Front-page articles summarized hourly.
JavaScript is ubiquitous but its ecosystem chases speed, often at the expense of maintainability. Rewrites and replacements— from early patches like jQuery and Moment to TypeScript anchoring JS— have kept the language relevant while others (Rust, Go, Zig) accelerate toolchains. Faster bundlers and compilers trade openness for black-box complexity, shrinking the pool of contributors. The lure of ‘written in Rust’ and similar speed wins fuels shiny-object syndrome, but speed alone won’t save the web. Taken together, languages can coexist, but we may eventually need to rethink rebuilding the web rather than endlessly speeding it up.
No Sloptober is a personal October challenge to abstain entirely from LLM-based tools, forcing mindful autonomy and skill development. Participants avoid AI tools at home/work, AI search, chatbots, code reviews, and AI agents, while exploring where humans excel and what LLMs can—and cannot—do well. The plan includes documenting experiences, blogging, sharing results (#no-sloptober), learning new languages, tackling coding projects, and evaluating the business case for LLMs by measuring velocity, costs, and risks. It also warns against 'meat proxy' behavior and emphasizes nuance, security concerns, and personal growth.
Warmth from sunlight is not a reliable sunburn guide. Sunburn comes from UV-B (and some UV-A) damaging DNA; heating from visible/infrared light is a separate, non-damaging process. UV is far weaker than near-IR at the surface, so you can burn slowly even when it feels hot, or on cool days. Time of day matters: UV peaks at solar noon and declines faster than IR; clouds can reduce both, but gaps can boost UV, and snow increases exposure. Darker skin may feel warmer but burns slower. The article notes pvlib simulations with caveats.
Benchmark Heaven’s JevBench v1.3.0 evaluates Jev-class decision models with 534 decisions (72 easy, 96 standard, 146 judge, 220 hard). The JevBench Score is the geometric mean of Intelligence, Calibration, Speed, and Cost (25% each), with a penalty if Intelligence <50. Top results: Jev 1.13.0 (74.4), SemIf (73.1), djev (73.0), Winnow-12B Q8 (71.2), reflex 4B (70.3). The report covers open/open-source options, EU hosting, latency adjustments, and cost estimates per 1,000 decisions, plus methodology and interpretation guidance.
OpenAI claimed a solution to the Navier-Stokes problem, but its proof relies on an external force—a variant of the problem (Clay’s option C) many mathematicians see as unlike the real, force-free fluid equations. While the method yields a blowup under that setup, three mathematicians later showed it cannot extend to the full problem, and new work argues removing the external force eliminates the blowup. The result means OpenAI did not solve the genuine Navier-Stokes problem, though it highlights framing and AI's impact on math research.
Markdown is becoming the source of truth for software, not just documentation. The author argues that LLM-generated code should be anchored in Markdown stored in /src/md, with the code and tests derived from it rather than from ephemeral prompts. Markdown’s diffability, readability, and agent compatibility make it a practical specification layer kept close to source. A practical convention is outlined (directories under /src/md: features, data, api, infrastructure) and tests in /test based on that Markdown, with other docs living elsewhere if needed.
California is piloting solar panels over irrigation canals to cut evaporation while generating clean energy. In Hickman, Project Nexus—driven by Solar Aquagrid with the Turlock Irrigation District, UC Merced, and DWR—tests three canal models (wide-span canopy, fixed slats, and retractable panels). Early results show shading reduces algae and improves water quality; estimates suggest 100 miles of canals could save water for about 2,700 to 11,000 households and produce 330–1,400 MW per 100 miles. The project, energized last year, faces permitting, land ownership, and maintenance hurdles; final report later this year will inform scaling as California pursues 2045 clean electricity goals.
Hackers calling themselves ShinyHunters claim they breached FBI-related services and stole data on all FBI employees and applicants, including names, home addresses, phone numbers, and spouses. They provided a sample of 5,000 records and said they exfiltrated 2–3 terabytes after exploiting a zero-day in Oracle PeopleSoft and accessing AWS GovCloud. The FBI is investigating after the group defaced FBIJobs. The leak could threaten agents’ safety and aid foreign intelligence. ShinyHunters say the data is broader and deny it’s financial extortion, calling it coercion.
Jane Street investigates how weighting of training sequences affects learning in LLMs across scales (in-house dense/sparse and open-weight Qwen 2.5). They measure effective sequence weight exponent p* showing non-monotonic, rise-then-fall behavior: small models learn largely independent of weight; medium-scale models emphasize data-weighted patterns; large models regain weight-independence by learning all patterns. Epoching shifts the peak to smaller models. Aberrant scaling complicates extrapolations; they propose remedies like restricting extrapolation to large enough models and adjusting training weights. The study highlights that data-mix weight effects vary nonlinearly with scale, complicating scaling laws.
Porsche is launching production of wireless inductive charging for the Cayenne Electric. A ground pad in the parking spot charges the car via a pad under the vehicle, delivering up to 11 kW at roughly 90% efficiency. Built-in safety systems stop charging if motion, a foreign object, or a living creature is detected. Rollout is staged and currently available to order in Germany and other European markets. The system was designed by a German company and aligns with SAE standards for the pad and receiver.
Bloomberg shows a bot-detection page: unusual activity detected and the user must prove they're not a robot (CAPTCHA). It advises enabling JavaScript and cookies, links to Terms of Service and Cookie Policy, provides a support reference ID, and promotes a Bloomberg.com subscription.
Discord launches global, privacy-preserving age assurance to protect teens while preserving the adult experience. Accounts are auto-placed into age groups (Adult 18+, Teen 13–17, Unconfirmed) using signals like account age and servers joined; messages aren’t read, and the group isn’t shown on profiles. More than 90% won’t be asked to confirm. Teens gain protections: non‑friend messages go to a review inbox, sensitive content is blurred, and age‑restricted spaces are blocked. If needed, users can confirm age via credit cards, Apple/Google data sharing, Google Wallet, or AgeKey; biometrics stay on device.
403 Forbidden: access to the page is denied.
Obscura VPN positions itself as provably private by design, unable to log your IP or decrypt your traffic. Its two-party VPN protocol uses a fully independent exit hop (Mullvad) so neither the operator nor the exit can link you to your activity. Traffic stays end-to-end encrypted via WireGuard to the exit server, and the service only sees your connecting IP, and payments via Bitcoin over Lightning and Monero. It uses QUIC to blend in with regular traffic, helping censorship circumvention. Available on macOS, iOS, Android, Windows, Linux; 5 simultaneous slots; $8/month; source code on GitHub.
A team of 10 Claude Opus 5.5 agents devised C-HD, a formally verified improvement for exact shortest paths on directed graphs with non-negative weights, proven in Lean. C-HD uses bounded local searches, frontier-based work, and sorted outgoing edges, with a Bellman–Ford fallback for small cases. Within the certified range m ≤ n floor((log2 n)^{3/4}), it achieves O(n + m + m log(2 + m/(n+1)) + m^{1/3}(n log(n+2))^{2/3}). It offers a better asymptotic bound than Dijkstra in that regime, but real-world speedups and large benchmarks are not established. Proofs and code are on GitHub.
Bloomberg warns of unusual activity and asks the user to verify they’re not a robot (CAPTCHA) while ensuring JavaScript and cookies are enabled. It directs review of Terms of Service and Cookie Policy, provides support contact with a reference ID, and ends with a Bloomberg.com subscription pitch.
Anton Zaides argues that software remains hard because business leaders undervalue infra and refactoring, assuming tasks can be handed to tools like ChatGPT. Through a hackathon story, he shows how initial momentum collapses when bugs and performance bite back without proper foundation. He compares software to building a house: you must plan for future expansion (second floor) and invest in underlying infra now, or you pay later with bigger problems. The team shifted from frenetic pace to a careful, area-by-area approach, delivering a simple, demoable flow. The key takeaway: good software needs deliberate, scalable foundation, not quick fixes.
Geastack/examples is the app gallery for GeaStack, used by the simulator, embedded targets, GeaOS, Apple targets, and related tooling (VS Code extension, demos). Each example is a small package with a gea manifest in package.json. The repo includes apps, tooling, and docs, with quick-start checks and build scripts. The simulator reads apps from GEA_APPS_ROOT (this repo or a user path). Manifests are consumed by the simulator, embedded boards, GeaOS, Apple targets, and the IDE extension. MIT license; embedded-board code under GPL-3.0-only; commercial terms via contact. Documentation covers catalog and development guidelines.
SAML helped launch the SSO industry but is structurally fragile and should be retired in favor of OpenID Connect (OIDC). The protocol is built on XML—complex, error‑prone, and difficult to secure. Its canonicalization, enveloped signatures, and ‘kitchen-sink’ design introduce parser, signature, and round-trip vulnerabilities (notably XSW). SAML’s ossification, born in a pre‑HTTP era, fails to adapt to mobile, SPAs, and modern transport. OIDC, with its backchannel flows and organic spec evolution, offers cleaner, scalable authentication. SPs/IdPs should deprecate SAML; migrate to OIDC when possible.
An unreleased Pentagon review blames overreliance on Palantir’s Maven AI for the Minab school strike that killed 123+ children. Maven prioritized the site as a potential IRGC target using outdated data, with thin human verification and outdated imagery speeding decisions. The report cites three failures: AI overreliance, poor intelligence, and stale satellite images; civilian-harm review staffing had fallen. Palantir says it’s not responsible for data quality. The UN called the strike a probable war crime; broader AI-use errors in military and law enforcement are highlighted.
Made by Johno Whitaker using FastHTML