Alvaro Lopez Ortega / 2026-03-03 Briefing

Created Wed, 04 Mar 2026 02:08:20 +0000 Modified Sat, 18 Apr 2026 13:19:12 +0000
9338 Words

Researchers at MIT are developing injectable mini-organs to potentially replace damaged livers, while a concerning data privacy breach reveals personal chatbot transcripts are being sold by brokers despite anonymization claims. Cybersecurity arrests now predominantly involve individuals aged 35-44, indicating a shift to more sophisticated, profit-driven crime. Simultaneously, CIOs report AI adoption is accelerating beyond their management capabilities, and Accenture acquired Ookla, parent of Downdetector, for $1.2 billion. Finally, a Florida woman received a lengthy sentence for a large-scale illegal Microsoft software scheme.

🤖 AI & Machine Learning

CIOs say AI adoption is moving faster than they can manage

A new report reveals that AI adoption is outpacing organizations’ ability to manage it effectively, creating a disconnect between ambition and execution. CIOs are concerned about risks, governance, and a shortage of skilled personnel, despite continued investment in AI technologies. Many organizations lack comprehensive strategies and are worried about the long-term stability of the AI market and its environmental impact.

Chiron Codex: creating software centaurs

The “Chiron Codex” initiative aims to help software engineers effectively utilize AI tools. It promotes the concept of “software engineering centaurs,” highlighting the advantages of integrating AI into the development process. The project offers resources and content to support this integration, with opportunities for audience members to provide support and gain early access.

Introduction to Data-Centric Query Compilation

Data-centric query compilation, introduced in 2011, optimizes database queries by shifting from operator-based execution to processing data directly. This method generates imperative code that iterates over data, eliminating overhead and enabling faster tuple processing. By embedding query logic within a single, optimized loop, it improves efficiency compared to traditional operator-centric approaches.

Meta Creates AI Unit for Superintelligence Efforts

Meta is establishing a new applied AI engineering organization within its Reality Labs division, led by Maher Saba. The group will focus on supporting the company’s superintelligence efforts and features a “flat structure” with a high ratio of individual contributors to managers. This initiative reports to Meta’s Chief Technology Officer, Andrew Bosworth.

X Suspends Creators for AI Conflict Videos Without Disclosure

X is implementing a policy requiring creators in its revenue-sharing program to disclose when AI-generated videos depict armed conflicts. Violators will face suspensions from the program, ranging from 90 days to permanent removal. This marks X’s first AI content disclosure rule, aimed at combating the spread of misleading content during times of conflict.

ChatGPT Updates: Tone, Speed, and Accuracy

OpenAI has rolled out GPT-5.3 Instant as the new default model for ChatGPT, focusing on improved accuracy, conversational tone, and reduced “cringe” responses. The update aims to minimize hallucinations by up to 26.8%, eliminate unnecessary refusals, and enhance web search integration for a more helpful user experience. GPT-5.2 Instant will be phased out by 2026, and the new model is now available to all ChatGPT users.

JetStream Security raises $34M for AI agent mapping tool.

JetStream Security, a startup founded by cybersecurity veterans, has raised $34 million in seed funding to address growing concerns around AI governance and security. Their “AI Blueprints” tool provides real-time mapping of AI agent activity within organizations, tracking data usage, costs, and potential risks. The company aims to build trust in AI adoption by giving businesses visibility and control over their AI systems.

Gemini AI: Faster, Cheaper, Scalable

Google has introduced Gemini 3.1 Flash-Lite, a new AI model optimized for developers needing cost-effective, large-scale processing. This model offers improved speed and quality compared to earlier versions, while also providing performance management controls and affordability. It is currently available in preview through Google AI Studio and Vertex AI.

AI data centers can adjust power use, UK trial finds

A UK trial has shown AI data centers can adjust their power consumption when requested, potentially avoiding continuous peak demand. This discovery challenges current grid connection processes and could ease pressure on electricity grids struggling to accommodate growing AI infrastructure. The findings suggest data centers may be overestimating their power needs when applying for grid access.

Meta AI Tests Shopping Feature, Rivals ChatGPT & Gemini

Meta is testing a shopping research tool within its Meta AI chatbot for a limited number of US users. The feature provides product suggestions and comparisons, directly competing with similar offerings from ChatGPT and Google’s Gemini. This move marks Meta’s entry into the AI-powered e-commerce space.

Talos: Hardware accelerator for deep convolutional neural networks

Talos is a newly developed FPGA-based hardware accelerator specifically designed for efficient Convolutional Neural Network inference. Unlike flexible deep learning frameworks, Talos eliminates runtime overhead by implementing a deterministic, cycle-accurate pipeline in SystemVerilog. This approach prioritizes minimizing latency and resource usage for faster and more streamlined performance.

The AI Bubble Is an Information War

Recent earnings reports from NVIDIA and CoreWeave reveal potential vulnerabilities in the AI industry. NVIDIA is offering incentives to customers, while CoreWeave reported significant losses and declining revenue per megawatt of compute, relying on a few key clients and substantial debt. These findings raise concerns about the long-term sustainability of GPU rental businesses and the valuations of companies within the AI sector.

My accent costs me 30 IQ points on Zoom. So we built an ML model to fix it

A tech entrepreneur has observed that his Armenian accent often hinders communication, despite his expertise, highlighting a broader issue affecting the majority of global workers who are non-native English speakers. Current communication technology is optimized for native speakers, leading to productivity and comprehension losses that are currently unmeasured. His company is now developing AI-powered technology to address this “accent understanding” problem as an engineering challenge.

Why No AI Games?

Despite advancements in artificial intelligence, truly innovative AI-driven video games remain scarce. Current examples often rely on the novelty of AI technology rather than creating unique gameplay experiences. Experts suggest that these games haven’t yet delivered the compelling and surprising moments that define successful video games.

I Used Claude to File My Taxes for Free

A taxpayer successfully filed their complex 2025 federal tax return for free using the AI language model Claude and the IRS’s Free File Fillable Forms. The individual left TurboTax due to concerns about Intuit’s lobbying efforts and deceptive advertising practices related to free tax filing options. Claude primarily assisted with document analysis and verification, but all data entry was done manually.

Cekura (YC F24) – Testing and monitoring for voice and chat AI agents

Cekura is a new platform designed to test and monitor voice and chat AI agents by simulating real user conversations and evaluating entire conversational flows. Unlike traditional methods or tracing platforms, Cekura identifies issues arising from the interaction of multiple turns, ensuring agents behave correctly even in complex scenarios. The platform offers a free trial and aims to help teams catch regressions and improve the reliability of their AI agents.

The Connecticut Supreme Court is reviewing a case where lawyers submitted legal briefs with fabricated case citations generated by AI, which went unnoticed during review. This incident raises concerns about the reliability of AI in legal practice and the potential for misleading courts. Connecticut courts are now considering measures to verify AI-generated legal research to maintain accuracy and professional standards.

Open-Source Article 12 Logging Infrastructure for the EU AI Act

A new open-source TypeScript library has been released to help companies comply with the EU AI Act’s Article 12, which mandates detailed logging and retention of AI decision-making processes. The free tool creates append-only logs with tamper detection, ensuring accountability and facilitating reconstruction of past AI actions. It’s designed for Node apps using the Vercel AI SDK and offers a simple solution for companies in the EU, UK, and US facing these new regulations.

Whats Up with Claude Lately?

Users have reported recent instability with the AI model Claude, experiencing issues like premature planning and unwanted dialogue. The model itself acknowledges these problems, attributing them to a deviation from established guidelines without understanding the underlying cause. Developers plan to enforce stricter adherence to the model’s rules to address the erratic behavior.

The Excommunicated Devs Making Games with AI

A clandestine community of game developers is utilizing AI tools to create games, sharing their work and fostering a supportive environment. These developers are producing surprisingly innovative and charming games, demonstrating the potential of integrating AI with human creativity. While AI hasn’t replaced traditional development, it’s accelerating the game creation process and opening new possibilities.

Ars Technica fires reporter after AI controversy involving fabricated quotes

Ars Technica has fired senior AI reporter Benj Edwards after a retracted article was found to contain fabricated quotes attributed to a source. Edwards took responsibility, stating he unintentionally incorporated AI-generated paraphrases while experimenting with AI tools. The publication has stated this was an isolated incident and will release a guide on AI usage.

💻 Software & Development

BunsenLabs Carbon keeps the CrunchBang flame alive with Debian 13

BunsenLabs Carbon, a Debian 13-based distribution, continues the legacy of the CrunchBang Linux project with a lightweight desktop environment. The release incorporates components from Xfce and prepares the groundwork for a potential future transition to Wayland, although it currently uses Openbox. Despite aesthetic changes, it maintains a relatively small footprint compared to other CrunchBang continuations.

Next.js turf war heating up: Cloudflare’s vibe-coded gambit humbled by critical security bugs

A security flaw has emerged in Cloudflare’s recently released Next.js competitor, humbling its attempt to challenge the popular framework. The critical bugs were discovered shortly after Cloudflare launched its “vibe-coded” offering, highlighting potential vulnerabilities in its approach. Users are advised to enable JavaScript and cookies to continue accessing the platform.

Stop re-explaining your codebase

Lore is a new OpenCode plugin designed to improve the memory and performance of AI coding agents. Unlike traditional summarization methods, Lore preserves detailed operational intelligence like file paths and error messages through a tiered memory architecture. Early benchmarks show Lore significantly improves recall accuracy compared to OpenCode’s default memory approach.

Four months of Ruby Central moving Ruby backward

Ruby Central has recently taken control of RubyGems and Bundler, displacing long-term maintainers and disregarding established community governance processes. Despite privately acknowledging the error of their actions, they have publicly defended the takeover and negotiated a transfer of repositories to ruby-core. Former maintainers have offered a resolution, which Ruby Central has rejected while simultaneously proposing governance documents they previously violated.

CRDTs: Interactive Introduction

Conflict-free Replicated Data Types (CRDTs) are data structures that allow collaborative applications to update data independently across devices without a central server. CRDTs guarantee eventual data synchronization through either sharing full data states or actions, with state-based CRDTs relying on merging functions to achieve consistency. This approach enables decentralized collaboration and avoids conflicts by converging on a single, agreed-upon data state.

Don Knuth’s “Claude-like” directed Hamiltonian cycles decompositions

The article discusses a new approach to decomposing Hamiltonian cycles, playfully named “Claude Cycles” by its creator, Don Knuth. Knuth, a renowned computer scientist, found the original title too concise and opted for a more descriptive alternative. The method explores directed Hamiltonian cycles and their decompositions.

Log messages are mostly for the people operating your software

The Wandering Thoughts blog is blocking users with outdated browsers, primarily older versions of Chrome, due to an increase in crawlers likely gathering data for LLM training. Users experiencing this block are advised to update their browsers, adjust User-Agent settings (especially for Vivaldi), and use archive.org instead of other archiving services. The blog owner is attempting to filter out malicious crawlers to reduce server load.

Rust zero-cost abstractions vs. SIMD

A customer’s full-text search query was experiencing unexpectedly high latency due to Rust’s “zero-cost” iterators inadvertently blocking vectorization. Enabling vectorization resolved the bottleneck, reducing latency from 220ms to 47ms. This incident highlights the importance of understanding how abstractions interact with performance, even when designed to be efficient.

QuePaxa: Escaping the tyranny of timeouts in consensus

The article introduces QuePaxa, a new approach aimed at eliminating timeouts in consensus algorithms. It promises to address a common limitation in distributed systems where timeouts can lead to errors and inefficiency. Users are instructed to enable JavaScript and cookies to access the full content.

Nobody ever got fired for using a struct

A Feldera customer experienced performance issues in a data processing pipeline due to Rust structs representing SQL rows with numerous nullable columns. These large structs, containing hundreds of optional fields, led to increased disk I/O as the datasets were too large to fit in memory. The company is investigating the impact of these large structs on performance.

Deprecate confusing APIs like “os.path.commonprefix()”

Python plans to deprecate the os.path.commonprefix() function in version 3.15 due to its history of causing user confusion and security vulnerabilities. A recent pip vulnerability highlighted the widespread misuse of the function, prompting the deprecation proposal and a security warning. The function’s placement and behavior have been problematic for over three decades, and its removal aims to prevent future security risks.

Hoot 0.8.0 released! - Scheme in WASM

Hoot 0.8.0, a compiler that enables Scheme code to run in web browsers, has been released. This version includes a built-in read-eval-print loop (REPL) for live coding, an enhanced web server with REPL server capabilities, and new modules for web development and WebSocket interaction. A new command-line tool has also been introduced to simplify development workflows.

EZ-Tree | Procedural Tree Generator

The EZ-Tree is a procedural tree generator created by Dan Greenheck. It allows users to generate trees using algorithms, rather than relying on pre-made models. The tool’s functionality is currently experiencing loading issues.

Claude’s Electron App: A Native Loss

The decline of native app development isn’t a consequence of technological limitations, but rather a result of inconsistent design, poor interoperability, and underwhelming performance compared to web-based alternatives. The increasing adoption of Electron apps, exemplified by Claude, highlights a broader shift away from native development due to a general decline in software quality. Ultimately, improving software requires greater attention to detail and quality, regardless of the underlying technology.

Casual Shadertoy Path Tracing

This series of blog posts will explore path tracing, a rendering technique for creating photorealistic images, using the Shadertoy platform. The tutorials will prioritize artistic exploration and ease of use over strict mathematical accuracy, making the complex process accessible to a wider audience. Readers can expect to learn the basics of path tracing while creating visually appealing renderings within the simplified Shadertoy environment.

Lilaq: Advanced data visualization in Typst

Lilaq is a new plotting library for Typst, offering users the ability to create publication-ready graphics with a real-time preview. The library boasts easy learning, seamless integration, and consistent styling through interoperability with Zero. Developers are seeking sponsorship on GitHub to support the project’s continued development.

Top reasons why you should use std::simd

The C++ standard committee is introducing std::simd to improve developer experience and adapt to modern software development practices. This feature, while initially increasing compilation times, is intended to provide a perception of productivity and justify software maintenance costs. Ultimately, std::simd aims to address issues like slow error messages and allow for future optimizations.

Type systems are leaky abstractions: the case of Map.take!/2

The article examines the challenges of integrating a type system into Elixir, specifically through a proposal for a Map.take!/2 function that enforces key existence. The author demonstrates how existing type signatures are too broad to effectively constrain the function’s behavior, potentially limiting expressive power. This example highlights the difficulties in translating dynamic language behavior into static type systems.

Embedding TeX Hyphenation Patterns for 30 Languages in a 1.1 MB Rust Automaton (2022)

A new Rust library, hypher, has been developed to efficiently handle hyphenation for the Typst typesetting system. It embeds hyphenation patterns directly, reducing binary overhead and eliminating runtime loading and memory allocations. The library utilizes established TeX hyphenation patterns to determine optimal word breaks.

Simple Screw Counter

A maker has developed a simple, automated screw dispenser using laser-cut acrylic and an Arduino to streamline the assembly of precision clock kits. The device utilizes a ramp and slot system to reliably dispense screws and incorporates a shaking mechanism to prevent jams. While the current design has limitations in hopper capacity, it represents a surprisingly straightforward approach compared to existing solutions.

Announcing npmx: a fast, modern browser for the npm registry

npmx is a new, open-source browser for the npm registry focused on improving the package management experience through speed and simplicity. Developed with significant community contributions, it offers enhanced search, code browsing, and social features. The project is currently in alpha and welcomes user feedback to guide its future development.

To update blobs or not to update blobs

Much hardware relies on proprietary “firmware” that functions like standard software, often distributed without access to the source code. Free software advocates are concerned about trusting these updates due to potential security flaws, backdoors, and the inability to fix malicious code embedded in read-only memory. The lack of transparency surrounding this code raises questions about its functionality and trustworthiness.

In defence of correctness

Reporting systems, crucial for business decision-making, require a high degree of accuracy as incorrect data can have significant real-world consequences. While absolute correctness isn’t always feasible, particularly with evolving requirements, it’s essential for applications impacting resource allocation and business strategy. The author emphasizes that even subtle errors in reporting can lead to flawed decisions and negative outcomes.

Chrome to Release Every Two Weeks, Starting Sept. 8

Google will accelerate Chrome browser releases to a two-week cycle, starting September 8th with version 153. This change, affecting desktop, Android, and iOS versions, aims to deliver faster updates and improvements to users and developers. Channels like Dev, Canary, and Extended Stable will remain on their current release schedules.

Lenovo’s New ThinkPads Score 10/10 for Repairability

Lenovo’s newest ThinkPad T14 Gen 7 and T16 Gen 5 laptops have achieved a perfect 10/10 score for repairability, a first for the ThinkPad series. This result is the culmination of a two-year collaboration with iFixit, which prioritized accessible parts, simplified repair procedures, and publicly available documentation. The redesign fundamentally integrated serviceability from the initial design stages, balancing it with performance and other device features.

Voxile: A ray-traced game made in its own engine and programming language

Voxile, a ray-traced voxel game built on a unique custom engine and programming language called Lobster, has received a major update, “The Builder’s Update,” featuring new world elements and enhanced building tools. The game was created by a developer with extensive experience in engine and language design, including work at companies like Crytek and Google. Voxile is currently available on Steam at a 40% discount for a limited time.

M5 Pro and M5 Max are surprisingly big departures from older Apple Silicon

Apple has unveiled the M5 Pro and M5 Max chips, marking a significant architectural shift from previous Apple Silicon generations. These chips employ a “Fusion Architecture,” combining separate chiplets for CPU/I/O and graphics, and are built on a 3nm process. Both chips share a common CPU and Neural Engine, with differences primarily in their graphics capabilities.

We want to displace Notion with collaborative Markdown files

Moment is developing a Notion alternative that utilizes local Markdown files stored in Git, aiming to move beyond traditional SaaS interfaces. The platform seeks to leverage coding agents to generate custom user interfaces while enabling seamless collaboration and robust programming capabilities. They are currently focused on overcoming technical challenges in achieving smooth collaborative editing performance.

A [Firefox, Chromium] extension that converts Microsoft to Microslop

A browser extension called “Microslop” replaces Microsoft-related terms with humorous and often disparaging alternatives. Available for Firefox and Chromium browsers, the open-source tool claims not to collect user data, although optional replacements can be enabled. The extension has received positive reviews and is accessible on multiple websites.

Drizzle Joins PlanetScale

The Drizzle team, known for their open-source ORM for JavaScript and TypeScript, has joined PlanetScale. Drizzle will remain an independent open-source project with its own roadmap, now supported by PlanetScale’s resources. This collaboration aims to enhance database tools with a focus on performance and developer experience.

Don’t become an engineering manager

The author advises against transitioning to an engineering management role, citing the current rapid pace of technological change that limits individual learning and experimentation. Companies are also flattening management hierarchies, making advancement more difficult and reducing upward mobility. Remaining an individual contributor, especially at a senior level, is often more financially rewarding and offers greater opportunities.

I’m losing the SEO battle for my own open source project

Open-source project creator Gavriel Cohen is facing an unusual SEO crisis where impersonators are creating fake coins and attributing malicious activity to him and others. Google’s search capabilities are reportedly contributing to the problem, requiring their intervention to resolve the situation. The incident has sparked user frustration and concerns about the reliability of online search engines.

The beauty and terror of modding Windows

Windhawk is a free tool that allows users to deeply customize Windows and applications through the installation of “mods,” enabling features like taskbar theming and custom mouse functionality. However, the tool works by injecting code into running processes, which introduces potential stability and security risks, including compatibility issues and potential account bans. Microsoft’s development of Windows Baseline Security Mode highlights the ongoing conflict between user customization and system security.

Giggles – A batteries-included React framework for TUIs

Giggles is a new React framework designed to simplify the development of terminal user interfaces (TUIs) by automating focus and input routing. It provides a suite of 15 pre-built UI components, terminal process control features, and navigation tools, all with React 19 compatibility. Developers can explore interactive demos and get started quickly through the project’s website.

🛡️ Security & Privacy

Chat at your own risk! Data brokers are selling deeply personal bot transcripts

Data brokers are selling chatbot conversation transcripts collected through deceptive browser extensions, despite claims of anonymization. These transcripts contain sensitive personal information like health records and legal details, often without user awareness. Experts warn that even pseudonymized data poses significant privacy risks due to the potential for re-identification.

Turns out most cybercriminals are old enough to know better

A new analysis of cybercrime arrests reveals that individuals aged 35-44 constitute the largest group of offenders, challenging the stereotype of teenage hackers. This shift indicates a move towards more sophisticated, profit-driven cybercrime, often resembling organized business operations. The data highlights a growing trend of older adults engaging in activities like cyber extortion and malware deployment.

Bootleg Windows, Office scheme crashes, triggers 22-month lockup for Florida woman

A Florida woman, Heidi Richards, was sentenced to 22 months in prison for a scheme involving the illegal acquisition and resale of Microsoft software product keys and certificate of authenticity labels. Through her company, Trinity Software Distribution, Richards obtained over $5 million worth of labels and profited from distributing activation codes. The scheme exploited vulnerabilities in Microsoft’s supply chain, resulting in a hefty fine and prison term.

Chrome Gemini panel became privilege escalator for rogue extensions

A recently discovered vulnerability (CVE-2026-0628) in Google Chrome allowed malicious extensions to exploit the Gemini Live AI panel and gain unauthorized access to system resources. The flaw enabled extensions to intercept and manipulate traffic, potentially accessing sensitive data like webcams and microphones. Google has patched the vulnerability in Chrome versions 143.0.7499.192 and 143.0.7499.193.

Phish of the day: Microsoft OAuth scams abuse redirects for malware delivery

Microsoft has warned of ongoing phishing scams targeting government and public sector organizations that abuse OAuth redirects to deliver malware. Attackers use malicious URLs in phishing emails to redirect victims to attacker-controlled landing pages, bypassing the need to steal access tokens. Microsoft has taken action to disable some malicious applications, but cautions vigilance and continued monitoring is necessary.

Attackers could hijack Perplexity’s Comet browser to take over your 1Password vault

A security vulnerability in Perplexity’s Comet browser could allow attackers to compromise users’ 1Password vaults. The issue stems from the browser’s handling of JavaScript and cookies, which require enabling for continued use. Users are advised to be cautious and review Perplexity’s security recommendations.

“Star Citizen” maker says that an undisclosed month-old data breach isn’t a big deal

The developer of “Star Citizen” claims a recent data breach, occurring a month ago, is not significant. They state the incident has not impacted player data or the game’s operations. The company has not disclosed further details about the nature or scope of the breach.

Samsung comes clean after collecting Texans’ TV data

Samsung admitted to collecting data from Texas residents’ smart TVs without their explicit consent. The data included viewing habits and audio information, raising privacy concerns. Users can opt-out of data collection, but the incident highlights issues with smart device data practices.

Your car’s tire pressure system can expose where you go 24/7

Due to technical limitations, the provided article content is inaccessible. Therefore, a summary cannot be generated. The article title suggests a potential privacy vulnerability related to vehicle tire pressure monitoring systems (TPMS) and their ability to track location data.

Exploring Maturity Models For Security

Maturity models offer structured frameworks for assessing and enhancing organizational processes, evolving from management science to specific models like CMMI and SAMM. These models, such as the OWASP Software Assurance Maturity Model (SAMM), provide roadmaps for iterative improvements based on measurable practices. They acknowledge that organizations require tailored approaches to achieve progress across different maturity levels.

Online Identity Verification Concerns

Due to privacy concerns and a lack of trust in verification systems, the author is unwilling to verify their identity or age for online services. They are prepared to forgo access to platforms and even essential communications rather than comply with these requirements, which they view as restrictive. The author prioritizes data security and seeks alternative solutions for accessing online content and services.

CBP Tracked Phones Using Ad Data, ICE Did Too

A Department of Homeland Security document reveals that Customs and Border Protection has been purchasing location data from online advertising companies to track individuals. This practice, similar to one already employed by Immigration and Customs Enforcement (ICE), utilizes data often sourced from everyday apps. Lawmakers are now demanding an investigation into these data-buying practices due to privacy concerns.

Zed will require age identification for its services

Zed Industries now requires users to be at least 18 years old to access its AI-enhanced software and subscription service. The updated Terms of Service also include mandatory binding arbitration, waiving the right to a jury trial or class action lawsuits. Users must adhere to the usage policies of third-party AI providers that power the service.

A recent security audit of popular free developer tools revealed significant privacy vulnerabilities, with sites tracking users and collecting sensitive data like API keys and passwords. Tools like jsonformatter.org immediately engage in extensive advertising network tracking, while others store user-pasted code on their servers. This poses a risk of data exfiltration and tracking without users’ explicit consent or knowledge.

Someone needs to go to jail

Recent arrests of British figures connected to Jeffrey Epstein are signaling a new era of accountability, contrasting sharply with the lack of action in the United States. The article argues that American elites have largely avoided consequences for their involvement, suggesting a system influenced by wealth and privilege. It contends that this inaction demonstrates a failure to adequately address Epstein’s crimes and the broader political capture of wealthy individuals.

Stolen Gemini API key racks up $82,000 in 48 hours

A stolen Google Cloud API key led to $82,314 in unauthorized charges for Gemini services within 48 hours. The incident, which drastically exceeded the usual $180 monthly spend, highlights the importance of setting spending limits and alerts for API keys. Experts advise users to implement these security measures to prevent potential financial losses.

PHP 8 disable_functions bypass PoC

A vulnerability dubbed “TimeAfterFree” allows attackers to bypass PHP’s disable_functions security feature in versions 8.2 through 8.5. The exploit leverages a use-after-free bug and DateInterval object to achieve read/write access, demonstrating the potential for memory corruption. This highlights the unreliability of sandboxing measures within PHP.

🌐 Business & Tech

Downdetector Acquired by Accenture

Accenture is acquiring Ookla, the parent company of Downdetector, Speedtest, and RootMetrics, for $1.2 billion from Ziff Davis. The deal will bolster Accenture’s analytics and intelligence capabilities by integrating Ookla’s network performance data and testing tools, which conduct roughly 250 million tests monthly. Ziff Davis will use the proceeds to reduce debt, while Accenture will focus on optimizing networks and providing data-driven solutions for clients in sectors like communications and government.

Microsoft reportedly eyes E7 tier to make AI agents pay their way – like the humans they’ll replace

Microsoft is reportedly developing a new Microsoft 365 subscription tier, E7, to license and manage AI agents within enterprise environments. This tier would bundle Copilot and agent management tools, providing identities, access controls, and policies for AI agents. The move is intended to ensure Microsoft’s revenue stream as AI agents become increasingly integrated into the workplace.

Alibaba Qwen Team Sees Sudden Departures

A key technical leader, Junyang Lin, has abruptly resigned from Alibaba’s Qwen AI team shortly after the company released its new Qwen 3.5 models. Two other team members have also reportedly left, sparking concern within the AI community. The reasons behind these departures are currently unknown.

Intel Chair Yeary to Retire, Replaced by Barratt

Intel announced that board chair Frank Yeary will retire after the annual meeting in May, being succeeded by Craig Barratt. Yeary has served on the board since 2009 and his departure follows recent changes under CEO Lip-Bu Tan’s turnaround efforts. The shift aims to professionalize the board and support Intel’s evolving strategy.

Trump: Banks Threaten GENIUS Act Over Stablecoin Payments

President Trump accused banks of attempting to undermine the GENIUS Act, a stablecoin bill he signed into law last year, through opposition to stablecoin yield payouts. He urged swift passage of related market structure legislation to maintain U.S. leadership in crypto and prevent the industry from moving overseas. Negotiations between the White House and industry representatives are ongoing but have yet to produce a resolution.

Amazon Shuts Down Wondery App, Some Shows Go to Audible

Amazon is shutting down the Wondery podcast app and Wondery+ subscription service in the coming months. Many Wondery+ shows will be available on Audible, with subscribers offered a discounted Audible Standard plan. The move follows Amazon’s reorganization of the Wondery podcast division and reflects a shift toward integrating content under the Audible brand.

New Android Features: Calling Cards, Location Sharing, Luggage Tracking

Google is rolling out new Android features including customizable calling cards and real-time location sharing within Google Messages. These additions, which mirror existing iPhone capabilities, enhance communication and personalization for Android users. The update also includes a luggage tracking feature in partnership with select airlines.

Yahoo Sells Engadget to Static Media

Yahoo has sold the tech news website Engadget to Static Media, a deal finalized in March. The move allows Yahoo to focus on its core brands, while Static Media expands its portfolio of media properties. A broader partnership between Yahoo and Static Media will support audience and revenue growth for Engadget and other brands.

Microsoft’s Build Confab Returns to SF, Smaller Developer Invite

Microsoft’s Build developer conference is relocating from Seattle to San Francisco in June, with a smaller, more intimate format. The event will host approximately 2,500 developers, a reduction from previous years, and will focus on developer interaction and learning. This shift aims to refocus Build on developer-centric content and experiences, moving away from broader product announcements.

X Tests Standalone Chat App for iOS

X is testing a standalone X Chat app for iOS with a limited group of users through Apple’s TestFlight platform. This marks a departure from Elon Musk’s vision of X as an “everything app,” opting instead for a dedicated messaging experience. An Android version is also planned for release soon.

Audible Adds $8.99 Tier to Compete with Spotify

Audible is introducing a new, lower-priced streaming tier in the US for $8.99 per month, competing with services like Spotify. This standard plan offers ad-free podcasts and is a significant price reduction from Audible’s current premium offering of $14.95. The move aims to attract a wider audience to the audiobook platform.

Elliott Invests $1B in Pinterest for Stock Buybacks

Elliott Investment Management has invested $1 billion in Pinterest through convertible notes, which Pinterest will utilize for stock buybacks. The notes have an initial conversion price representing a 30% premium over Pinterest’s recent stock price. This move signals Elliott’s increased stake and influence within the social media platform.

DOJ Sues Over $160M Nvidia Chip Export Scheme to China

The U.S. Justice Department has dismantled a smuggling ring that attempted to illegally export approximately $160 million worth of Nvidia AI chips to China. Businessman Alan Hao Hsu has pleaded guilty and is cooperating with authorities, while two others are facing trial, revealing a scheme involving a Houston-based shell company and purchases from Lenovo. The case highlights concerns about ongoing chip smuggling and the ability to prevent the export of restricted technology.

X, xAI to Repay $17.5B Debt

X and xAI are preparing to repay approximately $17.5 billion in debt, according to sources. The repayment will be funded through capital, including recent equity investments in xAI. Morgan Stanley is communicating the plans to lenders as a potential SpaceX IPO approaches.

Tesla loses Toyota and Stellantis from EU CO2 pool, taking billions with them

Toyota and Stellantis are exiting Tesla’s European CO2 emissions pool starting in 2026, significantly reducing the pool’s size and impacting Tesla’s revenue. Both companies now believe they can meet EU emissions targets independently, with Stellantis forming a new pool with Leapmotor. This move highlights a broader trend of automakers decreasing reliance on regulatory credits as they transition to electric vehicles.

Why payment fees matter more than you think

Payment processing fees charged by companies like Visa and Mastercard significantly impact merchant profits, often exceeding 4% of sales. This seemingly small percentage can represent a substantial portion of a merchant’s margin, especially when sales tax is considered. Ecuador offers a contrasting example, with alternative payment systems avoiding these fees and providing a more affordable option for businesses.

Florida public universities to pause hiring new H-1B workers

Florida’s public universities have paused hiring new faculty through the H-1B visa program until 2027, following Governor DeSantis’ concerns about potential program misuse. Existing H-1B visa renewals will continue, and exceptions can be made for critical workforce shortages. The freeze aims to assess the program’s impact and address any abuses while potentially impacting Florida’s ability to recruit international talent.

Entry-level PC market to ‘disappear’ by 2028 – memory prices strain PC market

Gartner predicts the entry-level PC market (under $500) will disappear by 2028 due to significantly rising memory costs, which are projected to reach 23% of a PC’s bill of materials by 2026. This price increase will cause a 10.4% drop in PC shipments this year and delay the widespread adoption of AI PCs until 2028. Consumers and businesses are expected to extend the lifespan of existing devices as a result of these higher costs.

Zuckerberg’s internal emails rendered as Facebook Messenger

Internal emails and messages from Meta CEO Mark Zuckerberg, dubbed “Zuckmail,” have been released as part of the FTC v. Meta trial. The collection, which includes 507 messages across 229 threads involving 103 people, originated from public trial exhibits. These communications are part of a broader release of internal documents from various sources, including the Facebook Papers.

LibreOffice hits back at critics, says its UI is better than Microsoft Office’s

LibreOffice has publicly criticized Microsoft Office’s ribbon interface, arguing it’s not inherently more usable and that user preference is driven by Microsoft’s market dominance. The open-source office suite emphasizes its customizable UI and features like native ODF support and enhanced privacy as advantages over Microsoft Office. LibreOffice claims its design is more thoughtful and efficient, particularly for experienced users.

⚙️ Infrastructure & Systems

MIT boffins aim to build injectable mini-organs that can fill in for a damaged liver

MIT researchers have developed a novel “injectable satellite liver” technology using a hydrogel microsphere scaffold to restore liver function in mice. The technique, called INSITE, allows for the delivery of liver cells without surgery, demonstrating viable and functional liver tissue for eight weeks. This approach holds potential as an alternative to organ transplantation and could be adapted for other cell therapies in humans.

AWS backs Open VSX as Rust survey shows VS Code decline

AWS is supporting the Open VSX registry, a vendor-neutral alternative to the Visual Studio Code marketplace, with infrastructure and funding. This move comes as competition in the IDE market increases and VS Code’s usage declines within some developer communities, particularly among Rust developers. Open VSX aims to provide a more open and accessible platform for extensions, addressing limitations within the official VS Code marketplace.

Vodafone to use Amazon sats for cell backhaul in remote parts of Europe, Africa

Vodafone has partnered with Amazon’s Kuiper (now Amazon Leo) to utilize satellites for backhaul connections for cellular base stations in remote areas of Europe and Africa. This agreement will initially focus on Germany and is expected to begin deployments in 2026, offering a cost-effective alternative to traditional cable infrastructure. Vodafone is also expanding direct-to-device satellite services through Satellite Connect Europe, facing competition from other satellite providers.

DIY Home Network with OpenBSD, OpenWrt, and Pi-hole

This article provides a guide for building a DIY home network using OpenBSD, OpenWrt, and Pi-hole, costing approximately $150. The setup uses OpenBSD as a router, OpenWrt as an access point, and Pi-hole for ad blocking, with detailed instructions for configuring each component. It aims to be accessible to newcomers interested in creating customized home network solutions.

Why glibc is faster on some Github Actions Runners

A recent investigation by CodSpeed revealed that seemingly unrelated code changes, like adding a new benchmark, can unexpectedly impact the performance of other benchmarks due to complex CPU behaviors like caching and branch prediction. The team uses a modified version of Callgrind to measure performance and pinpoint these regressions. This highlights the intricate relationship between code and CPU optimization, demonstrating that even small changes can have far-reaching performance consequences.

DOS Memory Management

DOS initially lacked memory management but introduced it in version 2.0 to support larger RAM capacities in PCs. The system manages memory in 16-byte paragraph-sized blocks using memory control blocks (MCBs) that track allocation status and ownership. Errors in these MCB signatures indicate significant system corruption.

Samsung Texas Plant Delayed to 2027

Samsung has delayed the start of mass production at its Taylor, Texas semiconductor plant to early 2027, pushing back the original timeline. While pilot operations have begun, the delay is attributed to ongoing timeline adjustments and factory utilization issues. Samsung maintains that preparations for the plant will still be completed by the end of 2026.

Intel’s make-or-break 18A process node debuts for data center with 288-core Xeon

Intel has launched its Xeon 6+ “Clearwater Forest” processors, featuring up to 288 energy-efficient cores and built on its new 18A process technology. These CPUs target telecom, cloud, and edge AI workloads by integrating advanced features like Foveros Direct 3D packaging and DDR5-8000 memory. Intel aims to replace multiple accelerators with a single, compatible platform solution for increased performance and efficiency.

Ohio EPA weighs allowing data centers to dump wastewater into rivers

The Ohio EPA is considering a permit that would allow data centers to discharge untreated wastewater into Ohio’s rivers, acknowledging potential water quality degradation for economic development. Residents are concerned about the environmental and health impacts, as well as the potential for Ohio taxpayers to cover remediation and monitoring costs. The permit is currently in draft form and open for public comment.

What’s new in Linux kernel for PostgreSQL

Recent changes to the Linux kernel include a new feature called “Uncached buffered IO” designed to improve PostgreSQL database performance. This feature utilizes the page cache for data while preventing data from lingering in the cache after operations, addressing unpredictable resource consumption during memory reclamation. The development aims to enhance PostgreSQL’s efficiency by leveraging these kernel improvements.

Buckle Up for Bumpier Skies

Singapore Airlines Flight SQ321 experienced severe turbulence over Myanmar on May 21, 2024, resulting in multiple injuries to passengers. The sudden drop, occurring before passengers could react, highlights the dangers of unexpected weather and the challenges in passenger compliance during turbulence. Research indicates that even with drills, securing passengers during turbulence takes considerable time, leaving little margin for sudden events.

Daily Driving GrapheneOS

After 8.4 months of using GrapheneOS, the author has significantly reduced their reliance on Google apps and streamlined their daily app usage. They’ve shifted to open-source alternatives for functions like podcasting and translation, and removed apps like Discord due to privacy and usability concerns. The recent phone failure and reinstallation of GrapheneOS prompted this reflection on their evolving app choices.

Device that can extract 1K liters of clean water a day from desert air revealed

Professor Omar Yaghi has developed a large-scale device utilizing Metal-Organic Frameworks (MOFs) to extract up to 1,000 liters of water daily from desert air, even with as little as 20% humidity. The off-grid system, roughly the size of a shipping container, operates using wind and solar power and aims to provide a sustainable water source for arid regions. This technology is inspired by Yaghi’s personal experiences with water scarcity and seeks to create a source of “personalized water.”

Offline 23 Hours a Day

The author has moved to a home with limited internet access and has found it significantly boosts productivity and independent thinking. By restricting online time to brief periods, they’ve experienced deeper problem-solving and a greater reliance on personal ideas. This experiment serves as a reminder to maintain a focused approach even when connectivity is readily available.

🌍 Geopolitics & Society

Data Privacy and AI Concerns

Several companies are addressing user privacy concerns. Zed is updating its terms of service and privacy policy to increase transparency around data handling, especially related to AI features and user control over telemetry. Simultaneously, Google is urging users to update their Chrome browsers to prevent potential data access by its Gemini AI model.

Anthropic is untrustworthy

A recent article accuses Anthropic’s leadership of deceptive practices and shifting stances on AI safety and regulation, raising concerns about the company’s integrity. The author suggests a prioritization of competition over safety, potentially leading to broken promises and a disregard for employee commitments. The piece encourages Anthropic employees to critically examine the company’s direction and its alignment with stated values.

Iran Sees $10M Crypto Flight Amid Attacks, Ecosystem Worth $7.8B

Following recent US-Israeli airstrikes, approximately $10.3 million in cryptocurrency flowed out of Iranian exchanges, mirroring a pattern of increased crypto activity during times of geopolitical instability. Chainalysis estimates Iran’s crypto ecosystem to be worth over $7.8 billion, and the recent outflows are likely being directed towards personal wallets, other exchanges, or potentially state actors. The increased movement highlights crypto’s role as a potential financial tool during periods of crisis and economic pressure.

Helsinki just went a full year without a single traffic death

Helsinki achieved a remarkable milestone, recording zero traffic fatalities in the past year. This accomplishment contrasts sharply with other major European cities like Berlin and Brussels, which experienced numerous traffic-related deaths. The city’s success underscores a significant outlier in the broader EU trend of declining, but still present, traffic fatalities.

Iran War Cost Tracker

A new cost model estimates daily operational expenses for a potential conflict with Iran would range from $155 million to $380 million, encompassing personnel, naval forces, aircraft operations, and logistics. The model acknowledges these figures are likely an underestimate due to unclassified expenses and omitted factors like long-term veteran healthcare and economic impacts. The estimate utilizes data from government reports, industry sources, and expert analysis to provide a running total.

Trump says U.S. will cut all trade with Spain

President Trump announced plans to halt all trade with Spain, citing the country’s refusal to allow U.S. military base usage for potential strikes on Iran and its failure to meet NATO defense spending goals. He instructed officials to investigate potential penalties, asserting his authority to impose trade embargoes. Spain’s government maintains its commitment to free trade and believes it can mitigate any negative impact from the U.S. actions.

FCC Chair Wants Networks to Pledge Loyalty for America’s Big Bday

FCC Chair Brendan Carr is spearheading a campaign encouraging broadcasters to create patriotic programming celebrating the United States’ 250th anniversary. The initiative, called “Pledge America Campaign,” suggests programming focused on civic education, American history, and featuring American classical music. Carr’s efforts are part of a larger task force and aim to promote national pride through media content.

Pass-Through of Tariffs: Evidence from European Wine Imports

A recent study examining US tariffs on European wines found that foreign producers absorbed 20% of the tariff cost by lowering their prices, while US importers passed on the remaining 80% to distributors and consumers. Retail prices increased by approximately 6.9% due to the tariffs, and businesses employed strategies like altering alcohol content to avoid them. The full impact of the tariffs on consumer prices took about a year to materialize.

We may soon have 70M boomers too old to drive, too car-dependent to stop

An aging population of baby boomers, many of whom are heavily reliant on cars, is creating a looming urban planning crisis. Many seniors are reluctant to give up their driver’s licenses, despite potential risks and financial burdens on municipalities. This car dependency is trapping seniors and negatively impacting the quality of life for all residents.

India’s top court angry after junior judge cites fake AI-generated orders

India’s Supreme Court has condemned a junior judge’s use of fabricated AI-generated legal orders in a property dispute case, threatening legal action and deeming it an “institutional concern.” The court has stayed the original lower court ruling and emphasized the impact on judicial integrity. This incident underscores the challenges of regulating AI’s use within legal proceedings.

China’s 450kmph bullet train is the fastest ever built

China is poised to launch the CR450, a new bullet train capable of speeds up to 450 km/h, making it the fastest ever built. This train, succeeding the CR400, will further reduce travel times between major cities and offer enhanced passenger comfort. The advancement aims to encourage travelers to choose high-speed rail over other transportation options.

Drinking newer groundwater linked to up to 62% higher Parkinson’s risk

A new study has linked drinking water from newer groundwater sources, particularly carbonate aquifers, to a significantly higher risk of Parkinson’s disease. Researchers suspect increased exposure to contaminants in newer groundwater may be a contributing factor, although the study establishes correlation, not causation. Further investigation is needed to confirm the connection and identify potential pollutants.

US President struggles to explain why he launched another Middle Eastern war

President Trump is facing criticism for his inability to clearly explain the reasoning behind a recent military intervention in the Middle East. The article suggests a lack of strategic clarity surrounding the decision and a disconnect between the action and its justification. This has led to questions about the objectives of the military action.

U.S. Troops Were Told Iran War Is for “Armageddon,”

Service members have filed over 110 complaints alleging military commanders are promoting religious beliefs, linking the conflict with Iran to biblical prophecies like Armageddon and the return of Jesus. These reported messages, shared across multiple branches and installations, suggest the war is part of a divine plan and President Trump was divinely appointed. The Military Religious Freedom Foundation has reported these allegations, and the Pentagon has not yet commented.

The Case for Apolitical Tech Spaces

The article argues that technical spaces thrive when focused on collaboration and learning, creating beneficial outcomes for everyone involved. Introducing political discussions shifts the dynamic to a zero-sum or negative-sum game, centered on power and advantage, which undermines the positive environment. Maintaining apolitical spaces is essential for continued growth and enriching technical discourse.