Today
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
16-bit Windows (Windows 1.x, 2.x, 3.0, 3.1, etc.) on 64-bit Windows
16-bit Windows (Windows 1.x, 2.x, 3.0, 3.1, etc.) on 64-bit Windows - otya128/winevdm
Yesterday
Anthropic S-1
As filed with the Securities and Exchange Commission on October 26, 2026. Registration No. 333- UNITED STATES SECURITIES AND EXCHANGE COMMISSION WASHINGTON, D.C. 20549 FORM S-1 REGISTRATION STATEMENT UNDER THE SECURITIES ACT OF 1933 Anthropic, PBC (Exact name of registrant as specified in its charter) Delaware737286-1696045(State or other jurisdiction ofincorporation or organization)(Primary Standard IndustrialClassification Code Nu
Solar power is becoming bigger than nuclear
After defying projections, solar's dramatic growth means it is overtaking nuclear as a global power source. Here are seven reasons for solar's success, and where it might go from here.
The Exponential Time Hypothesis Is False [pdf]
See also: Announcing three new discoveries in mathematics, computer science, and physics - https://news.ycombinator.com/item?id=50251344
Oldest GUI application that still runs on Windows 11
A blog post about finding the oldest Windows application with a GUI that still runs on Windows 11
Type Server Protocol
Documentation and issues for Pylance. Contribute to microsoft/pylance-release development by creating an account on GitHub.
Brown student maps the hidden global labor powering AI
Cunyan Ma’s interactive tool exposes the power structure that extracts low-wage labor from data workers in the Global South to make everyday AI algorithms function.
Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue.
Fixing Tool-Call Accuracy in vLLM
Tool call accuracy is an important part of serving open-weight AI models. When your tool calls aren’t accurate, the model builds up on nonsensical context. We’ve been carrying our own fork of vLLM to hit 100% in tool call schema accuracy with Kimi and DeepSeek. Fortunately, vLLM 0.31 added support for constrained decoding, a technique to guarantee schema-adherence. By enabling it, you can get to 100% schema accuracy with the newer Kimi and DeepSeek models.
iPhone Duo Teardown
We took the Duo all the way down to the gears, followed glowing dust into its hinge, and put its crease-hiding nano-texture under the microscope.
The result of the C++26 DIS ballot
The national bodies didn
This Week
OpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why?
What is “the true cost of a token”?
A 10-year-old CNN outperforms frontier LLMs for skin cancer diagnosis
I am a dermatologist. I tested the ability of GPT-6 Astra and Claude Fable 5.1 to diagnosis skin cancer and found that they were less accurate than I expected. I compared to a 10-year old CNN and to my surprise found that this was superior.
Samsung running a TensorFlow lite model on 960x540 image to track you
Ok, I just checked this, and its literally running a freaking TensorFlow Lite model on 960×540 images with INT8 quantization every couple of seconds in an attempt to figure out what game you are playing. It's literally called "alex.tflite" and its literally AlexNet and seems to follow torchvision.m…
Every AI model has the same "controversial" take on humans
We asked 12 AI models for their most controversial opinion of humans, three times each. 29 of 35 answers were the same one: we care more about belonging than about the truth.
Why is AI generated language so hard to understand?
Abstract page for arXiv paper 2610.29162: Why is AI-generated language so hard to understand?
Attention Is Not What You Need (2025)
Abstract page for arXiv paper 2512.19428: Attention Is Not What You Need
SIMD-accelerated computer vision on a $2 microcontroller
An accelerated FAST feature detector for the ESP32-S3 leveraging 128-bit SIMD instructions, achieving ~2x the performance of the reference implementation.
The 1.5°C goal of the Paris Agreement is no longer viable
UNEP's Emissions Gap Report 2026 warns that exceeding 1.5°C is inevitable and calls for urgent emissions cuts to limit warming and reverse the trend.
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
Security Disclosure
Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention
Jailbreaking the Switch 2
jailbreaking the switch 2 ns2jb is a software-only jailbreak of the switch 2 for the current latest firmware 23.0.1 October 18, 2026 cs Introduction You can get a copy of the exploit from the ns2jb repository. ns2jb is a software-only, tethered jailbreak for the Switch 2. It allows running arbitrary native code as any ordinary sysmodule, and as the built-in fs sysmodule. This lets us run homebrew, reverse engineer and mod Switch 2 games, back up save files off the Switch, and access most of the
Five Qwen3.8-27B models match Fable 5 Using GVS5H Harness
GVS5H: Five Qwen3.8-27B Models Match Claude Fable 5 on LiveCodeBench Hard | Fable 5 Level Coding for a Fifth the Price - or on a Single GPU - slee-persis/GVS5H
Run full iOS 16.5 firmware on Android Devices
https://hackios-web.vercel.app/en
Older
OpenAI’s o1 correctly diagnosed 67% of ER patients vs. 50-55% by triage doctors
Researchers say results mark a really ‘profound change in technology that will reshape medicine’
Accelerating Gemma 4: faster inference with multi-token prediction drafters
An overview of how Multi-Token Prediction (MTP) drafters are making Gemma 4 models up to 3x faster at inference.
A couple million lines of Haskell: Production engineering at Mercury
What it takes to run 2 million lines of Haskell in production at a fintech company serving 300,000 businesses.
Using “underdrawings” for accurate text and numbers
A technique for accurate text and numbers in AI-generated images: generate the layout deterministically, then ask the image model to paint on top.
Should I run plain Docker Compose in production in 2026?
Yes, plain Docker Compose can still run production workloads in 2026—if you close the operational gaps it leaves: cleanup, healing, image pinning, socket security, and updates.
Bun is being ported from Zig to Rust
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one - docs: add Phase-A porting guide · oven-sh/bun@46d3bc2
Computer Use is 45x more expensive than structured APIs
We benchmarked computer use against auto-generated API endpoints on the same admin panel. 53 steps and 551k tokens vs 8 calls and 12k tokens.
ProgramBench: Can language models rebuild programs from scratch?
Abstract page for arXiv paper 2605.03546: ProgramBench: Can Language Models Rebuild Programs From Scratch?
Does Employment Slow Cognitive Decline? Evidence from Labor Market Shocks
Founded in 1920, the NBER is a private, non-profit, non-partisan organization dedicated to conducting economic research and to disseminating research findings among academics, public policy makers, and business professionals.
Google Chrome silently installs a 4 GB AI model on your device without consent
Google Chrome is downloading a 4 GB Gemini Nano model onto users
DeepInfer: High-performance inference framework for DeepSeek models
DeepInfer: High-performance, large-scale inference framework for DeepSeek models - deepseek-ai/DeepInfer
ZAYA1-8B matches DeepSeek-R1 on math with less than 1B active parameters
Who should care If you work with math, science problems, or complex coding tasks and you're looking for something small enough to run locally or cheaply via API, this is worth serious evaluation. The benchmark numbers at 760M active parameters are not normal and the Markovian RSA boost means performance scales with compute budget rather than hitting a fixed ceiling. If you're building agent workflows that need reliable tool calling or multi-step instruction following, look elsewhere fo
Show HN: Apple's SHARP running in the browser via ONNX runtime web
Hi HN, author here. SHARP is Apple's recent single-image 3D Gaussian splatting model (https://arxiv.org/abs/2512.10685). Their reference code is PyTorch + a pretty heavy pipeline; I wanted to see if it could run in a browser with no server hop, so I exported the predictor to ONNX and ran it via onnxruntime-web with the WebGPU EP.What works: drop in an image, get a .ply you can download or preview live, all on your machine — your image never leaves the tab. The model is large (~2.4 GB sidecar) so first load is slow on a cold cache, but inference itself is a few seconds on a recent Mac.Caveats: SHARP's released weights are research-use only (Apple's model license, not the code's). I host the exported ONNX on R2 so thedemo "just works", but you can also export your own from the upstream Apple repo and upload locally.Happy to talk about it in the comments :)
Valve releases Steam Controller CAD files under Creative Commons license
Modders, start your engines.
eMudhra intermediate CA compromise
https://blog.mozilla.org/security/2026/10/20/protecting-fire...https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
Text-to-CAD
An open source harness for generating CAD models. Contribute to earthtojake/text-to-cad development by creating an account on GitHub.
Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem
Tilde turns running AI agents and pipelines on real data into a transactional, auditable operation. Compose GitHub, S3, and Drive as one versioned filesystem. Roll back any run with one command. Every network call audited.
Hackers activate automatic defrosting in supermarket fridges across Europe
https://www.reuters.com/business/retail-consumer/french-supe..., https://www.bbc.com/news/articles/crq5nzxv9q4yo, https://www.lemonde.fr/en/france/article/2026/10/12/french-s...Related:https://www.claroty.com/team82/research/freeze-the-controlle...I think the military commissary's freezers were hacked - https://news.ycombinator.com/item?id=49508506 - Aug 2026 (239 comments)
DeepSeek banned from U.S. federal civilian agencies under new DHS order
https://public-inspection.federalregister.gov/2026-21447.pdf
Removable batteries in smartphones will be mandatory in the EU starting in 2027
Starting in 2027, smartphone batteries will once again be replaceable in the EU. Learn all about the new regulation and what this means for users.
Mistral Large 4
https://docs.mistral.ai/models/mistral-large-4-0