Linkstream

the intensity of the push to /replace/ ECC with PQC instead of hardening puts doubt on the security of the whole PQ setup https://x.com/hashbreaker/status/2079577558895726668?s=46

Bernard Arnault is no saint but this is a work of art https://x.com/lulumeservey/status/2081583334434468262 (translation), https://x.com/LVMH_Presse/status/2081404246751109150 (original in french)

PSA: do tell your sysadmin: nginx CVE-2026-42533 — every release since 2011 affected, pre-auth RCE exploit with ASLR bypass available 🤯

daily PSA: DISABLE GIT AUTOSYNC IN YOUR EDITOR NOW. There is an ongoing spray of attacks on (public but also private once somebody from your org gets infected) repositories that try to push code with exploits that fire once landed on your machine (malicious VSCode configs, etc)

maybe claude choosing to rewrite libraries by default has a point lol https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack

https://fixupx.com/andreamatranga/status/2081292444268728505?s=20 i wonder if one can scale this a bit and make a flying Strandbeest (the walking kinetic sculpture)

https://github.com/xoreaxeaxeax/skitter-creek-bath-salts deeply leaky abstractions

https://github.com/alex193a/Root-My-Pixel local root on Google Pixel phones incl pixel10, incl fairly recent kernel versions. ppl say that includes latest but i don't have a pixel so did not check

ahem. https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/

cpu not found, starting software emulation https://x.com/lithos_graphein/status/2092733478085304609?s=20

mikrotik ssh rce. these days, it's generally not a good idea to have ssh to anything accessible from the internet https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

whoaaa such nostalgia: https://webliero.com

um, ahem, AlphaZero for text. Training language models without language. Loosely, natural data mixes contingent information (facts about our world) with universal predictive structure (composition, repetition, recursion, etc…) that are not specific to our world. Our self-play approach only supplies the latter. However, if it produces universal structure efficiently, and if universal structure is the bottleneck, predictable scaling on natural data follows. https://arxiv.org/abs/2609.30063 https://github.com/acowsik/self_play_pretraining

cursed font factory https://bastardica.mitpit.com/

i started doing exactly this (models editing its own context) as a natural extension of samplers in Nov'25 but couldn't afford going all in full time. usually i am excited when somebody does what i didn't finish but not today 💔 there is still stuff they didn't went into like multipass/viterbi-like sampling still, still this is kinda similar in terms of empowering the models to giving them access to edit their own harness but more powerful https://fixupx.com/arankomatsuzaki/status/2105181276714242518?s=46