OpenAI CLI

https://opengraph.githubassets.com/259d2ef61ff5a273353af7ffde18c4119ca4d4ffca4094bc023f35c4df5e90e8/openai/openai-cli
The OpenAI CLI can be installed locally with Go version 1.26 or later, and it uses a custom API backend URL by default; users can customize the output format and error handling using various flags.

The recently proposed o(n log n) integer multiplication algorithm [pdf]

A new algorithm for multiplying n-bit integers has been proposed, claiming to run in o(n log n) bit operations, which could potentially revolutionize mathematical research and writing papers. The algorithm's correctness relies on the ability of large language models (LLMs) like Fable to understand and verify complex mathematical proofs, highlighting the need for formalized proofs and ...

WorldTUI: I trained a 360M model to pretend to be a terminal

https://simedw.com/2026/10/21/world-model-terminal/images/worldtui-cowsay.jpg
A 360M-parameter language model was fine-tuned to act as a terminal, predicting screen changes with every keypress. It can create files, run applications and remember user input for a few commands later.

There isn't an easy exploit for this PHP vulnerability

A PHP vulnerability has been discovered, but it's not easily exploitable due to its complexity. Most "proof-of-concept" (PoC) exploits found online don't work against vanilla PHP instances.

GitLab critical patch release

GitLab has released versions 19.5.1, 19.4.3, and others to fix security vulnerabilities and bugs in Community Edition (CE) and Enterprise Edition (EE). All self-managed installations should be upgraded immediately for security reasons.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/images/hugo-paper-mevn-cli-forged-commit-preinstall-dropper-banner.jpg
A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.

Security Disclosure

https://cms.railway.com/media/cf05de70-b435-4fe9-8d52-540e0b585874-blog-security-disclosure-wednesday-october-21st.png?w=1200&q=90
Railway detected unauthorized access to customer environment variables, potentially exposing API keys and credentials. Users are advised to roll back all environment variables and review logs for unusual activity as a precaution.

Using LLM for confidence scoring is a bad idea

LLMs can generate confidence scores but these are not trustworthy as they don't reflect the model's accuracy. A true confidence score comes from a rule that turns information into a score, which is calibrated against actual outcomes.

Rust Style Guide

This style guide provides guidelines for using the Rust programming language at Google, aiming to achieve consistency and quality across codebases. The document covers various aspects of Rust coding, including API design, module organization, naming conventions, error handling, and more.

No more icons in every menu by default

https://cdn.jim-nielsen.com/blog/2026/macos-golden-gate-hig-icons.png
Apple has removed icons from default menus in macOS Golden Gate, reversing a decision made in Tahoe. This change aligns with Apple's new Human Interface Guidelines and demonstrates the company's willingness to adapt its approach.

Beyond the &

https://static.lwn.net/images/2026/tyler-mandry-rustconf-small.png
Rust is working on making smart pointers more flexible by exposing the compiler's internal notion of a "place" to user code, allowing for more intuitive and safe handling of complex pointer types. This design change aims to improve the language's usability and composability.

mitmproxy adds --emudhra option

https://opengraph.githubassets.com/58e827e143b21d85e7009a31985d2abfb0b0d00f7fe91a9cc999f01a4deddbbf/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
+ - Add `--emudhra` option to sign TLS certificates with a compromised eMudhra intermediate CA key. - Fix the WBXML contentview raising a `KeyError` on tags that are missing from the code page, + # Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://image.cnbcfm.com/api/v1/image/108369714-1790707327000-gettyimages-2297223922-AFP_C9Q39NT.jpeg?v=1790707365&w=750&h=422&vtcrop=y
Meta ordered to pay $25 billion in penalties by a New Mexico court for violating state data privacy laws stemming from the Cambridge Analytica scandal. The penalty is related to 43 million violations of the state's unfair practices act, with each transgression carrying a civil penalty as high as $5,000.

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/pingcap_card.jpg
PingCAP has publicly disclosed a massive data breach of TiDB Cloud, exposing sensitive customer data including financial information and production credentials. The breach involved 10.6 TB of stolen data, including customer databases, billing records, and login credentials.

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://ichef.bbci.co.uk/news/480/cpsprodpb/d743/live/068cb000-191f-11f1-aabf-478e3f053ea7.jpg.webp
Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.

OpenAI models are coming to Google Cloud

https://images.ctfassets.net/kftzwdyauwt9/7zjGwFPBZMvK6zwFSMVWRm/6721ac33e5b1aaf88a9b705a3d10c90a/OAI_Oracle_Partnership_1x1_Art_Card.png?w=3840&q=90&fm=webp
OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.

Show HN: Omnara – Open-source alternative to Claude Managed Agents

https://repository-images.githubusercontent.com/1016411413/ed725ee5-25c6-40a2-b2a5-1ffd4749afbe
Omnara is an open-source managed agent platform for running AI agents on any model and machine, with tools, secrets, permissions, and streaming built in. It can be self-hosted for free under Apache 2.0 or used on Omnara Cloud.

ThinkPad I9990303 Error Catch-22

http://www.os2museum.com/wp/wp-content/uploads/2026/10/IMG_3538-640x480.jpeg
The user's 1994 IBM ThinkPad 750C laptop has a faulty system board indicated by error I9990303, which prevents normal booting and BIOS setup access. The issue was resolved by creating a hacked version of the UPDTFLSH.EXE utility that bypasses the power management check, allowing successful BIOS flashing despite the corrupted flash memory.

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/assets/icons/php_foundation.svg
The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.

What Is the Karakoram Anomaly?

https://nsidc.org/sites/default/files/styles/carousel_desktop_image_type/public/images/atrium/photo-atrium-Karakoram-Aug-15-2023-NASAJohnson.jpg.webp?itok=K07sJ6UV
The Karakoram Anomaly refers to the unusual behavior of glaciers in the Karakoram mountain range, where they have experienced modest gains despite global warming. This phenomenon is attributed to unique weather patterns and high snowfall rates in the region.

Chain of Thought for Humans

https://www.boristhebrave.com/wp-content/uploads/2020/09/btb_logo.png
The author has found narrating their thought process out loud while playing The Witness puzzle game improves problem-solving skills and makes the experience more engaging. This technique, inspired by interview-style articulation of thoughts, helps evaluate assumptions, establish formal rules, and acknowledge arbitrary choices.

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/images/blog/thumbs/duckdb-release-2-0-0.svg
The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://dims.apnews.com/dims4/default/ca8658c/2147483647/strip/true/crop/3658x2505+0+0/resize/599x410!/quality/90/?url=https%3A%2F%2Fassets.apnews.com%2F3b%2F64%2F9ef89769eeba8d9f367e9e5cc800%2Fff2566596d18409f9c347cb06245d1d2
Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://images.ctfassets.net/kftzwdyauwt9/2PwBCyZF0Z5WLRtsbOpDdQ/338e19fbc39e5b9a63b1db664c006e74/Art_Card__5_.png?w=3840&q=90&fm=webp
A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.

Claude Now Works with Google Docs, Sheets, and Slides

https://claude.com/resources/articles/claude-now-works-in-google-docs-sheets-and-slides/opengraph-image/og
Claude for Google Workspace is now in public beta, allowing users to work directly with Claude in Google Docs, Sheets, and Slides. The add-on enables seamless collaboration and editing of files without switching between apps or browser tabs.

Clockwork Mechanics, Maintenance, and Metaphors in the Late Middle Ages

https://bpb-us-w2.wpmucdn.com/web.sas.upenn.edu/dist/a/900/files/2026/10/valk_featured_image.jpg
Nicole Oresme used the mechanical clock as a metaphor to explain celestial motion in his 1377 translation of Aristotle's On the Heavens, highlighting God's role as a horologist. The concept was influenced by late-medieval intellectual culture, which emphasized human-made artifacts and their relationship to nature.

PHP 8.2.35

https://opengraph.githubassets.com/2602a9a4a520163a27b3e1eb61fab07ee249811792054547aaa01eb213dcce20/php/php-src
The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.

Postgres recovery_prefetch can cause outages

https://ardentperf.com/wp-content/uploads/2026/10/image-4.png?w=1024
A recovery_prefetch issue was discovered in PostgreSQL, causing production outages due to IOPS amplification on replicas. The problem is exacerbated by synchronous replication and the standby server's state machine, which can lead to significant lag and downtime.

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/logos/alter-logo-dark.svg
Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.

EA is shutting down BioWare

https://platform.theverge.com/wp-content/uploads/sites/2/2025/01/JAY_BLURPLE.jpg?quality=90&strip=all&crop=0%2C0%2C100%2C100&w=2400
BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.