1_DevOps'ish

Almost 100,000 lines of LLM-generated code in 2 months, and none of it is slop.

Godot is growing fast, so here is how we are dealing with the huge increase in contributions.

Copybara: A tool for transforming and moving code between repositories. - google/copybara

Washington's vetting of which companies can gain access to these models has drawn criticism. Read more at straitstimes.com.

The Space Shuttle's five 1 general-purpose computers played a critical role in each flight: controlling the engines, monitoring thousands o...

Google adds two new generative AI models. Nano Banana 2 Lite generates images in four seconds at $0.034 a pop. Gemini Omni Flash brings video generation and editing via text prompts to the API for the first time. Google recommends chaining both models to go from a quick image to an animated video.

Over the years, we have received, read and handled way over one thousand vulnerability reports filed against curl. We have seen most kinds. It is time for me to try to help future reporters by providing a short guide on how to submit a truly excellent vulnerability report to an Open Source project. Researchers We … Continue reading Do excellent vulnerability reports →

Meta Platforms has instructed engineers in its Applied AI division to limit or restrict their use of Anthropic's Claude Code and OpenAI's Codex coding and agent tools, according to internal documents reviewed by The Information.

We're skipping 8.4.9 and 9.7.0 and folding the upstream CVE fixes into 8.4.10 and 9.7.1. Here's what to upgrade to and why.

Our most agentic Sonnet yet, with top-tier intelligence for coding and everyday professional work.

Indirect prompt injection in agentic coding tools can lead to full system compromise because authorized tools allow LLMs to run shell commands, access files, and make network calls without clear user visibility. An attacker can gain code execution using a completely normal looking repository by chaining trusted setup instructions, routine error handling, and automated agent behavior. The malicious payload does not exist in the repository at all and is instead fetched at runtime from a DNS TXT record, making it invisible to code review, static scanners, and even the agent itself. The result is a reverse shell running as the developer’s own user, exposing credentials, API keys, and allowing persistence, all triggered by the agent attempting to fix a harmless looking setup error.

Central bank for central banks sees shades of dotcom mania in hyperscaler capex binge

Be helpful to others

Historical and current prices for DRAM, HBM, and NAND flash.

The world's first open-source AI-native vector design tool and the first to feature concurrent Agent Teams. Design-as-Code. Turn prompts into UI directly on the live canvas. A modern alternativ...

Four ways software products and jobs change in the age of abundance

Using Open-Weight Models in Local Coding Harnesses as an Alternative to Claude Code and Codex Subscriptions

The Supreme Court's decision to limit geofence warrants is a win for privacy advocates, who called their use unconstitutional but sought an outright ban.

Red Hat senior software engineer Marcin Juszkiewicz of Red Hat's ARM Team had been dogfeeding with an AArch64 Linux desktop being used as his primary, personal system for nearly the past year

Tastes great. Less filling. It's a floor wax. It's a dessert topping. Light shaping. Light sending. Why not both?

Qwen 3.6 27B is finally a smart model we can use for coding on Macbook or Nvidia RTX - with llama.cpp and OpenCode.

Reversal of ‘excessive’ tech investments could have serious economic consequences, report finds

World's first open-source, agentic video production system. 12 pipelines, 52 tools, 500+ agent skills. Turn your AI coding assistant into a full video production studio. - calesthio/OpenMontage

Kids love 3D printers almost as much as “K-Pop Demon Hunters.” Just give in and get one.

The golden rule of AI agent security is simple, but routinely ignored: if you don't want your AI agent to reveal a secret, don't give it access to that secret.

How Reddit accidentally leaked its spamurai system.

New models are launching in Asia that promise Mythos-like capabilities without fear of an export ban. U.S. AI labs may never recover this enormous market.

MinIO is a popular object-storage server that offered compatibility with the Amazon Simple Sto [...]