Alvaro Lopez Ortega / 2026-08-28 Briefing

Created Fri, 28 Aug 2026 19:06:44 +0000 Modified Fri, 28 Aug 2026 19:07:31 +0000
4558 Words

Meta is rolling out an update to block smart-glasses recording when the indicator light is covered, but critics call it too late as voice recording remains unaddressed. Android job seekers face fake Indeed apps that sideload spyware, giving criminals device control. Meanwhile, htmx 4.0.0 shipped after eight months, and a Rustdoc fix cut build times by up to 40% on real-world crates. Also, a Unix file bug stopped OpenOffice printing on Tuesdays.

🤖 AI & Agents

Yap: a particular kind of slop

The article criticizes LLM-generated code comments as often being verbose, meaningless “yap” rather than genuine communication. It defines yapping as words without substance, notes that LLMs frequently produce such low-quality comments, and highlights the burden this places on human reviewers.

Beijing’s AGI Bar: China’s AI industry’s unofficial clubhouse where entrepreneurs network over beers

Beijing’s AGI Bar has become an unofficial clubhouse for China’s AI industry, where entrepreneurs, coders, and investors network, recruit talent, and seek funding over drinks. The bar, opened in Zhongguancun, highlights the country’s booming AI ecosystem and its ambition to challenge Silicon Valley. Notably, AI company Z.ai celebrated its public listing there by buying drinks for five days.

Tencent’s Hy4 Preview: 770B open model, 1M context, beats Z.AI and Moonshot in internal tests

Tencent released its Hy4 Preview foundation model, claiming it outperforms rivals Z.AI and Moonshot AI in internal tests. The model features 770 billion parameters and a 1 million-token context window, marking a significant upgrade over its predecessor.

AI Agent Has Root

Running an unsandboxed MCP server with shell access gives the AI agent the exact same permissions as your user account, allowing it to read, modify, or exfiltrate files, credentials, and make unrestricted network requests. The article stresses this is standard OS behavior, not a hypothetical exploit, and warns that prompt injection is an underrated vector for abusing these full user-level privileges.

The “I don’t know, Claude wrote this” pandemic

Developers increasingly rely on AI to write code without fully understanding it, a trend called “cognitive surrender” that results in large, unreviewed pull requests. The article promotes CodeRabbit, an external AI reviewer used by companies like Nvidia, to flag issues in AI-generated code. It stresses that developers remain responsible for the code they submit and must use AI as a tool, not a replacement for understanding.

Terminal-Bench-Science: Evaluating AI agents on scientific research workflows

Terminal-Bench-Science is a Stanford-led benchmark that evaluates AI agents on real, expert-curated scientific workflows across life, physical, Earth, mathematical, and engineering sciences. Its first release includes 70 tasks, with the strongest model, Claude Opus 5, achieving a 30% resolution rate. The benchmark is designed to evolve continuously alongside AI advances, with contributions from practicing scientists.

Microsoft’s virtual intern Teams Facilitator will be late for the meeting

Microsoft is delaying the debut of its Teams Facilitator virtual intern by two months. The question-detection bot will use the extra time to practice interrupting meetings.

Unsafe at any speed: AI optimists are turning cautious as safety concerns mount

AI optimists are increasingly turning cautious as safety concerns over artificial intelligence mount. The article suggests that uncontrolled AI may be less dangerous than AI managed by technically incompetent authorities, raising questions about government oversight.

🔐 Security & Privacy

Meta releases update to stop smart glasses “perverts,” but users say it might be too late

Meta is rolling out an update that will stop smart glasses camera recording if the LED indicator light is covered, addressing a privacy loophole where users bypassed the light during recording. However, critics argue the update fails to address voice recording and broader harassment concerns, with some calling it too little, too late.

Fake Indeed apps infecting Android-using job seekers with malware

Scammers are using fake Indeed job listings to trick Android users into sideloading a malicious “interview” app that installs spyware, giving criminals device control and blocking uninstall attempts. The app is not on Google Play and is delivered through social engineering. Researchers advise verifying job offers separately and never installing apps from unknown sources.

CISA: July cyberattacks hit 100+ internet-exposed US water systems, targeting PLCs

CISA reported that cyberattacks targeted over 100 internet-exposed U.S. water and wastewater systems, primarily compromising programmable logic controllers from manufacturers like Rockwell, Schneider Electric, and Siemens. The intrusions caused outages and disruptions but did not directly affect water supplies, and U.S. intelligence suspects Iran is likely behind the opportunistic attacks, raising broader concerns about critical infrastructure cybersecurity.

Rubio Uses Terrorism Law to Ban Secure Email Service

The U.S. State Department and Treasury placed Italian collective Autistici/Inventati on its “specially designated global terrorist” list, making it illegal for Americans to transact with the group. The designation is based on the group providing “untraceable” email and digital infrastructure for far-left militants, though no crimes were alleged. Autistici/Inventati denies the allegations and says it will continue its work.

CISA: Most exploited vulnerabilities should have been eradicated decades ago

CISA reported that most exploited vulnerabilities are long-standing issues that should have been eradicated decades ago. The agency blamed organizational culture and systemic gaps in adopting Secure by Design principles for the ongoing security failures.

PaperCut, a print management company, is under active zero-day attack, causing significant issues for its customers. The available mitigations are an unvalidated, unofficial emergency patch or taking the affected server offline.

Australian cops cuff alleged TeamPCP masterminds

Australian police, with FBI assistance, arrested the alleged masterminds behind the TeamPCP hacking crew. The group is accused of developing the Shai-Hulud worm and conducting other supply chain attacks.

🧑💻 Open Source & Development

GUIs should be fully keyboard-driven

GUIs should be fully keyboard-driven, countering the claim that TUIs are preferred for that reason. Keyboard navigation is feasible in GUIs and depends on developer commitment, not technical limitations. The takeaway is to ensure full keyboard navigation in applications to improve user experience.

htmx 4.0.0 has been released

htmx 4.0.0 has been released after eight months of work, featuring a switch to fetch(), explicit attribute inheritance via :inherited, standardized event names, and no default localStorage for history. The update is intentionally near-identical to htmx 2 for users, but 2.x remains the NPM “latest” tag, with 4.0 marked as “next” until early 2027.

Hilariously Fast Volume Computation with the Divergence Theorem (2018)

The article presents an O(n) algorithm for computing the volume of a simple, closed triangulated 3D mesh by applying the divergence theorem, reducing the volume integral to a surface integral summed over each triangle. Each triangle’s contribution requires only a few arithmetic operations, making the method suitable for real-time applications. The author notes the algorithm is likely not novel, citing a similar method by Zheng and Chen.

Nobody Argued For Your Stack

The article highlights how Cursor’s migration from SolidJS to React became a canonical example in Anthropic’s documentation, despite originating from an obscure, unremarkable mention. The author argues that as migration costs have plummeted and AI agents produce polished case studies, tech decisions are increasingly shaped by narratives and “verdicts” rather than detailed technical arguments or benchmarks.

How I made Rustdoc 33% faster in one week

A Rustdoc contributor fixed a recursion-limit bug by optimizing how external trait impls are processed, filtering impls before calling the expensive build_impl function. This resulted in an average 25% wall-time reduction (a 33% speedup), with up to 40% faster builds on real-world crates and 60% on microbenchmarks.

OpenOffice does not print on Tuesdays

A bug in the Unix ‘file’ utility caused printing to fail on Tuesdays: PostScript files containing “Tue” in their creation date were incorrectly identified as Erlang JAM files due to an unescaped pattern. This false match happened before the PostScript detection, so the files weren’t sent to the printer. Fixing the Erlang JAM pattern resolved the issue.

Now Hiring: Senior Open Source Maintainer

A volunteer job posting seeks a Senior Open Source Maintainer to fully own a widely used library, with responsibilities covering roadmap, releases, community support, security, and documentation. The role is unpaid and permanent, requiring management of technical direction, CI, and user support across multiple platforms.

25x Performance, Three Optimizations

After converting their Scheme implementation from an AST interpreter to a CPS-based JIT compiler, the author saw a 778% performance regression on fib(10000). Through three optimizations, starting with essential cleanup of CPS-generated junk closures, they managed to bring performance back to roughly the same level as before.

Zero-Cost ‘Tagless Final’ in Rust with GADT-style Enums

The article shows how to implement a GADT-based “tagless final” DSL in Rust, mirroring the tagless initial encoding with a recursive eval interpreter. Despite constructing complex lambda and application expressions, the release-mode assembly for evaluation compiles down to just a few arithmetic instructions. This demonstrates that Rust can support expressive functional abstractions like GADTs with zero runtime overhead.

Quest for eternal dock on Wayland - lambdock (C + GTK4 + Lisp GNU Guile Scheme)

lambdock is a Wayland-native desktop dock built with C, GTK4, and GNU Guile Scheme, featuring a REPL for runtime hackability. Its architecture pairs a small C core for rendering and low-level tasks with an embedded Guile Scheme engine as the runtime brain. The project succeeded after earlier prototypes in pure Lisp and Python failed, achieving fluid animations and dynamic window tracking through GTK4 and Wayland integration.

Change-Detector Tests Considered Harmful (2015)

The article argues that while change-detector tests should generally be avoided, service-oriented systems may require interaction-based tests to gain confidence in code behavior. It cautions that mocking dependencies can let tests pass even when actual code breaks, and notes such tests offer little documentation value and impede refactoring.

EasyEffects should be part of every Linux distribution to improve laptop speaker sound quality

EasyEffects is a Linux application that uses PipeWire to apply audio effects and presets, significantly improving the often-poor sound quality of laptop speakers through software tuning. It offers features like a parametric equalizer, bass enhancer, and compressor, and users can download presets—such as the recommended Advanced Auto Gain—to easily enhance audio without deep expertise. The app is readily available via distribution packages or Flatpak.

Challenges when writing gren-format

A code formatter for Gren was built on the compiler’s parser, which drops comments and some punctuation, forcing the formatter to reconstruct comment placement from source positions while remaining idempotent. The team avoided depending on original spacing by adopting a fixed rule for ambiguous comments and a simple layout policy, while making position-dependent decisions explicit values to prevent renderer bugs. The main takeaway is to record any position-dependent decision once and forbid later stages from inspecting source positions directly.

OpenAI: Migrating to HTTPX2

The OpenAI Python SDK now uses HTTPX2 as its default HTTP client and no longer installs the older httpx package. This changes TLS certificate verification to the operating-system trust store, which can break connections in minimal environments unless CA certificates are configured. Existing API calls using default clients work unchanged, but applications that directly imported httpx must migrate to httpx2.

Hilariously Fast Volume Computation with the Divergence Theorem

The article presents an O(n) algorithm for computing the volume of a closed triangulated 3D mesh by applying the divergence theorem, reducing the calculation to a single loop over triangles with minimal arithmetic operations. It highlights the method’s speed, claiming it can handle millions of triangles on low-end hardware, while acknowledging that the approach may not be novel and citing related prior work.

That’s a Lot of YAML

YAML’s hidden pitfalls include type coercion (e.g., “NO” parsed as a boolean), misinterpretation of times, octals, and version numbers, plus security vulnerabilities in parsers. These quirks cause confusing bugs and wasted time debugging CI/CD and Kubernetes configurations. Despite its widespread adoption, YAML remains error-prone and difficult to work with.

Luanti’s Android app was removed from Google Play after a baseless DMCA notice filed by Tracer.AI on behalf of Microsoft alleged copyright infringement of Minecraft, though Luanti contains no proprietary code or assets. This is the second similar notice from the same company, following a 2023 appeal and a similar claim against the indie game Allumeria. Luanti is an open-source voxel game-creation platform that ships without games by default, with community content manually reviewed for copyright issues.

Sovereign Tech Agency invests €500k in Flatpak

Germany’s Sovereign Tech Agency is investing €508,640 in a two-year initiative, co-organized by Modal and supported by Para-Real Ltd., to strengthen Flatpak’s security and sandboxing. The project will add new portals for audio, networking, VPNs, spell checking, and password auto-fill, and aims to build long-term community capacity. Work is expected to run through the end of 2027.

Please stop flooding our projects with AI slop to furnish your CV

Maintainers are seeing a rise in AI-generated contributions to open source projects, from trivial spelling fixes to security reports, which are often used to inflate GitHub profiles for recruiters. One maintainer closed such pull requests, arguing they waste maintainers’ time and undermine trust by creating a false impression of genuine engagement.

Bootstrappable Builds: How and Why

Bootstrappable builds aim to construct an entire modern Linux user space from a tiny seed program, eliminating reliance on pre-built artifacts like binary compiler blobs. Timothy Sample’s FOSSY talk explained how this approach, unlike reproducible builds, ensures code has a completely understood origin by building each layer from a minimal starting point.

📈 Business & Policy

CXMT H1 revenue ~$22.4B, over double 2025 sales; profit ~$11.5B after year-ago loss

Chinese memory chipmaker CXMT reported first-half revenue of about $22.4 billion, more than double its full-year 2025 sales, with profit of roughly $11.5 billion versus a loss a year earlier. The surge, driven by AI-related demand for memory chips, has made CXMT China’s most valuable business.

South Korea, KT, SK Telecom, Kakao to offer free premium AI tools, treating AI as a public utility

South Korea unveiled a project with KT, SK Telecom, and Kakao to provide free premium AI tools, including unlimited tokens, to the public, treating AI like a public utility. The initiative aims to boost use of homegrown AI chatbots and reduce reliance on U.S. and Chinese models.

UK Treasury gives BoE new mandate to back payments and digital money to keep London competitive

The UK Treasury has given the Bank of England a new legal objective to support innovation in payment systems and digital money, aiming to keep London competitive. This move is part of a broader effort to promote the UK as a hub for stablecoins and digital currencies.

Tech firms court Democrats, hire advisers for potential investigations if GOP loses House

Some U.S. companies with close ties to President Trump are courting Democrats and hiring advisers, fearing they could become targets if Republicans lose control of the House. Big tech firms, especially those that donated to Trump’s legacy projects, are preparing for possible congressional and criminal investigations.

BitGo to buy NYDIG’s institutional trading business, expanding derivatives; ~30 staff join

BitGo has agreed to acquire NYDIG’s institutional trading business and related assets, adding derivatives, structured products, and financing to its custody and wallet infrastructure. Around 30 NYDIG employees and 250 institutional client relationships will join BitGo, though financial terms were not disclosed. The deal signals a rebound in crypto trading as Bitcoin recently topped $80,000 after a prolonged slowdown.

US serviceman and KPMG employee face insider trading charges over prediction markets

Federal authorities are preparing insider trading charges against a U.S. servicemember and a KPMG employee connected to bets on prediction markets. The servicemember allegedly earned over $1 million on Polymarket by wagering on military strikes in Iran and Venezuela, part of a broader batch of cases involving servicemembers trading on military operation contracts.

Advent and Stripe abandon PayPal acquisition; July offer was $60.50/share, valuing $53B

Advent and Stripe have abandoned their pursuit of PayPal, ending a potential deal that would have ranked among the largest leveraged buyouts ever. The consortium had offered $60.50 per share in July, valuing PayPal at about $53 billion.

Workday Q2 revenue up 12.8% to $2.65B, beats; subscription backlog up 8% to $27.4B, misses

Workday reported second-quarter revenue of $2.65 billion, up 12.8% year-over-year and slightly above estimates, but its subscription revenue backlog rose only 8% to $27.4 billion, missing the expected $28.6 billion. The shortfall tempered recent optimism about the software sector’s momentum.

Overcooked? Why robotic pizza makers are failing

Robotic pizza-making ventures have largely failed, as seen when supplier Picnic shut down, leaving Moto Pizza’s $160,000 robots useless and its founder wary of partnerships. While companies like Zume, Pazzi, and Basil Street have also collapsed, automation advocates remain undeterred: Lee Kindell is building his own pizza robot, and Canadian firm Appetronix is developing faster machines, aiming to produce a pizza every minute.

My Business Is Dying

The author reports that his business’s revenue and monthly recurring revenue have declined since February 2026, mainly because new subscriber numbers have fallen. He suspects factors such as stopping public revenue sharing, users relying on free AI tools, and stronger competition. He plans to analyze cancellation reasons and try new marketing channels to reverse the decline.

Alphabet stock sheds $700B as AI bills climb

Alphabet’s stock has dropped over 15% from its May peak, erasing about $700 billion in value amid rising AI costs and a lack of a decisive breakthrough. The company faces key AI talent departures and delays to its Gemini model, though it still has a strong product suite and deep talent bench, with co-founder Sergey Brin’s return possibly aiding a reshuffle.

USDA recalls 30k pounds of Argentine beef sold in Texas and Florida

The USDA recalled nearly 30,000 pounds of Argentine beef sold in Texas and Florida due to missed import re-inspections, labeling it a Class I health hazard even though no specific contaminant was found. The recall drew scrutiny after President Trump announced a plan to allow up to 300,000 pounds of lower-priced foreign beef imports, with critics questioning the timing and risk classification.

Stripe said to abandon $50B pursuit of PayPal

Stripe has reportedly abandoned its attempt to acquire PayPal in a deal that would have been worth around $50 billion. The decision ends what would have been a major consolidation in the payments industry.

Green Party: Halt UK datacenters until water, energy sorted

The UK Green Party is calling for a halt on new datacenter construction until water and energy usage are addressed. They want to end the blanket critical infrastructure status for these facilities and ensure they meet environmental standards.

Pentagon blacklisted Anthropic over Claude powers it didn’t have

A judge found that the Pentagon’s national-security rationale for blacklisting Anthropic was assembled only after Defense Secretary Hegseth had already decided the AI maker was a threat. The blacklisting was based on capabilities in Claude that Anthropic did not actually have.

Industry that built the problem offers to sell you the solution

More than 100 tech companies are warning that AI-powered cyberattacks are imminent, yet they are offering to sell defensive solutions rather than funding protections themselves. The piece criticizes the industry for profiting from the very threats it helped create.

Big Tech market power will cause UK to lose AI race, think tank warns

A think tank warns that Big Tech’s market dominance will cause the UK to lose the AI race. It criticizes Britain’s market watchdog for failing to create conditions for competition to thrive.

🌐 Infrastructure & Systems

Interview: Doug McIlroy

Doug McIlroy said he wrote the Unix “echo” command as his first C program around 1972 and contributed many options to “sort.” He praised Ken Thompson as a programming genius whose chess machine architecture inspired IBM’s Deep Blue. McIlroy also discussed his engineering physics education at Cornell and MIT, where he worked with the Whirlwind 2 computer.

How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Cloudflare optimized the DNS cache behind 1.1.1.1 with five successive changes that cut per-entry memory use by over 50%, freeing roughly 100 terabytes across its fleet. The improvements, such as replacing Vec<T> with Box<[T]>, also boosted performance: insert throughput rose 43% and lookup latency dropped 19%.

Debugging my new network, when 10 Gigabit Ethernet Runs at 300 Megabits

Slow file transfers traced to a Windows NIC issue rather than the NAS: the Intel E610-XT2’s default 512 receive buffers caused discarded packets, and disabling LSO v2 for IPv4 boosted iperf3 throughput from 313 Mbit/s to 7.03 Gbit/s. After these changes, real-world SMB writes to the RAID 6 NAS improved to about 350 MB/s.

Bluesky lets users hide posts from non-followers in Discover feed; AT Proto apps may honor or ignore

Bluesky introduced an opt-out setting that keeps users’ public posts from appearing in its Discover feed, reducing their visibility outside their followers without making posts private. The preference is stored at the account level and travels across AT Protocol apps, though those apps must choose to honor it.

IndexFlow – Open-source indexing infrastructure built with Rust

IndexFlow is an open-source search engine indexing infrastructure built with Rust, providing developer-friendly libraries for sitemap processing, technical SEO analysis, and URL indexing workflows. It helps identify issues like missing canonical tags, incorrect robots directives, and invalid metadata, with components such as indexflow-sitemap and indexflow-seo. The project aims to simplify search discovery and multi-site indexing management for self-hostable deployments.

Microsoft preps this year’s Windows 11 feature tweaks: 26H2 hits Release Preview

Microsoft has released Windows 11 26H2 to the Release Preview channel, preparing this year’s feature update. It shares the same servicing branch as 24H2 and 25H2, and inherits the same buggy update issues.

🎮 Culture & Gaming

What are you doing this weekend?

The article encourages readers to share their weekend plans and ask for help or feedback. It also reassures that it is perfectly fine to do nothing at all.

A Perfect SimCity

A perfect SimCity score is achieved with small populations (12–16k), minimal or non-contiguous roads and rails, no police or fire departments, and a 1% tax rate, according to algorithmic experiments using the open-source Micropolis port. In contrast, high-population cities (up to roughly 700k in Micropolis) score far lower, as large infrastructure and service costs lower the score.

Interactive Warhammer 40k Galaxy Map – Cartographia Imperialis

Cartographia Imperialis is an interactive galaxy map for Warhammer 40,000, offering views of the setting in both M41 Pre-Rift and M42 Indomitus eras. It includes features such as route overlays, labels, and a Rift overlay, with options to customize and reset the display. The project also provides contact and support information via email.

BOFH: Schrödinger’s petty cash puts us in a very awkward superposition

The BOFH column humorously compares accountants to being stricter than tax authorities like the IRS and HMRC. The story involves a petty cash dilemma that creates an absurd “Schrödinger’s” superposition, satirizing bureaucratic overzealousness.

Exec couldn’t identify a photocopier, which made for a fax-inating tech support call

A tech support call took a humorous turn when an executive couldn’t identify a photocopier, apparently mistaking its numeric keypad for something else. The incident underscores how some users find retro equipment difficult to distinguish.