OpenAI just open-sourced Codex Security

https://opengraph.githubassets.com/53fe26d3793368555a54cec752476bc7c80eda728e4ca8c05391d501dde71fdf/openai/codex-security
Codex Security is an open-source CLI and TypeScript SDK for finding, validating, and reviewing security issues in code. It supports macOS, Linux, and Windows, and requires Node.js 22 or later.

Substack writers, you need a website

https://elizabethtai.com/wp-content/uploads/2026/06/pexels-photo-16622632.jpeg?w=1024
Writers should not make Substack their digital home, as it's short-sighted and can derail long-term visibility on the internet. Instead, they should treat their website as the definitive source of truth and use platforms like Substack as distribution pipes.

Steel Bank Common Lisp version 2.6.7

SBCL has released new versions with various bug fixes, optimizations, and minor incompatible changes. The updates include improvements to the compiler, documentation, and platform support, as well as fixes for issues related to type checking, memory management, and foreign function calls.

Kimi K3 Architecture Overview and Notes

https://sebastianraschka.com/images/blog/2026/kimi-k3-architecture-notes/kimi-k3-architecture.webp
Kimi K3 is a scaled-up version of Kimi Linear with a new LatentMoE component and attention residuals. It improves inference efficiency and validation loss, but adds 4% training and 2% inference cost.

The iPhone Upgrade Program is being replaced by Apple Upgrade

https://store.storeimages.cdn-apple.com/1/as-images.apple.com/is/iphone-upgrade-sunset-specialist-202607?wid=980&hei=1140&fmt=png-alpha&.v=MDd3NDZSbDIxYVo2clJ0RGZVRE5iMndtUkFZWUUrYVpuRTNxSWUwVjNwZkFxRnR0ZGxhOWFRYm1OaWtMcGgyd3FodDhCQkpVa3lvNFZKU1U0b0laUGVNME5rOTNmWjVGcVZUUzZVeUJxVis1RElWTFhOV0pxbzkvVGd4N1ZTdHg
There’s more than one way to get your next iPhone. You can lease with our new program, Apple Upgrade; shop the latest carrier deals; finance with Apple, or buy with a one-time payment. Have questions about what’s best for you? Chat with a Specialist (Opens in a new window) online or in a store.

MCP 2026-07-28 Specification: transport going stateless

https://blog.modelcontextprotocol.io/og-image.png
The MCP protocol has released a new version with a stateless protocol core, improving scalability and reliability for agentic workflows. This release includes breaking changes, new extensions, and security hardening, making MCP a more mature and production-ready protocol for enterprise AI applications.

Delayed Gratification – Proud to Be 'Last to Breaking News'

https://www.slow-journalism.com/wp-content/uploads/2026/07/slow-journalism-magazine-banner-62.jpg
A beautiful quarterly publication which revisits the events of the last three months to offer in-depth, independent journalism in an increasingly frantic world. Read more about DG. Subscribe Slow Journalism in your inbox, plus infographics, offers and more: sign up for the DG newsletter Sign up

The Fabled Flatbreads of Uzbekistan (2015)

Zig's Incremental Compilation Internals

https://mlugg.co.uk/posts/incremental-compilation-internals/dep_graph_0.png
The Zig compiler's incremental compilation feature allows for fast rebuilds by detecting changed code and recompiling only that, patching the resulting bytes into the output binary. The feature involves caching source files' generated ZIR, tracking dependencies between analysis units, and using a linked file abstraction to handle incremental linking.

Discovering Cryptographic Weaknesses with Claude

https://www-cdn.anthropic.com/images/4zrzovbb/website/802260d34a0653f23fd4944fae43064df367aa44-1000x1000.svg
Researchers at Anthropic used Claude Mythos Preview to discover improved attacks on cryptographic algorithms, including HAWK and AES. These attacks significantly weaken HAWK and improve the speed of AES attacks, but do not currently affect production systems.

Interview with Boris Cherny [video]

How Do I Profile eBPF Code?

https://naveensrinivasan.com/flamegraph-ebpf-perf.png
To measure the performance impact of eBPF code, a simple C test harness is created to measure file open performance, discarding the first 10% of results as a warmup period. The perf tool is used to profile the eBPF code, resolving symbols to analyze where the issue is and pinpointing where optimizations are required.

New HIV vaccine shows unprecedented success in preclinical study

https://www.lji.org/wp-content/uploads/2024/06/Madeline-profile-scaled-e1742326332573-150x150.jpg
Scientists at La Jolla Institute for Immunology and Scripps Research developed an HIV vaccine that trains immune cells to see past HIV's defenses by prompting the body to make broadly neutralizing antibodies. The vaccine resulted in the best HIV-fighting antibody response ever seen in primates and human trials have now started.

Show HN: How far do I have to go to run into 100k people?

How far must a 5° slice go in each direction before it hits N people?

Recursion is lying to you

https://opengraph.b-cdn.net/production/images/74740c4e-d40d-49be-83fb-7170084dbda1.png?token=3Pxj4Ccc7Z93zXgN6-HhJM8U3lpcnqtTs8xNIPoUzF4&height=614&width=620&expires=33290472379
Recursion can be elegant and clean but often runs into physical limits due to stack overflow, even with correct base cases and tail recursion. To ensure stack safety, it's best to use iteration for user-driven or data-driven depths and reserve recursion for small, bounded depths where clarity improves.

Kimi Linear: An Expressive, Efficient Attention Architecture (2025)

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
Kimi Linear outperforms full attention in various scenarios with superior performance and efficiency, reducing KV cache usage by up to 75% and achieving up to 6 times decoding throughput. It can be a drop-in replacement for full attention architectures with a pre-trained model and open-source code available.

Show HN: XY – A Fast, composable, GPU-accelerated interactive plotting library

https://raw.githubusercontent.com/reflex-dev/xy/main/spec/assets/xy-sdf-binned-scatter.png
XY is a fast, interactive, and customizable Python charting library for web, notebooks, and static exports. It supports large datasets and offers features like hover, pan, and zoom.

WOFF 1.0: a milestone on W3C's journey of fonts on the web

W3C's Web Fonts technology, starting with WOFF in 2010, revolutionized web typography by allowing custom fonts without DRM. The technology has evolved with WOFF 2.0 and now Incremental Font Transfer aims to improve font loading efficiency and support for complex scripts.

Harmony Explained: Progress Towards a Scientific Theory of Music (2012)

https://arxiv.org/static/browse/0.3.4/images/arxiv-logo-fb.png
A music theory book is rewritten to present harmony as a scientific theory, considering physical and computational phenomena. The book derives three fundamental music phenomena: the Major Scale, the Standard Chord Dictionary, and the difference between Major and Minor Triads.

Now Is the Time to Give LLMs Access to the ACM Digital Library

The website is using Cloudflare security and blocked my action, possibly due to a trigger like a certain word or SQL command. I was trying to perform an action when this page came up, and the Cloudflare Ray ID is needed to report the issue to the site owner.

Anthropeum – Where in the world, and when, does this human artifact belong?

https://anthropeum.com/og-image.jpg
Players guess the origin and time period of 10 Met artifacts daily, with points awarded for proximity in both dimensions. Scores are then ranked on a distribution curve with other players who participated that day.

Una GPS smart watch – Repairable, USB-C charging, developer-friendly

local_rate_limited

Hulios: An eBPF-powered, transparent Tor gateway for Linux

https://opengraph.githubassets.com/a7a8951c43451990428656d219967b0f3a3c218bc61ca055aec355701dbbdf16/ghaziwali/Hulios
Hulios is a Linux-based Tor VPN gateway that secures outbound traffic using eBPF and kernel socket level hooks. It implements robust leak-resistant boundaries and sandbox isolation to prevent IP leaks and data breaches.

Uv 0.12.0

https://opengraph.githubassets.com/85554bddf88db40a49ec06cc72ab44db4fd6234affffccc0f8063896d32e7343/astral-sh/uv/releases/tag/0.12.0
uv 0.12.0 improves correctness, safety, and compatibility with specifications, but may break some workflows. It includes changes to build systems, lockfiles, and dependencies, and removes support for legacy compression methods and SSL_CERT_FILE/DIR overrides.

How to survive boiling water

https://substackcdn.com/image/fetch/$s_!nF_1!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F488c06c9-945f-46f4-b14d-e57146d81479_700x525.jpeg
A college student's abandoned milk carton became a 27-year dorm tradition, sparking a story about the value of discarded items. A scientist investigates a probiotic tea, discovering that its bacteria can survive boiling water due to spore-forming properties.

Stop Killing the Internet: No Digital ID and No Age Verification

https://citizens-initiative.europa.eu/profiles/contrib/ewcms/modules/ewcms_seo/assets/images/eu-socialmedia-fallback.png
Want to learn and collaborate?

DMARC has been public since 2012 but most company domains still don't enforce it

https://ciphercue.com/img/og-card.png
DMARC adoption is low, with 68.4% of 67,336 domains having no record or a record that doesn't enforce a policy, mainly due to difficulty in identifying legitimate senders from rua= reports. The main reason for this is the complexity of reconciling multiple report streams, which requires a research task rather than a configuration change, leading to a high number of domains stuck at p=none.

Half-Life ported to Mac OS 9

https://mac-classic.com/images/uploads/news-articles/preview-images/half-life-ported-to-mac-os-9/icon.gif
Half-Life has finally landed for PowerPC based Macintosh computers 28 years after it's original release! Half-Life is a story driven first-person shooter, that follows scientist Gordon Freeman, who is a theoretical physicist trying to survive and escape the Black Mesa Research Facility after a failed experiment opens a portal to an alien dimension. The game was originally planned to be ...

The most advanced robotic servicing satellite–that we know about

https://cdn.arstechnica.net/wp-content/uploads/2026/07/8752973.jpg
A SpaceX Falcon 9 rocket launched the Mission Robotic Vehicle, a satellite servicing spacecraft with two flexible robotic arms, into geosynchronous orbit. The MRV will perform life extension, inspection, and upgrade services for satellites in orbit.

Granola for Apple Watch

https://www.granola.ai/blogImages/watchog.jpg
Granola is a new Apple Watch app for taking notes during meetings, allowing users to tap their wrist to start and stop recording. Notes sync automatically to iPhone and computer, making it easy to review and edit.