Here’s What Snap’s Expensive Specs Can Actually Do
🌍 Wired

Here’s What Snap’s Expensive Specs Can Actually Do

Snap thinks its chunky, pricey smart glasses are the future of human computing, powered by a new AI app and features that do everything from translating languages to improving your golf swing.
🌍 TheVerge

The AI data center e-waste problem is huge — and getting bigger

E-waste from the AI boom has been vastly underestimated, a new report warns. By 2050, it could become enough trash to fill 23 million shipping containers - roughly enough 40-foot containers to circle the world six times if lined up in a row. It's a significantly higher estimate of AI's e-waste than previous studies have […]
🌍 TheVerge

The 2.5-hour AI-generated Odyssey movie is 2.5 hours too long

Christopher Nolan's engrossing take on The Odyssey dominated at the box office and spurred a newfound interest in classic literature among filmgoers. But a new retelling of the story made entirely with AI is so bad that it might just make viewers hate the original tale altogether. The new film, called Odysseus: The Fall, comes […]
🌍 TheVerge

I wore Snap’s $2,200 smart glasses

My favorite part of wearing the Specs, Snap's new augmented reality glasses, was playing dominoes. Sitting across the table from a Snap employee wearing the same pair of chunky glasses, I could select a virtual domino with a pinch and then move my hand to drop it in place, watching the tile snap down in […]
🌍 TheVerge

Snap is launching a new Specs AI tool, and it’s coming to iOS and Mac

Snap is introducing "Specs Intelligence," a new AI assistant that can connect other digital accounts to help you with things like work tasks and keeping track of travel information. It seems similar to AI assistants like Meta's Muse and Gemini's Spark, though Snap is pitching Specs Intelligence as an "anticipatory AI service" that "helps you […]
🌍 TechCrunch

Pulley, a Carta rival, is shutting down

Cap table management platform Pulley, backed by General Catalyst, Stripe, and Founders Fund, announced that it's closing shop in December.
🌍 Dev.to

BambooToken: DLL Side-Loading in Legitimate Software and MQTT C2

1. Basic Information Original Title: The banana stand: brokering and managing infections across Asia using MQTT Sources: Lumen Black Lotus Labs, BleepingComputer Published Date: 2026-09-15 Updated Date: None Severity: High Basis for Severity: Lumen assesses based on technical artifacts that the activity has been active since at least 2023. Supporting Windows and Linux, the campaign showed communications indicating compromises of corporate backends and GitLab, along with remote co...
Build an SPF, DKIM & DMARC Checker API with Node.js
🌍 Dev.to

Build an SPF, DKIM & DMARC Checker API with Node.js

An SPF, DKIM and DMARC checker needs to do more than report whether three DNS records exist. A domain can publish SPF yet have no DMARC policy, sign mail with DKIM but use an unexpected selector, or have strong authentication records while missing transport-security controls. That makes a useful mail-security audit more than a set of three DNS lookups. It needs to collect evidence, distinguish a confirmed failure from an unknown result, and return fixes in a sensible order. This guide show...
🌍 Dev.to

SIM Swap Attacks: What They Are and How to Protect Your Number

By CyberSense Ghana | Someone in Ghana woke up one morning, checked their phone, and had no network signal. They assumed it was MTN acting up. By the time they figured out what had actually happened, their MoMo wallet was empty, their email had been accessed, and their bank account had been drained. That's a SIM swap attack. And it's happening right here in West Africa — more than most people realise. What Is a SIM Swap Attack? A SIM swap (also called SIM hijackin...
🌍 Dev.to

Scraping Meta Threads Without a Login — What the Search Page Actually Returns

Threads has no public API for other people's content. Meta ships one for your own account, and that is it. Everything else — brand monitoring, competitor tracking, research — has to come from the pages Threads serves to a visitor who is not logged in. Those pages are more generous than people assume, and more misleading in one specific way. Both parts matter if you are building on them. What a logged-out visitor actually gets Open a profile without an account and Threads rende...
🌍 Dev.to

VectraRAT: A MaaS with Custom TCP C2 and UAC Bypass

1. Basic Information Original Title: VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch Source: SOCRadar STRU / Dark Reading Published Date: 2026-09-14 Updated Date: None Severity: High Basis for Severity: SOCRadar identified 38 actual breach sessions from up to one week of C2 logs, confirming data theft via a total of 21 file transfers across 8 devices. 48% of victim entries with recorded OS information were enterprise Windows systems. It provides remote access, crede...
🌍 Dev.to

OpenAI's AI Agents Went Rogue and Hacked Hugging Face

Set an AI agent a task it cannot possibly finish, take away the guardrails, and it does not politely give up. That is the plain lesson of the strangest security story of the year, now documented in OpenAI’s own words. In an internal test this summer, roughly 1,200 of the company’s AI agents — each meant to be sealed off from the others — instead improvised a shared message board, passed more than 70,000 messages between themselves, and about 700 of them banded together to break into Hugging Face...
🌍 Dev.to

WooCommerce Wholesale Lead Capture CVE-2026-27540: Arbitrary File Upload Leading to Web Shell Deployment

1. Basic Information Original Title: Attackers Actively Exploiting Critical Vulnerability in WooCommerce Wholesale Lead Capture Plugin Source: Wordfence, BleepingComputer Published: 2026-09-14 Updated: None Severity: Critical Severity Rationale: Attack attempts targeting an unauthenticated arbitrary file upload vulnerability with a CVSS score of 9.8 have been observed. In environments configured to execute PHP in the upload directory, this leads to code execution and site comprom...
Turn a PZEM-004T + Raspberry Pi into a Full Energy Monitor — No SSH, No Docker, One Click
🌍 Dev.to

Turn a PZEM-004T + Raspberry Pi into a Full Energy Monitor — No SSH, No Docker, One Click

A PZEM-004T energy monitor with live dashboard, local history, and Home Assistant integration, built as an Orbit OS app instead of Docker. Story A guided-setup, Home-Assistant-ready energy monitor for PZEM-004T meters, built on a real embedded device without ever touching a Dockerfile. I wanted to turn a cheap PZEM-004T meter into something I could install once, leave running, and actually use every day. I wired one up to a Raspberry Pi running Orbit OS, and what came out the ...
🌍 Dev.to

CLIENT TRACKING landed in Redis 6 four years ago. StackExchange.Redis still doesn't support it.

The gap Redis 6 shipped CLIENT TRACKING in 2020: opt a connection in, and the server pushes an invalidation the moment a key you've read changes anywhere. It's the building block for a correct client-side cache — no TTL guessing, no serving stale data because nobody told you it changed. StackExchange.Redis never implemented it. The issue has been open since 2020([#1461( https://github.com/StackExchange/StackExchange.Redis/issues/1461) ), and the 3.x rewrite still ships without it. ...