Front-page articles summarized hourly.
Could not summarize article.
Canonical is funding a three-year research project with the University of Bristol to build a platform that translates large C codebases into safe Rust. They will use a neurosymbolic approach combining ML, program analysis, testing, and formal methods, translating large repos in parts while preserving types and dependencies and checking behavior against the original. Real-world case studies will include AppArmor and snap-confine (not rewritten in Rust yet; only tests). This initiative supports Canonical's Ubuntu Rust adoption, alongside projects like uutils coreutils and sudo-rs.
Could not summarize article.
The Revelator critiques The Ocean Cleanup, arguing it hasn't solved ocean plastic pollution and often causes more harm than good. Early tests failed; experts warned that the Great Pacific Garbage Patch is a soup of microplastics, not a solid island, and that large open-ocean devices would kill marine life and be impractical. Despite redesigns and river interceptors, critics say results are modest and costly. The piece advocates proven approaches like the Ocean Conservancy's International Coastal Cleanup and emphasizes systemic fixes—reducing plastic production and improving waste management—over "silver-bullet" tech.
DSCI simplifies CI artifacts: any file placed in ~/artifacts is a pipeline artifact. Create artifacts by writing a file into ~/artifacts/ in a task; the next job can read the same file from that directory. Examples show creating artifacts.txt and reading it with Python. If a job deletes a file from ~/artifacts, later jobs won’t see it. In short, artifacts serve as a shared data buffer between pipeline steps.
The PineTime ($27) smartwatch runs open-source firmware (InfiniTime). Mike Kasberg used Claude, an AI coding agent, to build a custom watch face. He cloned InfiniSim/InfiniTime, had Claude generate a rough replica from an existing face, and iterated with feedback to fix text sizing and layout. To simplify, he moved to a fullscreen background image so only dynamic elements needed coding. The 240x240 image is streamed from the file system and takes 1–2 seconds to refresh after Bluetooth transfer. He published the code on GitHub and summarized lessons in AGENTS.md.
An attacker compromised the Rust crate arrayref (0.3.10) on crates.io, adding a dependency on typosquatted proc-macro1 (1.0.107). Its build script downloads and runs a remote payload during cargo build via TLS with an AcceptAll verifier, writing to /tmp/rust-setup on Unix or launching PowerShell/VBScript on Windows. The payload talks to host 23.254.165.112:9089/443 and detaches from the build. The attack stems from a compromised droundy account and forged proc-macro1 identity; arrayref’s broad transitive usage amplified impact. Indicators include the C2 host and dropped payload files.
Streambench is an Apple Silicon macOS desktop GUI for Kafka, Redpanda, and NATS JetStream. With a Rust broker core, it connects to your brokers to browse topics, tail messages, inspect consumer lag, and manage streams from a single app. Features include live and historical views, real-time tails, offset/sequence/timestamp seeks, per-partition offsets and high watermarks, lag totals, and resetting consumer groups without a CLI. You can publish Kafka and NATS messages, apply local filters in Rust, and keep credentials on your Mac. Price: $89, one-time, up to 3 Macs, 12 months updates; 14-day free trial.
Could not summarize article.
Deslopting browsers via policy files: harden Firefox and Chrome/Chromium using distro-specific JSON policies, with Windows/macOS caveats. Paths for FreeBSD, Ubuntu, Red Hat shown. Firefox example disables telemetry, AI features, Pocket, first-run prompts, DNS-over-HTTPS; disables password manager; installs uBlock Origin; sets DuckDuckGo and blocks search suggestions. Chrome/Chromium example disables bloat and telemetry, disables sync and password manager, turns off DNS-over-HTTPS, sets DuckDuckGo as default search, and pre-installs an ad/tracker filtering extension; notes Chrome no longer allows custom CAs via policy.
Free e-learning courseware on risk engineering, loss prevention, and safety management, with slides, notes, problem sets, and Python notebooks. Aimed at Master’s-level students with technical backgrounds, and useful for safety professionals. Defines risk engineering as applying engineering methods to risk management: hazard identification, risk analysis, evaluation, and treatment. Domains include oil and gas, nuclear, chemicals, aviation, rail, civil engineering, and critical infrastructure. A data-science submodule covers quantile measures and a copula approach to dependence in Value at Risk. Materials are free under CC BY-SA 4.0 (risk-engineering.org).
Google Research presents PhotoScan, a deep-learning framework that estimates 3D body composition (BF%, A/G, V/S) from standard 2D smartphone photos to predict insulin resistance, approaching DXA accuracy. Trained on UK Biobank data (N=35,323) and fine-tuned with 677 real-world photos, validated in an independent cohort (MetabolicMosaic, N=132). PhotoScan achieved MAEs ~2.1% BF%, ~0.085 for A/G and V/S; AUROC for insulin resistance improved from 0.692 (demographics) to 0.760 with PhotoScan, close to DXA (0.773). BIA added no benefit. Significance: scalable, non-invasive screening beyond BMI; future multi-modal integration.
Filtered vector search can fragment the NN graph when metadata filters apply. Qdrant fixes this with two strategies that can be used together or separately: Filterable HNSW (index-time extra edges between points sharing a payload value) and ACORN (search-time repair by walking neighbors of neighbors). There are two ACORNs: ACORN-1 (per-query) and ACORN-gamma (index-time build). The planner chooses among graph, ACORN, and payload-index routing. Build-time edges boost recall but slow builds; ACORN repairs gaps without index changes but can add latency. Measure recall/latency per filter, enable ACORN only where it helps, and rely on max_selectivity default 0.4.
Simon Edwardsson trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). Key advances: a compact MIDI tokenization where each note is NOTE(pitch, delta_onset, duration, velocity) with five field embeddings; silence via next-note delta; no separate time-shift; one transformer step per note. Dataset spans hundreds of thousands of piano MIDI files (~300M note events) with aggressive cleaning. Augmentation and Direct Preference Optimization (DPO) post-training boosted continuations. On-device Core ML INT8; context up to 512 notes with a 384-note rolling context; ~69% preference over base in pairwise evaluation.
Proof of Human (YC-backed) is hiring a Member of Technical Staff in San Francisco for a full-time backend/full-stack role. Requirements: 3+ years in software, strong Node.js and Python, cloud infra (AWS/GCP/Azure). Responsibilities: architect scalable backend handling millions of sessions/min, own end-to-end features, technical roadmapping, cross-functional work, and potential research papers for top venues. Focus: frictionless human verification, bot detection, fraud prevention. Founded 2023 by Mayank Agrawal and Matt Hardy; team of 4. Salary $120K-$150K, equity 1%-3%.
AI isn’t erasing junior value; it enlarges it. The piece contrasts two stories: a senior designs tasks for juniors who implement with AI, versus an intern who leads a long-awaited feature with AI support. The intern’s work delivers customer value at low cost, showing juniors add capacity. Training becomes cheaper as AI provides context, making teams more AI-native. Yet technical judgment remains essential; organizations still need seniors, but AI accelerates capability and expands what all levels can handle.
A Stanford-based study compares local SLMs (QWEN 3, GEMMA 3, GPT-OSS, GRANITE 4.0) run on desktop/phone hardware with cloud LLMs (ChatGPT 5, Claude Sonnet 4.5, Gemini 2.5 Pro). It finds SLMs match or beat LLMs in 90%+ of chat tasks, ~62.5% in reasoning, and about 81% on a weighted mix; SLMs do this at 50–85% lower energy and compute cost. By 2025 SLMs’ reasoning success rose to high levels; if trends continue, 70–80% of tasks could run locally, undermining data-center demand and reshaping AI investors toward desktop hardware makers.
YACS 2.0 (Yet Another Curta Simulator) is a WebGL/VRML-based virtual Curta calculator reproducing Curta operation: background/cover options, adder mode (Addition/Subtraction), turns-counter mode (Increment/Decrement), extendable folding clearing lever, and carriage/shaft place-value selection with crank-based calculations. It demonstrates multiplications (e.g., 12345 × 298) by stepping through positions. Originated as a BS Contact VRML project (2008) and updated to X_ITE WebGL (2020); credits include Rick Furr, Rien Mol, Nick Yinger; notes on 3D printing and engineering drawings.
AliExpress homepage secretly runs two obfuscated WebAudio scripts (collina.js and fireyejs.js) from AWSC to create hidden WebAudio graphs that process audio even with zero gain, effectively fingerprinting the browser and hardware. This processing can keep multipoint Bluetooth headphones’ active audio path, preventing switching back to phone; there are no audible sounds or visible media. Blocking those two scripts via uBlock Origin stops the audio contexts and restores normal audio; author notes privacy concerns and potential CAPTCHA implications. TL;DR: silent audio fingerprinting interferes with Bluetooth switching; block the two scripts to avoid.
Netiter provides a free v4 frontend for IPv6 sites. To use it, read the terms and add an A record for 116.202.1.213 alongside your AAAA record. The service is free for site owners to avoid IPv4 scarcity costs; IPv4 clients’ providers pay. Providers can sign up for a free trial and get 20 EUR in Hetzner credits.
Made by Johno Whitaker using FastHTML