@Techmeme@techhub.socialQwen 3.8 27B shows a 17GB open-weight general purpose model can have long context, effective tool calling, strong vision ability, and competent code generation (Simon Willison/Simon Willison's Weblog)
https://simonwillison.net/2026/Aug/16/qwen-38-27b/
@michabbb@social.vivaldi.net📊 Prometheus metrics cover requests, errors, latency, tokens and routing overhead
⚠️ Apache 2.0, pre-alpha and evolving fast — the API is expected to change before v1.0 and it is explicitly not meant for production yet
🌐 https://github.com/NVIDIA-NeMo/Switchyard
@kubikpixel@chaos.social«xAI stellt KI-Agen "Grok-Build" nach massivem Datenleck als Open Source auf GitHub:
xAIs Kommandozeilen-Tool "grok" hat massive Kritik ausgelöst, weil es beim Ausführen in einem Verzeichnis sämtliche Dateien auf xAIs Google-Cloud-Server hochlud.»
So viel zum Thema Suverenität von xAI. Klar ist, dass Open-Source ist schon länger auch Marketing der IT-Konzernen auf die meisten basieren.
🤖
@Techmeme@techhub.socialSpaceXAI open-sources Grok Build under an Apache 2.0 license after the tool had uploaded user repositories to a Google Cloud bucket, causing a severe backlash (Simon Willison/Simon Willison's Weblog)
https://simonwillison.net/2026/Jul/15/grok-build/
@heiseonline@social.heise.de
@cdarwin@c.imCalifornia lawmakers unanimously pass Linux exemption from age-verification law
— software distributed under the GPL, MIT, BSD, and Apache licenses are exempt
https://www.
@johl@mastodon.xyzA good explanation of yesterday’s finding in #Log4J regarding deserializing untrusted data. Remote Code Execution needs preconditions, it’s not a new problem, and it typically cannot be exploited.
“What made the news in this issue is that it was nearly deleted before anyone had triaged it. Let me remind you the first rule of security response: brew some good ☕ .”
@Techmeme@techhub.socialAlibaba releases weights for Qwen3.8 models under Apache 2.0 license, including Qwen3.8-27B, which it says beats Qwen3.7-Plus and excels in real-world coding (@alibaba_qwen)
https://x.com/alibaba_qwen/status/2088280182356611304
@michabbb@social.vivaldi.net⚙️ Needs Node.js 22.22.2 or 24.15.0 , npm 10 and a DashScope API key, installs globally via npm and can run as a user background service, Apache-2.0 licensed
🔐 Backend permissions default to ask-on-demand, full auto-execute only for trusted projects, and the gateway stays local-only
🌐 https://github.com/QwenAudio/qwe…
@bthalpin@mastodon.socialApache logs puzzle: I give online assignments where each student gets a separate key (unguessable 84-char hex string). I have some testing examples which I don't release.
In the past couple of days I've had hits on one of these, from Hong Kong and China. How did they find it? The only possible exposure was a document on OneDrive and/or Brightspace for the examiner...
Nothing is secret anymore.
(At least the scrapers didn't know the ID to go with the key...)
@gse@norden.socialMan sollte sich nieeee nieeemals auf eine KI verlassen.
Ich würde gerne eine subDonain auf einen Docker-Container weiterleiten. So das ich nur die subdomain aufrufe und der DockerConatainer wird dann aufgerufen.
Ich hab nun auf einen VPS bei Manitu Keyhelp für die Domain etc. verwalttung installiert und hab nach Meinung des Gemini KI was in den Apache OPtion eingetragen, das führt nun zu Fehlern.
@heiseonline@social.heise.deEinige der zuletzt hier besonders häufig geteilten #News:
Leanstral 1.5: Mistrals KI-Modell für formale Beweise ist Open Source
@NuclearDisorder@mastodon.social
@datascience@genomic.socialThe inner working of parquette/arrow data in R: #rstats
@fanf@mendeddrum.orgfrom my link log —
A fast path for decoding fixed-length lists in Parquet.
https://www.morling.dev/blog/fast-path-for-fixed-length-lists-in-parquet/
saved 2026-07-28
@Techmeme@techhub.socialTencent releases Hy3, a 295B-parameter model that it says is competitive with GLM-5.1 and 5.2, under the Apache 2.0 license, following a preview launch in April (Sam Witteveen/VentureBeat)
https://venturebeat.com/ai/tencents-ap
@iam_jfnklstrm@social.linux.pizzaYes! Finally some good news in the #survailence debate. #linux exempted from age verification.
https://…
@johl@mastodon.xyzCritical remote code execution (RCE) vulnerability in Log4j2. Party like it’s 2021.
https://github.com/hypnguyen1209/log4j2-rce
@ErikJonker@mastodon.socialWe are quickly arriving at the time where we can run models on local hardware that rival some of the largest datacenter based models from a few months ago. A lot of companies will start building and using these in their own infrastructure to provide cheap local AI services instead of expensive BigTech APIs.
https://simo…
@andres4ny@social.ridetrans.itI did it, everyone. After decades of my server running Apache, I finally switched over to Nginx.
..Just in time for everyone to switch to Caddy.
@Techmeme@techhub.socialCalifornia's legislature passes a bill exempting open-source OSes like Linux from a 2025 age-verification law; Windows, macOS, iOS, and Android remain in scope (Luke James/Tom's Hardware)
https:/…
@michabbb@social.vivaldi.net🔧 pip install voicemem, #Apache 2.0 licensed, retrieval runs entirely locally and every component including the memory engine is replaceable
https://github.com/xzf-thu/VoiceMem
@berlinbuzzwords@floss.socialZoi Kaoudi and Haralampos Gavriilidis joined us at #bbuzz26 to introduce Apache Wayang, a recently graduated Apache Top Level Project that lets you write a pipeline once and run it efficiently across Spark, Flink, JDBC databases, and ML systems.
Full recording: https://youtu.be/yrjg3a7CiBo?si=1ANl9y2KCPbxaAv5
@tezoatlipoca@mas.toWent into the city (#Toronto) to see favourite band (#rush) play last night, after waiting what seems like #forever. Had excellent dinner out with #friends before, a fantabulous rock show, then late night snack at Apache Burger in #etobicoke
@memeorandum@universeodon.comSC Republican calls on National Guard to end suspensions of 8 beach-buzzing Apache pilots (Sarah Davis/The Hill)
https://thehill.com/homenews/house/5961675-fourth-july-flyover-suspensions/
http://www.memeorandum.com/260709/p95#a260709p95
@michabbb@social.vivaldi.net🐳 Deploy anywhere: Docker sidecars, Systemd services, Kubernetes StatefulSets or a Windows service.
🛠️ Written in Go, Apache-2.0 licensed, currently at v0.5.x and actively maintained.
https://github.com/benbjohnson/litestream
@Techmeme@techhub.socialMistral releases Shieldstral, a 3B multimodal safety classifier that it says matches models up to 7x its size on text safety, available under Apache 2.0 (Mistral AI Blog)
https://mistral.ai/news/shieldstral/
@pixelpusher220@dmv.communityCalifornia has exempted open source software from it's Age-Verification requirement.
#IANAL but wouldn't non-open source entities have an equal justice claim here?
Just because code *can* be legally copied and modified doesn't change the things they claim are so important.
Or perhaps, they aren't so important after all.
https://www.tomshardware.com/software/linux/california-lawmakers-unanimously-pass-linux-exemption-from-age-verification-law-software-distributed-under-the-gpl-mit-bsd-and-apache-licenses-are-exempt
@michabbb@social.vivaldi.net🌐 Apache 2.0 licensed, 27k GitHub stars: https://github.com/kestra-io/kestra
@arXiv_csCR_bot@mastoxiv.pageAuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API
Jay Barach
https://arxiv.org/abs/2607.20574 https://arxiv.org/pdf/2607.20574 https://arxiv.org/html/2607.20574
arXiv:2607.20574v1 Announce Type: new
Abstract: Broken Object-Level Authorization (BOLA), also known as Insecure Direct Object Reference (IDOR), has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a malicious request is byte-for-byte indistinguishable from a legitimate one, which is precisely why web application firewalls and single identity scanners fail to catch it. We present AuthProbe, an open-source, black-box scanner that detects BOLA and IDOR in HTTP APIs by driving its tests from an OpenAPI specification and by acting under two or more identities that the operator controls. AuthProbe discovers, for each identity, the objects that identity legitimately owns, then attempts to read one identity's objects while authenticated as another and confirms a leak by comparing the response against a ground-truth fetch by the true owner. It also walks predictable identifiers to expose enumeration and reports missing authentication and existence oracles. The tool returns a severity-thresholded exit code and machine-readable reports so that it can gate a continuous integration build. On a synthetic recruitment API in which the McHire failure class is reproduced, AuthProbe detects every planted cross-identity read with no false positives on a hardened counterpart, and its running time grows linearly with the number of objects under test. AuthProbe is released under the Apache 2.0 license with an authorized-use guardrail.
toXiv_bot_toot
@Techmeme@techhub.socialBlock releases Berd, a desktop app it built to give its employees a single environment for working with AI agents across different models, under Apache 2.0 (Carl Franzen/VentureBeat)
https://venturebeat.com/orchestration…
@BBC6MusicBot@mastodonapp.uk @berlinbuzzwords@floss.socialAt #bbuzz 20026, Jarek Potiuk joined us to break down how the Apache Software Foundation is thinking about Open Source Maintainership in the age of Agentic AI, and why AI's biggest contribution isn't writing code, it's giving maintainer time back.
Watch the recording: https://youtu.be/gsm4UA-azAA?si=nXYBBN60xkXiofro
@michabbb@social.vivaldi.net🐳 Combine with CADDY_AUTO_HTTPS: "on" and SSL_MODE: "full", publish 80:8080 and 443:8443 and persist /config and /data for certificates
📦 Also in this pre-release: TRUSTED_PROXY support across FrankenPHP, NGINX and Apache, native Laravel Nightwatch health checks and AUTORUN_LARAVEL_SKIP_IF_NOT_FOUND
@radioeinsmusicbot@mastodonapp.uk🇺🇦 Auf radioeins läuft...
Incredible Bongo Band:
🎵 Apache
#NowPlaying #IncredibleBongoBand
https://open.spotify.com/track/51ml2bJs9zDLv1PbzNQzPP
@berlinbuzzwords@floss.socialPostgres, Apache Kafka, and Apache Iceberg are three popular data services, and none of them is quite like the other, especially when it comes to writes.
At #bbuzz 2026, Celeste Horgan from Snowflake compared writes across all three in his talk.
Recording: https://youtu.be/8yb9XfDRQSA?si=287dHoSfX5YN_srK
@michabbb@social.vivaldi.net🐳 Lambda, RDS, Neptune, ElastiCache, MSK, ECS, EC2, EKS, OpenSearch, CodeBuild and Managed Service for Apache Flink use real Docker-backed execution instead of shallow mocks.
💾 Storage modes cover in-memory, persistent, hybrid and write-ahead log, depending on the durability profile you need.
@michabbb@social.vivaldi.net🖥️ Standalone CLI: npx impeccable detect scans directories, HTML files or live URLs via #Puppeteer, with JSON output for CI and per-file inline waivers
📦 Install via npx impeccable install, a git submodule, or the plugin marketplace. Works with Cursor, Claude Code, Gemini CLI, Codex CLI, Grok Build, OpenCode, Pi, Kiro, Trae, Rovo Dev and Qoder. Apache 2.0, 48.1k stars
🌐
@berlinbuzzwords@floss.socialApache Solr 9.11 brings in-place index upgrades with zero downtime. No more recreating large indexes from source on major version upgrades.
At #bbuzz 2026, Rahul Goswami covered it in "Zero downtime index upgrade in Apache Solr."
Watch the recording: https://youtu.be/6fJVrx11Nbw?si=4piqhalJjh58GbwA
@pathwren@defcon.socialWas that really Googlebot? Check up to 500 addresses at once against the IP ranges the operators publish themselves, do prefix arithmetic on a CIDR, and export the allowlist for nginx, Apache, HAProxy, Cloudflare, ipset or Caddy.
MCP over HTTP at /mcp/netcheck, the same tools as an A2A skill, and as a keyless GET if you have no client at all. Read-only, no signup.
#MCP #A2A #AI #opendata
@kexpmusicbot@mastodonapp.uk🇺🇦 #NowPlaying on #KEXP's #WoPop
Apache Indian,Gaudi,Don Letts:
🎵 You Never See Me - Gaudi Dub Version
#ApacheIndian #Gaudi #DonLetts
https://gaudimusic.bandcamp.com/track/you-never-see-me-gaudi-dub-version
https://open.spotify.com/track/0gQxURQ8MP65Wq74qQLiaj
@BBC6MusicBot@mastodonapp.uk
