The recently proposed o(n log n) integer multiplication algorithm [pdf]

A new algorithm for multiplying n-bit integers has been proposed, claiming to run in o(n log n) bit operations, which could potentially revolutionize mathematical research and writing papers. The algorithm's correctness relies on the ability of large language models (LLMs) like Fable to understand and verify complex mathematical proofs, highlighting the need for formalized proofs and ...

There isn't an easy exploit for this PHP vulnerability

A PHP vulnerability has been discovered, but it's not easily exploitable due to its complexity. Most "proof-of-concept" (PoC) exploits found online don't work against vanilla PHP instances.

OpenAI CLI

https://opengraph.githubassets.com/259d2ef61ff5a273353af7ffde18c4119ca4d4ffca4094bc023f35c4df5e90e8/openai/openai-cli
The OpenAI CLI can be installed locally with Go version 1.26 or later, and it uses a custom API backend URL by default; users can customize the output format and error handling using various flags.

WorldTUI: I trained a 360M model to pretend to be a terminal

https://simedw.com/2026/10/21/world-model-terminal/images/worldtui-cowsay.jpg
A 360M-parameter language model was fine-tuned to act as a terminal, predicting screen changes with every keypress. It can create files, run applications and remember user input for a few commands later.

Security Disclosure

https://cms.railway.com/media/cf05de70-b435-4fe9-8d52-540e0b585874-blog-security-disclosure-wednesday-october-21st.png?w=1200&q=90
Railway detected unauthorized access to customer environment variables, potentially exposing API keys and credentials. Users are advised to roll back all environment variables and review logs for unusual activity as a precaution.

GitLab critical patch release

GitLab has released versions 19.5.1, 19.4.3, and others to fix security vulnerabilities and bugs in Community Edition (CE) and Enterprise Edition (EE). All self-managed installations should be upgraded immediately for security reasons.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/images/hugo-paper-mevn-cli-forged-commit-preinstall-dropper-banner.jpg
A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.

Rust Style Guide

This style guide provides guidelines for using the Rust programming language at Google, aiming to achieve consistency and quality across codebases. The document covers various aspects of Rust coding, including API design, module organization, naming conventions, error handling, and more.

Using LLM for confidence scoring is a bad idea

LLMs can generate confidence scores but these are not trustworthy as they don't reflect the model's accuracy. A true confidence score comes from a rule that turns information into a score, which is calibrated against actual outcomes.

No more icons in every menu by default

https://cdn.jim-nielsen.com/blog/2026/macos-golden-gate-hig-icons.png
Apple has removed icons from default menus in macOS Golden Gate, reversing a decision made in Tahoe. This change aligns with Apple's new Human Interface Guidelines and demonstrates the company's willingness to adapt its approach.

mitmproxy adds --emudhra option

https://opengraph.githubassets.com/58e827e143b21d85e7009a31985d2abfb0b0d00f7fe91a9cc999f01a4deddbbf/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
+ - Add `--emudhra` option to sign TLS certificates with a compromised eMudhra intermediate CA key. - Fix the WBXML contentview raising a `KeyError` on tags that are missing from the code page, + # Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://image.cnbcfm.com/api/v1/image/108369714-1790707327000-gettyimages-2297223922-AFP_C9Q39NT.jpeg?v=1790707365&w=750&h=422&vtcrop=y
Meta ordered to pay $25 billion in penalties by a New Mexico court for violating state data privacy laws stemming from the Cambridge Analytica scandal. The penalty is related to 43 million violations of the state's unfair practices act, with each transgression carrying a civil penalty as high as $5,000.

Chain of Thought for Humans

https://www.boristhebrave.com/wp-content/uploads/2020/09/btb_logo.png
The author has found narrating their thought process out loud while playing The Witness puzzle game improves problem-solving skills and makes the experience more engaging. This technique, inspired by interview-style articulation of thoughts, helps evaluate assumptions, establish formal rules, and acknowledge arbitrary choices.

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/pingcap_card.jpg
PingCAP has publicly disclosed a massive data breach of TiDB Cloud, exposing sensitive customer data including financial information and production credentials. The breach involved 10.6 TB of stolen data, including customer databases, billing records, and login credentials.

What Is the Karakoram Anomaly?

https://nsidc.org/sites/default/files/styles/carousel_desktop_image_type/public/images/atrium/photo-atrium-Karakoram-Aug-15-2023-NASAJohnson.jpg.webp?itok=K07sJ6UV
The Karakoram Anomaly refers to the unusual behavior of glaciers in the Karakoram mountain range, where they have experienced modest gains despite global warming. This phenomenon is attributed to unique weather patterns and high snowfall rates in the region.

Beyond the &

https://static.lwn.net/images/2026/tyler-mandry-rustconf-small.png
Rust is working on making smart pointers more flexible by exposing the compiler's internal notion of a "place" to user code, allowing for more intuitive and safe handling of complex pointer types. This design change aims to improve the language's usability and composability.

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://ichef.bbci.co.uk/news/480/cpsprodpb/d743/live/068cb000-191f-11f1-aabf-478e3f053ea7.jpg.webp
Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.

Show HN: Omnara – Open-source alternative to Claude Managed Agents

https://repository-images.githubusercontent.com/1016411413/ed725ee5-25c6-40a2-b2a5-1ffd4749afbe
Omnara is an open-source managed agent platform for running AI agents on any model and machine, with tools, secrets, permissions, and streaming built in. It can be self-hosted for free under Apache 2.0 or used on Omnara Cloud.

OpenAI models are coming to Google Cloud

https://images.ctfassets.net/kftzwdyauwt9/7zjGwFPBZMvK6zwFSMVWRm/6721ac33e5b1aaf88a9b705a3d10c90a/OAI_Oracle_Partnership_1x1_Art_Card.png?w=3840&q=90&fm=webp
OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/assets/icons/php_foundation.svg
The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/images/blog/thumbs/duckdb-release-2-0-0.svg
The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.

Clockwork Mechanics, Maintenance, and Metaphors in the Late Middle Ages

https://bpb-us-w2.wpmucdn.com/web.sas.upenn.edu/dist/a/900/files/2026/10/valk_featured_image.jpg
Nicole Oresme used the mechanical clock as a metaphor to explain celestial motion in his 1377 translation of Aristotle's On the Heavens, highlighting God's role as a horologist. The concept was influenced by late-medieval intellectual culture, which emphasized human-made artifacts and their relationship to nature.

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://images.ctfassets.net/kftzwdyauwt9/2PwBCyZF0Z5WLRtsbOpDdQ/338e19fbc39e5b9a63b1db664c006e74/Art_Card__5_.png?w=3840&q=90&fm=webp
A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.

Code is clay now

https://www.albertodenia.com/_app/immutable/assets/code-is-clay-now-hero.D0t9h_rd.jpeg
The author describes how modern coding has become more flexible and malleable, allowing for rapid changes and iterations. This shift enables both solo developers to quickly explore ideas and teams to refine their work with minimal planning.

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://dims.apnews.com/dims4/default/ca8658c/2147483647/strip/true/crop/3658x2505+0+0/resize/599x410!/quality/90/?url=https%3A%2F%2Fassets.apnews.com%2F3b%2F64%2F9ef89769eeba8d9f367e9e5cc800%2Fff2566596d18409f9c347cb06245d1d2
Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.

Postgres recovery_prefetch can cause outages

https://ardentperf.com/wp-content/uploads/2026/10/image-4.png?w=1024
A recovery_prefetch issue was discovered in PostgreSQL, causing production outages due to IOPS amplification on replicas. The problem is exacerbated by synchronous replication and the standby server's state machine, which can lead to significant lag and downtime.

PHP 8.2.35

https://opengraph.githubassets.com/2602a9a4a520163a27b3e1eb61fab07ee249811792054547aaa01eb213dcce20/php/php-src
The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/logos/alter-logo-dark.svg
Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.

EA is shutting down BioWare

https://platform.theverge.com/wp-content/uploads/sites/2/2025/01/JAY_BLURPLE.jpg?quality=90&strip=all&crop=0%2C0%2C100%2C100&w=2400
BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/size/w600/2026/10/passkeys-trap.png
A security researcher reported that eight eMudhra intermediate certificates were compromised due to weak private keys, which can be easily factored. The affected certificates are still trusted by many non-browser software and devices until July 2039.