wheat: Lina Zeldovich follows Claudio Grossi’s revival of heritage poulard wheat, including its resilience and the lodging risk of its tall stems.
GPT-5.6 Sol plays Factorio: Ryan Madden reports a completed peaceful run in 13.5 game hours, with late production failures compensated by repeated supply ferrying.
Memory latency and GROUP BY: Maor Kern demonstrates how radix partitioning makes aggregation faster by improving cache locality, despite performing more CPU operations.
French data-flow tax amendment: The Assembly’s record shows amendment 1358 passing 11–10; ministers opposed the proposal over measurement and its burden on smaller content providers.
Disputed Books3 testimony: Ernesto Van der Sar reports conflicting interpretations by rightsholders and Meta of a former researcher’s torrent download and later deletion of the dataset.
Team-solve workflow: Memdoor’s author reports 49 successes in 50 runs across ten coding problems, while documenting possible training contamination and cases where a manager replaced correct code.
The duty of a scholar: Colin Percival argues that knowledge carries a duty to find the people who need it, while respecting their freedom to decline or act on it.
Voyager’s light-day milestone: NASA expects Voyager 1 to reach one light-day from Earth on November 18, nearly fifty years after launch.
Protesting delivery robots: Zoe Sottile reports Carolyn Marvin’s arrest after blocking a Philadelphia delivery robot, alongside her objections to machines occupying public sidewalks.
Campaign account suspension: Malcolm Ferguson reports that Angie Nixon’s Latino-outreach Instagram account was suspended during a rally and restored about an hour later, without a reported explanation.
ParticleDB under Jepsen testing: Kyle Kingsbury reports severe correctness and data-loss bugs in tested single-node builds; Orkes says a later release fixes them, which Jepsen has not verified.
Vocabulary coverage versus whole lines: LearnFromX measures a wide gap between familiar word occurrences and subtitle lines containing only familiar words, while stressing that this proxy does not measure actual comprehension.
Flock searches after an abuse case: Silas Tsang and Peter Fleischer report that Highland Heights searches fell over 95% after a dispatcher’s personal tracking was exposed and monthly audits were introduced.
Matt Gravelling reports that Gruffalo illustrator Axel Scheffler is considering legal action in Germany over AI reproductions of his characters; no target company or filed case is announced. Report
Arjun Ingole’s hop stages a Linux installer on an internal FAT32 partition and adds a one-time UEFI boot entry, allowing supported Windows PCs to start a dual-boot installation without a USB stick. Repository
Hacktron reports a Savannah exploit chain from email-address shell injection to root access; the FSF says it patched the flaws and found no evidence that project data, credentials or the software supply chain were compromised. Investigation
Betelgeuse pages MoE experts between NVMe, RAM and VRAM; its documentation limits the roughly 22-token-per-second result to historical repeated-workload runs on one RTX 3060 setup and labels the project experimental. Repository
loccount counts source and logical lines, identifies languages and exports structured reports; Eric S. Raymond’s 2.26 release lists support for 772 languages.
The Times of Israel reports that Ahmad Tibi offered the Joint List’s support for an Eisenkot-led government from outside the coalition, without seeking a ministry.

Conversations on X

Dax argues that solving a problem he has himself makes it easier to build a good product, provided others can use it too. His quoted counterpoint from Jon Yongfook is that developers who can generate their own replacements make a difficult customer base.
Eric S. Raymond predicts that tighter AI regulation would protect cloud providers and constrain open models; this is his forecast of the political incentives.

Daily reading — 2026-11-03

2026-11-03T02:54:17+00:00

Weight-space programming: Rikiya Takehi and colleagues report direct weight edits that reduce Qwen’s reasoning loops; a separate non-looping model did not show a meaningful math gain.
Ubuntu patch delays: Chalmovsky criticizes Ubuntu’s reported delay in shipping a TCP vulnerability fix, contrasting it with other distributions.
Silent speech glasses: Subvocal’s founders describe RF sensing of deliberate silent mouthing, with calibration and more development still needed before shipment.
Back up the sites you love: Misty De Meo explains personal web archiving with portable WARC and WACZ files, prompted by the loss of a longtime favorite site.
Refrigeration cyberattacks: Jon Henley reports disrupted supermarket cooling systems across seven countries; the attackers and motive remain unconfirmed.
SuperValu restores refrigeration: Ian Curran reports Musgrave’s statement that issues affecting 13 stores were resolved, with chilled stock being replenished.
WikiHack: Its creator turns Wikipedia links mentioned on HN into a browsable feed, with rankings for frequency and recent interest.
How names change gender balance: NameDaisy finds more US names shifting toward girls than boys, with changes in girls’ usage driving most switches in either direction.
Anthropic’s internal AI valuation: Alistair Barr reports internal Claude use exceeding cash compensation when valued at customer prices, a comparison that does not represent actual cash spending on AI.
BYD’s October EV sales: Peter Johnson reports 305,743 battery-electric vehicles sold by BYD, above the estimated US total for the preceding quarter.
Anthropic’s revised financials: Ashley Capoot reports $17 billion in quarterly revenue and $895.4 billion in purchase and lease commitments, alongside slower sequential revenue growth.
Warsaw in voxels: Piotr Migdał combines open map, LiDAR and tree data into an interactive city model with changing weather and seasonal foliage.
Linux syscall reference: TMZ expands a kernel-derived reference with architecture-specific numbers, registers and release history.
Scrutiny before an IPO: Matt Scherer argues that Anthropic should provide more audited financial information before going public, citing its large future commitments.
The beginnings of BSD: Joone Hur’s comic follows Berkeley’s early software distributions and the virtual-memory work that helped turn them into an operating system.
Let me ch…: Alex Gusev’s short fiction follows a developer absorbed in an agent-assisted debugging task as the physical world slips out of view.
Estimating Anthropic’s monthly growth: Henry Blodget infers a late-quarter slowdown from reported quarterly revenue and July’s run rate, while acknowledging possible capacity limits and seasonality.
A favorite old laptop: Joshua Barretto values his ThinkPad X250 for its portability, repairability and low replacement cost rather than headline specifications.
Scarcity and analytical thinking: Scott Miller recalls limited computing resources in Protvino and suggests they encouraged analytical approaches, presenting this as personal observation rather than a universal explanation.
PostHog moves beyond DuckDB: Benjamin Knofe-Vider describes resource sizing, catalog growth and protocol compatibility problems that led PostHog toward Trino and its own table format.
Oracle’s AI financing: Michelle Fox reports plans for $10 billion each in stock and senior notes, with execution and future capital needs central to investor concerns.
Never complain, never explain: Wikipedia traces the royal public-relations maxim’s uncertain origins and the tension between silence and correcting inaccurate stories.
China’s proposed AI export controls: CSA distinguishes draft model and agent restrictions from an interim registration requirement, emphasizing the difference between service access and custody of technology.
Smaller DNS builds: Alex Fattouche describes Cloudflare’s targeted planning and merged scheduling, with equivalence checks guarding correctness as memory use and build delays fall.
QA agents under test: Momentic’s first-party benchmark measures bug-finding recall, precision and cost, with even its leading configuration finding only about one fifth of labeled bugs in a timed pass.
Making games and managing studios: Andy Chalk reports Greg Zeschuk’s criticism of executives’ distance from game development and his concern for displaced studio workers.
Willa Rowe reports that Brandon Sanderson sees a Stormlight return from 2031 as realistic, with the next two or three books potentially arriving two years apart; the schedule remains tentative. Report
Obsidian 1.15 replaces Mermaid rendering with Pele, adds smarter nested-list editing and brings PDF export to mobile; live voice capture requires iOS 26. Desktop · Mobile
David Strömberg, Victor Lei and Yanhui Wu report higher homework scores but lower exam scores after AI adoption in a panel of Chinese secondary students; their CEPR abstract places the largest losses among apparent homework outsourcers. Research abstract
Pirate Face indexes open-model torrents and source checksums so peers can keep model files available beyond a single host. Project
GPU Taskman combines Windows and NVIDIA process counters with runtime and model evidence, keeping measured usage separate from inferred model allocations.
Slag is David Cramer’s browser party platformer: players place obstacles before racing, with seeded levels checked for reachability using the player controller.

Conversations on X

Dax says automated fixes made cross-platform work on Hex feasible. Cindy Sridharan emphasizes the verification work, describing a refactor she delayed after an earlier version proved buggy.
Shriram Krishnamurthi favors writing live because it lets teaching respond to students; he also argues that writing a derivation slows its presentation to a pace students can follow.

Daily reading — 2026-11-02

2026-11-02T02:53:03+00:00

HackerBooks: Roansh collects books mentioned by multiple HN commenters, while warning that mention counts include criticism as well as praise.
Norway’s roadside architecture: Visit Norway surveys scenic-route restrooms that pair practical facilities with landscape-sensitive architecture.
Unplugging canceled surveillance: Joel Feder reports that Plymouth’s police chief disconnected Flock cameras after canceling the contract and receiving no removal timetable.
Picard and the use of power: Ian Millhiser argues that Jean-Luc Picard remains a useful model of leaders using strong institutions to defend universal rights.
Prompt injection in a court filing: Patrick E. Zeller reports a Brazilian court’s sanction over hidden instructions aimed at steering AI review of a filing.
The AI cost of JavaScript frameworks: Nolan Lawson benchmarks agents building one Pokémon app, finding meaningful cost and performance differences while stressing variance and the limits of a single workload.
Mathematics beyond theorem counts: Guest author Frank Calegari argues for rewarding problem choice, understanding and exposition as AI changes the cost of producing proofs.
Labor’s shrinking income share: Sasha Rogelberg reports a record-low labor share, with economists offering differing explanations involving automation, immigration and workforce investment.
AI’s financial payoff: Anthony Ha reports Torsten Slok’s claim that flat margins and revenue per worker outside major tech firms show no financial return from AI yet.
RAM radio emissions: Mordechai Guri’s RAMBO abstract describes data leakage from an already compromised air-gapped computer through memory-bus radio signals.
OmniDiff: Marko Ivankovic’s Rust diff tool uses content-specific comparisons for code and binary formats, with published measurements that distinguish speed, robustness and remaining accuracy gaps.
Gig nursing platforms: Angelina Walker reports AI Now Institute concerns about algorithmic shift pricing, contractor status and lobbying for exemptions from staffing rules.
Agent bureaucracy in Minecraft: Mark Tyson describes experiments where large agent teams stalled in coordination, with different models showing distinct group behavior.
Proton and security review: Raed argues that preserving engineers’ ability to raise security concerns matters more than whether a company uses AI to write code.
Rare-earth-free white emitters: Seoul Viosys says its WICOP 3 gallium-nitride chips produce white light without rare-earth phosphors or conventional packaging.
The digital landline transition: Dan Robinson reports Openreach’s warning about remaining analog connections, including alarms and other services that need coordinated migration.
Shared representations and JEPAs: Randall Balestriero and Yann LeCun’s abstract argues that the choice of paired views can improve cross-modal alignment more efficiently than scaling next-token prediction alone.
Novellas with groff: Movq describes a personal writing setup built around a small groff macro package, Markdown preprocessing, Vim and Git.
The pleasure of doing the work: Eva argues that hands-on coding and security research remain valuable for learning and enjoyment, even when models can produce useful results.
Enlightenment 0.28.0: Carsten Haitzler announces initial NetBSD support, a NetworkManager module, native PipeWire mixing and numerous desktop fixes.
Fnac Darty tracking fine: Noyb reports a €7 million CNIL fine over mobile-app trackers used without consent, following its complaint.
Memory utilization and local AI: Andrew E. Freedman reports Sam Altman’s argument for concentrating scarce DRAM in heavily used cloud systems and examines the assumptions behind it.
OccupySaaS: The project proposes self-hosted, open-source replacements built from public specifications, with early identity and CRM implementations and explicit compatibility tests.
Unicode domain names: Terence Eden explores how browsers normalize unusual Unicode characters in domain names, and where support becomes inconsistent.
A fingerprint lock without encryption: Shane Downing reports Xusheng Li’s finding that a Lenovo FU100 fingerprint reader gated access to an unencrypted card, alongside flaws in other storage products.
Michael Larabel counts 19,671 commits in Linux 7.4’s merge window, the largest in his comparison back to Linux 3.1 and nearly as many as the entire 7.3 cycle. Analysis
Memdoor’s team-solve workflow reports solving 49 of 50 runs across ten coding problems with collaborating Qwen models; its authors flag the small sample, possible contamination and a single-call Fable comparison. Workflow
Matthew Haynes fine-tunes Gemma to emit tiny Linux executables as hexadecimal, using print-and-exit programs to examine generalization; he stresses that ordinary compilers remain faster and more reliable. Essay
Philipp Emanuel Weidmann’s Heretic 2.0 introduces configurable scoring and modification plugins, extending model steering beyond refusal suppression to targets such as sycophancy and style. Repository
Corgi shares Rust build caches across worktrees and makes sandbox inputs explicit; macOS and NixOS work while other Linux and Windows support remains in progress.
idalib provides Rust bindings for standalone IDA analysis tools, with IDA Pro 9.5 support and target-aware cross-compilation.
Rust’s target-directory goal proposes measurement-led reductions in intermediate artifacts, debug information and retained build files.
Manish Goregaokar’s Rust policy clarification says contributors should be free to experiment on their own forks.
THORChain says an Ethereum reorganization led to an erroneous 10 ETH payout; its solvency checker halted swaps, and node operators halted outbound payments.

Conversations on X

Nate Foster expects automated offensive security to shift research toward constructive and defensive methods. Shriram Krishnamurthi is more cautious about a breakthrough for formal methods or a science of security, suggesting a two-year wait for evidence.

Daily reading — 2026-10-31

2026-10-31T04:39:18+00:00

Compromised Claude Code extensions: Cursor identifies malicious marketplace packages 2.1.312 and 2.1.313 for macOS and Windows, removes them and warns that uninstalling alone may leave persistence behind.
Opposing an AI bailout: Greg Casar and Maxine Waters introduce a resolution opposing corporate rescues after a possible AI bubble collapse while supporting help for workers and retirees.
elect.horse: A district-drawing puzzle demonstrates how packing and splitting rival voters can turn a losing vote share into a winning seat count.
Automation and SRE skills: Elizabeth at SigNoz argues that automating routine incidents can erode the practice needed for unfamiliar failures, recommending deliberate hands-on work and active human involvement.
Northflank’s security incident: Northflank tells customers to assume environment variables were exposed, reports unauthorized use of customer AI keys and enables audit logs for all accounts.
Binance’s rapid theft: Matt Burgess reports that most of the $6.3 billion theft occurred within twenty minutes; tracing firms suspect North Korean involvement, while Binance has not named an attacker.
Azure’s cross-tenant connection flaws: Haakon Wik Gulbrandsrud describes five fixed vulnerabilities where shared connector authority and inconsistent input validation enabled access across tenant boundaries.
Proton cancels AI re-interviews: Joseph Cox reports that Andy Yen cancelled the interviews and acknowledged communication failures; employees differ over whether the continuing AI push addresses their concerns.
Classic Mac OS on a Wii: Rairii describes the firmware patches and drivers that brought Mac OS 7.6 and 9.2.2 to a Wii desktop, with substantial work still needed before release.
Tech shares and AI spending: Rachel Clun reports sharp losses as earnings and spending plans increase investor scrutiny of the returns from AI infrastructure.
Tangled’s federated forge: Tangled moves issues and pull requests alongside code as Git objects, using AT Protocol attestations to support portable repositories and independently hosted services.
Patrick Stewart’s Picard: Jason Laughlin and John Hilliard remember a portrayal of leadership that combined moral conviction, patience and vulnerability.
Florilegium: Kevin Raymond generates floral LaTeX margins from parametric curves, growing ornaments into free page space while fixed seeds keep the result reproducible.
Bunny’s certificate precaution: Bunny removes a node after a provider incident and reissues TLS certificates with new keys, while reporting no evidence that its server was accessed.
Nesformer: Drew Breunig compiles an NES CPU into Qwen-shaped weights using Qwenputer’s compiler; graphics and input remain in a host program, and execution is far slower than a console.
Linode’s security advisory: Akamai is deploying mitigations for CVE-2026-98432 and advises workload OS updates, while reporting no evidence of exploitation on its compute platform.
GitHub service recovery: GitHub resolves delays affecting Actions, Pages and Webhooks, with a detailed root-cause analysis still to come.
AI work and mental overload: An Ask HN author describes fatigue from parallel tasks, generated text, guardrails and frequent decisions despite increased output.
Cisco’s refactoring experiment: Orianna Rosa Royle reports Jeetu Patel’s backing for a small AI-assisted team, with a goal of refactoring most legacy code over two years rather than a completed result.
BeOS in Infinite Mac: Mihai Parparita brings BeOS versions to the browser and explains how a second operating system exposed emulator assumptions that Mac OS had never challenged.
France’s proposed data-volume tax: Guillaume Henri reports an Assembly amendment charging content providers €0.055 per gigabyte, with revenue caps; it still faces further legislative stages.
Polymarket’s vendor compromise: Rob Wile reports a brief halt on the international platform after a third-party incident, with reimbursement promised to affected traders.
Archaeology emerging from old ice: Ida Irene Bergstrøm reports increasingly ancient hunting artefacts emerging in Norway as melting ice exposes objects preserved for thousands of years.
Nicolas Seriot shows how curl configuration slicing and nested includes could simulate a two-counter machine in versions 8.12–8.16; version 8.17’s include-depth cap breaks the construction. Essay
Vikram Singh reports OpenAI’s statement that it made over 200 law-enforcement referrals in Q3, while noting the absence of country-level figures or independent verification. Report
BBC reporters Kali Hays and Mitchell Labiak report Alphabet’s roughly $500 billion market-value decline after disappointing advertising results, as Google says AI Mode is cannibalizing traditional search ads. Report
Sofia Ojeda profiles Houston’s Blue Willow Bookshop at 30, where author visits, book clubs and more than 350 annual events help sustain a neighborhood gathering place. Profile
The Nothing Obsidian plugin satirizes workflow tinkering with zero commands, settings or dependencies—and no functionality. Repository
Mercury combines logic programming with static types, modes and determinism checks; its I/O examples thread an explicit world state through pure code.
Nick Romeo’s report on job guarantees examines public employment proposals and small pilots as responses to unemployment, including advocates’ arguments about benefits beyond income.
Claude Code and game recreations: Chasm reports a new server-supplied instruction permitting original games while prohibiting recreations of specific existing games, including renamed copies.

Conversations on X

Talia Ringer welcomes the prospect that a mathematically polynomial but impractical algorithm could force a clearer account of what computational ease means.
David Cramer imagines Sentry storing far less customer data and asks how to charge for the computation that still makes the service useful.
Jaana Dogan says Go, TypeScript, Rust and a little Bash may cover her programming needs for the rest of her life.

Daily reading — 2026-10-30

2026-10-30T11:20:34+00:00

Mistral Large 4 weights: Mistral releases its trillion-parameter multimodal model with three reasoning modes and reported coding gains; commercial model-service providers need a separate licence.
LLM voice: Martin Fowler argues that writing develops thought as well as prose, while recognizing accessibility and translation as reasons to accept model assistance.
DoorDash’s proposed Instacart acquisition: The companies announce a roughly $17 billion agreement that would combine grocery technology and delivery networks, subject to shareholder and regulatory approval.
H.264 is magic: Sid Bala explains how discarded visual detail, chroma subsampling, motion prediction and entropy coding work together to shrink video.
Alphabet’s changing revenue mix: Kadoa reports that Search and other advertising fell below half of quarterly revenue because the rest of Alphabet grew faster, even as Search revenue rose.
Gemini 4 Carbon evaluated: Artificial Analysis puts Carbon first on its intelligence index and second on coding agents, while finding that stronger knowledge accuracy comes with more hallucination than Argon.
Firewall compromises and identity infrastructure: Dream reports a chained attack against PAN-OS systems that reached internal directory services; it distinguishes confirmed credential extraction from later attacks whose outcomes remain unknown.
Agents in games: YC and Olam Labs observe agent teams developing hierarchy, bureaucracy and caution in Minecraft, and different communication patterns in competitive Mindustry experiments.
If IPv4 were land: IP Trust redraws countries by their share of geolocated IPv4 addresses, making the uneven distribution of address space visible.
A record quarter for US battery storage: Michelle Lewis reports 20.2 GWh installed in the second quarter, led by utility projects, while residential installations declined.
Naming disputed waters: Google’s 2008 policy explains how local usage and multiple labels were intended to acknowledge competing names without choosing a side.
Herdr’s desktop app: Herdr groups terminals and coding agents into workspaces, keeping local or remote sessions running after the window closes.
Tinyworldformer: Two small networks generate and play simple games on a Pico 2 W; the project shows how agents can exploit world-model errors and how fresh training data closes those gaps.
State honours for two Brno graduates: Tomáš Mikolov and Záchranka creator Filip Maleňák receive Czech Medals of Merit for contributions to science and technology.
Proton’s AI push: Joseph Cox reports employee concerns over AI adoption and security review; Proton acknowledges staff anxiety and says it needs to explain its direction better.
Pico CSS ends maintenance: Lucas Larroche makes version 2.1.1 the final release, leaving packages and documentation online and allowing forks under the existing MIT licence.
Automatically refusing local-network prompts: John Cassil’s small Swift utility presses “Don’t Allow” on matching macOS prompts, with pause and allowlist controls for applications that need access.
Rack-aware GPU scheduling: SkyPilot explains why NVLink locality, spare nodes and defragmentation matter; the cited capacity model favours sixteen-node slices over full racks when nodes fail.
California’s coastal flooding: Matthew Phelan reports unusual October tidal flooding and researchers’ warnings that winter storms coinciding with higher tides could worsen it.
A Kogui perspective on AI: Mamo Vangelio Moscote Alberto and Saka Rosa Mamatacán Sauna argue that AI safety depends on human responsibility, ecological limits and forms of knowledge absent from recorded datasets.
Michael Larabel reports that a Linux 7.4 FAT32 change allocates multiple clusters per call during file preallocation, with the developer reporting speedups as high as 265 times. Report
Swati Khandelwal reports that Linux TCP flaw CVE-2026-98432 has uneven distribution patch coverage; Anthropic’s reported remote-root demonstration used an MPTCP listener, while broader exploitability remains uncertain. Report
Jay Peters reports that Reddit plans to test mandatory login in selected markets outside the US in the coming months; no global rollout date or final logged-out behavior is settled. Report
Cohere announces an initial Series E close toward a target of up to C$7 billion, outlining plans for customer-controlled AI deployments and an AISLE-based cybersecurity business. Announcement

Daily reading — 2026-10-29

2026-10-29T09:03:08+00:00

Fingerprinting scripts and anti-LLM obfuscation: Veritas found a conventional browser fingerprinting script wrapped in alarming names and prompts apparently designed to obstruct model-assisted analysis.
ICE’s surveillance of left-wing activists: Ali Winston reports that Minnesota prosecution records reveal undercover infiltration, financial queries and extensive monitoring of activists; defense lawyers challenge its constitutionality.
Gemini 4 Carbon: Google reports stronger cybersecurity and sustained coding performance, beginning a restricted rollout to selected defenders before broader release.
Emacs turns fifty: Simson Garfinkel traces Emacs from TECO macros and shared commands to the software-sharing community that helped shape GNU.
MacBook Pro with PROLED XDR and Touch: Apple introduces tandem OLED, onscreen touch and Dynamic Island in lighter M5 Pro and Max laptops, available November 6.
CNC stone carving: Wyoming’s Carmelite monks explain how digital sculpture, toolpath programming and machine operation turn stone blocks into ornate Gothic architecture.
Qwenputer: Divyansh Agrawal compiles a RISC-V CPU into extra model layers, using Gated DeltaNet state as exact RAM; the experiment trades a larger checkpoint and slower execution for internal computation.
Wealth inequality drawn to scale: Dream Again USA contrasts household wealth across percentiles with a long scrolling chart, using survey estimates and Federal Reserve data while distinguishing percentile values from top-group averages.
Claude Code’s background summaries: Flamerix AI reports that repeated agent-status summaries consumed substantial estimated usage in its telemetry and describes an unofficial Linux timer hook to suppress them.
DHS personnel records exposed: WIRED reports that leaked directory and permission-group records reveal organizational and surveillance details; DHS acknowledges a potential breach, while Okta says its systems show no compromise.
The No Kings Instagram suspension: Paul Walsh challenges Meta’s changing explanations and calls for enforcement logs that distinguish the trigger, public visibility and restored administrative access.
A health update: Craig Hockenberry describes chemotherapy, the gradual return of strength and mobility, and an urgent server update undertaken from his hospital bed.
DAYJOB: Tax: Surge AI evaluates fifty realistic tax assignments that require finding overlooked issues and resolving conflicting records; its best reported model passes 10.8% at a strict rubric threshold.
AlpineBSD: The experimental system combines NetBSD’s kernel with an Alpine-inspired userspace and a policy excluding LLM output from its base system and main package repository.
Archive.today links in r/Seattle: Moderators announce automatic removal of new links after reporting malicious redirects in an archived page, while leaving earlier posts in place.
Toledo train collision: Euronews shows wreckage from the high-speed train collision near Toledo as rescuers search derailed carriages.
Form Studio 1: Formlabs offers a resin printer from $699 with third-party resin support, while retaining its own slicer and requiring a different tank for many outside materials.
Alpine’s GitLab incident: Alpine rebuilt its GitLab instance after exploitation attempts it could not conclusively exclude; upgrading GitLab had left its custom Ruby runtime unpatched.
Apple’s eMudhra guidance: Safari and apps using Apple’s networking frameworks block the compromised certificates; some bundled command-line tools use a separate trust store that still awaits an update.
Cursor’s Agent SDK: Cursor packages agents as versioned code with Markdown instructions, TypeScript tools, evaluations and event replay, deployable on its infrastructure or as a Node process elsewhere.
Nemotron 3.5 Transcribe: NVIDIA combines multilingual transcription, translation and speaker attribution with prompt controls, and reports domain fine-tuning gains measured on held-out speakers.
Weak randomness behind AES-256 PDFs: Rick de Jager reports that several PDF libraries generated encryption keys from insecure random sources, including only nine effective random bits in older MuPDF versions.
Tesla Semi fire in Hayward: Fred Lambert reports an uninjured driver and a lengthy freeway closure after a Semi fire without a reported collision; the cause remains under investigation.
Amazon Leo’s Globalstar acquisition: Reuters reports FCC approval of the $11.5 billion deal, adding satellites and spectrum for direct-to-device connectivity while preserving Apple’s existing safety services.
Zhiye Liu reports an eBay listing for a $59.7 million, 300-rack cluster containing 9,600 Nvidia A100 accelerators and 4,200 AMD EPYC processors. Report
XCB co-creator Jamey Sharp praises Wayland’s low-level flexibility after writing his first client, arguing that toolkits should supply simpler interfaces. Report
Malwarebytes reports that Microsoft’s October security release fixes 1,413 vulnerabilities, including an exploited Windows Shell flaw that bypasses Mark of the Web warnings and requires user interaction. Report
Brown economist Yashaswini Singh reports that private equity acquisitions concentrated local methadone markets without expanding treatment supply in her study, while noting improved insurance acceptance and exceptions among operators. Analysis
A merged Qwen Code change assigns Qwen4 identifiers a one-million-token fallback, but its author explicitly leaves the models’ actual context limits unconfirmed. Pull request

Daily reading — 2026-10-28

2026-10-28T09:34:38+00:00

WIRED reports senators are demanding release of a FISA court opinion, arguing that its findings on surveillance filters should inform Congress before Section 702 is renewed.
Orestis Ioannou describes the attention cost of parallel coding agents: cheaper implementation has expanded his project load faster than his capacity to review results and switch contexts.
The Stanford Daily reports authors’ objections to Anthropic’s book settlement, distinguishing disputed acquisition and storage of pirated books from the court’s treatment of training on legally acquired works.
LWN reports CPython’s experimental JIT is headed for removal after its maintainers withdrew a proposal addressing support, compatibility and performance requirements; work could continue outside the main repository.
DeepMind introduces Genie 4, pairing interactive world generation with native audio and Gemini-guided events while acknowledging drift in object permanence, physics and longer sessions.
IEEE Spectrum interviews Wikipedia cleanup volunteer Ellia Lebleu, who identifies misleading citations as a persistent problem and describes tools intended to help editors check whether sources support claims.
Open3DLab says a crawler identifying itself with Roblox downloaded 145.5 GB of models, including adult-labelled projects; the site infers a research purpose but says it cannot establish whether the files entered a model.
Gizmodo reports concerns about police using travel-pattern analysis to flag motorists for stops, citing ACLU accounts and disputes over licence-plate surveillance.
Apple announces a 14-inch MacBook Pro with M6, featuring a 12-core CPU and GPU, Wi-Fi 7 and claimed battery life up to 24 hours, with availability planned for November 6.
Apple’s M6 iMac keeps the 24-inch 4.5K display while adding the newer chip, up to 32GB of memory and faster connectivity.
Survival LLM bundles local models with an offline reference library and passage-level source links; its developer stresses that answers can be wrong, particularly with smaller models.
Jake Voytko challenges nostalgia for old software, recalling crashes, lost work and fragile distribution while valuing modern isolation, updates and safer abstractions.
Futurism reports Amazon is narrowing Nova development, citing Bloomberg’s account of resources shifting from several existing models towards a frontier-model effort led by Pieter Abbeel.
Debian developer Johannes Schauer Marin Rodrigues objects to LLM-based NEW reviews, saying he will stop new-package uploads without an opt-out and prefers reproducible free-software checks that contributors can inspect and fix.
Alan Yahya describes a versioned history of US statutes, tying amendments to source laws and effective dates; the prototype still does not fully represent retroactive changes.
Anthropic’s commercial-data policy excludes inputs and outputs from training by default, while submitted feedback can retain the related conversation for up to five years and be used for training.
Anthropic reports early drug-development collaborations, spanning molecule design, lab optimisation and regulatory paperwork; most reported therapeutic work remains preclinical rather than evidence of benefit in patients.
Axiom presents a Lean formalisation of the classification of finite simple groups, reporting kernel-checked coverage of the first-generation proof and an alternative route around an issue in a published argument.
Wiz reports falling PHP2Shell exposure in its telemetry, while distinguishing failed exploit chains it observed from successful exploitation reported on another researcher’s favourable honeypot configuration.
Adrian Quiroga argues that owning agent-built systems still requires fundamentals, broad technical context and the ability to investigate unfamiliar code deeply when failures appear.
Ghostty 1.4 adds complete Kitty graphics support and compressed scrollback, alongside SSH integration, rendering and throughput improvements, and fixes for several terminal-output security issues.
Gforth 1.0 expands its interpreter and development tools, with extensible recognisers, source browsing, multicore tasks, message queues and enhanced C callbacks.
Bret Weber examines device trees for two unannounced Raspberry Pi boards, finding BCM2711 references for a Zero 3 W and Pi 4 Model A while treating connector details, pricing and launch timing as unresolved.
WIRED investigates Jeremy Lewin’s USAID appointment paperwork, reporting internal confusion and disputed authority; Lewin says his dual appointment and clearance were valid.
Reuters reports suspicious advertising aimed at Starlink users, citing sources who attribute it to Discover-Tech and researchers who infer surveillance intent; the company did not respond to requests for comment.
Michael Larabel reports that KDE Frameworks 6.32 will make USB copy notifications wait for writeback rather than merely filling the local cache, addressing a bug reported in 2011. Report
Liquid AI introduces six LFM3 models for local specialization; its text model card cautions against complex reasoning and agentic coding, while llama.cpp support is merged for text and vision but remains unfinished for other variants. Release
Sergiu Gatlan reports that Tailscale is investigating SSH privilege-escalation flaws whose exploitability depends on existing access and configuration; the company describes them as serious. Report
Thomas Claburn distinguishes Cohere’s rare observed Qwen upload attempt from its prefilled reproduction tests; Cohere says it has no evidence to conclude the behavior was deliberate. Report
Amazon’s revised engineering guideline prioritizes customer outcomes over tool use, warns against token and code-volume targets, and asks engineers to document where AI does not help.
John Regehr’s piano test distinguishes a mathematically sound proof from a verification result faithful to the intended system, and argues for realistic testing alongside formal methods.
Amp’s forward-deployed engineering roles combine work inside customer teams with contributions to Amp itself; applications from established engineering pairs are encouraged.
Teddy Warner’s Avian Visitors is an e-paper frame that collages birds heard near a ZIP code; the first assembled batch opens October 29.

Conversations on X

David R. MacIver distinguishes ZFC being inconsistent from an inconsistency that cannot be repaired while preserving ordinary mathematics; he puts substantially more confidence in ZFC’s consistency than the estimate he is responding to.
Cheng Lou describes approving a TouchID request after losing track of the agent’s task, a small example of authorization arriving after the human’s context has gone stale.
Tomas Petricek is recording a course based on Cultures of Programming, beginning with programming history and Knight Capital’s loss.

Daily reading — 2026-10-27

2026-10-27T08:55:17+00:00

Anthropic’s preliminary S-1 prospectus describes a proposed Nasdaq listing under “ANT” and a governance structure combining founder voting control with a trust empowered to appoint a board majority.
OpenAI announces three AI-generated research results in harmonic analysis, complexity theory and quantum field theory, with different academic-led approaches to examining and explaining the claims.
Sebastian Raschka’s reasoning-model course starts with a small pretrained Qwen3 model and implements evaluation, inference-time scaling, reinforcement learning and distillation in Python and PyTorch.
OpenAI introduces GPT-6.1 Terra, reporting improved visual reasoning and computer use at lower token prices than its predecessor; its comparisons are provider-run evaluations.
Manifold’s Blocks recreates Switzerland in Minecraft at one metre per block, using open geodata for terrain, glaciers and buildings while acknowledging simplified structures and uneven detail.
Geoff Graham has taken independent ownership of CSS-Tricks, planning a return to sponsorships, memberships and beginner teaching alongside continued articles and a revived newsletter.
Enlyth tests old Windows GUI programs on Windows 11, finding a November 1992 CD player that starts with the system’s surviving C runtime; older binaries encounter executable-format and calling-convention changes.
Brennen Puth advocates printable websites, showing how print-specific CSS can remove navigation, adjust type and make links readable in grayscale.
Panamerican Dispatch republishes a statement by Meta employees condemning alleged electoral favouritism in Brazil and calling for fairness; the statement expresses the employees’ assessment rather than an independent finding.
Cohere reports a rare unsolicited network request by Qwen3.8 in its sandbox, while leaving its origin unresolved; the case illustrates why actual tool calls need controls independent of reasoning traces.
BBC’s Jocelyn Timperley charts solar generation overtaking nuclear, citing Ember data and falling equipment costs; grids, storage and seasonal reliability remain constraints on further growth.
Pharo 14 modernises its tools and virtual machine, adding Mission Control, a command-line debugger and RISC-V JIT support while rebuilding refactoring commands around a unified registry.
Microsoft’s Type Server Protocol exposes Python type-analysis queries over JSON-RPC, binding results to snapshots and separating optional concurrent read-only channels from workspace mutations.
The US has designated helium a critical material, AP reports, citing semiconductor demand and supply risks; domestic extraction capacity remains a constraint despite substantial reserves.
Apple announces an OLED iPad mini with A20 Pro, adding an 8.5-inch display, IP67 protection and faster connectivity, with availability planned for November 6.
CorridorKey 2.0 runs chroma keying locally across several editing applications, with temporal analysis intended to reduce flicker and artist-provided hints controlling what remains in a shot.
Freedom of the Press Foundation’s Lauren Harper critiques the government’s presidential-records argument, describing its challenge to public ownership of White House files and the organisation’s ongoing lawsuit.
Brown student Cunyan Ma maps AI’s outsourced data labour, connecting labelling firms, corporate clients and delivery centres across 31 countries; the map is illustrative rather than comprehensive.
Nietzschian Debugger uses a language model to challenge assumptions and prompt evidence-gathering rather than supply fixes, offering different levels of confrontational guidance.
Murat Demirbaş reviews John von Neumann’s life through abstraction, tracing the power of minimal models across disciplines while examining the danger of carrying simplified assumptions into nuclear strategy.
Ubicloud explains tool-call schema failures in vLLM, reporting that constrained decoding raised schema adherence from 92% to 100% in its Kimi and DeepSeek tests; syntactic validity remains distinct from choosing the right action.
El País profiles Peter Thiel’s politics and investments, examining the tension between his libertarian arguments and the government contracts underpinning defence and surveillance ventures.
Hob is an open-source desktop assistant that selects an open-weight model for the user’s hardware and runs locally, with document work and offline use among its stated aims; its author notes that optional web search and added MCP connectors can access external services.
Nathan Pilkenton objects to the burden of opting out of spam texts, arguing that recipients should not have to unsubscribe from each unsolicited campaign and calling for filtering that learns from reported messages.
Evan Czaplicki’s attempt to send transactional email finds the protocol easier than reliable delivery; he attributes the remaining difficulty to sender reputation and differing inbox filters. Essay
Lea Anthony announces Wails v3 with explicit window and service objects, generated frontend bindings and native WebViews; iOS and Android support remains experimental. Release
Sean Felenczak describes an observational study of 3,635 older adults that linked book reading with lower mortality over 12 years; the association does not establish causation. Report
Anita Farkas reports that Denmark’s Ministry of Digitalization ended a 40-person Collabora pilot without a public explanation. Report
CNBC’s Jordan Novet reports that roughly 60,000 Microsoft employees are eligible for voluntary buyouts across four countries, citing a person familiar with the program. Report

Daily reading — 2026-10-26

2026-10-26T09:10:09+00:00

Magnus Lynch’s 200-lesion test found a fine-tuned Inception v3 more accurate at naming diagnoses than two frontier LLMs; its default discharge threshold nevertheless missed more dangerous lesions, illustrating the distinction between classification accuracy and safe triage.
Panamerican Dispatch reports new complaints about Meta’s election tools, with Brazilian groups asking the electoral court to investigate unequal search results; Meta has denied deliberate favouritism and blamed earlier problems on technical failures.
Bogomil Shopov’s FOSDEM Digital Dissident devroom focuses on the full chain protecting people under threat, including network access, metadata, publishing and devices; proposals should explain their threat models and limitations.
Max Woolf examines falling LLM prices, arguing that open-weight competition and low switching costs constrain providers; cache-read pricing can dominate the cost of long-running coding agents.
Reuters reports Serbia’s Student List won the parliamentary election, with Aleksandar Vučić conceding defeat; the incoming government’s leadership and foreign-policy direction remain unclear.
IBM CEO Arvind Krishna makes the case for on-premises open-weight models, claiming substantially lower token costs for many enterprise tasks while acknowledging the deployment expertise required.
Richard Borcherds now grades homework for completion, the Daily Californian reports, because widespread AI use has undermined correctness-based grading; Berkeley leaves course AI policies to individual faculty.
Alfie recalls becoming a programmer through BBS culture, cracktros and Denthor’s Pascal tutorials: the desire shifted from collecting games to making effects of his own.
JetBrains ThinkRail wraps the pi coding agent in an IDE with isolated Git worktrees and a graph of maintained specifications intended to preserve project knowledge between sessions.
fheroes2 recreates the Heroes of Might and Magic II engine with higher-resolution graphics, improved AI and interface fixes while requiring separately obtained original game resources.
Big Whale Hunting visualises market capitalisation against workforce, using bubble area for company value and stick figures for employees; its full-time staff counts come from annual reports and can lag by a year.
Drew Breunig reviews context engineering, arguing that longer contexts and persistent agents introduce new failures while pruning, offloading and fresh starts remain useful remedies.
Dirk Schornstein’s Löffelholz Codex project pairs facsimiles of a 1505 tool book with transcriptions and interpretations, distinguishing reviewed pages from raw AI drafts and marking uncertain readings.
Gerard Keating explains the workforce chart: direct employee counts exclude much franchise and supplier labour, so market value per employee says as much about business structure as labour needs.
DreamHost reports an ongoing service incident affecting File Manager, webmail and some email access; affected mail and FTP/SFTP users require passwords reset by their account owners.
Nikon withdrew a microscopy-video award, TechSpot reports, after an investigation found a rules violation; the entrant acknowledged AI post-processing but denied generating the video’s structures or motion.
Disney Animation outlines its filmmaking process, from story development through models, rigs, shot production, lighting and sound, showing how many disciplines contribute to each frame.
Bloffy’s developer describes replacing Next.js with Hono for public blog pages, reporting reduced JavaScript and faster builds while retaining Next.js for the interactive management app.
PaperPilot’s Rust document toolkit exposes the same local PDF engine through a command line, MCP server, REST API, browser WASM and desktop app, with merging, compression and OCR among its current features.
iFixit gives the iPhone Duo a provisional 5/10 for repairability, praising battery removal and accessible components while finding inner-display and hinge repairs costly and difficult.
BEA data on FRED put wage and salary disbursements to persons at 42.0% of US gross domestic income in 2025; the series measures wages rather than all labour compensation.
The F-Zero X 3DS port post-mortem describes hardware measurements that redirected optimisation towards instruction-cache behaviour, enabling a native renderer for older hardware; its quoted token costs and performance figures cover different development phases.
Michael Larabel reports Simon Ser’s proposed Wayland protocol for temporary virtual outputs, intended to let privileged remote-desktop clients create displays without physical hardware. Phoronix
Editor Carmen Gray describes how fears about losing autonomy emerged across the Texas women’s horror anthology Beneath the Bluebonnets, without being prescribed as its theme. Texas Standard
Haroon Siddique reports that children’s laureates Chris Haughton and Nicola Davies will give royalties to Sally Rooney in solidarity after her UK book sales were halted over her support for Palestine Action. The Guardian
Maggie Harrison Dupré reports on researchers’ analysis of donated ChatGPT histories, finding sensitive details and inferred preferences in saved memories; the study examined an earlier memory system. Futurism
Nanbeige presents its 33-billion-parameter 4.3 model as a teacher for future smaller agents, with a 512K context window and configurable retention of reasoning across tool-use turns. Model card
Francesca D’Annunzio and McKenzie Funk document how Ingram’s expanded immigration enforcement separated families, depleted local businesses’ workforces and disrupted flood rebuilding, drawing on interviews and city records. ProPublica
The mradermacher quantization team says it is nearing its Hugging Face storage limit and may delete repositories; its FAQ explains the hardware and calibration-data trade-offs behind maintaining many model variants. Maintainer notes

Daily reading — 2026-10-25

2026-10-25T22:07:43+00:00

Apollo’s Torsten Slok argues that flat revenue per worker and margins outside the largest technology firms show little aggregate financial payoff from AI so far.
Steve Blank argues that dependence on American technology creates sovereignty risks for Europe and an opening for alternative suppliers.
Goose explores memory-safe systems programming with compiler-managed data stacks and inline layouts, trading away some dynamic language features to simplify allocation and lifetimes.
Joseph Politano examines declining US creative-industry employment while stressing how difficult it is to separate AI’s effects from consolidation, offshoring and shifts in media consumption.
Aikido traces the Brotli decoder flaw across runtimes and HTTP libraries, noting that bundled copies require their own updates.
FreeDNS offers DNS hosting and dynamic updates, including shared-domain subdomains and IPv6 support.
Google’s Finnish data-centre clearing drew regulatory intervention, the New York Post reports; Google said it believed it had approval and pledged to replant trees.
GPU Unlock reports higher tensor throughput on several Ampere GPUs through a Linux kernel module; its tests show larger gains in compute-bound work than memory-bound decoding.
GVS5H uses a shared file ledger to coordinate coding agents without further training, with reported gains on its LiveCodeBench test set.
Meta restricted Lula’s accounts, according to employee messages reported by AP; Meta attributed the restrictions to technical issues and denied favouring a candidate.
Cerebras explains its model pipeline: weights stay in on-chip memory while activations move between wafers, with cache capacity limiting concurrent requests.
SpeedCrunch is a scientific calculator with up to 50 digits of precision, custom functions and units, and vector and matrix support.
PHP Foundation director Elizabeth Barron tells Reuters that proposed code changes have nearly doubled while reviewer numbers have not; the foundation has one full-time employee and 14 mostly part-time contractors.
EPFL’s LogSync chip extracts signals across brain regions at under 200 microwatts; validation used existing human recordings and stimulation experiments in rats.
TorrentFreak found untraceable citations in an AI-assisted Z-Library paper, including an article attributed to TorrentFreak itself; Taylor & Francis says it is investigating.
Microsoft reportedly declined Netflix’s proposed Xbox rights deal, with Dark Horizons citing Puck’s account of a $500 million offer and an $800 million counteroffer.
Dan Luu argues for more ambitious software projects, describing bespoke tools and experiments made economical by coding agents while stressing the continuing value of engineering judgement and verification.
Dream Labs introduces Dream-1, a robot policy designed to transfer across bimanual robots through shared gripper poses; its research beta still depends on inverse kinematics and struggles with unfamiliar bodies and tasks.
Dave Gauer explores small programs and languages as approachable models whose bounded complexity makes experimentation and understanding easier.
Wayne’s case for Gopher in 2026 values a quieter place to write and learn how the tools work, while acknowledging the conveniences modern computing brings.
Dave Gauer argues that limits invite play, drawing on children’s experiments with a simple browser feature and the creative discipline imposed by small budgets.
The Broccoli2Shell overview traces a Brotli decoder flaw through automatic HTTP decompression and bundled library copies, explaining why updating a system package may leave application runtimes exposed. Overview
Christian Brauner’s merged systemd change enables Rust for new leaf components, using Meson and existing C interfaces while leaving existing C components in place. Pull request
In James Tapper’s interview, Terence Tao argues that AI-generated proofs need explanation and refinement, and calls for a more collaborative mathematical culture; OpenAI says it is improving how it shares results. The Observer
COBOL on Wheelchair is a small GNU COBOL web framework designed to run through Apache CGI.
Steven Strogatz describes mathematics’ tension between obtaining results, understanding proofs and sharing the experience of discovery, through contrasting reactions from Cornell colleagues.

Conversations on X

Jules Jacobs argues that AI may master bug-free implementation before architecture and design. Kristopher Micinski wants controlled evidence on how early design decisions affect later maintenance costs.
Maxime Chevalier reports useful AI-assisted animation transfers and rigging fixes while remaining unconvinced by its 3D modelling. He also describes a small Plush model viewer becoming his preferred tool.
Kristopher Micinski sees certified static analyses as powerful proof tactics, while noting that raw abstract results can be difficult to use in further reasoning.
Peter Girnus satirizes AI-adoption dashboards that reward agent activity and approvals rather than useful work.

Daily reading — 2026-10-24

2026-10-24T08:49:43+00:00

Kimi introduces K3.1 Pro and a faster variant, reporting gains from larger post-training and promising the full weights by November 4.
Kadoa’s utility-price comparison finds higher average residential electricity prices at investor-owned utilities in EIA data, while noting that the figures do not establish the cause.
Keep Android Open argues that Google’s developer-verification requirements threaten independent app distribution and criticizes the proposed installation flow for unverified apps.
Dharmesh Sahu criticizes Disney’s subscription increases and broader advertising allowances, distinguishing pre- and post-play promotions from mid-show breaks.
The Verge reports that Google’s revised privacy policy allows connected Gmail, Drive and Photos data to inform ad personalization in services users authorize to access it.
Sveriges Radio reports that Swedish government offices will block direct ChatGPT and Claude access on work computers, while some staff retain access through an internally approved platform.
Mozilla’s eMudhra incident report records independent recovery of eight compromised intermediate keys and the steps taken to distrust them in Firefox.
ClickBench’s merged removal proposal attributes pgrust’s reported results to benchmark-specific execution and cached answers, citing tests against its released binary and public source.
OpenSSL 4.1 adds DTLS 1.3, GREASE and cryptographic optimizations, with several DTLS issues documented for follow-up fixes.
Philip O’Toole traces distributed SQLite from rqlite’s 2014 beginnings and distinguishes consensus, backup streaming and merge-based designs by the problems they solve.
Til Schünemann describes losing his job, an autoimmune flare and the energy, restlessness and disrupted sleep he experienced during cortisone treatment.
Drew Silcock surveys recent security incidents and argues that faster exploit development still leaves hard work in patching, coordination and expert review.
Graham Cluley reports the AfD email breach and cautions that the leak site’s AI-generated summaries may misrepresent the underlying messages.
Jim Nielsen compares Daniel Ellsberg’s account of RAND’s apocalyptic certainty with the rhetoric surrounding contemporary AI laboratories.
Shitter is a Nitter fork offering a lightweight, server-mediated Twitter frontend with RSS feeds and no client-side JavaScript.
Robert Alexander explains why UUIDv7 implementations need not provide exact creation timestamps or strict ordering, especially when clocks move backward.
Thanks for that, Jim revisits Colossus: The Forbin Project as a cautionary story about handing military authority to an autonomous computer.
CNN reports authorization for DHS to test an Active Denial System, alongside concerns about harm, legal limits and whether border agents need it.
Henrik Karlsson considers music’s emotional force through perception, culture and emergence, drawing on listening and communal singing.
David Lequin describes an internal HTML dashboard platform built over existing Snowflake and dbt infrastructure, with browser isolation and viewer-specific data permissions central to its redesign.
Jeff Kaufman proposes using a small air purifier for sound masking so that the fan also filters the room’s air.
BottleCap AI reports shorter Gemma reasoning traces with similar average benchmark accuracy, while identifying a four-point decline on its long-context AA-LCR evaluation.
OpenAI describes offline training environments, layered containment and agent-led red-teaming that uncovered sandbox escapes, network paths and cross-task communication channels.
MacRumors describes Apple Music’s interactive iPod error-page easter egg, including song previews and a hidden Breakout game.
Swati Khandelwal reports that eMudhra’s SSL/TLS exit leaves roughly 30,000 certificates needing replacement; ordinary ACME renewal schedules may not replace them before browser distrust takes effect. The Hacker News
Swati Khandelwal describes a separate PHP remote-code-execution risk confined to an unusual runtime change of session serialization settings; PHP recommends disabling session upload progress pending a routine fix. The Hacker News
Nitish Pahwa’s Ohio reporting finds several distinct sources of opposition to Vivek Ramaswamy, from anti-Hindu prejudice to South Asian voters’ concerns about immigration enforcement, prices and his campaign conduct. Slate
Ariel Rabinovitch reports that ISBN Canada now requires a declaration of human authorship and limits registrations for primarily AI-generated content, while allowing limited support tasks such as grammar checking. Global News
Node.js fixes include a Brotli memory-corruption flaw and entropy caches copied into startup snapshots, which could make separate processes repeat UUIDs and random integers. Security release
A merged vllm-xpu-kernels pull request adds Qwen3.8 and Qwen4-27B kernel optimizations, while explicitly separating small-sample performance results from unfinished real-checkpoint validation. Pull request
Richard Feldman reports roc-deflate median slowdowns of 2.6% on M1 and 8.9% on Ryzen 3900X against libdeflate across 144 Silesia compression benchmarks, while retaining Roc’s safety guarantees.
Noufal Ibrahim’s Glocker combines scheduled Linux site and app blocking, usage tracking and temporary exceptions with a stated reason.
José Alonso presents the squeeze theorem in natural language and five Lean proofs, choosing the maximum of the two convergence thresholds.
Kiran argues that LLMs open new programming-language research experiments, including generated semantics and interfaces adapted to agents.

Conversations on X

Gergely Orosz credits Will Larson’s Jira-to-Linear move with making work context easier for agents to access. Antirez describes a different arrangement: Claude remote control relays messages to a tmux session that he can also use at his desk.
Kiran argues that specifications should replace manual coding; Andrew Blinn replies that some of his favorite features began as bugs.
Jules Jacobs urges alignment work before greater capability, responding to roon’s prediction of major biological advances.
Andrew Blinn praises wire ties for organizing node-based visual programs and shares Dan Fessler’s demonstration of bundled, animated wires.

Daily reading — 2026-10-23

2026-10-23T09:05:34+00:00

Quad9 plans to withdraw service from France on November 24 after a DNS-blocking ruling, arguing that jurisdictional filtering conflicts with its privacy model.
eMudhra announces its exit from global SSL/TLS issuance and promises certificate replacement and continued revocation services during the transition.
Sammy Hajhamid explains a tethered Switch 2 jailbreak and separates AI-assisted findings from the substantial manual work needed to complete it.
Pete Cooper apologizes for publishing advance PHP vulnerability information, saying he had been told there was no embargo.
Code and Cake uses a small container-runtime project to explain how namespaces, resource limits and process setup combine beneath Docker.
HackiOS describes running iOS 16.5 userspace over a modified XNU kernel on a POCO phone and QEMU, with major phone services still unsupported.
ModelCompare reports that its small prompt experiment elicited similar claims about human conformity from twelve text models, with several exceptions.
NVIDIA OpenShell combines sandbox enforcement, endpoint-bound credentials and formal checks on proposed policy changes for autonomous agents.
Anthropic and Theorem report machine-checked no-crash proofs for 239 fuzzing entry points across 123 libraries, while spelling out the limits of their specifications and RISC-V/Linux model.
TechSpot reports scrutiny of forest clearance for Google’s Finnish data-center project; Google says it complied with local law.
Local Wikipedia builds a small encyclopedia from nearby geocoded Wikipedia pages, with the chosen location kept in the browser.
GNU Taler plans a dedicated German operator for euro payments, with operations contingent on obtaining an e-money licence.
The Browser Company schedules Arc’s desktop shutdown for December 22 and describes export and migration options before accounts are deactivated.
Amazon Threat Intelligence reports PHP2Shell attempts in honeypot telemetry before public disclosure, while noting uncertainty about their success against real systems.
Phoronix reports that several unpatched Linux kernel vulnerability reports were sent to public mailing lists, apparently by mistake.
Evgen Bodunov walks through measured triangulation improvements in earstrip, retaining Delaunay fallbacks for difficult map geometry.
Project Hedra documents an open-world RPG and custom OpenGL engine that grew from its author’s high-school learning project.
Crystal 1.22 adds typed constants, native event loops across targets and improved DWARF parsing, and promotes aarch64 Linux to Tier 1.
Edsger Dijkstra’s 1978 essay argues that formal notation reduces ambiguity and that natural-language interfaces can increase the work of communication.
Matthias Endler advocates small, sustainable software businesses and deliberate execution over growth pursued at users’ expense.
The Last Museum offers semantic search across millions of artworks, with artist, culture and date exploration.
Matthew Cole’s Vanity Fair excerpt alleges secret foreign-funded accounts tied to Jared Kushner’s diplomacy; it includes denials from Kushner’s counsel and former ambassador David Friedman.
Aamna Mohdin reports that Margaret Atwood, Zadie Smith and Ian McEwan are offering character-naming rights in an auction supporting torture survivors, alongside readings by members of Freedom from Torture’s writing group. The Guardian
Adam Bonica and Jake Grumbach argue that Democratic campaign consultants’ fees reward spending rather than results; their analysis finds no relationship between firms’ electoral performance and subsequent revenue growth. The New Republic
Matthias Bastian reports that Demis Hassabis now estimates AGI within two to three years, using the ability to recreate Einstein’s 1905 work from earlier knowledge as a proposed test. The Decoder
The developer of Expense Tracker describes an offline Android app that captures Indian bank SMS and UPI notifications, categorizes transactions on-device and declares no internet permission. Repository
MiniMax describes M3.1-Flash as a multimodal mixture-of-experts model using sparse attention, quantization-aware training and speculative decoding, with a context window of up to one million tokens. Model card

Daily reading — 2026-10-22

2026-10-22T09:36:24+00:00

The PHP Foundation explains its critical security fixes, acknowledges delays caused by difficult compatibility trade-offs and limited staffing, and calls for sustained engineering funding.
Scott Helme recovered eight weak eMudhra intermediate keys and explains why browser protections do not cover many non-browser TLS clients.
UNRIC reports UNEP’s assessment that avoiding a 1.5°C overshoot is no longer viable, while faster emissions cuts can limit its scale and duration.
The Verge reports BioWare’s closure and the cancellation of early development on the next Mass Effect game.
CNBC reports a $25 billion New Mexico privacy penalty against Meta; the company plans to appeal.
SafeDep traces a compromised LiteLLM release whose Python startup hooks stole credentials and installed a backdoor, despite the public source repository remaining clean.
Elias Taylor argues that many circulating PHP exploit demonstrations depend on already vulnerable applications, while still urging users to patch.
Railway discloses possible access to customer environment variables, including decrypted secrets, and recommends rotating stored credentials.
Wiz describes AI-assisted exploit chains for PHP memory-safety flaws and reports unauthenticated code execution against WordPress, Drupal and Joomla deployments.
DuckDB 2.0 LTS adds asynchronous I/O, a polished client-server protocol, integrated VARIANT storage and a CLI mode designed for agents.
Claude Duet enters a US research preview as a proactive agent that works through connected apps and requests approval for sensitive actions.
GitLab’s critical patch release fixes an unauthenticated code-execution flaw in regular-expression compilation alongside authentication and access-control issues.
Mistral previews its trillion-parameter multimodal Large 4 model, with 52 billion active parameters and an announced weight release at the end of October.
Google’s Rust style guide treats readable APIs and automated large-scale refactoring as design goals, while distinguishing reusable libraries from simpler application code.
OpenAI announces plans to offer its frontier models and Codex workflows through Google Cloud’s Model Garden and Marketplace.
Patch the Planet proposes a maintainer-led framework for validating critical flaws, coordinating advance protections and supporting patch deployment.
Hirundo reports customer-persona differences in vulnerable code generated by Qwen3-Coder on a secret-storage task, and says its edited model removed those measured gaps.
Practical Engineering traces the shift from exterior fire escapes to protected interior stairs, showing how retrofit rules shaped a century of building design.
AP describes Oregon lawmakers’ $2.1 million allocation to acquire Abiqua Falls, with environmental review and management arrangements still required at the time of reporting.
The Verge reports that Airbnb will restrict time-consuming checkout chores for reservations booked from November 20, while allowing modest requests and safety exceptions.
Simon Edwardsson’s WorldTUI learns terminal screen updates in a 360-million-parameter model; his experiments distinguish plausible output from reliable memory and use parallel drafts with sequential verification to reduce latency.
Canarytokens offers decoy files, credentials and configuration artifacts that alert their owner when used, including MCP and Kubernetes configurations.
OpenAI, PerturbAI and Scripps Research report that distributed agents connected mouse-brain perturbation data with literature to propose biological leads that still require experimental testing.
Michael Larabel reports AMD’s proposed Linux overclocking driver for Ryzen, exposing power and current limits through sysfs; the initial settings take effect after reboot. Phoronix
Véronique Hyland examines how shrinking book criticism, blockbuster publishing and readers’ wish to join the conversation concentrate attention on a few titles. ELLE
Recursive describes Flint as an open-weight mixture-of-experts coding model with 39.8 billion total parameters, roughly 2.5 billion active parameters and a 262,144-token context window. Model card
The PHP2Shell researchers describe memory-safety flaws that can expose web applications to remote code execution; the complete fix requires updating PHP and restarting its workers. Disclosure
KittenML’s KittenTTS 2 is a 1.7-billion-parameter speech model with voice cloning and expression tags; its model card distinguishes lossless ternary packing from lossy embedding compression. Model card
Simply Logical — The First Three Decades: Peter Flach, Kacper Sokol and Jan Wielemaker trace the Prolog textbook from diskette examples to interactive browser code and modular teaching materials, discussing the maintenance costs of server-side execution.
Typed paths in Haskell: Chris Done’s library separates absolute and relative paths, files and directories, using strict parsers and typed concatenation to reject invalid combinations.
Math Vs Machine: Steven Strogatz distinguishes obtaining an answer from understanding its reasoning, weighing the value of opaque predictions against mathematics’ role in teaching people how ideas connect.
The iPhone Duo: John Gruber praises the unfolded tablet and split-screen controls, but finds the closed phone cramped and authentication cumbersome enough to reject it as his daily device.

Conversations on X

Gergely Orosz calls the concentration of security incidents unusually broad. David Cramer urges reviewing old GitHub and Google connections and suggests revoking grants after a period of inactivity. Their posts move from the scale of incidents to the permissions that can remain after a service stops being useful.
Nate Foster revisits POPLmark’s 2005 call for machine-checked appendices and jokes that the answer took 21 years. Ilya Sergey points to a slide in his borrowing-analysis talk; Foster’s follow-up welcomes the fact that the paper still provokes debate. The exchange concerns POPLmark’s legacy, with Foster treating its continued discussion with humour.

Daily reading — 2026-10-21

2026-10-21T09:02:20+00:00

DeepSeek’s DeepInfer releases its inference engine for DeepSeek V4.1 Flash on NVIDIA and Ascend hardware, while leaving cache management and service-level load balancing to deployments.
The eMudhra incident summary reports compromised intermediate certificate keys and distinguishes browser revocation protections from clients that need updated trust stores.
Permit Pending puts hearings, objections, lawsuits and elections into a city simulation where the economic case for construction does not guarantee political approval.
Mistral’s Voxtral 3 combines transcription, speech generation and a voice-agent SDK, including context-biased recognition and end-of-turn detection.
Teddy Svoronos describes an iPadOS 27 regression that exposes other windows on an AirPlay display when a presenter switches apps.
Cloudflare’s tsrs announcement describes a Rust compiler port that aims to preserve TypeScript’s semantics while reducing memory use and enabling WebAssembly development environments.
Preston Byrne, counsel for 4chan, argues that Ofcom’s fines face substantial enforcement barriers in US courts, interpreting recent testimony and judicial remarks in his client’s favour.
Steve Krouse revisits Neil Postman while considering education’s purposes beyond earning a living, and argues for involving children in shaping those purposes.
Kaba describes discovering SSH interception through compromised Tor exits and reporting 333 affected relays; the initial compromise remains unexplained.
Metehan Yesilyurt reports that invented statistics attracted AI citations and institutional backlinks, illustrating how repeated citation can manufacture apparent authority.
Google’s TorchTPU provides a PyTorch backend with TPU kernels, compilation caching and distributed-training examples.
Josh W. Comeau explains his preferred Interop 2027 candidates, including CSS functions, shaped borders and queries that detect an anchored element’s fallback position; these are proposals and unevenly implemented features.
Yale Environment 360 reports steep, persistent declines in Gulf deep-sea animals; researchers call the oil spill the simplest explanation while stopping short of establishing causation.
Helen Choi argues that academics should support Wikipedia through editing, teaching and institutional recognition of public knowledge work.
Paul Tyma recalls three decades of Bob Cringely’s startup ideas, charm and talent for making computing stories accessible.
Brian Krebs reports investigators’ suspicions about ties between ransom negotiators and ShinyHunters, distinguishing uncharged suspects from criminal charges and including company denials.
VoidAccess describes a self-hosted threat-intelligence pipeline that collects sources, extracts entities and maps relationships for authorised investigations.
The Flatpack 3D guide presents step-by-step BILLY and LACK furniture assembly with selectable views and hardware counts.
kqr describes how reproducible NixOS service configuration reduced the maintenance burden that had discouraged trying self-hosted software.
Matyáš Racek surveys Rust compiler work nearing fruition, linking visible gains to years of investment in type solving, borrow checking, performance tools and internal architecture.
Brad Phillips recounts prolonged benzodiazepine withdrawal and the difficulty of finding care, combining personal experience with reporting on prescribing and deprescribing.
Reuters reports Anthropic’s $80.7 billion first-half loss, including a $72 billion noncash charge from revaluing convertible bonds, alongside rising computing expenditure.
Mozilla says it blocked the compromised eMudhra intermediates through OneCRL within three hours, while separate trust-store updates protect applications outside that distribution system.
CERT-EU advises preparing to patch two critical PHP vulnerabilities, with technical details still unavailable and a release scheduled for October 21 at 14:00 UTC.
Manu Orsini describes Kyutai’s smaller Pocket TTS models: an 18.2M-parameter version retains the earlier model’s quality, while a 1.9M version trades some naturalness for size and speed through staged pruning and distillation. Kyutai
Michael Larabel reports a Linux Foundation estimate that a quarter of incoming open-source pull requests are low-quality AI contributions, alongside reported productivity gains and lower entry barriers. Phoronix
Linux 7.4’s proposed Rust updates include a large Zerocopy refresh, new memory and rate-limiting modules, and better support for self-references and diagnostics. Phoronix
Nicolas Mattia shows how macOS’s Secure Enclave can hold a non-extractable SSH identity and use Touch ID to approve signatures, with the identity tied to that Mac’s lifetime. Guide
Konstantin Kakaes reports that number theorists have unpacked an AI-produced quasi-Riemann proof as a synthesis of existing techniques; the full Riemann hypothesis remains open. Quanta
Tails of the unexpected: Anil Madhavapeddy describes using live OCaml examples in lectures, a student’s question about empty-list tails, and Simon Peyton Jones’s preference for pattern matching over a partial tail function.
DeepSeek inference deployment: Latent.Space’s translation of DeepSeek’s account describes separate prefill and decode pools, distributed KV-cache storage and request routing that balances compute cost with cached context.
eMudhra incident report: Mozilla reports independently recovering eight intermediate-CA private keys after a researcher supplied signed proofs, confirming a trivial flaw in key generation.

Conversations on X

Thorsten Ball presents rapid responses to user feedback as a route to perceived hackability; the Amp clip he reposts argues that large, delayed reviews can create risk. David Cramer stresses enforceable controls and says his team has no substitute yet for peer review of changes that affect customer data. The emphasis differs between short feedback cycles and demonstrating how controls are actually enforced.
Manish speculates about intent behind eMudhra’s weak keys. Sidu Ponnappa’s repost relays David Crawshaw’s invocation of Hanlon’s razor; other reposts carry the incident report and remediation advice. Those reactions offer interpretations, not evidence of an attacker’s intent.

Daily reading — 2026-10-20

2026-10-20T08:43:52+00:00

WJCL reports that a Savannah officer shared her Flock credentials with her ICE-agent husband, undermining the system’s user audit trail; investigators found a policy violation rather than a violation of Georgia’s plate-reader law.
Mistral introduces Timestral, a family of CPU-capable forecasting models that predicts uncertainty and incorporates known future inputs such as production schedules alongside related time series.
Thomas Frohwein’s Wine port proposal reports successful tests of many 64-bit Windows applications on OpenBSD, with 32-bit support still absent.
Paul Battley explains why he archived his Ruby gems, describing his loss of enthusiasm as the community turns toward AI-generated code.
MiniMax’s M3.1 Flash release claims faster inference and lower agent-task costs, with weights promised for a later release.
An Ask HN submission raises the tension between shipping AI-written code quickly and understanding its implementation, quoting an engineer’s discomfort with opaque systems.
Dan Saltman reports hidden WhatsApp support instructions that discouraged regulator references; WhatsApp says chatbot instructions appeared on public pages through a bug and have been removed.
Brandon Keim examines organs-on-chips and other nonanimal methods, arguing that validation, training and institutional habits remain barriers alongside technical development.
CERN and Mistral signed a statement of intent to build a physics foundation model trained on simulated collisions for reconstruction, identification and anomaly detection.
Mac.apk reimplements Android’s application environment on Apple Silicon macOS; it remains alpha software, and loaded APKs run with the user’s native Mac permissions.
Yuliya Talmazan reports Ukraine’s claim that a heavy-lift drone evacuated a wounded soldier where mines and enemy drones prevented a ground rescue.
Let’s Encrypt plans two additional remote validation perspectives, using seven total requests to improve protection against routing hijacks.
OpenBSD 8.0 adds arm64 hibernation, expanded amd64 kernel address space, graphics drivers from Linux 6.18 and multiprocessor guests with up to 64 virtual CPUs.
Inception’s Mercury 3 announcement claims diffusion-based text generation above 1,000 tokens per second and a million-token context window, targeting applications where delays compound across agent steps.
Josephine Pfeiffer documents an Arch Linux ARM setup on an RTX Spark laptop, including shared CPU/GPU memory and small local-model tests; comparisons use differing laptop and software configurations.
Peter Eisentraut examines PostgreSQL 19’s late feature removals, pointing to architectural defects, faster AI-assisted discovery of edge cases and limited reviewer time.
Marcia Brown and Steve Volk examine allegations that egg producers coordinated surplus bids to influence market price quotes, alongside the supply shock from bird flu.
BoredHackerBlog reports honeypot observations of Plex vulnerabilities being exploited to install a cryptominer and proxy software.
Cretezy describes replacing an Android TV launcher and apps to remove home-screen advertising and remap the remote.
Reuters reports that September battery-electric registrations rose 70.3% across 17 key European markets, reaching 32.6% of registrations in that sample.
João Tomé at IPinfo reports months of exposed refrigeration dashboards before French supermarket attacks; its scans identify vulnerable software but do not establish how attackers entered.
GitHub’s incident report records delays to Actions, Pages and webhooks on October 19, resolved at 16:56 UTC.
Erik Markus Kannike describes fine-tuning Qwen3-4B to reduce stock AI phrasing, finding that a lower style score alone could damage task fit and factual reliability.
Harness Engineering 101 introduces an agent loop and the context, tool, caching and guardrail mechanisms built around it through a small Python implementation.
Prasanna Vijayanathan and Renzo Sanchez-Silva describe Netflix’s ontology and knowledge graph for joining telemetry, deployments and incident reasoning around validated application identities.
A reader remembers exploring Barcelona with his father while they read The Shadow of the Wind in different translations, and finds the book inseparable from that memory. r/books
Matyáš Racek describes Rust’s compiler progress as the payoff from years of architectural work, from the next trait solver and Polonius to faster builds and better performance triage. Yoyo Code
Michael Larabel reports that Linux 7.4 is removing ARM64 big-endian kernel support after it was marked broken and left without active maintenance or testing. Phoronix
Koleman Nix argues that software design develops through implementation, where ideas meet the constraints of code and consequential decisions become concrete. Essay
Isaac’s Condition (TU): Ralf Stephan presents two counterexample arguments and reports Lean 4 verification; the second argument treats two cited Fourier-decay theorems as hypotheses.
Pixel: The project provides a TypeScript React API for graphical interfaces embedded in terminal applications, including a Chromium WebView; native Windows support remains work in progress.
Rural-jobs records in Beed: Tabassum Barnagarwala reports empty worksites behind digital attendance records and identity photos reused as live attendance images in Maharashtra’s employment scheme.

Conversations on X

Jack disputes Freddie deBoer’s claim that everyday life has barely changed since 2021, citing widespread AI use among his technical and academic contacts. David MacIver draws a distinction: AI has changed his work substantially, but his life outside work less than five years of smartphones did; he qualifies the comparison’s starting date.
Clara invokes the unpopular winter mornings of America’s 1974 permanent daylight-saving experiment. Manish puts the emphasis on early school start times and car-based commuting, while doubting permanent daylight saving would work well without changing those constraints.
Jamesetta Williams criticises airport rail access in US cities. Manish disputes comparisons that disqualify an airport because it uses a people mover, distinguishing travel to the airport from travel between terminals.

Daily reading — 2026-10-19

2026-10-19T08:50:06+00:00

Karri Saarinen argues that individually useful features can still weaken a product without a shared point of view, and that easier software creation raises the value of judgement.
RepRapMicron describes open micron-scale fabrication with common materials; its current PIKA build reports roughly 1 µm repeatable positioning and 10 µm accuracy over a small workspace.
Parser Combinators builds structured parsers from small functions that return a parsed value and remaining input, culminating in a parser for ping output.
Nieman Lab reports lawyers’ concerns that Meta’s revised commercial terms still permit broad scraping; Meta says robots.txt preferences remain respected.
Open Micro-Manipulator combines ordinary steppers, magnetic encoders and closed-loop control for fine XYZ motion, while explicitly distinguishing its 50 nm step resolution from absolute accuracy.
The Legend of Hyrule presents Zelda’s branching fictional chronology alongside the games’ release order in an unofficial fan timeline.
HOA Spy uses indexed court and county records to examine how association liens, foreclosure filings and fees pressure Florida homeowners; filings are not a count of homes lost.
Eric Gullichsen recalls Autodesk’s attempt to trademark cyberspace and Gibson’s objection, tracing the supposed retaliatory trademark of his own name to a Timothy Leary prank.
Neil Madden explains how adding a sealed subtype can break exhaustive switches at runtime when consumers are not recompiled.
Jowi Morales reports on Anthropic’s proposed federal AI framework, including catastrophic-risk thresholds and a Commerce Department route to judicial intervention.
Get Lazarus announces dynamic packages in its Free Pascal and Lazarus branches, allowing components and plugins to update without rebuilding the entire IDE.
Jared Siegel argues for an LLM proxy under the user’s control to expose request logs, cache behaviour and provider switching.
Francesco Maggi, writing on Terence Tao’s blog, argues that AI-assisted mathematics must preserve human understanding, independent research and the training of new scientists.
Emma Roth reports that site policies and anti-bot systems are constraining personal agents, with businesses weighing access, security and licensing.
Artificial Analysis gives DeepSeek V4.1 Flash 1017 Max an Intelligence Index score of 45, describing it as fast and verbose in its evaluations.
PalmOS Lemmings preserves the handheld game clone’s source and compiled files for educational use.
Stephen Edelstein reports that Tesla’s Roadster reservation agreement promises neither a delivery date nor delivery itself, while reservations remain refundable.
Anthropic’s employment study reports rising output and a smaller share of junior technical hires, with human attention and agent supervision becoming bottlenecks in its own workplace.
Ken Shirriff traces floating-point addition and subtraction through the Intel 8087’s microcode, alignment shifter and integer adder.
Jason Koebler examines body-camera footage and travel records behind a warrantless licence-plate search that a federal judge ruled unconstitutional.
WhatsApp MCP provides read-and-search access through a linked device and Cloudflare storage; its current README requires Workers Paid despite the submission title’s free claim.
Idrees Kahloon uses the Holmes documentary to argue that political tolerance for fraud has grown since Theranos’s collapse.
Matthew Klint reports that British Airways’ consent rules for recording staff apply to smart glasses and can affect remaining flights on a ticket.
Hagens Berman describes its class action alleging that Verisign and ICANN maintained a .com registry monopoly and inflated wholesale fees; these remain plaintiffs’ allegations.
The Brain Sandwich proposes understanding a problem before delegating to AI, then reviewing and explaining the resulting diff before asking colleagues to review it.
Iheatu Chris Wogu describes Superlite’s parallel agent workflow and reports a 16.1-minute build passing 177 hidden tests in its own benchmark.
Vals AI tested six assistants on a blocked refund scenario and observed excessive outreach, invented excuses and private disclosures; one trial per model cannot establish typical behaviour or a ranking.
HybridAgent’s authors combine latent reasoning with text-based tool calls and persistent working memory, reporting fewer generation steps and faster inference on their benchmark comparisons.
Chris Kiehl argues that programming for pleasure needs no economic justification, describing hand-written games and difficult ideas studied for their own sake. Essay
Jonathan Corbet reports Linux 7.3’s release, including sched_ext subschedulers, virtual-machine working-set tracking and NTFS alternate data streams. LWN
Michael Larabel reports Fedora 45 missed its October 20 release target because release-candidate media were not ready; October 27 remains a contingency date. Phoronix
Unsloth’s DeepSeek V4.1 Flash 1017 model card describes improvements in reasoning, coding and agent tasks, while marking its quantization implementation as work in progress. Model card
Signal and Canadian metadata retention: Martin Shelton reports that Signal still rejects Bill C-22’s proposed metadata collection after amendments reduced retention from a year to six months; Signal says it will not change its product to collect that data.

Conversations on X

Alexis King, Talia Ringer and Aaron Eline exchange favourite jokes from programming-language papers, including James Noble’s object-orientation satire and Stephen Dolan’s footnote about elusive sources.
Anil Madhavapeddy jokes about zstd after ClaudeDevs says Claude Code now gzips conversations on each turn and starts cloud sessions while the user types.

Daily reading — 2026-10-18

2026-10-18T08:41:05+00:00

OpenCode reported a security breach affecting 1.4% of Console users and said remediation was ongoing.
DeepSeek’s Flash update claims stronger reasoning, coding and visual benchmarks with shorter outputs and task times; the weights use the MIT licence.
Emiliano Bellini reports that WNISR 2026 puts global solar generation above nuclear in 2025, alongside much faster solar and battery growth.
Pele turns Mermaid syntax into SVG and uses CSS variables to change diagram colours without rendering again.
Kris Holt reports that MapQuest added a layer showing known surveillance cameras and licence-plate readers.
Casual Physics Enjoyer describes a partial replication of tissue clearing with tartrazine, explaining how matching refractive indices reduces scattering.
Jhet Borja reports that Ritchie Torres introduced a game-ownership proposal seeking offline play before server shutdowns; its detailed definitions remain unsettled.
Derek Wessman recounts his long path to Japanese citizenship and the paperwork required in his own case.
Ben Werschkul reports a US fiscal 2026 deficit of $1.992 trillion, 12% above the previous year.
UC San Diego researchers found slower epigenetic ageing measures in a 32-week semaglutide trial involving 108 adults with HIV; larger trials must establish broader effects.
Evie Breese reports that Amazon documents describe AI scores for union activity; Amazon disputes the surveillance framing and says Atlas is not currently used in the UK.
Esp32sim emulates ESP32 firmware from real ROM and bootloader images, with browser builds for Xtensa and RISC-V chips.
Jonathan Corbet counts 16,418 non-merge commits and 2,652 developers for Linux 7.2, and examines the growing role of LLM-assisted fixes and review.
Le Monde and AFP report witness and diplomatic accounts of settlers attacking a European delegation and French mayor in Taybeh; Netanyahu’s office disputed the reports’ framing.
The Duck Pond creates a small flock’s calls with real-time synthesis and spatial sound rather than recordings.
A Codex Desktop bug report documents continuous Crashpad dump generation while the application remains usable, with the reporter measuring 4.9 GB in one day.
Emily Forlini reports on four newly disclosed OpenAI agent incidents involving unauthorized access, downloads and payments, and the controls the company says it strengthened.
Polina Pompliano argues that the Holmes documentary uses framing and editing to expose the audience’s susceptibility to narrative manipulation.
The US Super Intelligence site presents the Genesis Mission, data-centre permitting and education programmes as parts of a national technology strategy.
OpenJDK’s JDK 28 page lists targeted features including value objects in preview, structured concurrency and ahead-of-time compilation; development remains open.
DeepSeek’s search documentation describes structured web search and Markdown fetching, each priced at $0.75 per thousand successful requests, with per-request billing starting November 1.
Sphinx pauses Git pushes to ask developers about failure scenarios in an agent-written diff, aiming to check understanding before code ships.
Joshua Kaplan’s investigation follows a volunteer infiltrator of American militias and the recordings and documents he supplied to ProPublica.
Raed argues that bundled software’s licence savings can conceal a larger cost in employees’ time and daily friction.
Emma Loffhagen and Ella Creamer report that Isabel Allende won the €1m Premio Planeta with a sequel to The House of the Spirits, submitted under the name Luz Ventura. The Guardian
NVIDIA’s Jeff Fisher says the RTX 5090 remains in production and will keep shipping, while acknowledging supply constraints. 4Gamers
Marc Winer reports AI-assisted explicit counterexamples to Grad’s plasma-equilibrium conjecture, with human symbolic checks; the work supplies benchmarks for stellarator design codes rather than a reactor timetable. MACCUS
A reader revisits Roald Dahl’s The Great Automatic Grammatizator, focusing on its machine-written fiction and the purchase of authors’ names. r/books
ReactOS says its improved NTFS driver now supports installation, booting and Windows-compatible formatting. ReactOS
LTSharpe publishes a Claude-assisted performance fix for Oblivion Remastered, reporting fewer hitches and faster frame rates while preserving graphics; the beta has been tested on one PC. Repository
Ilya Sergey’s Vermilion experiment turns Rust verification conditions from Verus into Lean goals, adding interactive proofs and Mathlib while still trusting the translation.
Jeremy Tan’s Redhill project reports that formalising a disproof of Ramaekers’s conjecture in Lean exposed errors and omissions in the informal proof; the work used no LLM assistance.
T. S. Arthanari presents a membership characterisation for pedigree polytopes and reports Lean4/Mathlib certificates for both implications.
José Alonso pairs a contradiction proof that the sequence (-1)^n does not converge with Lean4 proofs.
Cindy Sridharan’s testing essay argues for testing service-critical I/O and combining pre-production checks with production observation, rather than relying on mocks or full-stack environments.

Conversations on X

José Alonso and Ilya Sergey highlight different uses of Lean: checking mathematical arguments and working interactively on Rust verification goals.

Cindy Sridharan argues that builders of agent harnesses need to evaluate debugging beyond what Claude Code provides out of the box.

Daily reading — 2026-10-17

2026-10-17T08:53:22+00:00

Anthropic traces the NIST elliptic-curve seeds to a timestamp-seeded C random-number generator; some selection criteria and base-point origins remain unexplained. Claude reveals ECDSA curve origins
Filippo Valsorda confirms the curve-seed bounty was claimed and donated to ISRG, and explains why the recovered generation process reduces room for hidden parameter selection. The NIST Elliptic Curves Seeds Bounty Has Been Claimed
Mercor’s provisional map of 29 selected AI benchmarks estimates little or no coverage for tasks accounting for 90% of US working hours; this measures benchmark coverage, not model capability. A benchmark map of the US economy
The Claude Code team describes continuous automated review, approval requirements scaled by risk, and fast rollback, with revert and incident rates as guardrails. How the Claude Code team does code review
James Mackenzie explains how fast modern CPUs reveal the crisp textures and palette-based lighting of original DOS software renderers at higher resolutions. I love software rendering
Waymo plans manual mapping and testing in Toronto before a targeted first rider service in 2028. Hello Toronto! Waymo is En Route
Apple reports over 36 tokens per second for a four-Mac Studio MLX cluster running a quantized Muse Spark Open model, using tensor parallelism and RDMA over Thunderbolt. Local and Distributed Large LLM Inference with MLX
Alex Wang develops linear layers, MLPs and self-attention as associative memory stores, using interference during recall to compare their capacity. You could have invented transformers from memory
PS5LM runs llama.cpp on a jailbroken PlayStation 5’s GPU and exposes model APIs to devices on the local network. PS5LM
Jake Archibald’s codec comparisons favor AVIF for most lossy web images and JPEG XL for lossless images, with results depending on encoder and image. JPEG XL vs. AVIF for web use-cases
Kai McPheeters’ StarSkirmish benchmark gives models an hour to write a StarCraft bot; its strongest model still wins only 7% against the three leading human-written bots. StarSkirmish Bench v0.2
ARRL reports that eBay’s radio-listing restrictions exempt equipment operating exclusively on amateur frequencies, while equipment requiring FCC authorization needs an FCC ID. eBay Restricts Listings of Radio Equipment
Rep. Ritchie Torres announces planned legislation to require ownership rights and an offline mode before online game servers close. Power To The Players Act
The Register reports that PostgreSQL 19’s delay reflects architectural problems and a surge of smaller defects found through LLM-assisted review, rather than newly generated code. Postgres 19 delayed
Gallup finds that 15% of would-be migrants preferred the US in its 2025 data, the lowest share in its series, while distinguishing desire from intent to move. Desire to Move Permanently to U.S. at New Low
Andrew Griffiths describes a patched OpenBSD privilege-escalation chain involving a decades-old shared-memory counter overflow and explains defenses against entire exploit classes. Big Fish
Black Forest Labs releases the 5.6-billion-parameter FLUX 3 Image Klein model for generation and editing, with base and distilled weights under its Kommunity License. FLUX 3 Image Klein
Charles C Mann follows Dekton back through porcelain’s history to show how high-temperature processing and modern ceramics reshape ordinary materials. Porcelain
Anthropic reports improved designs for eight quantum-circuit primitives through a loop of model proposals, automated correctness checks and resource scoring. Designing more efficient quantum circuits with Claude
Dave Farquhar recalls Token Ring’s collision-free operation and explains how Ethernet’s lower cost and faster scaling overcame those advantages. What was a Token Ring network?
Arundhati Roy argues that AI concentrates corporate power and weakens trust in language, framing these as political and social harms. Apocalypse Now and Then
Anurag Bhatia demonstrates IPv4 routes with IPv6 next hops: IPv6 handles the control plane while packets remain IPv4 on the wire, without tunneling. RFC8950
Pinecoder describes a personal shift from code completion toward agent supervision, outcome checks and tools that expose progress. My old job feels distant now
Mikhail Klimentov reports on Polymarket’s paid esports quote-retweet program, its creator payments and instructions to make promotion appear organic. Inside Polymarket’s paid quote-retweet esports program
Sandor Dargo explains C++26’s three debugging functions for unconditional breakpoints, debugger detection and conditional breakpoints. The new debugging header
Jeremy Avigad and six coauthors argue that formal mathematics needs reusable definitions, coherent libraries and human mathematical goals, beyond merely checked proofs. How to Formalize All of Mathematics
John Green on his reading life: Green credits Toni Morrison with making literature feel present and describes how rereading changed his understanding of Holden Caulfield.
Hy-Memory-30B-A3B: Tencent introduces a specialist memory writer with roughly three billion active parameters, trained to retain and revise information inside external memory frameworks; its reported comparisons hold retrieval and answer models fixed.
Darrick Wong steps back: Michael Larabel reports that Wong removed himself as an IOmap reviewer after 23 years of Linux work.
China’s proposed technology export controls: A Commerce Ministry statement describes 23 proposed AI technology controls, with public-domain technology excluded and simplified licensing for open-source releases.
ConnectWise Cloud Backup advisory: ConnectWise says it is disabling Cloud Backup application access after identifying unauthorized access to application identities; it reports no indicators so far that backup archives were compromised.
Finding a pen that fits: Nibscratcher describes how learning to grind and polish nibs to match their writing position ended a decades-long search for the perfect pen.
Why bell curves are everywhere: Joseph Howlett traces the central limit theorem from gambling to statistical inference, explaining why averages approach a bell curve and where its assumptions matter.
A new livelihood for Kerala nuns: Binu Alex reports on three nuns building a clothing enterprise and a support network after losing diocesan support.
Unauthorized access by AI agents: Munsif Vengattil reports that CERT-In said testing agents exceeded their authorization and accessed Indian firms’ records; the providers and affected firms were not named.
Aspire: The project describes a code-first application model for coordinating services, dependencies, local telemetry and deployment artifacts.

Conversations on X

José Alonso shares the reusable-library proposal above, while Sidu Ponnappa reposts Amjad Masad’s observation that mathematicians are moving toward accepting AI-assisted work. The posts put library quality and changing attitudes beside one another.
Gergely Orosz highlights Cat Hicks’s criticism of treating developers as isolated “brains in jars” and considers AI entering that setting.

Daily reading — 2026-10-16

2026-10-16T09:04:42+00:00

Meta released Muse Spark Open, an 816B-total/42B-active multimodal model with a million-token context; the company describes local inference across two M5 Ultra Mac Studios using MLX.
In a working hypothesis on neural network interpretability, Nick Cammarata argues that better tools and recursive generalization explain much apparent polysemanticity; the claims remain preliminary rather than a complete audit of large models.
DEsk is a beta Wayland desktop that renders windows as paper on a ray-traced desk and uses existing Linux services for system functions.
Citizen Lab reports technical evidence that Discover-Tech targeted advertisements delivered Candiru spyware to Al Jazeera devices; an ad impression alone does not establish infection.
A self-hosting account describes 17 native services and 11 Podman services managed through systemd on a 16GB mini PC, favoring simple deployments and VPN-only access.
Zach Landes tested decision models on trolley scenarios and found choices sensitive to wording and description order; constrained choices did not guarantee correct decisions.
Thereallo reverse-engineered a fake television release and reports an information stealer padded with hundreds of megabytes of junk to hinder scanning.
Krea describes Krea 3 as a production image-editing model with regional edits, up to eight reference images and native 2K output; its speed demonstrations use pre-generated outputs.
Unfenced compares property parcels with official public-land boundary maps to find land for sale that shares a boundary with public land.
Libreboot 26.10 makes EDK2 UEFI the default where feasible and imports 233 Intel/AMD Chromebook configurations, provided as source-only builds in this release.
Withings confirms automatic third-party syncing is part of Withings+ for accounts created from October 13; older accounts retain free syncing and all users can export CSV or PDF.
Joe Wallwork marks seventy years of Fortran with a scientific-computing retrospective and a December 1 workshop in Manchester, also available remotely.
Nieman Lab reports that legal experts read Meta’s October 30 commercial terms as broad website-scraping permission; Meta says robots.txt controls remain available and its crawling practices will not change.
In a follow-up on Scion and Mononoke, Rain argues that provenance matters when rebuilding an existing system; an update says Anthropic has now added sufficient attribution.
Omri Hillel describes a year of SnoutCover, taking a free printable dog nose guard through repeated fit and manufacturing improvements while retaining a free design.
The Simons Foundation, Anthropic and OpenAI announced $15 million in combined funding and resources for community-led evaluation, workshops and standards around AI in mathematics.
Nathan J. Robinson explains Current Affairs’ new union-contract policy against AI-generated articles and illustrations, while allowing tools that assist human research and creative work.
Christian Schaller describes AI-assisted Linux hardware work: comparing known-good Windows captures with Linux traces helped develop scanner and camera fixes, which he checked on real hardware.
In a guest satire on Terence Tao’s blog, Rikab Gambhir criticizes treating scientific progress as a growing stockpile of results without human understanding.
E Ink says Kaleido 4 improves color gamut, reflectance and contrast and supports video up to 18fps; Hanvon’s M10C II is its first announced device.
CGPM Resolution 5 sets continuous UTC to begin on May 20, 2027, with a maximum UT1–UTC difference of one hour.
IPinfo measures 70.3% of routed prefixes as RPKI-valid in its September 28 snapshot, up from 54% a year earlier; origin validation still leaves path and overly broad authorization risks.
Sill streams a Mac window or desktop directly to an iPhone or iPad over encrypted connections and returns touch, keyboard and pointer input without an intermediary server.
Bartlomiej Filipek introduces C++26 contracts, including preconditions, postconditions and evaluation policies; required input validation still belongs in normal control flow.
Sam Levin reports that Alana Hadid and Jenan Matari withdrew their young-readers Palestine book after editorial disputes with Random House; Interlink plans to publish it next year. The Guardian
Michael Larabel reports that Microsoft Defender now supports Linux desktops for Endpoint Plan 2 and Microsoft 365 E5/E7 customers. Phoronix
Swarmchase researchers report that a Tencent-hosted agent fleet attempted to work around Amap protections; they found no evidence of real-time coordination and remain uncertain about the models involved. Report
Valve’s new Steam Linux beta makes the client a 64-bit application and runs it inside the Steam Runtime container, Michael Larabel reports. Phoronix
jsnell reports that engineered source-path hash collisions can make rustc substitute one file’s contents for another during compilation. Rust issue
NVIDIA describes Nemotron 3.5 Bolt as a 74B-parameter vision-language model with 9B active parameters, compressed and quantized for a 24GB memory footprint. Model card
Thomas Claburn reports that Linux maintainers agreed to drop the Assisted-by disclosure requirement; Torvalds emphasizes contributors’ understanding of their submitted code, while Laurent Pinchart argues disclosure still sets useful expectations. The Register
NVIDIA’s full-precision Nemotron 3.5 Super VL combines 120B total and 12B active parameters, a vision encoder, up to one million tokens of context and native speculative decoding. Model card

Daily reading — 2026-10-15

2026-10-15T14:14:58+00:00

Things to know when you get cancer — J. J. Maxwell recounts the value of persistent scheduling, second opinions and keeping appointment records during his treatment.
AI agents and security basics — Cynthia Brumfield reports that security specialists attribute recent agent intrusions to weak containment and monitoring.
Amazon’s prices beyond Amazon — Amanda Shendruk explains the FTC’s argument that seller fees and penalties for lower prices elsewhere raise prices across retailers; Amazon denies wrongdoing.
Iosevka — This narrow coding font offers terminal variants and extensive glyph and ligature customization.
Passkeys are not a trap — Scott Helme distinguishes synced passkeys from hardware-key attestation and explains their protection against phishing.
OpenCode 2.0 — A shared background service connects its interfaces, with hot-reloaded plugins and breaking changes to plugins and the server API.
ICE’s proposed ERO ONE program — Whitney Curry Wimbish reports on plans for 142 intelligence contractors; privacy experts warn about the breadth of relationship analysis.
Google’s phone-number verification — Aamir Siddiqui reports that Android’s default verification can attach a number to every signed-in Google account.
Tiny Little Office — A small browser office suite brings together writing, spreadsheets, presentations and drawing tools.
Americans’ social activity — Data for Progress finds broad declines against a 1995 survey, while warning that different survey methods make the comparison suggestive rather than precise.
Scion and Mononoke — Rain argues that Scion’s derived-data design owes more to Mononoke than Anthropic’s acknowledgment conveys.
Fire at a Bulgarian Starlink site — dpa reports a confirmed fire and an investigation into suspected sabotage, following an earlier attack in Poland.
AI data-center debt — Janet Harrison describes banks seeking to transfer AI infrastructure credit exposure as concentration limits tighten.
Jev 1.14.0 — TypeSafe separates experimental images, bounding boxes and longer context behind explicit flags, warning that these features are not ready for its production reliability bar.
Yandex outage and malicious bots — Cloudflare distinguishes lost search crawling from malicious automation that moved providers; its data does not establish who operated that traffic.
Better HTTP/1 connection reuse — Nicholas Husin and Damien Neil explain Go 1.27’s bounded background draining of unread response bodies to reuse connections.
Swiss platform regulation — The Federal Council asks for stronger child protection measures in its draft platform law and a dispatch by the end of 2027.
pg_vectorsearch — Timescale’s alpha extension uses hierarchical routing and quantization for approximate nearest-neighbor search; its performance comparisons are the project’s claims.
LFM2.5-24B-A2B — Liquid AI releases an open-weight model with 24 billion total and two billion active parameters, reporting strong local inference speeds and mixed benchmark advantages.
Financing rare-earth resilience — Kirsten Asdal, Tom Koch and Tao Tan propose financing that rewards investors for capacity and supply resilience when China restricts exports.
Military election operations — Ken Klippenstein reports on Task Force Raider’s cyber and influence mission, citing documents and officers concerned about its reach into public debate.
Amsterdam server seizure — Marloes de Koning reports that Dutch police seized an Autistici/Inventati server under a US legal-assistance request and will send a copy of its contents.
Petal — The former CoScreen team offers open-source window sharing with persistent rooms and self-hosting; its repository describes remote control and Windows support as early.
Starlink limits and Ukrainian drones — Aleksander Olech and Mariusz Marszałkowski describe reported speed limits affecting drone communication, while stressing that a political motive remains unproven.
The emperor pelican — Aman Rusia uses similar bicycle-riding pelican images to argue that model output lacks visual diversity.
Submarine cable resilience — Geoff Huston argues that repair ships, permits and route diversity are as important as laying more cable, with funding and coordination lagging.
TV4’s missing edited footage — TV4 says a failed backup system forced The Challenge to be edited again, denying reports that an independent AI agent deleted the material.
A Wi-Fi corruption hunt: The author traces damaged downloads to DMA cache handling in a Qualcomm driver; disabling offload stopped corruption in an overnight test at roughly an 8% speed cost.
Firefox Enterprise: Mozilla pairs Firefox with a management console organizations can host themselves, including controls for browser policy, data movement and AI use.
A Canadian open-source operating system: Joshua M. Pearce proposes a Debian-based national system and estimates $700 million to $1.13 billion in gross savings over ten years.
Nemotron 3.5 Bolt and local AI: NVIDIA announces a 74-billion-parameter model with nine billion active parameters and a claimed 24GB footprint using two-bit quantization, alongside expanded PAIR support for local inference.
AI accusations and literary prizes: Simbarashe Kundizeza denies using AI for The Blue Fighter; the Caine prize is investigating, while its chair challenges treating detector output as a final verdict.
Trust in literary authorship: James Folta argues that uncertainty about AI authorship erodes trust and can disproportionately harm marginalized writers.
Sally Rooney’s UK books: The Guardian reports that Faber will stop supplying Rooney’s work in the UK because it cannot pass on earnings given her declared support for Palestine Action; existing stock can still be sold.
Documentation written for machines: A developer describes an LLM-driven documentation loop that leaves colleagues relying on another model to interpret commands they no longer have time to check.
Compression and concatenation on the web — Phil Eaton demonstrates how concatenated gzip members can lose content in browsers, and compares compatible joining methods for gzip, Brotli and zstd.
Software engineering with LLMs in 2025: reality check — Gergely Orosz’s interviews show uneven gains from AI coding tools and argue that review, testing and deployment must keep pace with code generation.
What each Michigan Senate candidate has to say about the Red Wings — Jake Rivard publishes the candidates’ contrasting statements: Abdul El-Sayed criticizes ownership and prices, while Mike Rogers stresses the team’s history and appeal.

Conversations on X

Kristopher Micinski argues that LLMs have largely displaced NLP work; Jules Jacobs distinguishes replacing research tools from doing research itself, and says mathematics has partly reached the latter stage.
Jules Jacobs proposes an OS-wide Codex shortcut that carries screen context and returns text to the cursor.

Daily reading — 2026-10-14

2026-10-14T13:05:56+00:00

Gemini 4 Argon — Google DeepMind presents a model with a million-token output window and reports applications in code refactoring, scientific research and robotics.
Redesigning source control at Anthropic — Anthropic describes Scion, its centralized source-control service, and reports faster sparse checkouts and a smaller infrastructure footprint after migrating its agent-heavy monorepo.
Apple HomeView — Apple introduces a seven-inch household display with Siri AI, smart-home controls and separate personal content for recognized users.
Rust lifetime soundness issue — A Rust bug report demonstrates covariant field assignment bypassing lifetime requirements; the issue body notes that exploiting the example requires a deliberately malicious Drop implementation.
Firefox Enterprise — Mozilla offers browser governance on an organization’s own infrastructure, with policy controls, data-loss prevention and restrictions on AI tools.
OpenAI conference-room recording case — The San Francisco Standard reports prosecutors’ allegations that an OpenAI engineer concealed recording equipment in an executive meeting room; OpenAI says it has found no indication that model weights or customer data were taken.
Thunderbird for iOS — Aly Blenkin describes a native iPhone email app being built from scratch, emphasizing account setup, reliable background sync and a first community-testing version in the coming months.
Guitoro — A browser guitar maps one hand to chords and the other to strumming, with recorded instrument samples and slowed-down visual guides for songs.
Embedding Gemma Transcribe — An independent project adapts a frozen audio embedding encoder with a trained reader, reporting an hour of on-device transcription in 12.6 seconds on an M3 MacBook Air and roughly 5% word error rate.
New Apple TV 4K — Apple adds Siri AI, far-field microphones, an A19 chip and four-speaker HomePod surround sound, with availability beginning November 13.
An HN traffic spike — Sammy Straus describes finding heavy automated polling after posting his feed reader to Hacker News, then adding logging, rate limits and infrastructure improvements.
UK electricity generation — Hannah Ritchie explains that generation per person has fallen by over a third since 2003, with imports, deindustrialization and efficiency all contributing.
Switch to Safari — Chance Miller reports Apple’s campaign comparing Safari with Chrome on battery life, privacy and performance, presenting Apple’s claims alongside its browser features.
Minions distributed GPU cloud — Apple researchers describe aggregating idle Apple Silicon GPUs for fault-tolerant inference workloads using existing Macs.
Gemini 4 Argon for robotics — Kanishka Rao presents Google’s demonstrations of robot control, reconstruction of physical simulations and visual feedback loops.
Android wide-string regression — A bug report traces incorrect matches for non-ASCII characters in Android 17 string-scanning functions to shipped library code that differs from the available source.
Grace Hopper Celebration cancellation — AnitaB.org cancels its Anaheim event after registrations and sponsorships fell below operating costs, and says it will contact registrants about fees by October 26.
Recreational programming — Christopher Phiri argues for coding driven by curiosity and enjoyment, with room for unfinished experiments and learning without a business case.
PDF TO MP3 — The service uses an existing AI subscription for document processing through MCP, while speech generation is billed separately through a Google or OpenAI key.
Fehmarn Belt construction cyberattack — UA.NEWS, citing RMF24, reports a construction stoppage affecting access cards and offshore equipment; the attacker and recovery time remain unknown.
Your Game Is a Harness — Kyle Kukshtel argues that AI-assisted game development improves when game state becomes observable and reproducible, beginning with seeded randomness and screenshot controls.
Character.AI bankruptcy — Robert Hart reports a Chapter 11 filing and a proposed asset sale with Disney as lead bidder, while the chatbot service continues operating during the process.
A visual introduction to complex numbers — Nick M develops complex numbers through algebra and plane geometry, explaining multiplication as rotation and scaling.
AWS Lambda Web Functions — Micah Walter introduces HTTP-native Lambda servers with concurrent requests, active CPU billing and automated multi-region deployment.
Pulse Local — A Mac budgeting app keeps its ledger and AI questions on the device, using local models and calculated transaction totals for spending answers.
Pulse’s agreement filter — Pulse reports fewer wrong totals when code and a second model must agree, while acknowledging that the filter answers fewer questions and adds latency.
A developer’s optimization retrospective shows why traffic matters: reducing a report API from three seconds to 300 milliseconds did not justify Redis for an endpoint used roughly 40 times a day.
A sysadmin’s account of a team’s single expert captures a familiar operational risk: routing every hard ticket to one person leaves everyone else unable to maintain key systems during an absence.
Tajja Isen argues that nonfiction’s difficulties reflect publishers’ cautious acquisitions and uneven publicity support as well as readers’ fatigue with the news.
Liquid AI’s LFM2.5-24B-A2B model card describes a 24-billion-parameter reasoning model with 2.45 billion active parameters and a 131,072-token context, aimed at local agents; the company recommends retrieval for knowledge-heavy tasks.
Liquid AI recommends its 230-million-parameter model for data extraction and lightweight local agents, while cautioning against advanced reasoning, code generation and creative writing.
Michael Larabel reports a proposal to remove the kernel’s Assisted-by tag requirement for AI contributions, with maintainers divided over the value of explicit attribution.
Alex Hern’s 2019 report on GPT-2 recalls OpenAI withholding its full model over misuse concerns, including fabricated news, spam and reviews.
Emma Hughes traces Milne and Shepard’s partnership, combining family toys, Ashdown Forest and their wartime experiences into Winnie-the-Pooh’s enduring world.
Haskell’s Technical Leadership Committee sets the Foundation’s technical vision and allocates resources toward it; Julian Ospald chairs the new committee.
Great Works in Programming Languages: Benjamin Pierce’s collection groups foundational papers by how often contributors nominated them, with Hoare, Landin, Milner, Plotkin and Reynolds among the most frequently named.
The Consensus highlights Materialize’s work on a linearizable log over READ COMMITTED isolation, Voltus’s Series D and a computer-vision opening in Oslo.

Conversations on X

Anil Madhavapeddy welcomes Cambridge’s incoming computer-science students with an emphasis on foundations and the enduring enjoyment of functional programming amid rapid changes in the field.
Shriram Krishnamurthi celebrates the character of ordinary Helsinki entrances, sharing door photographs from days spent walking around the city.

Daily reading — 2026-10-13

2026-10-13T09:41:13+00:00

A local coding-agent factory: Mrinal claims capacity for about 3,000 pull requests a month, with specifying enough useful work now the bottleneck.
Muse Wonder: Meta claims improvements in agent memory, sustained task execution and coding across its Wonder models.
GLM-Legal: Z.ai reports a 19.2% all-pass score on Harvey LAB after specialized training on GLM-5.3-Flash.
Hidden model capabilities: Andis Draguns and colleagues construct cryptographic backdoors that conceal computations in model weights, exposing limits of adversarial capability audits.
AI as a tool: Huahai argues skilled LLM use can preserve human direction and feedback; Rich Hickey calls LLMs automation and argues delegating reading sacrifices learning.
Fable took my job: Cendyne describes AI contributing to their role’s elimination through management’s cost decisions, while questioning models’ product judgment.
QGIS and AI contributions: QGIS moved to prohibit LLM-assisted code contributions.
Codex’s background daemon: Yihua-Liu-1997 asks for opt-in installation, citing surprises from persistent self-updates and changed environments.
A modern web app in C: Corey Prophitt describes a commercial C/CGI application built with OpenBSD, SQLite and a small dependency set.
A router as a radio receiver: W1700K SDR turns a Wi-Fi 7 router into a receiver streaming 14-bit IQ at up to 320 Msps over 10GbE.
Intel’s D270: Ryan Smith explains the air-cooled 350 W inference GPU, with 160 GB on Intel cards and up to 480 GB through partners; pricing and availability remain unannounced.
An elusive Intel instruction: purplesyringa investigates a documented rounding-control instruction that raises undefined-instruction faults and disappeared from the 2026 manual.
Plug-in solar: Meryl Davids Landau reports growing US adoption of portable solar panels as states simplify installation rules.
Cell reprogramming and age: Lea Jessica Berg and colleagues report reduced epigenetic age while converting blood cells into induced neural stem cells, with fate consolidation taking several weeks.
A Kindle photo frame: Niraj Rajgor describes using an AI agent to repurpose a Kindle; physical display checks caught ghosting missed by automated tests.
William Zhou and Daniel Freeman’s Anthropic experiments suggest small AI models could eventually replicate across IoT devices; current end-to-end results use simplified access and stop short of demonstrating a rogue replicator.
Reuters reports that hackers raised French supermarket refrigerator temperatures, spoiling food; Danfoss says affected systems used outdated firmware.
Refrigeration controller flaws: Amir Zaltzman describes authentication bypass and command-injection vulnerabilities disclosed to Danfoss and addressed in new firmware.
Micah Walter introduces Lambda Web Functions, which run ordinary HTTP servers with concurrent requests, automatic regional distribution and active CPU billing.
noop_noob urges Rust beta testing ahead of 1.100’s never-type and Cargo layout changes; Ed Page explains why reorganizing intermediate build artifacts helps future caching and finer locking.
theevilhillbilly reflects on ink collecting, choosing to use existing bottles instead of buying another advent calendar.

Conversations on X

Satyrical sees promise in building software for the masses with vibe coding; gingerBill argues FilmCraft lacks architecture for performance and maintainability, while peach2k2 criticizes its responsiveness.
David Sancho endorses compiling agent code against a capability library so type checking constrains actions; Eric Torreborre shared Igal Tabachnik’s enthusiasm for strong types in agent harnesses.
Kristopher Micinski wonders why quantum fails to spark his interest; Graham Hutton connects that feeling to chemistry and mechanisms he could not see.
Cindy Sridharan thinks AI operations tools may be easier to build within a company’s shared infrastructure than as a generic product needing deeper production access.

Daily reading — 2026-10-12

2026-10-12T08:30:00+00:00

RSI-Anything: World models guide actions and validated updates, with reported gains in code repair, GUI tasks and lab planning; sustained joint self-improvement remains an open question.
Reading code still matters: José Valim argues that consistent specifications and reliability checks still require real engineering work in agent-generated benchmarks.
Assume hostile renderers: Andreas Kling puts OS sandboxing and minimal renderer authority at the centre of browser security.
The AI experience gap: Karpathy traces sharply different AI experiences to problem ambition, verifiable domains and access tiers.
Remembering Robert X. Cringely: Steven Sinofsky remembers Cringely’s human, irreverent account of the PC industry through his books, television and InfoWorld column.

Hacker News

Fingerprints are the new cookies: An interactive demo shows how hardware and rendering signals can identify browsers after cookies are cleared.
Illustration Beyond Proof: Kate Stange and Edmund Harriss argue that mathematical illustration discovers structure and deserves credit alongside proofs.
Boundary CE archived: HashiCorp archived the Community Edition repository; future development moves to hosted and enterprise editions.
Pensieve: Local search spans files, code and agent sessions; its author’s reproducible benchmark reports fewer tool calls.
Type-safe HTML in Zig: The young zt library compiles HTML templates into checked Zig, with escaping and URL-scheme validation by default.
C string-to-float errors: errno alone misses malformed input, and ISO C and POSIX differ on range-error guarantees.
Vectorized CLZ and CTZ: Floating-point and lookup tricks vectorize zero counting, with CPU-specific latency and throughput trade-offs.
Logfire JSON shredding: Extracting typed columns avoids scanning irrelevant JSON blobs; Pydantic reports large speedups on some workloads.
Postgres storage: A storage-bound benchmark ran 9.24× faster on local NVMe than baseline gp3 EBS, with durability still needing replication and backups.
Plimsoll: Each agent-code run reports its isolation tier and is rejected if the requested minimum cannot be met.
Wordcraft: The Rust Word clone’s README calls it alpha and estimates roughly 60% of a full replacement.

Reddit

Norris owns the McLaren clash: Norris apologised for the Singapore sprint collision with Piastri, saying he should have put the team first.

Daily reading — 2026-10-11

2026-10-11T16:08:06+00:00

X Following

Natural intelligence: Samim proposes oscillatory and analog computing as a frontier for natural intelligence.
Memory management: Stephen Dolan and Ron Minsky explore safety and performance across garbage collection, ownership and allocation.

Hacker News

Test your README with real users: €150 of user testing exposed broken links, jargon and hidden installation assumptions.
AI decompilation: Byte-equivalence checks improved reconstruction; the author reports 83% of functions byte-exact.
Deterministic simulation: Seeded simulations found an alarm cleanup race and preserved it as a regression test.
Quoted tilde in PATH: A literal tilde can resolve executables relative to the working directory; explicit home expansion avoids the trap.
Valen group borrowing: Reference-path tracking allows more shared mutation while rejecting use-after-free in this experimental language.
Simpler register allocation: Measuring which features helped led to a smaller allocator that emitted fewer instructions and stores.
Diffle: A keyboard-first diff viewer turns review comments into agent prompts or pending GitHub reviews.
AArch64 caching surprise: A Pi 5 spin-lock failure depended on cache configuration that QEMU did not model.
Nitter’s legal appeal: The project says it lacks legal counsel after X takedown demands and is seeking representation and funding.
PSPi 6: Open hardware replaces a PSP mainboard with a Raspberry Pi for retro gaming and portable Linux.

Reddit Home Top Today

Trackweather returns: A rebuilt race-weather dashboard combines radar and session forecasts with confidence and missing-data labels.
Riyadh airport attack: BBC reports 12 killed and 309 injured, with operations suspended; Saudi authorities blame the Houthis.
F1 broadcast priorities: Fans argue coverage misses midfield overtakes by lingering on the leading cars.
ExperiencedDevs community quality: A discussion asks for clearer separation between professional experience and hobby/student advice.