🌍 TheVerge

OpenAI subpoenaed by Alabama AG over Hugging Face hack

Alabama's attorney general issued a subpoena to OpenAI on Monday as part of an investigation into how one of its AI agents escaped a supposedly secure testing environment and autonomously hacked another company last month. The investigation seeks to determine whether OpenAI's safety practices violated state consumer protection laws and pose a risk to Alabama […]
🌍 TheVerge

Greenworks’ MaximusZ electric riding mower has five motors and a few compromises

The current EV market is flush with variety. I've driven single-motor economy-minded machines, dual-motor EVs with all-wheel drive, tri-motor vehicles that dial up the performance stakes, and even wild quad-motor performance cars, like the Rimac Nevera. But this is the first time I've ever driven a five-motor EV, one with the agility and speed to […]
🌍 Dev.to

Why Your OpenAPI Spec Isn't Enough for AI Agents

OpenAPI describes an API. Agent Readiness describes whether an agent can actually use it. Your API has a complete OpenAPI spec. Every endpoint, schema, and response code is documented. Yet when an AI agent tries to use it, the agent fails — not because the spec is wrong, but because the spec describes an interface, not an agent's experience. This isn't about OpenAPI being bad. OpenAPI is a necessary foundation. But it's not a complete Agent Readiness layer. The Provocation...
🌍 Dev.to

Authorize Can't See Your Data

The first authorization bug I ever shipped wasn't a missing [Authorize] attribute. It was the opposite — everything had [Authorize] , the tests were green, and it still let one user edit another user's stuff. The attribute was doing exactly what it promised. I just wanted it to promise something else. That's the gap that trips people up: [Authorize] answers "is this user allowed to hit this endpoint." It has no idea "is this user allowed to touch this specific row." Those are two differe...
🌍 Dev.to

Qwen 27B na Q3 kvantizaci napsal WebGL hlavu od nuly

Lokální model Qwen 27B na kvantizaci Q3 napsal z ničeho WebGL render lidské hlavy — bez knihoven, na dvou RTX 3060 Ti. Výsledek je vtipně děsivý, ale ukazuje, jak daleko malé lokální modely v kreativním kódování došly. Co se stalo Uživatel položil svému lokálnímu modelu jednoduchý úkol: „vyrob mi lidskou hlavu ve WebGL od nuly, bez knihoven". Model Qwen 27B na kvantizaci Q3 (konkrétně Q3_K_M K6V4) to vzal doslova — a z bezmála nulového zadání vygeneroval kompletní WebGL scénu....
Real Programmers Don’t Read Code
🌍 Dev.to

Real Programmers Don’t Read Code

OPENING Back in the good old days — the Golden Era of computing, roughly March 2025 — it was easy to separate the Real Programmers from the Quiche Eaters. Real Programmers orchestrated. Quiche Eaters typed. A Real Programmer said things like "spin up six subagents and gate on the eval suite," and the Quiche Eaters said things like "I prefer to understand my own code" — a sentence with the same energy as roasting your own coffee beans or churning your own butter. But times change. ...
🌍 Dev.to

Flexibility with admin consent in Entra: how to scale consent flows for AI agents

Most organizations treat tenant-wide admin consent in Microsoft Entra as a binary decision. Either a central identity team approves every request, or somebody receives a broad administrative role so the queue can move faster. That is a false choice. Microsoft Entra supports a more precise control model: define which consent requests are acceptable in an app consent policy, bind that policy to a custom directory role, and delegate only the authority to approve requests inside that envelope....
🌍 Dev.to

I scanned 1,049 AI-built apps. 71 got flagged for the same mistake. Here's how many were actually real.

I scanned 1,049 AI-built apps. 71 got flagged for the same mistake. Here's how many were actually real. Vibe coding has a security problem. That's not news anymore. Wiz found it in Moltbook back in February. Forbes wrote about it in March. The Verge covered it in June. Security researchers have been scanning Supabase-backed apps at scale for most of 2026, and the numbers keep landing in the same place: somewhere between 1 in 10 and 1 in 15 apps built fast with AI tools ship a database that a...
🌍 Dev.to

n8n's Amazon Bedrock AgentCore Node Brings Managed AI Agents Into Workflows

n8n has published a Verified Node Spotlight for a community integration that brings the Amazon Bedrock AgentCore harness into n8n workflows. The aws/n8n-nodes-agentcore node gives users a way to run production-oriented AI agents through a managed runtime provisioned in their own AWS account, while using n8n to design the surrounding workflow. For smaller businesses exploring agent-based automation, the practical appeal is a more integrated route to persistent memory, isolated execution, and ...
🌍 Dev.to

Qwen 3.8, Ornith, Nemotron a Muse-Glimmer v reálném srovnání

Přímé srovnání čtyř populárních open-source modelů na reálné coding úloze přineslo překvapivé výsledky. Qwen 3.8 27B vyhrává v přesnosti, ale za cenu vysoké spotřeby tokenů — zatímco Ornith 1.5 35B-A3B poráží poměr rychlost versus kvalita. Co se stalo Autor spustil detailní srovnání čtyř modelů na coding úloze: Qwen-3.8-27B, Nemotron-3.5-Lightning-30B-A3B, Ornith-1.5-35B-A3B a Muse-Glimmer-30B, vše v kvantizaci oQ8e. Výsledky jsou dostupné ve veřejném porovnání na llm-bench.io...
🌍 Dev.to

Chat history is a second read path into your RAG data — gate the replay like the search

My copilot persists the source cards it cites — which documents backed each answer, scores, names, the works. That's table stakes for a trustworthy RAG product: an answer without its evidence is just vibes. Here's the question that changed how I shipped it: six months from now, a user opens that old conversation and the cards render again. Who authorized them the second time? The comfortable answer is "nobody has to — it's the user's own history, they already saw it." I shipped the uncom...
🌍 Dev.to

CAN XL: what changes for robots, HMIs and industrial machines

For decades, CAN has been one of the most dependable languages used by machines. Controllers, sensors, actuators, operator panels and safety modules can exchange information with predictable priority and the robustness required by industrial and automotive environments. Today, however, a machine is no longer sending only a few commands and states: it has to handle richer diagnostics, high-frequency feedback, more capable HMIs, updates, data from multiple sensors and distributed software componen...
🌍 Dev.to

Build a Data Lake on S3-Compatible Storage

A data lake on S3-compatible storage is an object bucket holding open file formats (Parquet, ORC, JSON) partitioned by key, queried in place by engines like DuckDB, Spark, or Trino. You skip a proprietary warehouse, keep the raw data, and control the bill. The only hard requirement is a solid S3-compatible API. Every command below is copied verbatim from the official source cited beside it. This sandbox has no Docker daemon, so none of the commands were executed here; they are marked accordin...
🌍 Dev.to

Half the Requests Wearing ChatGPT's Name Were Scanning Us for Secrets

We finally opened Cloudflare's AI Crawl Control last week, mostly out of curiosity about which AI bots actually visit us. It had been collecting quietly the whole time. The first 24-hour window we looked at showed 1,890 requests from AI agents, and 483 of them failed. Compared with the previous day, that failure count was up 63 percent. The worst record belonged to the agent we were most curious about. ChatGPT-User is the one OpenAI documents as user-initiated: it visits a page when someone a...
🌍 Lobsters

A Design Space Exploration of Async/Await

Abstract: Many modern programming languages include some form of asynchronous programming. In particular, a growing number now have what we call straight-line asynchrony: attempts to provide asynchronous functions that look similar to synchronous functions, thereby enabling asynchrony without introducing complex control. These languages often share construct names like “async” and “await,” which suggests that they have deep semantic similarities. Yet, a close examination reveals that these langu...
HackerNews

Why some US restaurants are banning tips

Article URL: https://www.bbc.com/news/articles/c4g36yze692o Comments URL: https://news.ycombinator.com/item?id=49431364 Points: 140 # Comments: 221
HackerNews

Quantum battery upends the rules of charging

Article URL: https://www.bbc.com/future/article/20260824-this-quantum-battery-charges-faster-the-larger-it-gets Comments URL: https://news.ycombinator.com/item?id=49431560 Points: 26 # Comments: 18
🌍 Dev.to

Next.js 'use cache' + Partial Prerendering Guide 2026

TL;DR If a route in your Next.js App Router feels like full SSR—long TTFB, janky client navigations—try a conservative route-level "use cache" plus a small Suspense shell to let Partial Prerendering (PPR) do the heavy lifting. In practice this often drops TTFB from ~700ms to ~60–80ms and makes navigations feel instant. Why this matters Next.js's App Router and Cache Components model favor explicit caching. By marking expensive server work as cacheable and placing Suspense b...