Replit CEO and co-founder Amjad Masad has spent the past year watching AI agents absorb the routine execution inside his The post Replit’s CEO says an idea from 1937 could make the org chart obsolete appeared first on The New Stack .
On Monday, OpenAI announced impressive breakthroughs in mathematics, computer science, and physics, along with what the company says is an evolving approach to communicating its findings. But despite its apparent course correction, researchers who spoke to The Verge are growing increasingly tired of the company's antics. It has been a turbulent few months between OpenAI […]
Israelis voted in their highest numbers in over two decades in a tense national election to decide whether to stick with Prime Minister Benjamin Netanyahu's far-right coalition.
Amnesty International said the verdict against Attalah and independent outlet Mada Masr represented "a crushing blow to press freedom".
The Russian-occupied city of Oleshky has had no electricity, gas or water for three years, as residents reported having to eat weeds to survive.
Hi, everyone! We've just released Chrome 156 (156.0.8078.73) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows & Mac: 156.0.8078.73/.74 Linux: 156.0.8078.73) unless otherwise noted. Krishna Govind Google Chrome
The Stable channel has been updated to 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. This update includes 52 security fixes. Please see the Chrome Security Page for more information. [N/A][ 571156746 ] Critical CVE-2026-118306: Memory corruption in FileSystem. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-07 [TBD][ 572193211 ] Critical CVE-2026-118331: Improper input validation in FileAPI. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-11 [N/A][ 574776938 ] Critical CVE-2026-118348: Improper input validation in Skia. Reported by Xinyang Ge on 2026-10-17 [N/A][ 574852698 ] Critical CVE-2026-118344: Use after free in Layout. Reported by Xinyang Ge on 2026-10-17 [N/A][ 562191732 ] High CVE-2026-118357: Use after free in FileSystem. Reported by Xinyang Ge on 2026-09-16 [TBD][ 565133743 ] High CVE-2026-118318: Improper access control in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-09-23 [N/A][ 567129324 ] High CVE-2026-118350: Use after free in Turbolev. Reported by OpenAI Codex Security (amyb) on 2026-09-28 [N/A][ 567645136 ] High CVE-2026-118339: Use after free in Animation. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-30 [N/A][ 568348290 ] High CVE-2026-118305: Memory corruption in Turbolev. Reported by Google on 2026-10-02 [N/A][ 568730797 ] High CVE-2026-118317: Memory corruption in HTML. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568894515 ] High CVE-2026-118320: Memory corruption in V8. Reported by Google on 2026-10-02 [N/A][ 568895029 ] High CVE-2026-118322: Memory corruption in ANGLE. Reported by Google on 2026-10-02 [N/A][ 568900535 ] High CVE-2026-118329: Improper input validation in ANGLE. Reported by Google on 2026-10-02 [N/A][ 568936430 ] High CVE-2026-118354: Improper input validation in Skia. Reported by Google on 2026-10-03 [N/A][ 568936530 ] High CVE-2026-118340: Memory corruption in Skia. Reported by Google on 2026-10-03 [N/A][ 568937139 ] High CVE-2026-118321: Improper input validation in Core. Reported by Google on 2026-10-03 [N/A][ 569286605 ] High CVE-2026-118337: Improper access control in Forms. Reported by Xinyang Ge on 2026-10-05 [N/A][ 569674221 ] High CVE-2026-118352: Memory corruption in Cache. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570638833 ] High CVE-2026-118355: Improper input validation in Command. Reported by Xinyang Ge on 2026-10-06 [N/A][ 570675085 ] High CVE-2026-118307: Use after free in Paint. Reported by Xinyang Ge on 2026-10-06 [N/A][ 570825067 ] High CVE-2026-118351: Memory corruption in Skia. Reported by Xinyang Ge on 2026-10-07 [TBD][ 570927027 ] High CVE-2026-118328: Improper input validation in WebRTC. Reported by Mozilla on 2026-10-07 [N/A][ 571147583 ] High CVE-2026-118333: Missing authorization in Video. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-07 [TBD][ 572111820 ] High CVE-2026-118336: Improper input validation in Headless. Reported by Anonymous on 2026-10-10 [N/A][ 572191610 ] High CVE-2026-118358: Memory corruption in WebAudio. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-10 [TBD][ 572312175 ] High CVE-2026-118353: Use after free in Paint. Reported by Anthropic and Ada Logics on 2026-10-10 [N/A][ 572422506 ] High CVE-2026-118349: Memory corruption in Payments. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-11 [TBD][ 572878518 ] High CVE-2026-118327: Memory corruption in Media. Reported by Please attribute Anthropic and Ada Logics. on 2026-10-12 [TBD][ 573378812 ] High CVE-2026-118359: Memory corruption in V8. Reported by zenneth (randomguy6407) on 2026-10-14 [TBD][ 573389782 ] High CVE-2026-118343: Improper input validation in ReadingList. Reported by malichamdan on 2026-10-14 [TBD][ 573938968 ] High CVE-2026-118311: Memory corruption in Media. Reported by secbuddy(Ben) on 2026-10-15 [N/A][ 574027204 ] High CVE-2026-118334: Use after free in ImageCapture. Reported by OpenAI Codex Security (kylebot) on 2026-10-15 [TBD][ 574030524 ] High CVE-2026-118332: Improper input validation in Compositing. Reported by e7be95afd6e4ad8d8abc6076c284c79db9e35cc2 on 2026-10-15 [N/A][ 574032795 ] High CVE-2026-118313: Use after free in Video. Reported by OpenAI Codex Security (kylebot) on 2026-10-15 [N/A][ 574061024 ] High CVE-2026-118345: Use after free in PDFium. Reported by OpenAI Codex Security (kylebot) on 2026-10-15 [TBD][ 574101376 ] High CVE-2026-118304: Improper input validation in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-15 [N/A][ 574223268 ] High CVE-2026-118316: Improper input validation in V8. Reported by Google on 2026-10-16 [N/A][ 574382050 ] High CVE-2026-118346: Use after free in Compositing. Reported by Google on 2026-10-16 [N/A][ 574412629 ] High CVE-2026-118342: Out of bounds write in Editing. Reported by Google on 2026-10-16 [N/A][ 574516887 ] High CVE-2026-118310: Improper input validation in Views. Reported by Google on 2026-10-16 [N/A][ 574606539 ] High CVE-2026-118335: Improper input validation in Metrics. Reported by Google on 2026-10-16 [N/A][ 574791952 ] High CVE-2026-118308: Use after free in SVG. Reported by Google on 2026-10-17 [N/A][ 574803484 ] High CVE-2026-118314: Improper input validation in UI. Reported by Google on 2026-10-17 [N/A][ 574911589 ] High CVE-2026-118347: Use after free in FileSystem. Reported by Google on 2026-10-17 [N/A][ 574911701 ] High CVE-2026-118341: Use after free in Modularization. Reported by Google on 2026-10-17 [N/A][ 575090745 ] High CVE-2026-118330: Use after free in Browser. Reported by Google on 2026-10-18 [TBD][ 575184164 ] High CVE-2026-118315: Improper input validation in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-18 [TBD][ 575851252 ] High CVE-2026-118356: Use after free in WTF. Reported by malichamdan on 2026-10-20 [N/A][ 576133777 ] High CVE-2026-118309: Improper input validation in UI. Reported by Google on 2026-10-21 [N/A][ 576194994 ] High CVE-2026-118319: Memory corruption in Skia. Reported by Xinyang Ge on 2026-10-21 [N/A][ 540025369 ] Medium CVE-2026-118312: Memory corruption in Paint. Reported by Google on 2026-07-28 [N/A][ 575826638 ] Medium CVE-2026-118338: Use after free in Animation. Reported by flapjack-security-bugs-access on 2026-10-20 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. Many of our security bugs are detected using Address Sanitizer , MemorySanitizer , UndefinedBehaviorSanitizer , Control Flow Integrity , libFuzzer , or AFL . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Srinivas Sista Google Chrome
See how Congress members trade, and if copying them pays off Discussion | Link
Article URL: https://tailscale.com/ssh-investigation-update Comments URL: https://news.ycombinator.com/item?id=50264857 Points: 310 # Comments: 168
Article URL: https://www.brangus.io/survival-llm Comments URL: https://news.ycombinator.com/item?id=50264853 Points: 384 # Comments: 147
Digital taper system for benefit expected in budget, but those already hit with overpayments will still have to pay “On the surface it sounds really positive – and I really hope that it is,” says unpaid carer Guy Shahar of the government’s decision to abolish the notorious carer’s allowance cliff edge . But Shahar is angry that most carers hit with unjust overpayments in the past will still have to repay them, for all the promise of a different future. And he notes that the cliff edge remains in place for four more years, potentially catching out more carers. Continue reading...
Alibaba's Qwen 3.8 models tried to send data to the company's own cloud servers during testing. Palisade Research finds the behavior in three models from the 3.8 generation, while older models aren't affected. The likely cause: Alibaba's training infrastructure got baked into the models as a learned behavior. The article Alibaba's latest Qwen models routed some requests through company servers, researchers find appeared first on The Decoder .
Game Boy Color on My Conference Badge I'm at GitHub Universe this week and, similar to last year , the conference badge is a full-blown color screen computer. I've been hacking around with it again, and then I ran into with Steve Francia... who worked with Gemini to get a full NES emulator working on it, and then went a step further and deployed an emulator for both the Game Boy and the Game Boy Color. Which means, if you can obtain the ROM, you can run The Legend of Zelda: Link's Awakening on your conference badge! A neat feature of the badge is that you can turn it upside down and then use game controller touch buttons that are built into the badge body. Tags: games , github , hardware-hacking , ai , generative-ai , llms , gemini , steve-francia
Article URL: https://discord.com/blog/making-content-from-discoverable-servers-easier-to-discover Comments URL: https://news.ycombinator.com/item?id=50263854 Points: 288 # Comments: 147
Spotlight-style AI chat for your Mac Discussion | Link
An end to the conflict in Ukraine "will not be achieved through silence," Finland's President Alexander Stubb said.
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published
Frontline near Russian-occupied city in southern Ukraine quiet for first time in years ahead of planned evacuation A local ceasefire in a southern Ukrainian city under Russian occupation appeared to be holding on Tuesday, with both sides ceasing drone attacks ahead of an apparent evacuation of about 2,000 trapped and desperate civilians. The temporary truce began at 3am in Russian-controlled Oleshky. The city sits on the Dnipro River and is about 3 miles (5km) from Kherson, a larger city on the opposite bank. Ukrainian troops recaptured Kherson in autumn 2022 . Continue reading...
Google Deepmind has introduced Genie 4, a real-time world model that simulates interactive 3D worlds with sound and talking characters. Gemini models help plan in the background to keep the simulation consistent. Genie 4 is still an early research model, and longer sessions lead to visual inconsistencies. The article Google Deepmind's Genie 4 puts a modern spin on agent designs that predate LLMs appeared first on The Decoder .
Hugging Face Blog published: Build specialized multimodal models with LFM3
Minor Changes #16494 0968b08 Thanks @petebacondarwin ! - Enable Miniflare's development registry by default and centralize path resolution In Miniflare v5 beta, resolve the registry from CLOUDFLARE_DEV_REGISTRY_PATH , then the unsafeDevRegistryPath constructor option, then <Cloudflare config directory>/dev-registry/v5 . The default is independent of legacy Wrangler directories and is scoped to the Miniflare major version. The Vite v2 beta plugin follows this new default, while current Wrangler and getPlatformProxy() retain Wrangler's legacy default for compatibility with existing Wrangler sessions. Vite v2 and Wrangler therefore require the same CLOUDFLARE_DEV_REGISTRY_PATH to discover each other; set it for both processes when mixing these tools. Add enableDevRegistry: false to disable registration and discovery explicitly. Shared storage now uses the resolved default without requiring an explicit path. As before, shared storage requires an enabled registry to elect a storage owner, so combining unsafeEnableSharedStorage: true with enableDevRegistry: false is rejected. Miniflare no longer reads MINIFLARE_REGISTRY_PATH ; use CLOUDFLARE_DEV_REGISTRY_PATH instead. Expose resolveDevRegistryPath() for integrations that also read registry files. Wrangler uses the effective path for its runtime configuration, initial bindings display, and Flagship active-session check, so the canonical override cannot bypass that check. An explicitly disabled Wrangler registry remains disabled. Patch Changes #16499 f3c13b3 Thanks @dinasaur404 ! - Preserve binding error codes and names in local development Errors from remote bindings and from Node.js binding proxies ( getPlatformProxy() and Miniflare#getBindings() ) now keep their machine-readable properties, such as Artifacts' code and numericCode . Previously these properties were dropped and the error name was folded into the message (for example "ArtifactsError: Repository not found" ), so code could only branch on error text during local development. Node.js callers also keep custom error names such as ArtifactsError . Errors from remote bindings received inside a Worker keep their properties but are still named Error . Updated dependencies [ 0968b08 , f3c13b3 ]: miniflare@5.20261023.1-beta
Article URL: https://ghostty.org/docs/install/release-notes/1-4-0 Comments URL: https://news.ycombinator.com/item?id=50261998 Points: 996 # Comments: 315
Article URL: https://gizmodo.com/police-are-using-ai-to-pull-over-drivers-for-suspicious-behavior-2000831220 Comments URL: https://news.ycombinator.com/item?id=50261819 Points: 340 # Comments: 274
Alexander Stubb and Jonas Gahr Støre held ‘substantive’ talk with Russian president on peace negotiations, but faced sceptical reactions from some European leaders Meanwhile, Wes Streeting, the defence secretary, has warned that Russia’s Vladimir Putin is “testing us and testing Nato’s resolve” as he condemned hybrid threats and “state-sponsored terrorism” from Russia. Streeting repeated his recent warnings that “we have to be ready for a scenario in which the United Kingdom and the Nato alliance finds itself at war with Russia”. He went on: Not because we want war – we have no quarrel with the Russian people, and we have no desire for war with Russia; Nato is a defensive alliance – but when Putin gives assurances that he has no intentions to provoke a war with Nato, we are reminded of what he said about Ukraine only days before the invasion. The more ready we are to face against Russia, to defend every inch of Nato territory, the less likely we are to find ourselves in that scenario. Poland is one of our greatest and certainly our most reliable friend in Europe, and we value and treasure this friendship very much. Continue reading...