Alvaro Lopez Ortega / 2026-08-21 Briefing

Created Fri, 21 Aug 2026 15:05:06 +0000 Modified Fri, 21 Aug 2026 15:06:00 +0000
2345 Words

Supermicro fired staff after a probe into a $2.5B GPU-smuggling ring to China. Cisco warned of critical Secure Workload bugs, including two perfect 10 severity scores. Russian state hackers are abusing OAuth in phishing attacks on Western officials. Alibaba Cloud will cut Western chip use to boost AI margins, and Wi-Fi 7’s WPA3 has a compatibility catch for older devices.

🔒 Security & Privacy

Wi-Fi 7’s WPA3 protections come with a compatibility catch

Wi-Fi 7’s WPA3 security features introduce a compatibility problem with older devices. To address this, CableLabs is urging hardware manufacturers to adopt a workaround that keeps legacy equipment connected while maintaining the new protections.

Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.

Cisco has disclosed five vulnerabilities in its Secure Workload Software, with severity scores of 10, 10, 9.9, 9.6, and 7.5. Even users of the SaaS version are urged to install updates to address these serious flaws.

Russian snoops add OAuth abuse to targeted phishing campaigns

Google is tracking three suspected Russian cyber-spy groups conducting targeted phishing and OAuth-abuse campaigns against individuals in academia, aerospace, defense, government, and think tanks in Europe and the US. The groups, including one linked to the SVR’s APT29, pose as US State Department officials and use legitimate authentication flows to compromise accounts, with Google warning targets to be wary of malicious meeting invites.

I accidentally logged hundreds of thousands of phone calls to military bases

The author bought the expired domain ns.enum.org.uk for €5, gaining DNS control over three e164.arpa zones tied to phone codes for Saint Helena, the British Indian Ocean Territory, and Ascension Island. This let them redirect ENUM phone-number lookups and accidentally log hundreds of thousands of calls to military bases. The incident highlights how the largely abandoned ENUM routing system is vulnerable because of expired infrastructure and neglect.

Hackers compromised Tesla charger to infect rival brands

Researchers demonstrated a worm in a lab that infected a Tesla charger through its charging cable and then autonomously spread to Autel and ChargePoint chargers, highlighting EV ecosystem vulnerabilities. The experiment used real devices, but no public chargers or real Teslas were infected.

💻 Software & Open Source

Debian is 33, Haiku is 25, and neither is standing still

Debian celebrates its 33rd anniversary as a foundational Linux distribution, while Haiku marks 25 years of keeping the BeOS legacy alive. Both projects continue active development, demonstrating their enduring relevance in the FOSS landscape.

Small, native web tricks worth remembering

This article highlights a collection of small, native web platform tricks, each paired with examples and caveats. It warns that some features are experimental or limited, advising developers to check support labels, keep fallbacks, and test with real browsers and assistive technology. Currently, no post-its are found on the page.

rust-glancer: An alternative LSP for Rust with focus on low memory usage

Rust Glancer is an alternative Rust LSP designed for low memory usage, typically under 100MB, and it avoids re-indexing after restarts by saving analysis results to disk. Benchmarks show it indexes projects slightly faster than rust-analyzer on both M4 Max and M1 Macs. It is not yet a full LSP, but supports common features such as goto definition, hover, inlay hints, and completions.

Data races and the memory model in Go

Sharing data between goroutines via a plain variable and boolean flag is unsafe because Go’s memory model does not guarantee that one goroutine will see another’s write without explicit synchronization. The race detector confirms this by reporting data races on both the message and the flag, even though the program may print “hello” in practice. Proper coordination requires using channels or synchronization primitives.

Japan tried to build an operating system for the entire world, then the US government intervened

TRON was a 1984 Japanese project to build a unified computing architecture, including a custom CPU, hypermedia OS, and a vast character encoding system, but its desktop variant BTRON was effectively killed after a 1989 US trade report labeled it a trade barrier. Its embedded counterpart ITRON quietly became one of the most widely deployed operating systems ever, while the project later attracted baseless conspiracy theories.

The road to ACID transactions in Cassandra 6

Cassandra 6 introduces Accord, enabling strictly serializable cross-partition ACID transactions, building on earlier atomic batches and single-partition Paxos. The article demonstrates setting up a three-node pre-release Cassandra cluster and testing transactional workloads with default, batch, LWT, and Accord updates.

Music theory for programmers

The article explains how to learn music theory from first principles by coding, starting with the concept that sound is a number changing over time. It demonstrates generating a sine wave and shaping volume with an envelope, showing how pitch and amplitude are controlled computationally. The goal is to derive musical notes, scales, and chords without relying on convention or instruments.

Bazzite Deck 44 Launches Today

Bazzite Deck 44 launches as the project’s biggest update, ending one-time image decoupling so all images update simultaneously, and replacing the old deck stack with SteamOS-aligned components such as InputPlumber, SteamOS-Manager, PowerStation, and OpenGamepadUI. The release also includes major improvements for desktop users. Additionally, Universal Blue celebrates its fifth anniversary, surpassing 110,000 weekly active users and now powering Unraid via uCore.

Btrfs Snapshot Integration in KDE

KIO Snapshot integrates Btrfs snapshots into KDE, letting Dolphin and other KDE applications list and access past versions of files or subvolumes through a virtual snapshot:// protocol. It provides access only, not snapshot creation, and works without root privileges using libbtrfsutil and Solid.

🤖 AI & Cloud

Alibaba Cloud plans to use fewer Western chips, to boost its already huge AI margins

Alibaba Cloud plans to reduce its reliance on Western chips in order to boost its already substantial AI profit margins. The company sees cloud-based AI as its most reliable growth avenue as its e-commerce business slows down.

Vibe coding personal apps in mid-2026

The author built Toucan, a local-first progressive web app, to address personal needs like saving restaurant recommendations, remembering faces via spaced repetition, and creating a custom Spotify player. They coded it with Claude, used Yjs for data syncing to their own server, and noted a lack of standard personal data sync server solutions.

DeepSeek’s experimental multimodal V4 Flash nears Anthropic’s Opus 4.8 on agentic tests

DeepSeek released an experimental multimodal version of its V4 Flash model, adding the ability to analyze and act on visual prompts like images and screenshots. The company says the model nears the performance of Anthropic’s Opus 4.8 on multimodal agentic tests.

🔋 Hardware & Infrastructure

EE invites mobile users to live life in the 5G Fast Lane – for a price

EE is introducing 5G network slicing, a feature that offers users a prioritized “fast lane” experience for a premium monthly price. The service is aimed at those willing to pay extra for enhanced network performance.

Supermicro fired staff after probe into $2.5 billion GPUs-to-China smuggling operation

Supermicro has fired staff members following an internal probe into a $2.5 billion GPU smuggling operation to China. The investigation found that company policies and code of conduct were breached.

Better Batteries

The debate over standard library size is misguided; what matters is design quality and adaptability. Python’s stdlib has uneven quality but enables rapid innovation, Go’s is well-crafted with strong institutional support, while Rust’s core APIs are excellent but organizational limits hinder adding new features like an OS random bytes API.

China grants Geely 2-year permit for first private satellite IoT trial for transport, energy

China’s MIIT has granted Geely’s commercial satellite unit, Geespace, a two-year permit for the country’s first private satellite IoT commercial trial. The approval allows Geespace to offer low-power, wide-coverage connectivity for sectors such as transport, marine fisheries, energy, and water infrastructure, highlighting Beijing’s push to accelerate its commercial space industry.

🚗 Autonomous & Mobility

London cabbies push back as Waymo, Wayve target city for robotaxis

London cab drivers are pushing back against the planned arrival of autonomous taxis, with some reportedly considering “skulduggery” to demonstrate the vehicles’ limitations. Their concerns come as companies like Waymo and Wayve compete to make London their European launchpad for driverless services.

Nevada OKs Tesla up to 5,000 robotaxis in Las Vegas; Waymo, Uber 1,000 each

Nevada approved permits allowing Tesla, Uber, and Waymo to operate robotaxis in Clark County, with Tesla authorized for up to 5,000 vehicles and Uber and Waymo for 1,000 each over the next year. Tesla indicated it will likely deploy far fewer, estimating around 2,500 vehicles. The approvals faced opposition from taxi operators concerned about oversaturation and impacts on the workforce.

💼 Business & Tech Culture

Developer declined impossible task of fixing rubbish code that could crash a city

A developer tasked with fixing dangerously flawed code—potentially causing city-wide crashes—declined the assignment after envisioning explosions, blackouts, and daring escapes. Rather than accept the impossible mission, the techie decided the best course was simply not to take the job.

What are you doing this weekend?

The article invites readers to share their weekend plans and ask for help or feedback. It also reassures that it is perfectly acceptable to do nothing at all.

Patreon overhauls features, changes recommendations to help smaller creators get discovered

Patreon announced a roadmap of updates, including a discovery algorithm overhaul that will recommend creators based on post content rather than follower networks to help smaller creators get discovered. The platform is also adding short-form video tools like Clips and Quips, customizable pages, and upcoming topic-based communities called Niches, along with security and anti-scraping measures. Several updates are still in development and will be tested with community feedback.

NYC overtakes Bay Area as top tech talent market for first time: 394,300 vs 375,730 jobs

For the first time, New York surpassed the San Francisco Bay Area in tech talent, with 394,300 jobs versus 375,730, driven by Bay Area cuts and New York’s finance sector hiring AI workers. AI-specific jobs grew 45% across the U.S. and Canada, and AI firms are fueling office leasing recovery, particularly in San Francisco, where they accounted for 58% of leasing in early 2025.

Samsung unveils $65.1B-$79.5B shareholder return package for 2026, largest ever by Korean company

Samsung Electronics unveiled a 90–110 trillion won ($65.1–$79.5 billion) shareholder return package for 2026, calling it the largest ever by a Korean company, with about 30 trillion won in Q3 cash dividends. The announcement follows SK Hynix’s 40 trillion won buyback as Samsung seeks to close the gap in AI high-bandwidth memory chips.

Nvidia in early talks with South Korean AI chip maker Rebellions for potential deal

Nvidia is in early talks with South Korean AI chip startup Rebellions about a potential partnership, investment, or acquisition. CEO Jensen Huang met with Rebellions CEO Sunghyun Park this week at Nvidia’s headquarters in Santa Clara. The discussions reflect Nvidia’s broader strategy of investing to maintain its central role in the AI era.

Memory boom reshapes Micron’s Boise: millionaires, jobs, housing costs, wealth gap

Micron’s AI-driven stock surge has turned many Boise employees into millionaires and fueled a local boom, with new chip plants and research labs expected to create thousands of jobs. However, rapid growth has also brought traffic, rising housing costs, and concerns about uneven wealth distribution and overreliance on a historically cyclical industry.

AI data startup Micro1’s gross ARR jumps from $100M to $500M in 8 months; net ARR $150M-$200M.

Micro1, a data-labeling startup, grew its gross annual run rate from $100 million to $500 million in eight months, with a net annual run rate of $150–200 million. The surge reflects booming demand for unique AI training data from top labs and corporations. While rivals Mercor and Handshake are larger, Micro1’s growth shows ample demand for multiple players in the space.