Coldframe honeypot pretends to be a supermarket fridge controller
hedgerow-dev’s MIT-licensed Coldframe decoys Danfoss AK-SM 800A and Dixell XWEB refrigeration supervisors, tagging known public CVEs after European remote-defrost incidents.
The archive
Every article, newest first. Follow a topic to narrow the reading list or search the full archive.
Asahi Linux opens M3 support and ships partial Thunderbolt
Asahi Linux’s progress report 7.3 makes M3 Macs generally available, ships early Thunderbolt/USB4, draws a first M3 GPU triangle, and moves the project…
AI system proves an 18-year-old quantum computing conjecture, lab says
Physical Superintelligence says a system running an unreleased Anthropic model proved the 2008 Aaronson–Ambainis conjecture, and Lean checked it. Outside experts have yet…
Fake restaurant ordering sites copy real menus to steal cards and bank codes
InfoHawk found 820 look-alike sites for 35 US restaurant chains that proxy the real menu live, then swap in a fake checkout to…
Claude Code ‘don’t ask again’ can leave secrets on public GitHub
Apiiro counted 2,539 secrets in 1,994 public GitHub repos after Claude Code saved approved shell commands, credentials included, in .claude/settings.local.json.
Alpine Linux ships OpenSSH fix for musl password login bypass
OpenSSH on Alpine and other musl systems without PAM can accept logins to * password accounts. Alpine and OpenSSH 10.6p2 shipped fixes on…
DeepMind’s AI agents cut computing work in legacy RSA test
DeepMind reports AI-assisted gains against old RSA signatures and theoretical factoring advances. The papers say modern 2048-bit RSA is not threatened.
OpenAI releases GPT-6 Cyber to vetted security teams
GPT-6 Cyber reaches vetted security teams. We examine its Linux and Firefox findings, API pricing, access rules and what its safety tests do—and…
ChatGPT dashboard would count brand mentions, observer reports
A reported ChatGPT dashboard would count brand mentions and clicks. We checked the original X thread, its limits and the Shopify tools businesses…
Nous Research’s Arete-27B retrains Qwen’s politics with 53 million tokens
Nous Research fine-tuned Alibaba’s Qwen3.8-27B on about 53 million tokens and cut answers adopting Beijing’s official line from 22% to 0.9% on its…
Agent memory works best when it forgets the right things
Anthropic’s agent-memory research separates transcripts, notes, representations and injected context—and shows why selective consolidation matters more than storing everything.
A cheaper model can approach a frontier judge—if it knows when to escalate
Hightouch reports that pairing a fast decision model with selective Opus review reached near-frontier accuracy at more than four times lower cost. The…
Libghostty 1.0 turns terminal emulation into shared infrastructure
Ghostty’s terminal emulator is now a portable C library with a stable ABI. The release is a case study in making infrastructure dependable…
AI is dramatically accelerating AI research
If acceleration compounds, the naive extrapolation implies superintelligence within a year
Firecracker escape research is a reminder that isolation is a system property
PWN Research chained host-memory access with live Firecracker thread takeover to show guest-to-host execution. The defensive lesson extends beyond one microVM component.
GitHub rebuilt Git storage for thousands of agents pushing at once
Project Rubicon separates immutable Git objects from reference coordination, using Azure Blob Storage and a replicated Ref-CAS log to target thousands of writes…
RIP Cybertruck
The decision to halt production of Tesla’s polarising polygonal pickup marks the end of an error.
Gemini Omni 1.2 Flash bets on editable 15-second video at a lower price
Google’s latest generative-video release extends clips to 15 seconds, adds multi-turn editing and stronger reference adherence, and cuts the listed price by 30%.