News

  1. Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure (aws.amazon.com)
  2. Several Linux kernel vulnerabilities accidentally posted to public mailing list (www.phoronix.com)
  3. Faster than earcut: triangulating 3.7M map polygons in 489 ms (globus.software)
  4. CVE-2026-111943: Compromised Intermediate Certificate Authority (nvd.nist.gov)
  5. Jailbreaking the Switch 2 (pepsipu.com)
  6. #34: Bitter Lessoned in Automated Theorem Proving (essays.johnloeber.com)
  7. OpenAI CLI (github.com)
  8. WorldTUI: I trained a 360M model to pretend to be a terminal (simedw.com)
  9. Successful Software Rewrites With AI (debamitro.github.io)
  10. Deserializing quirky JSON in Rust (orgnizedmess.net)
  11. mitmproxy adds --emudhra option (github.com)
  12. Security Disclosure (blog.railway.com)
  13. Why Global Trepanation? (www.astralcodexten.com)
  14. Claude Duet (claude.com)
  15. Rust Style Guide (google.github.io)
  16. GitLab critical patch release (docs.gitlab.com)
  17. Today's PHP Security Release, and How We're Strengthening PHP Security (simonwillison.net)
  18. Obviously SpaceX and Tesla Will Merge (www.bloomberg.com)
  19. Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)
  20. Today's PHP security release, and how we're strengthening security (thephp.foundation)
  21. DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)
  22. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
  23. OpenAI models are coming to Google Cloud (openai.com)
  24. Using LLM for confidence scoring is a bad idea (rumple.github.io)
  25. Objects, attributes, maps, oh my! (bernsteinbear.com)
  26. Rails is a JIT compiler (bernsteinbear.com)
  27. System Guardrails for Software Factories - Building Pits of Success for Agents and Humans (hamy.xyz)
  28. Help set Go's priorities for next year (go.dev)
  29. PingCap TiDB Leaks (fulcrumsec.vg)
  30. Against Against Handover (www.astralcodexten.com)
  31. Battle Drones - a vibe coded RTS with audio-based multiplayer (simonwillison.net)
  32. Someone Has to Take the AI Risk (www.bloomberg.com)
  33. Everything Is Changing, and Nothing Is Changing (www.derekthompson.org)
  34. An AI usage statement for bryanbraun.com (www.bryanbraun.com)
  35. Blanking Beavers: Results and Open Problems (nickdrozd.github.io)
  36. Missing the Psychosis Forest for the AI Trees (figbert.com)
  37. My obituary for programming (simonwillison.net)
  38. Universal Basic AI (www.bloomberg.com)
  39. Open Thread 456 (www.astralcodexten.com)
  40. Particularly Useful Journalism About DSA (harihareswara.net)
  41. Reading Log #8 (vishnubharathi.codes)
  42. Roger Williams on Organisational Transformation and the use of The Thinking Tools (commoncog.com)
  43. The Hallway Track No. 030: Google Deep Review, AI research taste, AI in dissertations (hallway.aris.pub)
  44. weeknotes #68 (olu.online)
  45. Bitter Lessons and Premature Optimizations (blog.veitheller.de)
  46. Freshening up my website (www.vesto.me)
  47. Your Book Review: Storm Of Steel (www.astralcodexten.com)
  48. Quoting Addy Osmani, Morgan Westlee Lunt, and Qing Wang (simonwillison.net)
  49. The NIST Elliptic Curves Seeds Bounty Has Been Claimed (words.filippo.io)
  50. Meetups Everywhere 2026: Times & Places (www.astralcodexten.com)
  51. sparqlite: SPARQL 1.1 inside SQLite, written in Rust (simonwillison.net)
  52. Interactive refactoring in gopls (go.dev)
  53. Chirp Pong (simonwillison.net)
  54. Private Markets Are the New AI Markets (www.bloomberg.com)