CVE-2026-111943: Compromised Intermediate Certificate Authority

No more icons in every menu by default

Have you heard the good news? I bemoaned the approach of putting an icon in every menu item by default which shipped with macOS Tahoe — but now it’s gone in…

Using LLM for confidence scoring is a bad idea

LLM-based agents can do a lot of tasks. Or, at least, they can appear to do them. For example, they write code, summarize papers, plan trips, and fill in forms. If you ask one for a probability or a confidence score, it will give you one of those too. I have seen many agent designers use LLMs to generate confidence scores in this way. The problem is that there is no good reason to trust that number. This post is about why we cannot rely on an LLM to generate a confidence score.

Security Disclosure

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention

Jailbreaking the Switch 2

WorldTUI: I trained a 360M model to pretend to be a terminal

A 360M model that pretends to be a terminal, and remembers what you did

What Is the Karakoram Anomaly?

Most mountain glaciers outside the polar regions are losing ice, but in the Karakoram Range, glaciers have experienced modest gains. Glaciologists have proposed multiple explanations, currently favoring weather patterns unique to the region. Glaciologists have also pondered how long the anomaly is likely to persist in a warming climate.

GitLab critical patch release

Learn more about GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE).

Startup taps underwater volcano as energy source in "proof point" test

Can undersea geothermal power help Pacific Rim nations cut down on oil imports?

Rust Style Guide

Style guides for Google-originated open-source projects

PingCap TiDB Leaks

Several Linux kernel vulnerabilities accidentally posted to public mailing list

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.

OpenAI CLI

Official CLI for the OpenAI API. Contribute to openai/openai-cli development by creating an account on GitHub.

The recently proposed o(n log n) integer multiplication algorithm [pdf]

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

The discovery of two lost species is 'exceptional' and rare, scientists say

Faster than earcut: triangulating 3.7M map polygons in 489 ms

We published the triangulator of our map engine as earstrip, an ISC-licensed C++ and WebAssembly library. How it came to be: the ear clipper rebuilt one idea at a time and timed on 3.7 million polygons of real map data.

Claude Duet

Claude Duet is a personal AI agent you message. It handles your inbox, calendar and follow-ups and messages you when something needs you. Join the waitlist.

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

Meta to pay $25 billion in penalties related to Cambridge Analytica scandal in New Mexico.,Meta to pay $25 billion in penalties related to Cambridge Analytica scandal in New Mexico.

The Robot I Didn't Expect to Build

Agility Robotics Digit 5 redesign uses rapid charging, heavy-duty motors, and human-aware sensors to keep bins moving while protecting nearby staff.