Daily AI News - September-11-2026

OpenAI's Navier-Stokes Release Includes Lean 4 Formal Proof ⭐️ 9.0/10

OpenAI's Navier-Stokes release incorporates a formal proof written in Lean 4, demonstrating that an AI system can generate machine-checkable proofs for a problem of Navier-Stokes caliber. This marks a notable advance in AI-powered mathematical reasoning and formal verification. This is a major milestone in AI-driven formal verification, with the potential to change how mathematical proofs are generated and checked. It could affect mathematicians, AI safety research, and any field that relies on rigorous, machine-verified reasoning. Community discussion notes that verifying Fermat's Last Theorem in Lean took about 15 hours and 230GB of RAM, while AI agents took roughly 11 days to generate the code. The OpenAI effort reportedly used a large fleet of agents with estimated costs around $40 million, and a human-based comparison was estimated at about 880,000 hours, or roughly $132 million at $150/hour.

hackernews · ibobev · Sep 10, 21:22 · Discussion

Background: Lean 4 is an interactive theorem prover and functional programming language designed for formal mathematics, where every proof step is checked by a computer. Formal verification is the process of proving that a mathematical statement or program behaves exactly as specified. The Navier-Stokes equations describe fluid motion, and their global existence and smoothness is one of the Clay Mathematics Institute's Millennium Prize Problems. OpenAI's release applies AI to generate formal proofs, a step toward automating deep mathematical reasoning.

Discussion: Commenters debate whether the speedup is as dramatic as claimed, noting Lean verification can be slow and that cost comparisons depend heavily on assumptions. Some remain impressed that a general-purpose AI system can tackle a problem of this magnitude, while others raise concerns about AI producing proofs that humans cannot independently verify.

Tags: #Lean 4, #Formal Verification, #AI Proofs, #OpenAI, #Theorem Proving

Microsoft Makes Rust a Tier-1 Language, Boosting Memory-Safe Systems Programming ⭐️ 9.0/10

Microsoft has officially elevated Rust to tier-1 language status, announced through a guest post on the Rust Foundation website. The designation makes Rust a first-class, fully supported language across Microsoft's platforms and toolchains. This is a major industry validation for Rust, signaling that it is a mature, serious alternative to C and C++ for systems programming. It could accelerate adoption inside Windows and Azure, push memory-safety initiatives forward, and influence other large vendors. Commenters note that the announcement may also involve replacing LLVM with MSVC's backend for Rust, and they point to Microsoft's reported goal of converting 1 billion lines of code to Rust by 2030 using automated tooling. These details remain community-reported rather than confirmed in the announcement itself.

hackernews · Lobsters · Sep 10, 13:39 · Discussion

Background: Rust is a systems programming language designed for memory safety without a garbage collector, using ownership and borrowing rules to prevent common bugs. A 'tier-1' designation means a language is officially supported and expected to work reliably across a vendor's platforms and toolchains. Microsoft has historically relied heavily on C and C++ for Windows and Azure, and memory-safety vulnerabilities have been a major source of security issues in that code.

Discussion: Overall sentiment is strongly positive, with commenters calling the news a major validation that Rust is now a mature competitor to C++ and C#. The discussion also highlights Microsoft's 1-billion-line conversion goal, DARPA's automated C-to-Rust efforts, and the significance of MSVC backend integration for Rust.

Tags: #Rust, #Microsoft, #Systems Programming, #Memory Safety, #Industry News

Apple Announces iPhone Duo Foldable with Pencil Support ⭐️ 9.0/10

Apple has announced the iPhone Duo, a foldable iPhone with a dual-screen design roughly the size of two iPhone Airs side by side and support for Apple Pencil. The device was presented by Apple hardware chief John Ternus and is priced around $2,000. The iPhone Duo marks Apple's entry into the foldable phone market, which could push developers to finally build proper apps for foldable form factors. Its Apple Pencil support also threatens dedicated note-taking and sketching devices like the reMarkable. The device is a first-generation Apple product, which carries inherent risk, especially following the Apple Vision Pro. Community members estimate the price at around $2,000, and note that the form factor is roughly equivalent to two iPhone Airs side by side.

hackernews · thecosmicfrog · Sep 9, 18:15 · Discussion

Background: Foldable phones use flexible screens to let a phone-sized device open into a tablet-sized display, a category popularized by Samsung's Galaxy Z Fold and Google's Pixel Fold. Apple Pencil is Apple's stylus accessory, previously available only for iPads, and its support on the iPhone Duo could make the device a portable whiteboarding tool. First-generation Apple hardware has historically carried risks such as bugs or design compromises, which some buyers weigh against the premium price.

Discussion: Commenters are cautiously optimistic: one Android foldable owner is excited that Apple's entry will push developers to properly support foldable apps, while another praises the Apple Pencil integration for on-the-go whiteboarding. However, others question whether the roughly $2,000 price and first-generation risk are worth it, and one commenter laments that Apple continues to abandon small-phone fans.

Tags: #Apple, #iPhone, #Foldable, #Mobile, #Hardware

Calif Research Unveils WeWorm: AI-Built Zero-Click Worm Spreads via WeChat Calls ⭐️ 9.0/10

Calif Research released WeWorm, a proof-of-concept zero-click worm that spreads through WeChat voice calls on iOS and Android without the victim answering or interacting. The team says AI discovered the underlying bug and wrote the first remote code execution exploit in about two days, with the worm built in one more week. This demonstrates that AI can rapidly discover and weaponize zero-click vulnerabilities, compressing work that once took a larger team months into days. It signals a potential shift in the threat landscape, where AI-assisted hacking could lower the barrier for sophisticated attacks against widely used platforms like WeChat. The exploit targets a VoIP memory corruption flaw in WeChat and can compromise an account in seconds; even if the victim answers, they hear nothing and the exploit still succeeds. WeWorm is a proof-of-concept, and Calif Research says it reported the bug to the vendor while providing human judgment on targeting and safe testing.

rss · Simon Willison · Sep 10, 00:56

Background: A zero-click exploit is a cyberattack that runs automatically when a vulnerable application processes malicious input, requiring no user interaction such as clicking a link or opening an attachment. Remote code execution (RCE) allows an attacker to run arbitrary code on a target system, often leading to full compromise. A worm is self-propagating malware that spreads from device to device; WeWorm spreads through WeChat calls, putting over a billion iOS and Android accounts potentially at risk.

Tags: #AI security, #zero-click exploit, #WeChat, #RCE, #AI-assisted hacking

OpenAI Unveils GPT-6 Astra, Its Most Capable Business Model ⭐️ 9.0/10

OpenAI has announced GPT-6 Astra, its next-generation flagship model for business. The model promises advanced reasoning, computer use, and stronger writing and design judgment. GPT-6 Astra represents a major step in applying frontier AI to real-world business workflows. Its computer-use and reasoning capabilities could broadly affect how companies automate tasks and make decisions. The announcement highlights three areas: advanced reasoning, computer use, and improved writing and design judgment. In practice, computer use enables the model to operate browser and desktop interfaces by processing screenshots and other tool results to decide next actions.

rss · OpenAI Blog · Sep 9, 11:00

Background: Computer use is an emerging AI capability that lets models interact with graphical interfaces rather than only text or APIs. Developers provide the environment and execute the model's requests, while the model uses screenshots and tool results to decide what to do next. This area is still early, with only a handful of models having verifiable GUI grounding scores on public leaderboards.

Tags: #OpenAI, #GPT-6, #AI models, #Enterprise AI, #Computer use

ChatGPT Voice Mode Adds GPT-5.6 Sol and GPT-6 Astra Support ⭐️ 9.0/10

ChatGPT voice mode now supports GPT-5.6 Sol and GPT-6 Astra, letting Pro users choose which model and effort level to use for search and reasoning tasks. The update is reportedly rolling out as OpenAI revamps the intelligence controls inside voice mode. This is significant because it brings frontier reasoning models into a conversational interface, giving Pro subscribers more control over voice-based search and analysis. It also signals that OpenAI is treating voice as a first-class surface for its most advanced models. The report comes from a Telegram repost of a tweet by Atty Eleti (@athyuttamre) and has not been officially confirmed by OpenAI. Pro users can select either GPT-5.6 Sol or GPT-6 Astra, and voice will invoke the chosen model when search or reasoning is needed.

telegram · zaihuapd · Sep 10, 00:20

Background: GPT-5.6 Sol is OpenAI's flagship 'workhorse' model, described as its best coding model for complex reasoning, coding, and agentic workflows. GPT-6 Astra is OpenAI's most capable model for end-to-end work such as complex reasoning, computer use, research, and document creation. ChatGPT also offers adjustable reasoning effort levels, which control how much internal computation the model spends before answering.

Tags: #ChatGPT, #GPT-5.6, #GPT-6, #voice mode, #OpenAI

DeepSeek Releases V4.1 Flash: Efficient 552B Multimodal Model ⭐️ 9.0/10

DeepSeek officially released V4.1 Flash, the smallest model in its new architecture family, using a 552B-parameter Causal-Encoder-Decoder structure with 8B input and 16B output activations and native multimodal vision understanding. It is now live on the DeepSeek API as deepseek-flash, with new pricing effective September 10, 2026 at 12:00, and deepseek-v4-pro requests will be routed to V4.1 Flash after September 14, 2026 at 12:00. This release signals DeepSeek's push toward more efficient, affordable multimodal AI by combining a large 552B-parameter backbone with small 8B/16B activated parameters, reducing inference cost while retaining capability. The API routing change also affects existing deepseek-v4-pro users, making the new model the default for those requests and potentially reshaping pricing expectations in the industry. V4.1 Flash is a multimodal Mixture-of-Experts (MoE) model supporting contexts of up to one million tokens, and it replaces the retired V4-Flash and V4-Flash-Vision-Exp models. The model is available on Hugging Face as deepseek-ai/DeepSeek-V4.1-Flash, with quantized versions for llama.cpp, Ollama, and LM Studio.

telegram · zaihuapd · Sep 10, 05:54

Background: In large language models, total parameters differ from activated parameters: techniques like Mixture-of-Experts (MoE) keep a large total parameter count but only activate a subset per token, which lowers compute cost during inference. Causal-Encoder-Decoder is a hybrid architecture that combines encoder and decoder components; research suggests encoder-based designs can be better at causal reasoning than decoder-only models. DeepSeek's new model applies these ideas with native multimodal vision support, allowing a single model to handle both text and image understanding.

Tags: #DeepSeek, #AI Model Release, #Multimodal, #LLM, #API

vLLM v0.29.0 Makes Model Runner V2 Default, Adds Models and Optimizations ⭐️ 8.0/10

vLLM v0.29.0 was released with 594 commits from 277 contributors, making Model Runner V2 (MRV2) the default execution path for all models. The release adds support for several new models, including Hy4-preview, Qwen3.8-Flash-Next, GraniteSWA, and Kimi K3 NVFP4 checkpoints, along with major performance and memory optimizations. vLLM is one of the most widely used open-source LLM inference engines, so making MRV2 the default marks a major architectural milestone for the AI/ML infrastructure ecosystem. The performance gains for models like Kimi K3 and DeepSeek V4, plus new speculative decoding and RL weight-sync features, directly benefit teams serving large models in production. MRV2 gains CUDA graph memory profiling for KV cache auto-sizing, batch-sharded sampling that reduces per-step logits memory by 1/TP, and prompt embeds support. Breaking changes include removal of ten deprecated model architectures, the PyAV video decoder backend, and deprecation of python -m vllm.entrypoints.openai.api_server in favor of vllm serve; MRV1 is targeted for removal in v0.32.

github · khluu · Sep 9, 08:54

Background: vLLM is an open-source high-throughput LLM inference and serving engine that uses techniques such as PagedAttention and continuous batching to serve large models efficiently. Model Runner is the internal component that manages model execution, and MRV2 is a rewritten version designed to improve performance, memory efficiency, and maintainability. Speculative decoding, mentioned throughout the release, speeds up generation by using a small draft model to propose tokens that the target model then verifies; EAGLE is one such speculative decoding framework.

Tags: #vLLM, #LLM inference, #open-source, #AI infrastructure, #model serving

Shopify Abandons React Native, Returns to Swift and Kotlin ⭐️ 8.0/10

Shopify has announced that it is abandoning React Native and rebuilding its mobile apps with Swift on iOS and Kotlin on Android. The company cites complexity issues as the main reason for the backtrack from cross-platform development. This is a major architectural decision from a prominent commerce company, and it will likely influence how other teams evaluate React Native versus native development. It also reinvigorates the long-running industry debate about cross-platform trade-offs and the true cost of shared codebases. Shopify explicitly points to complexity, rather than runtime performance, as the reason for leaving React Native. The move is also notable because it indicates the company is returning to a strategy it had previously replaced with React Native.

hackernews · Lobsters · Sep 10, 14:09 · Discussion

Background: React Native is a Meta-developed open-source framework that lets developers build iOS and Android apps with JavaScript and React, following the promise of "learn once, write anywhere." Cross-platform development uses a single codebase to save early effort, but as the app grows, the bridge layer, dependency and platform-specific differences can accumulate significant complexity. Native development is typically carried out in Swift for iOS and Kotlin for Android, offering better performance and access to platform APIs at the cost of duplicate work.

Discussion: Commenters are split on the news but lean toward validating native development: some iOS engineers say the decision feels like vindication for long-held resistance to shared codebase pressure. Others praise AI-assisted migration in their own small apps, but a few warnings that LLM tools make complexity too easy to fight off and Shopify's reasoning may not age well.

Tags: #React Native, #Shopify, #Mobile Development, #Swift, #Kotlin

Researchers Question Whether OpenAI Can Be Trusted with Unpublished Math ⭐️ 8.0/10

Researchers on mathstodon.xyz are publicly questioning whether OpenAI can be trusted with unpublished mathematical work, alleging that ideas shared during collaborations (e.g., via Codex) may be used for model training and published without attribution. Commenters specifically point to OpenAI generating 300 billion output tokens from a model still in training shortly after learning that a major math proof may have been in its training data, calling the timing suspicious. This matters because it strikes at the core of research ethics and trust in AI collaborations. If researchers cannot safely share unpublished work with AI companies without risking scooping or unauthorized use, it could chill academic engagement with AI tools and undermine the integrity of mathematical research. The discussion references Dr. Buckmaster's Codex prompts and a claim that OpenAI "categorically" stated it was impossible for those prompts to have influenced training. Commenters also note that OpenAI reportedly gave at least 100,000 researchers free access to its models, and that internal OpenAI models are said to be solving open problems at a surprisingly fast rate.

hackernews · pred_ · Sep 10, 06:49 · Discussion

Background: The context is the growing use of large language models like OpenAI's Codex in mathematical research. Researchers often share unpublished ideas and partial proofs with AI tools to get feedback, but this raises questions about whether that data could be used in model training and whether the AI company might later publish similar results without crediting the original researcher. The term "parallel construction" in the comments refers to a practice of using an alternative, seemingly legitimate explanation to conceal the true origin of information or results.

Discussion: The community is sharply divided. Some argue that even if OpenAI's models did not literally memorize the chats, using them in pretraining could still improve the model's latent representations, making the lack of attribution unethical. Others defend OpenAI, noting that reinforcement learning on verifiable math with massive compute could plausibly produce superhuman solutions independent of any specific chat. Several commenters express broader skepticism about whether AI is genuinely making rapid progress on open problems or whether researchers are being misled, with one calling the timing of OpenAI's 300 billion token generation "suspicious" and reminiscent of "parallel construction."

Tags: #AI ethics, #OpenAI, #research integrity, #mathematics, #trust

Forgejo 16.0.4 Patches Critical RCE via Template Expansion ⭐️ 8.0/10

Forgejo released versions 16.0.4 and 15.0.8 to fix a critical remote code execution vulnerability affecting versions up to 16.0.3. The flaw occurs during repository initialization from templates, where variable template expansion on files listed in .forgejo/template can interfere with git repo initialization. This is a critical RCE vulnerability in a widely-used self-hosted software forge, meaning attackers could execute arbitrary code on servers running affected versions. It highlights the security risks in self-hosted development infrastructure and the importance of prompt patching. The vulnerability is triggered when generating a new repository from a template repository: Forgejo clones the template, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. Gitea is reportedly protected against both issues fixed in this release.

hackernews · Lobsters · Sep 10, 15:57 · Discussion

Background: Forgejo is a self-hosted, open-source software forge written in Go, used for hosting Git repositories with features like issue tracking, code review, and continuous integration. The vulnerability relates to how Forgejo handles template repositories, where variable expansion during git init can be exploited to execute arbitrary code.

Discussion: Community members noted that Gitea is protected against both issues, with a project leadership member clarifying this. Some users expressed concern that disallowing LLM contributions puts the project at a disadvantage since attackers will use AI to find vulnerabilities, while others preferred simpler setups like cgit for personal hosting to reduce attack surface.

Tags: #security, #forgejo, #rce, #vulnerability, #open-source

Any Nix Package, Live in Your Browser via WebAssembly QEMU ⭐️ 8.0/10

Farid Zakaria launched trynix.dev, a browser-based x86_64 Linux VM powered by qemu-wasm and WebAssembly, that can boot any Nix package from the past 13 years. Packages are URL-addressable, for example https://trynix.dev/?pkg=python3%403.6.2 loads an interactive shell with Python 3.6.2 from 2017, and a new trynix-preview GitHub Action lets you boot a pull request's build in the browser. This is a high-value technical achievement that combines virtualization, WebAssembly, and package management, making historical software environments instantly accessible without servers or local installs. It has practical applications for interactive historical environments, PR review, and developer tooling, and could influence how developers share and test reproducible builds. The VM uses qemu-wasm, a QEMU port that adds a TCG backend translating intermediate representation to Wasm, relying on browser APIs such as WebAssembly.Module and WebAssembly.Instance. The trynix-preview GitHub Action comments a link on a pull request that lets reviewers boot the PR's build in the browser, with the tagline 'No servers, just browsers.'

rss · Simon Willison · Sep 10, 23:44

Background: Nix is a package manager and build system that uses a pure functional language to define reproducible build instructions, with packages stored in unique directory names to avoid dependency conflicts. QEMU is an open-source machine emulator that can run unmodified operating systems such as Linux; qemu-wasm experimentally ports QEMU to the browser via WebAssembly, enabling full Linux VMs to run client-side. trynix.dev combines these ideas, using Nix's 13-year package history to boot old software in a WebAssembly-based VM.

Tags: #Nix, #WebAssembly, #QEMU, #Virtualization, #Developer Tools

Shopify ditches React Native for native Swift and Kotlin ⭐️ 8.0/10

Shopify is moving its mobile apps from React Native to separate native Swift (iOS) and Kotlin (Android) codebases. The company cites that AI agents can now handle enough implementation, translation, testing, and review work to make native development cost-effective. This decision reflects a paradigm shift where AI-assisted engineering alters the cost-benefit analysis of native versus cross-platform development. It could influence other companies' technology choices and the future adoption of cross-platform frameworks like React Native. Shopify adopted React Native in 2020 to avoid building features twice and allow developers to work across the stack. The company maintains three React Native libraries: react-native-skia, flash-list, and restyle; the first two are finding new homes, while restyle will be archived at the end of 2026.

rss · Simon Willison · Sep 10, 21:11

Background: React Native is a cross-platform framework that lets developers build iOS and Android apps using JavaScript and React. Native development requires separate codebases in Swift and Kotlin, historically doubling maintenance effort. Shopify's move suggests that AI coding agents can now handle much of the translation and implementation work, making native development's benefits—such as performance and platform-specific features—outweigh the costs.

Tags: #mobile development, #React Native, #AI agents, #Shopify, #cross-platform

Terence Tao Warns AI Race Could Undermine Open Science ⭐️ 8.0/10

Terence Tao, a leading mathematician, warned that AI-powered efforts to rapidly solve open problems are mining the pool of good, fruitful problems in a non-renewable way. He noted that even the rumor of someone working on a problem may now discourage researchers from sharing promising directions, threatening the collaborative culture of open science. This matters because open sharing of partial ideas and promising directions has long been a key engine of mathematical progress. If researchers hoard ideas out of fear that AI-assisted rivals will beat them to publication, the research ecosystem could become more secretive and advance more slowly. Tao's remarks build on his earlier observation that the collection of good, fruitful open problems is being "mined in a non-renewable fashion," potentially making such problems scarce. The quote highlights a new social dynamic: the mere rumor of someone working on a problem may deter others from pursuing the same direction.

rss · Simon Willison · Sep 9, 00:20

Background: Open problems are unsolved mathematical questions that are well known and considered important; mathematicians often share partial progress and promising approaches openly to accelerate collective progress. Open science is the practice of making research data, methods, and findings publicly available. Tao's concern is that AI tools, which can rapidly explore and solve problems, are changing the incentive structure: sharing a promising idea now carries the risk that someone else will finish the work first.

Tags: #ai-ethics, #mathematics, #open-science, #research-culture, #ai-impact

(AINews) OpenAI reports Navier-Stokes singularity find in 88 hours using Astra-next, roughly 10,000 agents and 130B tokens (>$40M), a contender for second ever Millennium Prize awarded ⭐️ 8.0/10

AI news roundup highlighting OpenAI's claimed Navier-Stokes singularity discovery in 88 hours using ~10,000 agents and $40M+ of compute, overshadowing major AI funding announcements.

rss · Latent Space · Sep 9, 05:04

Tags: #OpenAI, #AI research, #Navier-Stokes, #agents, #computational mathematics

Looped Transformers and Hidden Reasoning in GPT-6 Astra Era ⭐️ 8.0/10

Sebastian Raschka's article surveys recent research on looping transformer blocks, recurrent depth, and hidden chain-of-thought reasoning, with a focus on reported architecture choices in OpenAI's GPT-6 Astra. It connects these threads to broader LLM architecture trends. Looped and recurrent-depth architectures could improve reasoning and effective depth while reusing parameters, potentially changing how future frontier models scale. This matters to LLM researchers, AI safety observers, and anyone tracking where model architecture is heading. In looped transformers, the same parameter-shared block is applied repeatedly, so more loops add effective depth; research suggests this can mimic chain-of-thought steps. However, studies also identify 'overthinking' as a limitation, and OpenAI's reported use of recurrent depth in Astra remains unconfirmed.

rss · Sebastian Raschka · Sep 9, 11:14

Background: Standard large language models stack many transformer layers; each layer transforms the sequence once. Looped transformers instead reuse a fixed weight-shared block many times, trading parameter growth for additional computation along the depth dimension. Hidden chain-of-thought reasoning refers to models performing reasoning internally in latent states rather than generating explicit step-by-step text.

Tags: #Transformers, #LLM Research, #Reasoning, #Model Architecture, #Recurrent Depth

OpenAI launches GPT-Live-1 API for full-duplex voice conversations ⭐️ 8.0/10

OpenAI has introduced GPT-Live-1 in its API, enabling natural full-duplex voice conversations. The release adds stronger instruction following, custom voices, and telephony support for developers. This matters because developers can now build more natural, real-time voice agents directly through OpenAI's API, reducing the need to stitch together separate speech and LLM components. It is especially relevant for customer service, telephony, and voice assistant applications. Full-duplex communication means both parties can speak and listen simultaneously, unlike walkie-talkie-style half-duplex systems. The API also supports custom voices and telephony integration, though specific model pricing and availability details were not included in the announcement.

rss · OpenAI Blog · Sep 10, 00:00

Background: Full-duplex transmission allows signals to be sent and received simultaneously between two devices, which is essential for natural conversation. Telephony integration lets AI voice agents connect to phone networks, enabling enterprises to deploy centralized voice agents globally. Custom voice synthesis technology can create personalized voice models from short audio samples, raising both creative possibilities and ethical concerns about voice cloning.

Tags: #OpenAI, #API, #voice AI, #real-time, #LLM

AI Alignment Researcher Paul Christiano Joins OpenAI Foundation Board ⭐️ 8.0/10

Paul Christiano, a prominent AI alignment researcher, has joined OpenAI's Foundation Board and its Safety and Security Committee. The appointment brings his expertise in AI alignment, safety, and standards directly into OpenAI's governance structure. This signals a stronger safety and governance focus at one of the world's leading AI labs, which could influence how OpenAI handles alignment risks in future model development. It is especially significant for the AI safety and governance community, as a respected alignment researcher now has direct board-level oversight. The Foundation Board is the nonprofit governing body of OpenAI, and the Safety and Security Committee oversees risk-related matters. Christiano previously worked at OpenAI and is widely known for his research on aligning AI systems with human intentions.

rss · OpenAI Blog · Sep 9, 17:00

Background: AI alignment is the field focused on ensuring AI systems behave in line with human values and goals, while AI safety covers preventing accidents, misuse, and loss of human control. AI governance refers to the rules, responsibilities, and standards that guide how AI is developed and deployed. Board appointments like this are a key mechanism for embedding safety considerations into an AI company's highest-level decision-making.

Tags: #AI alignment, #AI safety, #OpenAI, #AI governance, #board appointment

Building Codex: Tibo Sottiaux on OpenAI's AI Coding Agent ⭐️ 8.0/10

The Pragmatic Engineer newsletter published an in-depth discussion with OpenAI engineer Tibo Sottiaux about how Codex was built and how it is transforming software development workflows. Codex was released in April 2025 as Codex CLI. Codex represents a major shift in AI-assisted software development, moving from simple code completion to autonomous agents capable of handling repository-level tasks. This discussion offers the engineering community a rare look at the design decisions behind one of OpenAI's most prominent coding tools. Codex is available through ChatGPT's web app and the Codex CLI, and can perform tasks such as code changes, testing, reviews, refactors, and repository-level work. The interview covers Codex's engineering architecture, development workflow, and how it is applied to real-world projects.

rss · The Pragmatic Engineer · Sep 9, 15:57

Background: Codex is OpenAI's AI coding agent that goes beyond traditional code completion to autonomously execute complex software engineering tasks. It was released in April 2025 as Codex CLI, continuing the legacy of OpenAI's earlier Codex model, which powered GitHub Copilot. Codex reflects the broader industry trend toward agentic AI systems that can independently complete multi-step engineering tasks with minimal human intervention.

Tags: #Codex, #OpenAI, #AI coding, #software engineering, #LLM

How CHERIoT Provides Strong and Usable Isolation Without an MMU ⭐️ 8.0/10

Explains how CHERIoT delivers strong, usable memory isolation on IoT devices without requiring an MMU.

rss · Lobsters · Sep 10, 14:59

Tags: #CHERIoT, #security, #memory isolation, #IoT, #capability-based security

JEP 544 Proposes Ahead-of-Time Compilation to Speed Up Java ⭐️ 8.0/10

JEP 544 proposes ahead-of-time (AOT) code compilation for the Java platform, aiming to reduce startup time and improve warmup performance. It is a formal proposal under the JDK Enhancement Proposal process, not yet a released feature. This proposal tackles the long-standing Java issues of slow startup and JVM warmup, which are known bottlenecks in low-latency and data-parallel systems. If adopted, it could significantly improve Java's competitiveness in cloud-native and microservice environments where fast cold-start matters. AOT compilation statically converts entire applications to native code before run time, in contrast to the JVM's usual just-in-time (JIT) dynamic compilation. The JEP is currently a proposal under discussion, with design details and trade-offs still being evaluated.

rss · Lobsters · Sep 10, 17:31

Background: A JDK Enhancement Proposal (JEP) is a process drafted by Oracle for collecting and reviewing proposals for enhancements to the Java Development Kit and OpenJDK, serving as the long-term roadmap for JDK release projects. Java programs traditionally rely on JIT compilation, which compiles bytecode to native code at runtime, causing a warmup period that can dominate execution time in some workloads. AOT compilation aims to eliminate this overhead by generating native code ahead of time, at the cost of reduced portability.

Tags: #Java, #JEP, #AOT compilation, #JVM, #performance

NVIDIA Explains When to Use EPD Disaggregation for Multimodal Serving ⭐️ 8.0/10

NVIDIA published a blog post detailing the encode-prefill-decode (EPD) disaggregation technique for multimodal model serving, which separates the vision encoder from the prefill and decode stages. The post provides practical guidance on when this optimization is most effective, such as in mixed traffic scenarios with high time-to-first-token (TTFT) demands. This technique addresses a key performance bottleneck in serving large multimodal models, which are increasingly used in applications like visual question answering and image captioning. By disaggregating the encode stage, providers can reduce TTFT and improve resource utilization, potentially lowering serving costs and enhancing user experience. EPD disaggregation is most effective when the vision encoder is compute-intensive and the prefill/decode stages have different hardware requirements; it may not pay off for small models or when the encoder is lightweight. The blog likely references NVIDIA Dynamo, a framework that enables such disaggregation, and notes that the benefits depend on traffic patterns and model characteristics.

rss · NVIDIA Developer Blog · Sep 9, 20:31

Background: Multimodal models process inputs like images and text, requiring a vision encoder to convert images into embeddings before the language model generates responses. Traditional serving runs encode, prefill, and decode on the same GPU, which can lead to resource contention and high latency. Disaggregation, a technique already used for prefill-decode in LLMs, extends this idea to the encode stage, allowing each phase to run on optimized hardware.

Tags: #multimodal models, #inference optimization, #model serving, #disaggregation, #NVIDIA

IBM Releases SOTA Granite Time Series PatchTST-FM-r2 Model with Commercial-Friendly License ⭐️ 8.0/10

IBM Research released its Granite Time Series PatchTST-FM-r2 foundation model on Hugging Face under a commercially friendly license. The model is described as state-of-the-art for time series forecasting. This release makes a state-of-the-art time series foundation model available for commercial use, lowering barriers for applied machine learning and forecasting teams. It could accelerate adoption of foundation models in industries that rely heavily on time series data, such as finance, retail, and energy. PatchTST is a Transformer-based architecture that uses a patching strategy to improve long-term multivariate time series forecasting. The model is distributed through Hugging Face, and the broader Granite Time Series family also includes ultra-lightweight models like Tiny Time Mixer (TTM) with only a few million parameters.

rss · Hugging Face Blog · Sep 9, 15:36

Background: Time series foundation models are pre-trained models designed to handle numerical time series tasks such as forecasting and anomaly detection. PatchTST, introduced in the paper "A Time Series is Worth 64 Words," treats time series segments as patches or tokens, making Transformer-based forecasting more efficient. IBM Research's Granite Time Series group publishes papers, pre-trained models, and open-source code for these models.

Tags: #time-series, #foundation-models, #IBM, #open-source, #machine-learning

Suno v6: First AI Music Model Built with the Music Industry ⭐️ 8.0/10

Suno announced v6, its first music model developed in collaboration with the music industry, with partners including Warner Music Group, BMG, and Believe. The new model lets users generate songs across genres with specific instructions and edit details such as a single lyric without full regeneration. This marks a significant shift toward industry collaboration for AI music, potentially addressing the copyright and licensing concerns that have long plagued generative music tools. It could accelerate mainstream adoption of AI music generation while giving rights holders a role in how models are built and used. Suno v6 is available on Premier tiers and supports producing songs across several genres and styles with specific instructions. A notable feature is the ability to change one lyric without a complete remorphing of the song.

rss · Product Hunt · Sep 10, 05:13

Background: Suno is an AI music generation company based in Cambridge, Massachusetts, that lets users create songs from text prompts. It released an open-source text-to-speech model in April 2023 before expanding into full music generation. Previous versions of Suno could generate complete vocal and instrumental tracks, but drew criticism from the music industry over copyright and artist compensation. The v6 collaboration with Warner Music Group, BMG, and Believe represents an effort to legitimize AI music by bringing rights holders into the development process.

Tags: #AI music, #Suno, #music generation, #product launch, #AI/ML

DeepSeek V4.1-Flash Doubles Parameters, Cuts Inference Cost via KV Cache Redesign ⭐️ 8.0/10

DeepSeek has released V4.1-Flash, a model that nearly doubles its parameter count while simultaneously reducing inference cost through a redesigned KV cache mechanism. This refactoring breaks the usual trade-off where larger models cost more to serve. This is significant because it shows that model quality (via more parameters) and inference efficiency are not necessarily opposing goals — smarter cache design can offset the cost of larger models. It could pressure other LLM providers to invest more in inference optimization rather than just scaling parameters. The efficiency gain comes specifically from the KV cache redesign, which reduces the memory and compute overhead of autoregressive generation. The trade-off is that the model's parameter count nearly doubles, so the gains are in serving cost per token rather than model size.

rss · InfoQ 中文站 · Sep 10, 17:06

Background: In transformer-based LLMs, the KV cache stores intermediate key (K) and value (V) vectors from previously processed tokens during autoregressive inference, so they can be reused instead of recomputed. Without a KV cache, generation complexity is O(n²); with it, generation becomes O(n), which is why streaming and long-context chat feel fast. As models grow, the KV cache itself becomes a major memory bottleneck, so redesigning how it is stored and managed can yield large inference savings.

Tags: #DeepSeek, #KV Cache, #LLM Inference, #Model Optimization, #AI

Google Releases BeyondCorp Successor, but Can Ordinary Enterprises Really Adopt It? ⭐️ 8.0/10

Google has released the successor to its BeyondCorp zero-trust framework — BeyondCorp Enterprise — now integrated with Chrome Enterprise Premium for secure enterprise browsing. The new release adds integrated threat and data protection to the existing identity-aware access controls. This matters because BeyondCorp pioneered the zero-trust security model that eliminates implicit trust in internal networks, and its commercialization makes this approach available beyond Google. However, the practical question remains whether ordinary enterprises without Google-scale engineering resources can successfully deploy and operate such an architecture. BeyondCorp Enterprise combines identity-aware access controls with device posture assessment, and now integrates Chrome Enterprise Premium to add threat and data protection for browsing. The architecture shifts access decisions from the network perimeter to identity and device context, requiring deep integration with IAM systems and continuous device management.

rss · InfoQ 中文站 · Sep 10, 16:06

Background: Zero trust is a security model that assumes no device or user is inherently trusted, even inside the corporate network. Traditional security relied on firewalls and other perimeter defenses to protect sensitive data, but zero trust requires verification of every access request based on identity, device health, and context. BeyondCorp was Google's internal implementation of this model, and it has since been commercialized as BeyondCorp Enterprise.

Tags: #BeyondCorp, #Zero Trust, #Enterprise Security, #Google Cloud, #IAM

DeepSeek Releases V4-1 Flash: Multimodal MoE with 552B Parameters and 1M Context ⭐️ 8.0/10

DeepSeek announced V4-1 Flash, a new multimodal mixture-of-experts (MoE) model with a 552B-parameter backbone and support for contexts up to one million tokens. The release was shared via Reddit with few verified technical details. This release signals DeepSeek's continued push into large-scale, efficient multimodal models, a direction that challenges other frontier labs. A 1M-token context and MoE architecture could make long-context, multimodal applications more accessible and cost-effective. The model is described as a multimodal MoE with a 552B backbone parameter count, meaning total parameters may be higher when including expert modules. The announcement lacks benchmark results, release date, or licensing details, so verification is still pending.

reddit · r/LocalLLaMA · /u/tiguidoio · Sep 10, 06:54

Background: Mixture-of-experts (MoE) is an architecture that divides a model into specialized expert sub-networks and activates only a subset per input, improving efficiency over dense models. Multimodal models process multiple data types such as text, images, and audio, enabling tasks like visual question answering and cross-modal retrieval. The 'backbone' is the core network that extracts features, and a 552B backbone suggests a very large model even if only some experts are active per token.

Tags: #DeepSeek, #LLM, #Mixture-of-Experts, #Multimodal, #AI Model Release

DeepSeek Releases V4.1-Flash Open-Weight Multimodal Model ⭐️ 8.0/10

DeepSeek has released DeepSeek-V4.1-Flash on Hugging Face, a multimodal Mixture-of-Experts model with 552B backbone parameters and support for up to one million tokens of context. The model is now live on the DeepSeek API under the name deepseek-flash, while V4-Flash and V4-Flash-Vision-Exp have been retired. This release is significant for the open-weight LLM community, especially for local deployment enthusiasts, as it brings a high-capability multimodal model with efficient KV cache compression to the open ecosystem. It could influence the competitive landscape by offering a powerful, locally runnable alternative to proprietary models. DeepSeek-V4.1-Flash is a multimodal MoE model with 552B backbone parameters and a context window of up to one million tokens. It is available for use in llama.cpp, Ollama, LM Studio, or any compatible application, and the Hugging Face page highlights its focus on pushing the limits of KV cache compression.

reddit · r/LocalLLaMA · /u/t4a8945 · Sep 10, 05:57

Background: Open-weight models are AI models whose trained parameters (weights) are publicly released, allowing anyone to download, run, study, and modify them on their own hardware. Mixture-of-Experts (MoE) architecture activates only a subset of parameters per token, enabling large model capacity with lower computational cost. KV cache compression reduces memory usage during inference, which is crucial for handling very long contexts efficiently.

Tags: #DeepSeek, #LLM, #Hugging Face, #Model Release, #AI

Bartowski Introduces Per-Tensor Layout Maps for GGUF Quantization ⭐️ 8.0/10

Bartowski published a Hugging Face blog post announcing new per-tensor layout maps for GGUF quantization. He is changing the shape of the models he uploads, and reports that tests show the new layouts are better across the board than his previous releases. Since Bartowski is a well-known quantizer in the LocalLLaMA community, his new layout approach could influence how GGUF models are quantized and shared broadly. Better quantization quality at the same size directly benefits the many users who download GGUF files for local LLM inference. The announcement links to a detailed Hugging Face blog post and includes a chart of test results, but Bartowski explicitly avoids claiming a 'Pareto frontier' or 'best models in the world.' He says he is happy with the outcome and hopes to continue improving the layouts.

reddit · r/LocalLLaMA · /u/noneabove1182 · Sep 10, 19:05

Background: GGUF is a file format used to store quantized LLMs for local inference, typically with tools like llama.cpp. Quantization reduces model size by storing weights in lower precision, and the granularity of quantization parameters — per-tensor, per-channel, or per-group — affects the trade-off between size and quality. Per-tensor layout maps determine which quantization type is applied to each tensor in a model, which is the focus of Bartowski's new approach.

Tags: #GGUF, #quantization, #LLM, #LocalLLaMA, #HuggingFace

GigaChat-3.5-Reasoning: 432B MoE with Gated DeltaNet, MIT-Licensed Open Weights ⭐️ 8.0/10

The developers of GigaChat released GigaChat-3.5-Reasoning, a 432B-A28B mixture-of-experts reasoning model with Gated DeltaNet, on Hugging Face under the MIT license. The model was trained by distilling domain experts into a single model via on-policy distillation, and its reasoning traces use 37% fewer tokens than DeepSeek V4 Flash Preview while achieving comparable eval results. This is a significant open-weight release of a very large reasoning model, giving researchers and developers access to a 432B MoE with a novel linear-time recurrent architecture. The MIT license and efficiency gains (37% fewer reasoning tokens) could make competitive reasoning capabilities more accessible and cheaper to run. The model uses Gated DeltaNet, a linear-time recurrent architecture that combines scalar gating with the delta rule for long-context efficiency. Domain experts (code, math, general, etc.) were trained with CISPO (clipped importance sampling policy optimization) and then distilled into the final model via on-policy distillation. Weights are available at the ai-sage Hugging Face collection, and the model can be tried at giga.chat under the 'reasoning' tab.

reddit · r/LocalLLaMA · /u/netikas · Sep 10, 12:19

Background: GigaChat is a family of large language models developed by Sber. Mixture-of-experts (MoE) models activate only a subset of parameters per token, allowing large total parameter counts with lower inference cost. Gated DeltaNet is a recent linear-time recurrent architecture that improves on Mamba2 and DeltaNet by adding a gating mechanism and delta rule for selective memory updates. CISPO is a reinforcement-learning algorithm that clips token-level importance sampling weights to stabilize off-policy training.

Tags: #GigaChat, #MoE, #Reasoning Model, #Open Weights, #LLM

🤖 DeepSeek 将于 10 号发布 V4.1 Flash 模型，此后到新 Pro 模型发布前，V4 Pro 模型路由到此 DeepSeek 计划于北京时 ⭐️ 8.0/10

DeepSeek plans to release V4.1 Flash around September 10, 2026, and will route V4 Pro requests to it due to superior performance and cost efficiency.

telegram · zaihuapd · Sep 10, 02:25

Tags: #DeepSeek, #AI model release, #LLM, #cost efficiency, #machine learning

Ant International, Visa, Mastercard Partner on AI Agent Payment Standards ⭐️ 8.0/10

Ant International announced a partnership with Visa and Mastercard to develop common industry standards for AI agent payments. The initiative includes "know your agent" (KYA) mechanisms that link AI agents to registered operators and authorized users to manage risk. This matters because AI agents are increasingly able to initiate transactions autonomously, yet the payment industry lacks common standards for verifying who or what is acting. A joint framework from three major payment players could become the de facto baseline for secure, interoperable AI-agent payments globally. The collaboration focuses on "know your agent" (KYA) protocols that bind an AI agent's requests to a registered operator and an authorized user, so merchants can verify both before settling a payment. The standards aim to cover identity, risk management, and interoperability across different payment networks.

telegram · zaihuapd · Sep 10, 03:00

Background: AI agents are software programs that can perform tasks such as making purchases or paying bills on behalf of users with minimal human intervention. As these agents become more capable, payment networks need ways to establish trust — verifying that an agent is authorized to spend money and belongs to a legitimate entity. "Know your agent" extends the traditional "know your customer" (KYC) compliance concept to the machine-to-machine economy.

Tags: #AI agents, #payments, #fintech, #standards, #interoperability

Moonshot AI Files Confidentially for Hong Kong IPO at $50B Valuation ⭐️ 8.0/10

Moonshot AI (Kimi) has confidentially submitted its A1 filing to the Hong Kong Stock Exchange, formally launching its Hong Kong IPO process. The company is also raising a new funding round at a $50 billion pre-money valuation, which may be its final round before the IPO. This marks one of the most significant AI IPO moves in the region, signaling strong capital-market appetite for large language model companies. It also intensifies competition among Chinese AI startups, with DeepSeek reportedly eyeing a listing in the first half of next year. Between January and July, Kimi released K2.5, K2.6, and K3 at roughly three-month intervals. The company's valuation jumped from about $4.3 billion at the end of 2025 to $35 billion post-money in July, an approximately eightfold increase in half a year.

telegram · zaihuapd · Sep 10, 10:58

Background: Moonshot AI is a leading Chinese AI company known for its Kimi chatbot and open-weight large language models. Its recent models include Kimi K2.5, an open-source native multimodal agentic model built on about 15 trillion mixed visual and text tokens, and Kimi K3, a 2.8-trillion-parameter open model with a 1-million-token context window. These releases reflect a rapid iteration cycle aimed at frontier capabilities in coding, agentic tasks, and multimodal understanding.

Tags: #AI, #IPO, #Moonshot AI, #Kimi, #LLM

Tencent Hunyuan Releases Open-Source Audio Editing Model AuK ⭐️ 8.0/10

Tencent Hunyuan announced the release of AuK, an open-source audio editing model that accepts natural-language instructions. It supports zero-shot text-to-speech, voice/style/emotion editing, de-accenting, and multi-speaker separation, along with a faster AuK-Flash variant; model weights and demos are now online. AuK lowers the barrier to high-quality audio post-production by letting users edit speech with plain-language commands instead of specialized tools. As an open-source release, it could accelerate research and product development in voice cloning, dubbing, podcast editing, and accessibility. The model combines multiple audio tasks in one framework, including zero-shot TTS, voice/style/emotion editing, de-accenting, and multi-speaker separation. AuK-Flash is a faster variant for lower-latency use cases, and the release includes model weights and online demos.

telegram · zaihuapd · Sep 10, 11:56

Background: Zero-shot TTS means a model can synthesize speech in a voice it has never heard during training, using only a short reference sample. Multi-speaker separation uses AI to isolate individual voices from mixed recordings, even when speakers overlap. De-accenting modifies non-native or accented speech to sound more neutral while preserving the speaker's identity. Open-source audio models like AuK are part of a broader trend toward making advanced speech AI accessible to developers and creators.

Tags: #AI, #audio-editing, #open-source, #speech-synthesis, #Tencent-Hunyuan

Cognition launches new SWE-2 model, Rivaling Fable 5.1 and GPT-Astra ⭐️ 7.0/10

Cognition announces SWE-2, a new coding model rivaling top systems, but community commenters question its benchmark generalization and closed-weight strategy.

hackernews · seelos · Sep 10, 15:29 · Discussion

Tags: #AI, #SWE-2, #coding agents, #benchmarks, #Cognition

Report examines Silicon Valley's deep ties to the military-industrial complex ⭐️ 7.0/10

A new report from Brown University's Costs of War project examines how Silicon Valley's historical and ongoing ties to the defense sector are reshaping the military-industrial complex. The report traces these connections from the Fairchild Semiconductor era to today's big tech companies. This analysis challenges the popular narrative that Silicon Valley is a purely civilian, innovation-driven industry, revealing that the tech sector has been entangled with military funding and priorities since its earliest days. It has significant implications for tech workers, policymakers, and the ongoing debate over tech ethics and defense contracts. The report cites specific examples, such as Keyhole, a San Francisco company that received seed funding in 2003 from In-Q-Tel, a CIA-backed venture capital firm, and whose software was used by military and intelligence agencies to support the Iraq war within two weeks; Google later acquired Keyhole and renamed it Google Earth. The accompanying community discussion also references Fairchild Semiconductor's early role building integrated circuits for missile systems, including the Minuteman.

hackernews · paimapi · Sep 10, 15:47 · Discussion

Background: The military-industrial complex is a concept popularized by President Dwight Eisenhower in his 1961 farewell address, referring to the close relationship between the military and the defense industry. Silicon Valley's ties to the Pentagon date back to the Cold War era, when government contracts funded much of the early semiconductor industry. The report and discussion examine whether the current wave of AI, cloud computing, and surveillance technologies represents a new phase of this long-standing relationship.

Discussion: The 274-comment discussion reflects a wide range of viewpoints. Some commenters argue that Silicon Valley has been defense-funded from the start, citing Google's origins and Fairchild Semiconductor's work on missile systems, while others question whether companies should refuse defense contracts at all. One commenter shared a personal account of quitting Microsoft over its complicity with Israeli war crimes, urging tech workers to push back against the military-industrial complex.

Tags: #military-industrial complex, #silicon valley, #tech ethics, #defense contracts, #history of tech

Windows XP's Clever Algorithm for Choosing a Default User Picture ⭐️ 7.0/10

Raymond Chen's latest Old New Thing post reveals the clever algorithm Windows XP used to choose a new user's initial profile picture. The post highlights the engineering constraints and problem-solving behind what looks like a trivial feature. The post matters because it preserves historical Windows internals knowledge and demonstrates how even trivial features require careful design under real-world constraints. It offers valuable lessons for software engineers about algorithmic thinking and the gap between human intuition and computer behavior. Chen explains that computers cannot 'pick randomly' the way humans do, so the feature required a deterministic approach rather than a simple random choice. A commenter linked to the actual implementation in a Windows NT 5 source repository on GitHub, allowing readers to inspect the code directly.

hackernews · Lobsters · Sep 10, 09:04 · Discussion

Background: Windows XP, released in 2001, let users associate a picture with their user account, and the system needed a sensible default for newly created accounts. Choosing one item from a set is effortless for humans but requires an explicit algorithm on a computer. Raymond Chen is a longtime Microsoft engineer who writes The Old New Thing blog, sharing behind-the-scenes stories about Windows design and history.

Discussion: Commenters were enthusiastic, with one calling every Raymond Chen Windows internals post 'a little Xmas' and another sharing the actual source code link. Others reflected on the cognitive shift required when programming, noting that human randomness and computer algorithms are fundamentally different. A few also wondered whether Chen needs permission to publish such internal knowledge.

Tags: #Windows XP, #algorithms, #operating systems, #Raymond Chen, #software engineering

Creativity as the New Moat in the AI Era ⭐️ 7.0/10

The article argues that genuine human creativity is becoming the key competitive advantage as AI commoditizes conventional content production. It reframes the debate around AI-generated content, suggesting that originality rather than efficiency will define sustainable business moats. This matters because businesses and creators are increasingly competing with AI-generated content that is cheap and abundant. If creativity becomes the primary differentiator, it shifts strategy away from scale and speed toward originality and human insight, affecting everyone from startups to established enterprises. The piece is an opinion essay rather than a technical report, so it offers no empirical data or case studies. It acknowledges that genuine creativity is difficult to define and even harder to sustain, especially in technical fields where constraints limit creative freedom.

hackernews · virgil_disgr4ce · Sep 10, 19:03 · Discussion

Background: A moat in business refers to a durable competitive advantage that protects a company from rivals, such as network effects, brand, or switching costs. The red queen effect, referenced in the comments, describes a situation where an organization must constantly innovate just to maintain its position. As AI tools lower the cost of producing text, images, and code, traditional content-based moats erode, making human originality a more valuable defense.

Discussion: Commenters are divided: lordnacho argues that creativity is not a moat but a red queen scenario requiring continuous effort, while Animats is skeptical that genuine creativity matters for mundane business websites, citing frustration with overcomplicated and slow experiences. Havoc agrees with the thesis but believes the article understates how rare and difficult genuine creativity is, especially in technical fields.

Tags: #AI, #creativity, #business strategy, #moat, #technology trends

List of references on Sony websites to players "owning" their digital games ⭐️ 7.0/10

A collection of Sony references to players 'owning' digital games, tied to a class-action lawsuit over digital ownership rights.

hackernews · haunter · Sep 10, 12:18 · Discussion

Tags: #digital ownership, #consumer rights, #PlayStation, #lawsuit, #DRM

When Will Average People Feel AI's Impact? ⭐️ 7.0/10

Nathan Lambert argues that we are less than five years into a compounding AI revolution that could take a century to fully unfold, and that the industry must think carefully about managing this long transition. The piece reframes the question of when average people will feel AI's impact as a gradual, compounding process rather than a single breakthrough moment. This matters because public expectations about AI are often driven by hype cycles, while the real effects on ordinary people may arrive slowly and unevenly. Lambert's framing urges policymakers, companies, and researchers to take responsibility for a transition that could reshape society over decades. The article is an analytical opinion piece rather than a technical report, centered on the idea that AI progress should be viewed on a century-long timescale. Lambert emphasizes that the industry's management choices during the early years of this revolution will shape how the benefits and costs are distributed.

rss · Interconnects · Sep 9, 11:01

Background: Nathan Lambert, the author of this piece, publishes the Interconnects newsletter, which focuses on AI research and industry trends. The phrase 'compounding revolution' describes how AI advances build on one another over time, producing small early effects that grow into large societal changes over decades. Public debates about when average people will feel AI's impact often contrast sudden breakthroughs with slower, incremental shifts in jobs, daily tools, and public services.

Tags: #AI impact, #AI industry, #technology forecasting, #society

OpenAI Showcases Codex and ChatGPT for Antimicrobial Discovery ⭐️ 7.0/10

OpenAI highlighted César de la Fuente's lab, which uses Codex and ChatGPT to mine living and extinct genomes for new antimicrobial molecules. This approach aims to combat drug-resistant infections by leveraging AI to accelerate the discovery of antimicrobial peptides. This demonstrates a practical application of large language models in scientific discovery, potentially accelerating the development of new antibiotics to address the global antimicrobial resistance crisis. It could inspire further integration of AI in bioinformatics and drug discovery pipelines. The lab employs molecular de-extinction, a concept pioneered by de la Fuente, which uses AI to identify long-lost molecules with antimicrobial potential. The approach involves scanning both living and extinct genomes, with Codex and ChatGPT aiding in data analysis and hypothesis generation.

rss · OpenAI Blog · Sep 10, 16:00

Background: Antimicrobial peptides (AMPs) are small proteins that are part of the innate immune response and can kill bacteria, fungi, and viruses. Molecular de-extinction is a novel approach that resurrects ancient molecules from extinct organisms to find new antibiotics. The rise of drug-resistant infections has created an urgent need for novel antimicrobial agents, and AI tools like Codex and ChatGPT are being explored to accelerate discovery.

Tags: #AI for Science, #LLM Applications, #Bioinformatics, #Antimicrobial Research, #OpenAI

OpenAI launches ChatGPT for Financial Services with GPT-6 Astra ⭐️ 7.0/10

OpenAI announced ChatGPT for Financial Services, a specialized offering that combines built-in financial data with its GPT-6 Astra model to support research, modeling, and creation of client-ready materials. The announcement follows GPT-6 Astra's release to approved users on September 3, 2026, with general availability the following day. This marks a targeted push by OpenAI into regulated, high-value enterprise verticals, potentially accelerating research and due-diligence workflows in finance. It also shows how frontier models are moving from general chatbots toward domain-specific products with integrated data and compliance-oriented workflows. The offering taps a connector ecosystem of more than 50 integrations, including Datasite, Box, Preqin, and Intapp, and can pull from filings, transcripts, decks, spreadsheets, and connected data to produce cited, structured outputs. OpenAI says teams can research across sources, track figures across reporting periods, interpret annotations in public financial data, and turn analyses into spreadsheets, documents, slides, and interactive charts.

rss · OpenAI Blog · Sep 10, 07:00

Background: GPT-6 Astra is OpenAI's large language model released in September 2026; OpenAI claims it achieves 64.6% on benchmark comparisons versus 52.6% for Claude Fable 5.1, at roughly 31% lower estimated API cost. The financial-services launch builds on OpenAI's broader finance work, including a personal finance experience that lets U.S. Pro users connect accounts and ask ChatGPT questions grounded in their financial context.

Tags: #AI, #Finance, #OpenAI, #ChatGPT, #GPT-6

OpenAI's Lehane Urges Action While the AI Policy Window Is Open ⭐️ 7.0/10

OpenAI's Chris Lehane published an opinion piece arguing that the current 'policy window' for AI must be used to build stronger safety evidence, establish shared industry standards, and pass durable regulation. The post directly links advancing AI capabilities to a growing need for policy action. This signals OpenAI's official stance in the global AI governance debate and could shape how regulators and other laboratories prioritize safety. As governments worldwide weigh AI legislation, advocacy from a leading frontier lab may influence both the timing and the substance of new regulation. The piece is advocacy rather than a technical contribution, offering no new safety research or concrete legislative proposals. Its emphasis on 'durable' policy suggests concern about regulation that could shift with each election cycle or news cycle.

rss · OpenAI Blog · Sep 9, 13:00

Background: A 'policy window' is a period when public attention and political will align, making meaningful regulatory change possible before the moment passes. Governments around the world are currently debating AI regulation, from the EU's AI Act to various US state and federal efforts. Chris Lehane is OpenAI's vice president of global affairs and a veteran political strategist, so this essay reflects the company's public policy positioning as much as its safety research agenda.

Tags: #AI policy, #AI safety, #OpenAI, #AI governance, #regulation

CPU Shortages, Unicorn Woes, and AIOps Risks in Tech Pulse ⭐️ 7.0/10

The Pragmatic Engineer's Pulse #191 newsletter highlights an emerging trend of CPU shortages, warning compute-intensive services to reserve capacity now. It also covers COVID-era unicorns facing the end of growth dreams and engineers losing systems expertise as AI handles incident response. CPU shortages could raise infrastructure costs and limit scaling for compute-heavy startups and enterprises, echoing prior GPU supply constraints. The erosion of hands-on systems expertise via AIOps has long-term implications for incident reliability and engineering skill development. The newsletter advises that for compute-intensive services, it is worth reserving more compute now before shortages worsen. The AIOps discussion points to a trade-off: automation improves efficiency but risks engineers losing the deep systems knowledge needed to debug novel failures.

rss · The Pragmatic Engineer · Sep 10, 17:13

Background: CPU shortages refer to supply-demand imbalances for server processors, driven by surging demand for AI, cloud, and data-center capacity, which can delay hardware procurement and raise prices. AIOps (Artificial Intelligence for IT Operations) uses AI, machine learning, and big data to automate IT operations tasks such as monitoring, incident detection, and response, reducing manual toil but also reducing engineers' direct exposure to system internals. COVID-era unicorns are startups that reached billion-dollar valuations during the pandemic's low-interest-rate funding boom, many of which are now facing down-rounds, layoffs, or closures as capital tightens.

Tags: #CPU shortages, #cloud computing, #AI operations, #tech industry, #software engineering

Phishing security requires systemic design fixes, not user blaming or DNS reliance. ⭐️ 7.0/10

The article published at maurycyz.com is a blunt, rant-style piece arguing that phishing prevention should stop blaming users and should not treat DNS blocking as a catch-all defense. It explicitly challenges both the “users are at fault” narrative and the belief that DNS-level filters can solve the problem. This perspective matters because misguided phishing responses continue to burden users, who lack the skills and context to reliably detect phishing in current interfaces. A systemic, human-centered design approach could improve security across browsers, email clients, and platforms, rather than depending on the imperfect user or DNS infrastructure. The article presents the case as a blunt rant rather than a detailed technical report or data-driven study, and it links to a Lobste.rs discussion thread for community feedback. Its main argument is that making security dependent on user vigilance or DNS blocking is to design for failure, so the fix must be built into how systems intrinsically work and how identities are presented.

rss · Lobsters · Sep 10, 15:14

Background: Phishing is a type of social engineering in which attackers deceive people into revealing credentials or sensitive information by impersonating trustworthy entities. Common mitigation approaches include DNS-based domain endpoints and user-awareness training, which consider user error to be the core problem. The article argues for a different approach: security should be shifted out of the user's hands and into the fundamental design, so phishing is more difficult by default.

Tags: #phishing, #security, #DNS, #usability, #social engineering

Review a Pull Request by Booting It ⭐️ 7.0/10

In a blog post dated September 9, 2026, developer fzakaria demonstrates a workflow for reviewing a pull request by booting it. Instead of only reading the diff, a reviewer builds the NixOS system configuration from the PR branch and boots into the resulting system to test the proposed changes hands-on. This hands-on review approach can catch runtime problems that static code review misses, improving review quality for NixOS and nixpkgs. It also fits into ongoing community efforts, such as RFC 0030, to formalize and improve the Nix pull-request review workflow. The approach builds on Nix's ability to fetch and build sources from any Git branch, combined with NixOS's declarative system configuration and virtual-machine testing support. The post was shared on Lobsters and linked on the NixOS Discourse forum.

rss · Lobsters · Sep 10, 00:32

Background: Nix is a purely functional package manager that builds software from declarative specifications, and NixOS is a Linux distribution built on it where the whole system is described declaratively. Because Nix can fetch sources from any Git branch or PR and produces reproducible builds, a reviewer can build and boot a system exactly as defined by a proposed change. The Nix community has long discussed formalizing its PR review workflow, and hands-on boot testing represents a practical addition to that process. NixOS also supports running system configurations in virtual machines, which likely underpins this workflow.

Tags: #code-review, #Nix, #NixOS, #development-workflow, #pull-requests

Guix-Science Ships First Release for Reproducible Scientific Computing ⭐️ 7.0/10

The Guix-Science project announced its first release, a curated channel of scientific software packages built on top of GNU Guix. It provides recent versions of scientific software that, for various reasons, cannot be accepted into the upstream Guix distribution. Being able to pin an entire scientific software stack to exact, bit-reproducible versions directly addresses the reproducibility crisis in computational research, and gives HPC users a way to share environments that others can rebuild exactly. It also shows the Guix channel mechanism maturing into a way to distribute niche, fast-moving domain software outside the main distribution. Guix-Science is distributed as an additional Guix channel: users add it via the 'Specifying Additional Channels' instructions in the Guix manual or by adding a snippet to their channels.scm, with source mirrors on both GitHub and Codeberg. The announcement itself is sparse, offering no list of included packages or version numbers, so the exact scope of the release is not documented in the provided snippet.

rss · Lobsters · Sep 10, 11:45

Background: GNU Guix is a functional package manager, whose name is a portmanteau of Guile and Nix, inspired by the Nix package manager; its package recipes are written in Guile Scheme. Instead of installing software into shared system directories, Guix installs each package into a unique directory derived from a cryptographic hash of all its inputs, which lets multiple versions coexist and largely eliminates dependency hell. The Guix System distribution builds on this with the Linux-libre kernel and the GNU Shepherd init system. Reproducible research — the principle that others using the same methodology should obtain the same results — is a foundational norm of the scientific method, and the so-called replication crisis has made pinning exact software environments a practical concern for researchers.

Tags: #Guix, #scientific computing, #reproducible research, #HPC, #package management

Python Soft-Deprecates re.match() in Favor of re.prefixmatch() ⭐️ 7.0/10

Hugo van Kemenade's blog post details the soft deprecation of re.match() and re.Pattern.match() in Python's standard library. Python 3.15 introduces re.prefixmatch() as a clearer-named alias, marking re.match() as no longer recommended for new code. re.match() is one of Python's most widely used regular expression APIs, so this change affects a large portion of the Python ecosystem. Soft deprecation is seen as the first step toward eventual removal, and it will likely trigger widespread code migrations and new linting rules. Soft deprecation follows PEP 387 and means existing code can safely continue using re.match(), but new code should prefer re.prefixmatch() when matching at the beginning of a string is intended. The change also targets re.Pattern.match(), and community members note that adding linter rules could create a huge impact across virtually every project.

rss · Lobsters · Sep 10, 21:59

Background: In Python's re module, re.match() checks for a match only at the beginning of a string, while re.search() scans the entire string for a match anywhere. PEP 387, adopted in 2023, formalized soft deprecation as a way to discourage an API in new code without breaking existing code. The new re.prefixmatch() name is intended to make the 'match at prefix' semantics clearer than the ambiguous match().

Discussion: The related CPython issue discussion shows concern that soft deprecation will be seen as a first step toward full deprecation, and that new linter rules plus migration pull requests will create enormous churn since re.match() is used in virtually every project.

Tags: #Python, #re module, #deprecation, #standard library

Conversations with JJ ⭐️ 7.0/10

A technical blog post discussing the author's experiences and insights with the JJ (Jujutsu) version control system.

rss · Lobsters · Sep 10, 16:48

Tags: #version control, #jujutsu, #developer tools, #technical blog

Decoding the NEC V20 Microcode ⭐️ 7.0/10

A technical article on the MartyPC blog details the process of decoding the microcode of the NEC V20 processor. The write-up documents how the V20's internal microcode was reverse-engineered, shedding light on the chip's internal execution logic. The NEC V20 was a widely used Intel 8088-compatible processor, yet its internal microarchitecture remained largely undocumented. Decoding its microcode is valuable for retrocomputing enthusiasts, emulator developers, and anyone studying how different vendors implemented the x86 ISA. The NEC V20 is a 16-bit CMOS microprocessor with an 8-bit external data bus, and it is both pin-compatible and object-code-compatible with the Intel 8088, with an ISA similar to the Intel 80188 plus some extensions. The V20 used its own distinctive microcode rather than a direct copy of Intel's, which is what makes the decoding effort technically interesting.

rss · Lobsters · Sep 10, 10:44

Background: Microcode is a low-level program stored in a read-only memory (ROM) or programmable logic array (PLA) inside a CPU that translates machine instructions into the internal control signals needed to execute them. The NEC V20, introduced in November 1982, was a popular upgrade for IBM PC/XT-class systems, offering better performance than the original Intel 8088 while remaining software-compatible. Decoding microcode typically involves identifying the bit patterns and control fields that make up each microinstruction.

Tags: #microcode, #reverse engineering, #retrocomputing, #CPU architecture, #NEC V20

Model-agnostic PII detection with LLMs ⭐️ 7.0/10

AWS presents a model-agnostic, prompt-based PII detector that leverages any Bedrock LLM and outperforms off-the-shelf tools across multiple benchmarks.

rss · AWS Machine Learning Blog · Sep 10, 16:02

Tags: #PII detection, #LLM, #AWS Bedrock, #privacy, #NLP

AWS Launches Agent Evaluation Metric for Multi-Turn Conversations ⭐️ 7.0/10

AWS introduced the Agent Evaluation Metric (AEM), a decomposable, turn-level metric for evaluating multi-turn agent conversations. It is first applied to the correctness dimension and pinpoints the exact turn where an agent fails, separating root-cause errors from inherited ones. Holistic or single-turn evaluation misses cascading failures, where one early mistake corrupts every later turn in a conversation. AEM gives AI/ML practitioners an actionable, turn-level signal that isolates where a conversation actually broke, which should improve debugging and iteration of production agent systems. AEM defines a turn-level hierarchy, two sub-metrics, and a failure taxonomy that makes the score actionable; this release covers its first dimension, correctness. The metric decomposes a conversation into per-turn scores so practitioners can distinguish the turn that caused a failure from the turns that merely inherited it.

rss · AWS Machine Learning Blog · Sep 10, 15:55

Background: Multi-turn agents are AI systems that hold extended, back-and-forth conversations, and they can fail in ways single-turn evaluation misses—an early mistake can corrupt every later turn. Holistic scores hide where a conversation breaks, so decomposable, turn-level metrics are needed to make agent quality measurable and actionable.

Tags: #AI agents, #evaluation metrics, #multi-turn conversations, #machine learning, #AWS

Deploy Qwen3.8-2.4T-A95B on SageMaker HyperPod with vLLM ⭐️ 7.0/10

AWS published a step-by-step guide for deploying the Qwen3.8-2.4T-A95B open-weight model on Amazon SageMaker HyperPod using vLLM. The walkthrough covers cluster provisioning, NVFP4 quantization, and an OpenAI-compatible endpoint with built-in reasoning, tool calling, and native MTP speculative decoding. This gives ML engineers a practical path to serve a massive 2.4-trillion-parameter open-weight model on managed AWS infrastructure. It shows how frontier-scale open models can be made production-ready for large-scale inference workloads. Qwen3.8-2.4T-A95B is a sparse mixture-of-experts model with 95 billion active parameters out of 2.4 trillion total, and it is the open-weight variant of Qwen3.8 Max. NVFP4 is a block-scaled 4-bit floating-point format (E2M1), while MTP is a native multi-token prediction method for speculative decoding.

rss · AWS Machine Learning Blog · Sep 9, 22:26

Background: Qwen3.8-2.4T-A95B is an open-weight sparse mixture-of-experts model from Qwen, suited for coding, research, complex reasoning, and agentic workflows. vLLM is a high-throughput inference engine, and Amazon SageMaker HyperPod provides managed clusters for large-scale model training and serving. NVFP4 quantization reduces memory footprint while preserving accuracy, and MTP speculative decoding speeds up token generation by drafting multiple future tokens in a single forward pass.

Tags: #AWS, #SageMaker HyperPod, #vLLM, #Qwen, #LLM Deployment

AWS Offers Ray Serve DLC as Supported TorchServe Alternative ⭐️ 7.0/10

AWS announced the Ray Serve Deep Learning Container (DLC) as a supported, pre-tested alternative to TorchServe, which is no longer maintained. The blog post provides a walkthrough for deploying a vision-language model on Amazon EKS using the Ray Serve DLC on a single GPU node. Teams relying on TorchServe now face the burden of maintaining the entire GPU inference stack themselves. The Ray Serve DLC provides a supported, pre-assembled solution that bundles the framework, GPU drivers, and serving layer, reducing operational overhead for production GPU inference workloads. The Ray Serve DLC packages the framework, GPU drivers, and serving layer into a single pre-tested container image. The walkthrough specifically demonstrates deploying a vision-language model on Amazon EKS using a single GPU node, offering a practical migration path for existing TorchServe users.

rss · AWS Machine Learning Blog · Sep 9, 15:51

Background: TorchServe is a tool for serving PyTorch models in production, but it is no longer maintained, leaving users to manage the full GPU inference stack themselves. AWS Deep Learning Containers are Docker images preinstalled with deep learning frameworks that simplify deploying custom machine learning environments. Ray Serve is a scalable model serving library within the Ray ecosystem, designed for production-grade serving of ML models.

Tags: #Ray Serve, #TorchServe, #AWS, #Deep Learning Containers, #GPU Inference

NVIDIA BioNeMo Inference Runtime Accelerates Proteome-Scale Structure Prediction ⭐️ 7.0/10

NVIDIA introduced BioNeMo Inference Runtime (BioIR), a Python library that accelerates biomolecular structure prediction model inference on NVIDIA GPUs while preserving ordinary PyTorch nn.Module workflows. Benchmark results show up to 2.90x higher Boltz-2 folding throughput and 58.5k residues per GPU per hour on an 8xH100 system. Proteome-scale structure prediction, such as processing millions of structures through a single pipeline, is becoming a major HPC workload where inference efficiency directly determines cost and turnaround time. BioIR lowers these barriers and could accelerate large-scale projects like the AlphaFold Database expansion for the broader biological community. BioIR provides biology-aware PyTorch modules, optimized GPU kernels, and CUDA Graphs where applicable, while models remain plain nn.Modules with no TensorRT engine build required. It has already been used in real proteome-scale work, including generating structures from 4,777 proteomes and releasing 1.81 million high-confidence complex-prediction structures.

rss · NVIDIA Developer Blog · Sep 10, 15:00

Background: Biomolecular structure prediction uses deep learning to infer a protein's three-dimensional structure from its amino acid sequence; AlphaFold2's 2021 large-scale application covered 98.5% of the human proteome. As newer models such as AlphaFold3 and all-atom approaches expand predictions to protein complexes and interactions, running whole worklists at proteome scale demands efficient GPU inference infrastructure. BioIR meets that need with an optimized five-stage pipeline that turns supported structure-prediction models into PDB/mmCIF outputs with confidence scores.

Tags: #BioNeMo, #structure prediction, #inference, #HPC, #AI

CUDA Toolkit 13.4 Adds Windows on Arm Support and Greater Shared GPU Control ⭐️ 7.0/10

NVIDIA's CUDA Toolkit 13.4 adds support for Windows on Arm, enabling CUDA development and GPU-accelerated computing on ARM64-based Windows devices. It also gives developers greater control over shared GPUs, building on Multi-Instance GPU (MIG) technology to manage partitioned GPU resources more flexibly. This extends CUDA into the fast-growing Windows on Arm ecosystem, allowing developers to build and run GPU-accelerated applications on power-efficient ARM laptops and devices. The enhanced shared GPU control improves utilization and isolation in data centers and AI environments, where multiple users or workloads share a single physical GPU. Windows on Arm support targets ARM64 devices running Windows 11. For shared GPUs, MIG can partition a single physical GPU into up to seven fully isolated instances, each with its own high-bandwidth memory, cache, and compute cores, on architectures ranging from Ampere to Hopper, Blackwell, and Rubin.

rss · NVIDIA Developer Blog · Sep 9, 20:24

Background: CUDA is NVIDIA's parallel computing platform and programming model that enables GPU-accelerated computing across fields such as AI, scientific research, and data analytics. Windows on Arm is a version of Windows compiled for ARM64 processors, offering better power efficiency for portable devices. MIG (Multi-Instance GPU) is a feature that securely partitions a single GPU into multiple smaller instances, giving different users or workloads isolated resources for optimal utilization.

Tags: #CUDA, #GPU, #NVIDIA, #Windows on Arm, #HPC

Rebuilding AUTOMATIC1111 with Gradio Workflow ⭐️ 7.0/10

The Hugging Face blog details how to rebuild the AUTOMATIC1111 Stable Diffusion web UI using Gradio's workflow capabilities.

rss · Hugging Face Blog · Sep 10, 00:00

Tags: #Gradio, #Stable Diffusion, #AUTOMATIC1111, #Web UI, #Machine Learning

Google DeepMind's AlphaGenome Atlas Maps Every Possible Human DNA Mutation ⭐️ 7.0/10

Google DeepMind has launched AlphaGenome Atlas, a predictive catalogue covering 9 billion single-nucleotide variants across the human genome. The database provides molecular effect predictions and AVI scores for every possible single-nucleotide change. This resource could accelerate research into how genetic variants influence disease and drug response. It gives scientists a comprehensive reference for interpreting human DNA mutations, potentially speeding up clinical genomics and precision medicine. AlphaGenome Atlas is built on Google DeepMind's AlphaGenome model, a unifying genomics model for deciphering DNA function. The catalogue predicts molecular effects and AVI scores for 9 billion single-nucleotide variants, though the Product Hunt listing itself provides little technical detail.

rss · Product Hunt · Sep 9, 01:41

Background: A single-nucleotide variant is a change in one DNA letter, and such variants can affect gene function and disease risk. Variant effect predictors are computational tools that estimate how a genetic variant may alter molecular properties, biological function, or disease risk. AlphaGenome Atlas extends this idea by offering a genome-wide predictive map of every possible single-nucleotide change, rather than analyzing variants one at a time.

Tags: #AI, #Genomics, #DNA, #Bioinformatics, #Mutation Mapping

Control GitHub Actions cache access with cache-mode ⭐️ 7.0/10

GitHub Actions introduces cache-mode to restrict cache access per workflow or job, improving security through least-privilege controls.

rss · GitHub Changelog · Sep 10, 17:26

Tags: #GitHub Actions, #CI/CD, #security, #caching, #least-privilege

npm Extends 72-Hour Recovery-Code Security Holds to All Accounts ⭐️ 7.0/10

npm now applies a temporary 72-hour security hold to any account after a successful recovery-code sign-in, extending a protection that previously applied only to high-impact accounts. The change was announced on the GitHub Blog on September 9, 2026. This change meaningfully hardens account-takeover protection across the entire npm ecosystem, because recovery-code sign-ins are a strong sign that the account, not the legitimate user, is being accessed. By freezing all accounts, attackers who obtain a recovery code are prevented from immediately publishing poisonous packages or creating access tokens, reducing the risk of software supply-chain attacks. During the 72-hour security hold, the account is placed in a read-only state that pauses publishing and other security-sensitive writes, such as creating access tokens. The mechanism builds on a June 2026 feature for high-impact accounts, which also sends an alert to the account's previous email address when risky changes are detected.

rss · GitHub Changelog · Sep 9, 21:55

Background: The npm registry is the largest software registry in the world, hosting more than two million packages, so compromised maintainer accounts are a critical vector for software supply-chain attacks. Recovery codes are one-time backup codes that allow users to log in when they cannot use their usual two-factor authentication (2FA) method, such as after losing their phone or authenticator app. In June 2026, npm introduced preventive account protection for high-impact accounts, and this September 2026 change extends that security hold to all accounts.

Tags: #npm, #security, #account security, #supply chain, #GitHub

GitHub blocks pull requests with exposed secrets via rulesets ⭐️ 7.0/10

GitHub announced on September 9, 2026, that repository rulesets can now block pull requests from merging when they introduce exposed secrets. This new capability is available starting today for repositories using rulesets. This enhancement helps organizations automatically prevent secret leaks from reaching their default branch, reducing the risk of credential exploitation and unauthorized access. It brings scalable, automated security enforcement directly into the pull request workflow. The feature works in conjunction with GitHub secret scanning, which detects exposed credentials such as API keys and passwords. Rulesets can be configured with bypass permissions for certain users, and are available for customers on GitHub Team and GitHub Enterprise plans.

rss · GitHub Changelog · Sep 9, 17:14

Background: Repository rulesets are named lists of rules that apply to a repository or multiple repositories in an organization, allowing scalable protections such as branch protections and push rules. Secret scanning automatically detects credential leaks in code, logs, and repositories so they can be secured before being exploited. This new merge-blocking rule combines these two capabilities, giving teams a proactive guard against accidentally merging code that contains hardcoded secrets.

Tags: #GitHub, #security, #secrets-management, #repository-rulesets, #devops

JupyterGIS Brings Real-Time Collaborative Map Editing to Jupyter ⭐️ 7.0/10

JupyterGIS, an in-browser GIS built on Project Jupyter, enables multiple users to collaboratively edit maps and annotate data in real time within the Jupyter environment. It is the flagship project of the open GeoJupyter community and is independently usable despite being built on Jupyter. This represents a meaningful advancement for geospatial data workflows, bringing real-time collaboration to GIS tasks that were traditionally single-user. It could benefit organizations, researchers, and students who need to work with geospatial data collaboratively, bridging the gap between GIS and data science. JupyterGIS enables collaborative editing of maps in the form of .jGIS files, which are essentially JSON documents. It provides tools for visualizing common raster and vector formats with a strong focus on cloud-native workflows, and includes an interface to STAC catalogs.

rss · InfoQ 中文站 · Sep 10, 14:21

Background: GIS (Geographic Information System) is a framework for capturing, storing, analyzing, and visualizing spatial or geographic data. Jupyter is an open-source interactive computing environment widely used in data science. JupyterGIS combines these by bringing GIS capabilities into the Jupyter interface with real-time collaboration, allowing multiple users to work on the same map simultaneously. The GeoJupyter community is an open community focused on building geospatial tools within the Jupyter ecosystem.

Tags: #Jupyter, #GIS, #geospatial, #collaboration, #data science

Airbnb Adopts Server-Driven Architecture, Cuts Authentication Code by 60% ⭐️ 7.0/10

Airbnb has adopted a server-driven architecture for its authentication flow, reducing authentication-related code by 60%. The architecture moves UI structure and logic to the server, allowing faster iteration without requiring new client app releases. This is significant because authentication is a critical, security-sensitive flow that must evolve quickly across iOS and Android; a 60% code reduction lowers maintenance costs and accelerates delivery. It also shows that server-driven UI has matured enough for large-scale production adoption at a major platform company. The 60% reduction applies specifically to authentication code, which typically contains complex, platform-specific logic that is often duplicated across clients. In a server-driven architecture, the server defines UI components and their properties, so client apps render them dynamically instead of hard-coding each screen.

rss · InfoQ 中文站 · Sep 10, 12:46

Background: Server-driven UI (SDUI) is an architecture pattern in which the server defines the structure, components, and properties of the user interface, and the client app renders them dynamically. This allows teams to update UI and business logic without shipping new app versions, which is especially valuable for flows like authentication that change frequently due to security and compliance requirements.

Tags: #server-driven architecture, #Airbnb, #authentication, #mobile engineering, #frontend architecture

GitHub Copilot Code Review Now Available in Azure Repos, Billed Per Review ⭐️ 7.0/10

GitHub Copilot code review has been extended to Azure Repos, allowing developers to request AI-powered reviews of pull requests directly in Azure DevOps. The feature is billed per review rather than through a flat subscription. This expands Copilot's AI-assisted code review beyond GitHub to Microsoft's Azure DevOps ecosystem, giving teams that rely on Azure Repos access to automated review feedback. Usage-based billing lowers the barrier for teams that only need occasional reviews, and it strengthens Microsoft's AI developer tooling across its DevOps platforms. The review feature analyzes pull request changes and suggests fixes, with feedback optionally including suggested changes that can be applied with a few clicks. Pricing is based on the number of reviews consumed, which differs from Copilot's usual per-seat subscription model.

rss · InfoQ 中文站 · Sep 10, 11:00

Background: GitHub Copilot code review is an AI-powered feature that reviews the changes in a pull request and suggests fixes, helping developers catch issues before merging. Azure Repos is Microsoft's Git-based repository hosting service within Azure DevOps, used by teams for version control and collaboration. This integration brings Copilot's review capability to a different code-hosting platform than GitHub.

Tags: #Copilot, #Azure Repos, #Code Review, #AI, #DevOps

ANOTHER researcher accuses OpenAI of training on conversations and then claiming a breakthrough ⭐️ 7.0/10

A researcher accuses OpenAI of training on conversations and then claiming a breakthrough, raising concerns about AI training data practices.

reddit · r/LocalLLaMA · /u/SirReal14 · Sep 10, 15:29

Tags: #AI ethics, #OpenAI, #training data, #research integrity, #LLM

NVIDIA Releases SoL-Pi to Make Pi Coding Agents More Token-Efficient ⭐️ 7.0/10

NVIDIA has released SoL-Pi, a standalone, opt-in extension for the Pi coding-agent harness that packages four reusable efficiency mechanisms: Action Fusion, ObservationPack, Evidence-Preserving Reducer, and Online Context Compaction. It installs on an unmodified Pi release and reduces repeated model turns, context replay, oversized observations, and unnecessary long-log reading while preserving the evidence an agent needs. This matters because long-running coding agents routinely waste tokens and inference work on repeated validation commands, replaying large tool outputs, and reading mostly irrelevant logs. SoL-Pi shows a practical pattern for improving agent efficiency at the harness level through public extension APIs, which could lower cost and latency for researchers and teams running LLM agents at scale. All four mechanisms are opt-in and disabled by default, and a missing configuration leaves every mechanism turned off; SoL-Pi never patches the Pi source tree and only imports Pi's public extension APIs. Action Fusion lets an edit or write run its follow-up validation command in the same tool call, while ObservationPack turns large repeated text results into stable handles with exact paged recall.

reddit · r/LocalLLaMA · /u/Thrumpwart · Sep 10, 20:17

Background: Pi is an open-source agent toolkit and interactive coding-agent CLI that provides tool calling, state management, and an interface for steering a running agent. AutoResearch refers to iterative loop-based workflows in which an agent repeatedly proposes, validates, and improves tasks, often with a verifier, persistent state, and a stop condition. SoL-Pi comes out of NVIDIA's scaled auto-research work, which asked whether agents can make their own harness more efficient before expanding the loop further, without stopping early, skipping verification, or hiding evidence.

Tags: #Nvidia, #AI Agents, #LLM Efficiency, #Pi Agent, #Open Source

DeepSeek Releases Open-Source Harness and V4-Pro-0813 Weights ⭐️ 7.0/10

DeepSeek announced the release of DeepSeek Harness (dsh), an open-source agent harness now in developer preview with source code included. The company also opened the weights for DeepSeek-V4-Pro-0813 on Hugging Face. This marks DeepSeek's push into agent tooling with a modular, plugin-based architecture that could make building AI agents more accessible. Open weights for V4-Pro-0813 give developers a capable model to pair with the harness, reinforcing DeepSeek's open-source strategy. DeepSeek Harness is built on Cordis's plugin system and follows an 'everything-is-a-plugin' architecture. It supports multiple runtime modes — Standard, PTC, and Minimal — designed to start with the smallest operating contract and deliberately increase orchestration or runtime privilege as needed.

telegram · zaihuapd · Sep 10, 07:28

Background: An agent harness is the scaffolding that connects a large language model to tools, memory, and execution environments, enabling autonomous action. DeepSeek is an AI lab known for releasing open-weight models, and this dual release of a harness plus model weights continues that pattern. The 'least privilege first' design philosophy lets developers start minimal and escalate capabilities only when a task requires it.

Tags: #DeepSeek, #Open Source, #AI, #Hugging Face, #Model Release

China's AI Chipmakers Raise Prices as HBM Shortage Hits Supply ⭐️ 7.0/10

Chinese AI chipmakers, including Huawei and Cambricon, have begun raising product prices due to a global high-bandwidth memory (HBM) supply shortage. The Huawei Ascend 950DT is among the affected products, underscoring HBM as a new bottleneck for domestic AI hardware growth. HBM is a critical component for high-performance AI accelerators, so the shortage directly raises costs and constrains production capacity for Chinese chipmakers. This could slow China's push for AI self-sufficiency and intensify pressure on domestic supply chains. The price increases affect products such as Huawei's Ascend 950DT. The shortage is particularly challenging for Chinese firms because advanced memory manufacturing is concentrated in a few foreign suppliers and is subject to export controls.

telegram · zaihuapd · Sep 10, 09:29

Background: High Bandwidth Memory (HBM) is a type of DRAM built with 3D stacking technology that delivers extremely high data bandwidth, making it essential for AI accelerators and high-performance computing. HBM was first used in AMD's Radeon Fury series graphics cards and is mainly produced by SK Hynix, Samsung, and Micron. For Chinese AI chipmakers, domestic HBM alternatives are scarce, which makes the global shortage a structural constraint on their growth.

Tags: #AI chips, #HBM, #China, #semiconductor supply chain, #Huawei