Front-page articles summarized hourly.
Jeff Johnson notes that Mail app contacts iCloud’s CloudKit endpoints even with non‑iCloud accounts and iCloud disabled. In tests, cloudd and nsurlsessiond reach gateway.icloud.com/ckdatabase/api/client/query/retrieve and /record/save over TCP/UDP, suggesting protocol fallback. Traffic can’t be inspected due to certificate pinning. He questions what Mail queries or saves in CloudKit and why Apple needs to know when sending mail. He plans to block these connections with Little Snitch and only disable the blocks for iCloud sync testing in development.
In May 2026, Utah produced more power from solar than from any other source for the first time, as wind and solar generation surge in the state’s energy mix; experts expect the trend to continue despite cuts to federal clean energy incentives.
The Drive’s Joel Feder interviews Flock Safety CEO Garrett Langley about a wrongful stop tied to AI license-plate reads and NCIC data. Langley acknowledges errors and cites fixes—suppression, expirations, and local cross-checks—and calls for NCIC modernization. He says Flock is a data custodian with MFA and auditing, not data owner, and only high-confidence alerts trigger stops. He envisions deploying in all 17,000 U.S. cities to deter opportunistic crime, noting the system solved over a million crimes last year, while urging state-level guardrails rather than bans.
The piece traces Hollywood’s migration of production from Los Angeles to tax-incentive hubs like London, Atlanta, Vancouver, and Prague, driven by blockbuster budgets and IP franchises. Location choices follow incentives, causing sets to increasingly resemble unrelated cities, creating a disconnect between on-screen settings and filming locales. Most audiences reportedly cannot tell whether a film was shot in LA or elsewhere, raising questions about the impact on quality. The author introduces 'cost disease'—rising costs, unpaid internships, outsourcing, and potential AI replacement—that undercuts LA’s production ecosystem, spurring grassroots 'Stay in LA' activism.
Bill Marler notes Taylor Farms rewrote its Cyclospora statements four times in sixteen days without explaining changes at the Doctor Mora, Mexico plant after 2013 or why ~2,000 negative tests matter. He traces the July recall, a false positive, and FDA updates, arguing the 2013 environmental assessment and hazard analysis remain unaddressed. Negative tests don’t prove safety when detection methods aren’t foolproof. He calls for the company’s hazard analysis, water testing records, adjacent land reviews, the 2013 file, and Congressional production of documents.
Open-source devtools make software personalization practical via agents. Engineers increasingly customize and even write programs for themselves, aided by agents that can automatically synchronize changes with upstream releases. Two prompts embedded in an agent can edit software: fetch upstream changes and rebase local work; and load a tool into a project to process changes as they’re created. The Shelley example shows integrating a diff-minimizer (meat) into an editor workflow, pre-processing commits in the background. For single-user software, complex config/plugin systems fade; open-source agents enable direct source-code personalization, unlike Claude Code.
The New Yorker’s Evan Osnos profiles how China aims to dominate future tech to reshape power, even as the United States retreats under Trump. Beijing’s ‘all-hands-on-deck’ industrial policy accelerates AI, robotics, biotech, and renewables, while expanding state reach into daily life. The piece follows Kai-Fu Lee and tours Zhongguancun and the Xiaomi Hyperfactory to show AI embedded in factories, offices, and surveillance. It also traces talent returning from abroad, record R&D funding, and a sagging youth job market and housing bust. Taken together, China seeks a self-reliant, top-to-bottom order, even as it risks social and demographic tensions.
Fukio Mitsuji (MTJ), designer of Bubble Bobble, argued in a 1989 GAMEST column against 'rip-offs' and imagined a Rip-O-Bot that could generate copycat games at the press of a button. In a sci‑fi scene, a robot fabricates a 'masterpiece' by random choices, urging that 'a game is the idea' and that graphics will blur reality; even imitation may replace design unless humans bring originality and feel. The piece links Tezuka’s death to the question of a game-world Tezuka and ends by urging focus on gameplay, systems, and mechanics—fuel for Jinks, the author's game-design tool.
Could not summarize article.
Walk on Decomposed Subdomains (WoDS) presents a hybrid Monte Carlo–deterministic solver for elliptic PDEs. The domain is tiled into simple subdomains; Monte Carlo estimates local first-passage operators (Poisson kernels) within each tile, shortening walks and reducing variance. The tile operators are stitched via an absorbing Markov chain over interfaces, solved deterministically for interface values. Interiors are recovered with per-tile solution operators. The approach yields accurate, geometry-aware solutions on coarse discretizations, with easy updates when geometry changes and good parallel scalability.
SPF syntax uses a single TXT record starting with v=spf1, then mechanisms (all, include, a, mx, ptr, ip4, ip6, exists) with qualifiers (+, -, ~, ?) and modifiers (redirect, exp). Macros expand message data (eleven letters). Evaluation is left-to-right, first-match-wins; - qualifiers end the evaluation. DNS lookups are capped at 10 terms per SPF check (and a separate void-lookup limit of 2); ip4/ip6 and all don’t count toward the 10-lookup limit; includes count. Exactly one v=spf1 TXT record per domain; type-99 SPF deprecated. TXT can span multiple 255-byte strings; concatenate.
In St. Mary’s, Newfoundland and Labrador, 900,000 liters of abandoned fish sauce sit in 110 vats inside a defunct factory, causing a seasonal stink. A $2 million cleanup aims to remove the sludge, left behind after the Atlantic Seafood Sauce Company began in 1990 and was halted by regulators. Food scientist Bryan Le explains the chemistry: salt preserves and concentrates glutamic acid for umami; long fermentation could produce amines and aldehydes and Maillard-derived flavors. Locals await completion, wondering if this vast broth might someday yield a grotesquely nuanced delicacy.
AirLLM enables running ultra-large LLMs on commodity GPUs by streaming one layer at a time with sparse MoE, so VRAM depends on layer size rather than total model. It claims 70B models on a 4GB GPU without quantization, and can run 405B on 8GB, 671B on ~12GB, and large MoE models on under 4GB. It introduces 3x speedups via block-wise 4bit/8bit compression and optional prefetching. Use AutoModel.from_pretrained(...) with compression settings. Supports Llama, Qwen, DeepSeek, Mistral, Mixtral, Phi, Gemma, ChatGLM, Baichuan, InternLM, Yi, etc. MacOS/Linux supported; requires bitsandbytes, CUDA/torch compatibility.
MiniMax H3 Day-0 is an open-weights, omni-modal video model with native stereo audio, delivering 2K video up to 15 seconds and running locally on a 3060 via ComfyUI. It handles text, images, video, and audio, with text-to-video, image-to-video, first/last-frame control, and reference-to-video with motion transfer; audio is generated in‑pass. It uses multimodal context to fuse inputs. Optimizations cut VRAM by ~66% (from 123.6 GB to 42.5 GB) through weight pruning, int8 quantization, and custom kernels. Get started by updating to ComfyUI 0.30.0 and loading MiniMax-H3 workflows.
9front's “This Was Supposed to Be Fun” release updates include a revised affinewarp API, new hardware support (Synaptics touchpad, nusb drivers, UPS battery, USB descriptor dump), SHA3 support in libsec, a gdbfs tool for mounting remote gdb, an awk test suite, and expanded kernel refinements (pc/pc64 with x2APIC, improved IP/ether/vga handling). It ships installation images for PC, Raspberry Pi, Reform, and QEMU, plus updated manuals and docs across programs and libraries.
The AI bubble is popping: Q2 earnings reveal steep AI-related capex, opaque accounting, and fragile margins as big tech bets on data centers, chips, and Anthropic/OpenAI deals. While AI adoption grows, it may not replace most economic activity, and supply constraints, energy hedging, and geopolitics complicate deployments. Vendors push harnesses and smaller models to cut costs. IT teams should hedge bets, test, prototype locally, and avoid full-scale AI rollouts until ROI is clearer.
Progress update on building a UK Class 80x–style physical train simulator. Key efforts include: (1) headlight control panel: custom PCB with white/red LEDs, diffusers, and a six-position selector; integration tests with Train Simulator; challenges with Train Sim World not exposing LED states. (2) Sheet-metal panels: replacing fragile hardboard with powder-coated steel TPWS/DRA panels and others; heavy but durable; labeling issues due to paint bleed; exploring better fabrication. (3) AWS sunflower modules: testing miniature mechanical and LED sunflowers; enabling horn/bell via high-side switching; expanding I/O board to support high-side switching. More posts forthcoming.
ICE expanded DNA collection from immigration detainees, potentially adding up to 919,908 CODIS profiles in 2025, pushing the detainee index to 3,345,692 by December 2025. Most subjects had no criminal history; samples were also taken from families and children, prompting lawsuits and congressional scrutiny. DHS defends the program as border security and identification, but critics say it violates privacy and the Fourth Amendment and risks a lifelong, federally stored DNA database.
Nightcrawler is an autonomous, on-device pentesting agent that runs completely offline on an Android phone (Kali NetHunter). It uses a local 1.2B LLM to plan and execute recon, enumeration, exploitation, and reporting with no cloud or internet access. It can perform WPA2 breaches with a USB WiFi adapter, operates under two-layer scope enforcement, and uses stealth techniques to avoid detection. The package includes a Kali MCP server, a web dashboard, SQLite DB, a 24,956-entry CVE database, and 27 playbooks; designed for authorized engagements and auto-detects networks via wlan0.
JFrog Security Research audited a GitHub batch of SQLite advisories and found most are AI-generated ‘LLM slop’ with fabricated details. PoCs failed to crash or match real code; referenced functions, lines, and targets often didn’t exist in SQLite, and none appeared on SQLite’s official advisory page. Only one advisory had a real bug, but metadata remained unverifiable. They attribute this to a lax intake process after NIST paused analysis in 2024, letting fake CVEs flood GHSA and downstream databases. Red flags: missing vendor corroboration, no commits, conflicting metadata, non-existent code references. Findings were reported to GHSA, Red Hat, NVD.
Made by Johno Whitaker using FastHTML