39C3: Rollstuhl-Security – Wenn ein QR-Code alle Schutzmechanismen aushebelt
Eine IT-Sicherheitsforscherin deckt auf, wie der QR-Code eines Rollstuhls zum Generalschlüssel für alle Komfortfunktionen wird.

from my link log —
Code golfing a tiny graphics demo using maths and a pinch of insanity.
https://blog.pkh.me/p/45-code-golfing-a-tiny-demo-using-maths-and-a-pinch-of-insanity.html
saved 2025-09-29

Code golfing a tiny demo using maths and a pinch of insanity

Today I did day 1 of #AdventOfCode, and obviously missed the small trap hidden in the second part. Solved the first part with math and the second part with ... let's say a simulation (which sounds smarter than brute force clicking through all positions because I'm to dumb to figure out my Lattenzaunproblem...)

CodeGenLink: A Tool to Find the Likely Origin and License of Automatically Generated Code
Daniele Bifolco, Guido Annicchiarico, Pierluigi Barbiero, Massimiliano Di Penta, Fiorella Zampetti
https://arxiv.org/abs/2510.01077

CodeGenLink: A Tool to Find the Likely Origin and License of Automatically Generated Code
Large Language Models (LLMs) are widely used in software development tasks nowadays. Unlike reusing code taken from the Web, for LLMs' generated code, developers are concerned about its lack of trustworthiness and possible copyright or licensing violations, due to the lack of code provenance information. This paper proposes CodeGenLink, a GitHub CoPilot extension for Visual Studio Code aimed at (i) suggesting links containing code very similar to automatically generated code, and (ii) whenever …

[OT] Sam Altman is suddenly terrified #OpenAI declares 'Code Red' as

Sam Altman Is Suddenly Terrified
OpenAI CEO Sam Altman has declared a "code red" in a memo to employees this week, three years after Google's CEO did.

#Steady
Vom Puristen zum #IDE-Nutzer
Ganz langsam. 😁 Wie verändert sich der Workflow, wenn man statt eines simplen Editors mit einer IDE arbeitet? Als Hobby-Entwickler hat mir Notepad immer genügt, aber jetzt will ich endlich auf IDE umsteigen und auch mal einen integrierten Code-Assitenten…

Visual Studio Code einrichten: Vom Puristen zum IDE-Nutzer
Visual Studio Code einrichten für Python und Git inklusive Codex-Integration. Ein Erfahrungsbericht mit praktischen Anleitungen.

Internal memo: OpenAI CEO Sam Altman declares a "code red" to shift more resources into improving ChatGPT amid rising competition, delaying other plans like ads (The Information)
https://www.theinformation.com/articles/op

OpenAI CEO Declares ‘Code Red’ to Combat Threats to ChatGPT, Delays Ads Effort
OpenAI CEO Sam Altman on Monday told employees he was declaring a “code red” to marshall more resources to improve ChatGPT as threats rise from Google and other artificial intelligence competitors, according to an internal memo. As a result,OpenAI plans to delay other initiatives, such as ...

Use bet365 bonus code CBSBET365, get $200 bonus bets by targeting Bills, Seahawks-Commanders, NFL Week 9

https://www.cbssports.com/nfl/news/use-bet

Masto Admin Tip

Every masto admin surely knows to regularly clean up cached media from remote servers with the command
But do they also know that this doesn't include remote profile images from users who mostly probably haven't even logged in at home for years?
So likely admins should also run
To remove remote profiles that haven't been needed in a month?
I only discovered this last night, and running it examined nearly 400,000 accounts and removed 86Gb, or 70% of the media storage space!
Now instead of being 100% full, our media drive is 29% full.

Why Every Family Needs a Code Word (Gift Article)
https://www.wsj.com/tech/personal-tech/why-every-family-needs-a-code-word-e077ab76?st=nxffpN&reflink=desktopwebshare_permalink

Zum Abend noch einige der heute besonders häufig geteilten #News:
39C3: Rollstuhl-Security – Wenn ein QR-Code alle Schutzmechanismen aushebelt

Trump’s Tangled Web of Deal-Making, Policy and Riches.
https://www.nytimes.com/interactive/2025/12/31/us/trump-deals-policy-conflicts-web.html?unlocked_article_code=1.BFA.Nggr…

Trump’s Tangled Web of Deal-Making, Policy and Riches
The president, his family and some of their closest associates have engaged in a sprawling campaign of deals that stretches across industries and the globe.

Simplify Your #Code: Functional Core, Imperative Shell
https://testing.googleblog.com/2025/10/simplify-your-code-functional-core.html

Who doesn’t love a good buzzword? It’s possible that half the tech industry (and a good proportion of tech journalism) wouldn’t exist if the industry didn’t hunger for a neologism. One of the latest (but not the latest) is vibe coding.
https://www.computing.co.uk/interview/2025

Don’t vibe that code
Azul’s CTO on when and when not to use LLMs to assist software development

Computer programmers be like:
1. LLMs generate code for me and sometimes it even works
2. This is also true when I write code manually
3. Computer programming is clearly the hardest of all possible human endeavors, you have to be a complete genius like I am to it because it is really, really hard
4. Therefore LLMs are geniuses
5. They will certainly work really well for all these lesser fields you don’t have to be genius for like I am, like writing summaries of text or medical research or making art or…

Code2Video: A Code-centric Paradigm for Educational Video Generation
Yanzhe Chen, Kevin Qinghong Lin, Mike Zheng Shou
https://arxiv.org/abs/2510.01174 https://

Code2Video: A Code-centric Paradigm for Educational Video Generation
While recent generative models advance pixel-space video synthesis, they remain limited in producing professional educational videos, which demand disciplinary knowledge, precise visual structures, and coherent transitions, limiting their applicability in educational scenarios. Intuitively, such requirements are better addressed through the manipulation of a renderable environment, which can be explicitly controlled via logical commands (e.g., code). In this work, we propose Code2Video, a code-…

Alber e-motion M25: la sedia a rotelle "supersicura grazie alla crittografia" ma un QRcode in bella vista consente di aggirare tutti i meccanismi di sicurezza
Le funzionalitŠ comfort e premium della M25 (maggior velocitŠ, passaggio da una modalitŠ di guida a un'altra, controllo remoto via app) vengono attivate esclusivamente tramite software e sblocchi a pagamento. Ma il codice QR a 22 cifre ("Cyber ​​Security Key") chiaramente visibile su ogni mozzo ruota, è la…

https://www.nytimes.com/2025/12/16/upshot/spelling-bee-words-2025.html?unlocked_article_code=1.BFA.S5O6.e-hzn2hkZUEL&smid=url-share

The Hardest and Easiest Spelling Bee Words of 2025
A quick look at the attainability of getting the top 10 toughest words. No reason to dillydally.

Low Depth Color Code Circuits with CXSWAP gate
Satoshi Yoshida, Craig Gidney, Matt McEwen, Adam Zalcman
https://arxiv.org/abs/2510.00370 https://arxiv.org/…

Low Depth Color Code Circuits with CXSWAP gate
We present two new types of syndrome extraction circuits for the color code. Our first construction, which after [M. McEwen, D. Bacon, and C. Gidney, Quantum 7, 1172 (2023)] we call the semi-wiggling color code, promises to mitigate leakage errors by periodically interchanging the roles of bulk data and measurement qubits. The second construction reduces circuit depth relative to [C. Gidney and C. Jones, arXiv:2312.08813 (2023)] by employing the CXSWAP gate instead of CNOT. This optimization le…

hey @… this should also be in #zig: https://

Introducing constant-time support for LLVM to protect cryptographic code
Trail of Bits developed constant-time coding support for LLVM that prevents compilers from breaking cryptographic implementations vulnerable to timing attacks, introducing the __builtin_ct_select family of intrinsics that preserve constant-time properties throughout compilation.

#SciX makes research more efficient by linking data, code, and publications, so findings can be tested, trusted, and built on faster. More reproducible science, less wasted effort, more discoveries. #OpenScience #ResearchIntegrity

Science Explorer (SciX) (@scixcommunity.bsky.social)
#SciX makes research more efficient by linking data, code, and publications, so findings can be tested, trusted, and built on faster. More reproducible science, less wasted effort, more discoveries. #OpenScience #ResearchIntegrity #ReproducibleResearch #EfficientResearchWorkflows

In 2024 Jane Goodall Left This Message
‘Hope Isn’t Just Wishful Thinking’
https://www.nytimes.com/2025/10/01/climate/jane-goodall-interviews.html?unlocked_article_code=1.qU8.6Zom.tQ7ncRpY92KO&…

Jane Goodall’s Thoughts for a Reporter: ‘Hope Isn’t Just Wishful Thinking’
A Times correspondent who interviewed Dr. Goodall recalled their conversations about the state of the planet.

Which Programming Language and Model Work Best With LLM-as-a-Judge For Code Retrieval?
Lucas Roberts, Denisa Roberts
https://arxiv.org/abs/2510.00324 https://

Which Programming Language and Model Work Best With LLM-as-a-Judge For Code Retrieval?
Code search is an important information retrieval application. Benefits of better code search include faster new developer on-boarding, reduced software maintenance, and ease of understanding for large repositories. Despite improvements in search algorithms and search benchmarks, the domain of code search has lagged behind. One reason is the high cost of human annotation for code queries and answers. While humans may annotate search results in general text QA systems, code annotations require s…

The US book business faces challenges including AI slop, but print sales and e-book and audiobook revenue were stable in 2025, and 422 stores joined the ABA (New York Times)
https://www.nytimes.com/2025/12/30/books/b

Dragons, Sex and the Bible Drove Book Sales in 2025
Nonfiction and Y.A. are hurting, but genre fiction and the Good Book are booming. Here’s how book sales looked in 2025.

I get _real_ concerned when CoPilot starts pulling this shit.
Look you, I'm the human here and pulling dumb shit to get the compiler to stop complaining is MY job alright?

Also, fuck this bullshit.
#OpenSCAD #noAI

OpenScad Code Wizard
Introducing the OpenScad Code Wizard

Someone asked me, “Have you read the latest Dan Brown?” There’s actually a mention of MISP in The Secret of Secrets. And yes, it fits surprisingly well within the story. Alex Conan (who assists Jonas Faukman in the investigation) mentions that he detected the activity using FTK, and that the indicators were later reused by the threat actor (having a hit on a MISP instance).

“But before I could build the algorithm, my FTK scan returned a hit. One of
the IoCs from th…

Use FanDuel promo code, get $300 bonus bets for Yankees-Red Sox, 49ers-Rams Thursday Night Football betting

https://www.cbssports.com/betting/news/use-fandue…

Chevy Chase... the famously prickly comedian found a sympathetic adversary in the director of a CNN documentary about him. Their conversation with a reporter was … spirited.
✅ He’s Chevy Chase, and He’s Still Like That - WSJ (gift)
ht…

He’s Chevy Chase, and He’s Still Like That
The famously prickly comedian found a sympathetic adversary in the director of a CNN documentary about him. Their conversation with a reporter was … spirited.

#GiftLink
Under Trump, Becoming a U.S. Citizen Gets Harder - The New York Times
https://www.nytimes.com/2025/11/01/us/politics/trump-citizenship.html?unlocked_article_code=1.x08.1Ltq.mZ9UMbQ_l-TZ&smid=url-share

A Third Trump Term Is Not the Charm (Jamelle Bouie/New York Times)
https://www.nytimes.com/2025/11/01/opinion/trump-third-term-constitution.html?unlocked_article_code=1.x08.ntwd.INF5ebpMAeg4&smid=url-share
http://www.memeorandum.com/251101/p33#a251101p33

Lessons Learned So Far From Verifying the Rust Standard Library (work-in-progress)
Alex Le Blanc, Patrick Lam
https://arxiv.org/abs/2510.01072 https://arxi…

Lessons Learned So Far From Verifying the Rust Standard Library (work-in-progress)
Although Rust primarily intends to be a safe programming language that excludes undefined behaviour, it provides its users with the escape hatch of unsafe Rust, allowing them to circumvent some of its strong compile-time checks. This additional freedom has some advantages, including potentially more efficient code, which is one of the main reasons why unsafe code is used extensively throughout Rust's standard library. However, because unsafe code also re-opens the door to undefined behaviour, A…

A.I. Is Making Death Threats Way More Realistic
https://www.nytimes.com/2025/10/31/business/media/artificial-intelligence-death-threats.html?unlocked_article_code=1.xk8.s4-q.Slb8Z52_E…

A.I. Is Making Death Threats Way More Realistic
Online harassers are generating images and sounds that simulate their victims in violent situations.

Despite all the talk of 'algoraves' etc, over the past couple of decades there has been a distinct lack of videos showing 1/ code projected 2/ person writing that code live 3/ people dancing to said code .. it's definitely happened but there hasn't been a lot of documentary evidence. Seems to be changing at the moment ! (feel free to reply with recent examples/historical counter-examples)

I just completed "Gift Shop" - Day 2 - Advent of Code 2025
There is a really nice one line trick for part 2. :)
#AdventOfCode https://adventofcode.com/2025/day/2

from my link log —
How Atlassian stopped XML vulnerabilities from landing in production.
https://blog.developer.atlassian.com/how-we-stopped-vulnerable-code-from-landing-in-production/
saved 2019-08-03

QUASAR: Quantum Assembly Code Generation Using Tool-Augmented LLMs via Agentic RL
Cong Yu, Valter Uotila, Shilong Deng, Qingyuan Wu, Tuo Shi, Songlin Jiang, Lei You, Bo Zhao
https://arxiv.org/abs/2510.00967

QUASAR: Quantum Assembly Code Generation Using Tool-Augmented LLMs via Agentic RL
Designing and optimizing task-specific quantum circuits are crucial to leverage the advantage of quantum computing. Recent large language model (LLM)-based quantum circuit generation has emerged as a promising automatic solution. However, the fundamental challenges remain unaddressed: (i) parameterized quantum gates require precise numerical values for optimal performance, which also depend on multiple aspects, including the number of quantum gates, their parameters, and the layout/depth of the…

So this is what one possible database migration scenario looks like in Kitten when you’re storing JavaScript objects (instances of JavaScript classes) in your database.
(In this case, I’m moving a VerifiedAccounts collection comprising VerifiedAccount instances to an Accounts collection comprising Account instances, which introduces an inVerified boolean to the model.)
See the Database App Modules Kitten tutorial for more:

Here's what bothers me about AI-generated code, and I'm going to use my own fuck-up as an example. I was calling a DBus interface from C , which I'd already done elsewhere in the code. So I cut & pasted, and adjusted variable names.. It didn't work. So naturally I assumed something was wrong on the other end. I added delays to make sure the other side had enough time to bring up interfaces, I wrote some introspection code to ensure the interface was available, etc.

I sat for a long while with my complicated feelings about "vibe coding". It is _genuinely_ empowering for many — opening a door to creating with code that otherwise would never exist. Also? It enables a dangerous dependency that could be a path to serfdom for coders. https://www.…

Vibe Coding: Empowering and Imprisoning
A blog about making culture. Since 1999.

I just completed "Secret Entrance" - Day 1 - Advent of Code 2025 #AdventOfCode https://adventofcode.com/2025/day/1

anybody doing Advent of FPGA in Amaranth? https://blog.janestreet.com/advent-of-fpga-challenge-2025/
it seems fun, and, moreover, if you have feedback as a learner I will be more than happy to use it to improve the language

A profile of Aaron Greenspan, who has spent years on a crusade to expose what he believes are financial problems at Tesla and at big tech companies (Noam Scheiber/New York Times)
https://www.nytimes.com/2025/10/31/busines

What If You Spent Every Waking Moment Taking On Elon Musk?
Aaron Greenspan was once a promising entrepreneur. He has spent the last two decades lobbing grenades at the country’s most powerful tech moguls.

Use BetMGM bonus code CBSSPORTS, get $150 bonus by targeting Bills-Chiefs, Seahawks-Commanders, Heat-Lakers

https://www.cbssports.com/nfl/news/use-bet

🤦‍♂️ How good engineers write bad code at big companies
#software

On Effective Semantic Translation for Code: A Study Based on Pseudocode
Songqiang Chen, Congying Xu, Jingyi Chen, Jialun Cao, Jiarong Wu, Shing-Chi Cheung
https://arxiv.org/abs/2510.00920

On Effective Semantic Translation for Code: A Study Based on Pseudocode
Large language models (LLMs) show great potential in code translation. However, accurate translation remains challenging when using the commonly adopted direct code-to-code translation approach, which converts a program into the target programming language (PL) in a single step. Inspired by the success of incorporating intermediate steps to guide LLMs in resolving challenging tasks, we explore pseudocode-based code translation, which emulates the human semantic translation by first interpreting…

»Exploit-Code verfügbar — DNS-Einträge unzähliger Bind-Server manipulierbar:
Angreifer können via Cache-Poisoning Datenverkehr auf eigene Domains umleiten. Allein in Deutschland sind laut BSI rund 40.000 DNS-Server anfällig.«
Mist aber auch, dem muss ich wohl nun nachgehen ob ich und/oder Kunden davon ebenfalls betroffen sind und wie behebt mensch das?
🔓

Exploit-Code verfügbar: DNS-Einträge unzähliger Bind-Server manipulierbar - Golem.de
Angreifer können via Cache-Poisoning Datenverkehr auf eigene Domains umleiten. Allein in Deutschland sind laut BSI rund 40.000 DNS-Server anfällig.

For folks forking IdentityServer. It's not "just code". There are decades of understanding specs, working with security teams around the world, ongoing support, and doing all those things continually.
When it comes to security, staying behind, or even worse, standing still, is the worst option.
From a maintainers perspective, think of doing all of the above for FREE to save your employer money for the "atta boys". In the meantime wasting the most precious …

Now those gpg.fail people made me find similar vulns elsewhere (console control character injection). By "elsewhere" I mean... my own code.
Opinions wanted: should "input can inject console output with ansi and control chars" always be considered a vuln/CVE?
(I'll fix it in any case, I'm just wondering if I should do all the "security release/advisory/request CVE/..." stuff.)

Wichtige Info für Syncthing-Nutzer auf Android: https://linuxnews.de/neuer-maintainer-beim-fork-von-syncthing-for-android-erweckt-misstrauen/

Quick and easy #PHP code generation testing.
https://peakd.com/php/@crell/quick-and-easy-php-code-generation-testing

#SlowHorses
🤝
#Python

Neither #Affinity nor #Darktable seemingly support 1D LUTs, which would have been too easy and useful for my #DigitalNegative preparation tool... Instead they both insist on using only 3D LUT…

"Studies have found roundabouts reduce all vehicle accidents by 40% and those with injuries by 75%."
https://www.nytimes.com/2025/10/21/climate/roundabout-auto-emissions-new-hampshire.html?unlocke…

Roundabouts in Keene Help Cut Emissions and Air Pollution
Despite its small stature, the city of Keene, has become an example of the safety and climate benefits of swapping traffic lights for roundabouts.

Hegseth will find out that the initial bombing is also very illegal, this hiding behind an admiral won't save him.
https://www.nytimes.com/2025/12/01/us/hegseth-drug-boat-strik…

Hegseth Ordered Lethal Boat Strike but Not the Killing of Survivors, Officials Say
Amid talk of war crimes, the details and precise sequence of a Sept. 2 attack on a boat in the Caribbean are facing intensifying scrutiny.

The #citibank #singapore website is an absolute goldmine of #uxfail.
Want to login? Scan a QR code with the app.. Then enter an OTP code sent via SMS (because that's secure). Now you…

Use BetMGM bonus code CBSSPORTS, get $150 bonus for Rams-49ers on Thursday Night Football, Red Sox-Yankees

https://www.cbssports.com/betting/news/u…

Don't Fear Self-Driving Cars. They Save Lives. (Jonathan Slotkin/New York Times)
https://www.nytimes.com/2025/12/02/opinion/self-driving-cars.html?unlocked_article_code=1.5k8.-Zat.UQWUlrWUMgEn&smid=url-share
http://www.memeorandum.com/251202/p46#a251202p46

How the Venezuelan government is using crypto and stablecoins like USDT to manage the downturn; Venezuela sells most of its oil to China and is paid in crypto (Anatoly Kurmanaev/New York Times)
https://www.nytimes.com/20…

How Maduro Is Responding to Trump’s Pressure on Venezuela’s Economy
President Nicolás Maduro’s opponents hope a new period of economic pain will finally topple his government. He is using cryptocurrency to hold on.

I've completed "Secret Entrance" - Day 1 - Advent of Code 2025 #AdventOfCode
I am not sharing the solution because this year I am using #Gleam and I am far from efficient in it. Yet. :D

Analyzing Latent Concepts in Code Language Models
Arushi Sharma, Vedant Pungliya, Christopher J. Quinn, Ali Jannesari
https://arxiv.org/abs/2510.00476 https://

Analyzing Latent Concepts in Code Language Models
Interpreting the internal behavior of large language models trained on code remains a critical challenge, particularly for applications demanding trust, transparency, and semantic robustness. We propose Code Concept Analysis (CoCoA): a global post-hoc interpretability framework that uncovers emergent lexical, syntactic, and semantic structures in a code language model's representation space by clustering contextualized token embeddings into human-interpretable concept groups. We propose a hybri…

I just completed "Gift Shop" - Day 2 - Advent of Code 2025 #AdventOfCode https://adventofcode.com/2025/day/2

What’s everyone getting sworn in on?
I’m going with the Dial-a-Pirate code wheel from Monkey Island.
https://www.oldgames.sk/codewheel/secret-of-monkey-island-dial-a-pirate

Mr. Corn called the president’s move an “abuse” that crossed a major legal line.
“This is not stretching the envelope,” he said. “This is shredding it. This is tearing it apart.”
https://www.nytimes.com/2025/10/02/u…

Trump ‘Determined’ the U.S. Is Now in a War With Drug Cartels, Congress Is Told
A notice calls the people the U.S. military recently killed on suspicion of drug smuggling in the Caribbean Sea “unlawful combatants.”

Online harassers are using AI tools to create more realistic death threats, posting hyper-realistic AI-generated images and sounds to social media platforms (Tiffany Hsu/New York Times)
https://www.nytimes.com/202…

A.I. Is Making Death Threats Way More Realistic
Online harassers are generating images and sounds that simulate their victims in violent situations.

QR-Code zum "Kokstaxi": "Keine Gefahr steigender Nachfrage"
Bunte Sticker und QR-Codes: In Großstädten liefern Dealer Rauschgift direkt an die Straßenecke. Die Polizei kennt die Strategie, sieht aber keine neue Qualität.

Use FanDuel promo code, get $300 bonus bets by targeting Bears-Bengals, Bills-Chiefs, Seahawks-Commanders

https://www.cbssports.com/nfl/news/use-fan

Whole Foods, MAHA and the Battle Over Healthy Eating in America (Ben Ryder Howe/New York Times)
https://www.nytimes.com/2025/10/29/dining/whole-foods.html?unlocked_article_code=1.xk8.3Hex.uBsMN0Cm66bH&smid=nytcore-ios-share&referringSource=articleShare
http://www.memeorandum.com/251101/p26#a251101p26

Don't be scared, but today's Metacurity is super-packed with frightening cyber developments you should know before you head out to trick and treat, including
--Google and Amazon used secret code to dodge data disclosure laws, investigation,
--Suspected Conti member extradited to US from Ukraine,
--FCC will vote to eliminate cyber reporting requirements for carriers,
--UNC6384 targeted Hungarian and Belgian diplomatic entities,
--Medusa creators reportedl…

Google and Amazon used secret code to dodge data disclosure laws, investigation
Suspected Conti member extradited to US from Ukraine, FCC will vote to eliminate cyber reporting requirements for carriers, UNC6384 targeted Hungarian and Belgian diplomatic entities, Medusa creators reportedly arrested in Russia, UK MoD officer left laptop open on train, much more

ChatGPT in Introductory Programming: Counterbalanced Evaluation of Code Quality, Conceptual Learning, and Student Perceptions
Shiza Andleeb, Brandon Kantorski, Jeffrey C. Carver
https://arxiv.org/abs/2510.00946

ChatGPT in Introductory Programming: Counterbalanced Evaluation of Code Quality, Conceptual Learning, and Student Perceptions
Background: Large language models (LLMs) such as ChatGPT are increasingly used in introductory programming courses to provide real-time code generation, debugging, and explanations. While these tools can boost productivity and code quality, concerns remain about over-reliance and potential impacts on conceptual learning. Objective: To investigate how ChatGPT access affects code quality, conceptual understanding, task completion times, and student perceptions in a CS1 course. Methods: We conduct…

It’s been hours… when I started digging into TinyUSB it was light out, now it’s dark out and I’m exhausted, but my code works!
In large part thanks to the work of @…

I've recently stumbled upon an RCE "exploit" for the Serendipity blog software, which I happen to use and have contributed to in the past. From what I can tell, it does nothing interesting (it does not even work due to broken indents, if one fixes that it uploads a PHP shell given existing credentials, but that won't be executed unless you have a server config that executes .inc files). I'm 95% certain this is bogus. Yet... in case anyone wants to have a look:

Exploit (probably bogus) on exploit-db · Issue #940 · s9y/Serendipity
I stumbled upon this: https://www.exploit-db.com/exploits/52036 This claims to be a remote code execution exploit for serendipity. I believe it is bogus. I'm sharing what I figured out here, mostly...

Using #PHP arrays as pseudo-objects is almost never the right answer. They're less self-documenting, slower, worse on memory, and more bug prone.
https://peakd.com/php/@crell/php-use-a

The state of HTTP clients in Spring
https://spring.io/blog/2025/09/30/the-state-of-http-clients-in-spring

Use DraftKings promo code to get $300 bonus bets, free NBA League Pass by targeting Chiefs-Bills, Saints-Rams

https://www.cbssports.com/nfl/news/use-dra

New York becomes the first US state to require retailers to disclose use of algorithmic pricing tied to personal data; 10 states are considering similar bills (Tim Balk/New York Times)
https://www.nytimes.com/2025/11/29/nyregio

N.Y. Law Could Set Stage for A.I. Regulation’s Next ‘Big Battleground’
The new law seeks to prevent retailers from ripping off consumers by using artificial intelligence and their personal data to charge them higher prices.

My hobby: unfollowing developers who complain that generative “AI” doesn’t work to write code
No shit Sherlock

Trump Administration Fires 8 Immigration Judges in New York (Ana Ley/New York Times)
https://www.nytimes.com/2025/12/01/nyregion/immigration-judges-fired-trump.html?unlocked_article_code=1.5k8.cz07.P2jT4VQ8igrf&smid=nytcore-ios-share
http://www.memeorandum.com/251201/p126#a251201p126

Use DraftKings promo code to earn $200 bonus bets for 49ers vs. Rams, Yankees vs. Red Sox betting on Thursday

https://www.cbssports.com/betting/news/use-…

Sources: Anthropic is in talks to buy developer tool startup Bun for low hundreds of millions, its first acquisition; Claude Code hit $1B in annualized revenue (Sri Muppidi/The Information)
https://www.theinformation.com/articles/an

Anthropic in Advanced Talks to Buy Developer Tool Startup in First Acquisition
Anthropic is in advanced discussions to buy Bun, a maker of software used to run and manage code more efficiently, according to a person with knowledge of the deal. The artificial intelligence company is in talks to pay in the low hundreds of millions of dollars for the startup, which would be ...

CodeChemist: Functional Knowledge Transfer for Low-Resource Code Generation via Test-Time Scaling
Kaixin Wang, Tianlin Li, Xiaoyu Zhang, Aishan Liu, Xianglong Liu, Ziqi Liu, Zhiqiang Zhang, Jun Zhou, and Bin Shi
https://arxiv.org/abs/2510.00501

CodeChemist: Functional Knowledge Transfer for Low-Resource Code Generation via Test-Time Scaling
Code Large Language Models (CodeLLMs) are increasingly used in code generation tasks across a wide range of applications. However, their performance is often inconsistent across different programming languages (PLs), with low-resource PLs suffering the most due to limited training data. In this paper, we present CodeChemist, a novel and efficient framework for test-time scaling that enables functional knowledge transfer from high-resource to low-resource PLs using generated test cases. CodeChem…

"Are we losing our democracy?"
https://www.nytimes.com/interactive/2025/10/31/opinion/trump-autocracy-democracy-report.html?unlocked_article_code=1.xk8.G-lO.sNBbzX5OaSNR&amp…

Opinion | In Trump’s America, Are We Losing Our Democracy?
Donald Trump has wielded power as no previous president has.

OpenAI is launching an AI agent to help developers find and verify bugs in their code.
https://www.axios.com/2025/10/30/openai-security-agent-code-threats

OpenAI's new agent hunts software bugs like a human
The new agent, called Aardvark, can detect bugs and propose patches to security teams.

Putin Underscores Russia's Upper Hand in Ukraine Ahead of Witkoff Meeting (New York Times)
https://www.nytimes.com/2025/12/02/world/europe/putin-witkoff-trump-ukraine-meeting.html?unlocked_article_code=1.5k8.YSqS.hADOCAnTlFKv&smid=url-share
http://www.memeorandum.com/251202/p85#a251202p85

Vibe Coding in Practice: Motivations, Challenges, and a Future Outlook -- a Grey Literature Review
Ahmed Fawz, Amjed Tahir, Kelly Blincoe
https://arxiv.org/abs/2510.00328 https:…

Vibe Coding in Practice: Motivations, Challenges, and a Future Outlook - a Grey Literature Review
AI code generation tools are transforming software development, especially for novice and non-software developers, by enabling them to write code and build applications faster and with little to no human intervention. Vibe coding is the practice where users rely on AI code generation tools through intuition and trial-and-error without necessarily understanding the underlying code. Despite widespread adoption, no research has systematically investigated why users engage in vibe coding, what they…

The U.S. Is Funding Fewer Grants in Every Area of Science and Medicine (Irena Hwang/New York Times)
https://www.nytimes.com/interactive/2025/12/02/upshot/trump-science-funding-cuts.html?unlocked_article_code=1.5k8.UKeD.HQ9xun6Pu_Gt&smid=nytcore-ios-share
http://www.memeorandum.com/251202/p15#a251202p15

Anthropic says over 60% of its business customers use more than one Claude product, a trend it began noticing after Claude Code's rise in popularity (Richard Nieva/Forbes)
http://www.forbes.com/sites/richardnieva/2025/11/28/anthropic-enterprise-claude/

How Instagram’s Cofounder-Turned-Anthropic Product Chief Is Cracking The Enterprise AI Code
Claude Code Is Anthropic’s Gateway Drug To The Enterprise

The Transgender Cancer Patient and What She Heard on Tape (Joseph Goldstein/New York Times)
https://www.nytimes.com/2025/12/01/nyregion/transgender-patient-records-during-cancer-surgery.html?unlocked_article_code=1.5U8.bIpx.mBjIl4L_T9IG&smid=url-share
http://www.memeorandum.com/251201/p108#a251201p108

Improving Code Localization with Repository Memory
Boshi Wang, Weijian Xu, Yunsheng Li, Mei Gao, Yujia Xie, Huan Sun, Dongdong Chen
https://arxiv.org/abs/2510.01003 https://

Improving Code Localization with Repository Memory
Code localization is a fundamental challenge in repository-level software engineering tasks such as bug fixing. While existing methods equip language agents with comprehensive tools/interfaces to fetch information from the repository, they overlook the critical aspect of memory, where each instance is typically handled from scratch assuming no prior repository knowledge. In contrast, human developers naturally build long-term repository memory, such as the functionality of key modules and assoc…

Netanyahu's Pardon Request Borrows From Trump's Playbook (David M. Halbfinger/New York Times)
https://www.nytimes.com/2025/12/01/world/middleeast/netanyahu-pardon-corruption-israel-trump.html?unlocked_article_code=1.5U8.r8Nu.n_OJUthMrAAx&smid=url-share
http://www.memeorandum.com/251201/p51#a251201p51

VibeCodeHPC: An Agent-Based Iterative Prompting Auto-Tuner for HPC Code Generation Using LLMs
Shun-ichiro Hayashi, Koki Morita, Daichi Mukunoki, Tetsuya Hoshino, Takahiro Katagiri
https://arxiv.org/abs/2510.00031

VibeCodeHPC: An Agent-Based Iterative Prompting Auto-Tuner for HPC Code Generation Using LLMs
We propose VibeCodeHPC, an automatic tuning system for HPC programs based on multi-agent LLMs for code generation. VibeCodeHPC tunes programs through multi-agent role allocation and iterative prompt refinement. We describe the system configuration with four roles: Project Manager (PM), System Engineer (SE), Programmer (PG), and Continuous Delivery (CD). We introduce dynamic agent deployment and activity monitoring functions to facilitate effective multi-agent collaboration. In our case study, w…

Trump's Team Offers to Keep Some Ballroom Donors Incognito (Kenneth P. Vogel/New York Times)
https://www.nytimes.com/2025/11/01/us/politics/trumps-team-offers-to-keep-some-ballroom-donors-incognito.html?unlocked_article_code=1.x08.e8N7.ud7cAOKn2Lsl&smid=url-share
http://www.memeorandum.com/251101/p30#a251101p30

Use DraftKings promo code to get $200 bonus bets, free NBA League Pass by targeting Chargers-Raiders, Broncos

https://www.cbssports.com/nfl/news/use-dra

Oneleet, an integrated compliance service combining penetration testing, code scanning, and more, raised a $33M Series A led by Dawn Capital and hits $3M ARR (Dominic-Madori Davis/TechCrunch)
https://techcrunch.com/2025/10/02/oneleet-raises-…

Oneleet raises $33M to shake up the world of security compliance | TechCrunch
Founder Bryan Onel says too many companies are doing the bare minimum to meet their security compliance obligations, and raised $33 million to help his customers get both compliant and secure.

LSPFuzz: Hunting Bugs in Language Servers
Hengcheng Zhu, Songqiang Chen, Valerio Terragni, Lili Wei, Jiarong Wu, Yepang Liu, Shing-Chi Cheung
https://arxiv.org/abs/2510.00532 ht…

LSPFuzz: Hunting Bugs in Language Servers
The Language Server Protocol (LSP) has revolutionized the integration of code intelligence in modern software development. There are approximately 300 LSP server implementations for various languages and 50 editors offering LSP integration. However, the reliability of LSP servers is a growing concern, as crashes can disable all code intelligence features and significantly impact productivity, while vulnerabilities can put developers at risk even when editing untrusted source code. Despite the w…

Anthropic's employees self-report using Claude in 60% of work and achieving a 50% productivity boost, often using it for debugging and code understanding, more (Anthropic)
https://anthropic.com/research/how-ai-is-transforming-work-at-anthropic/

How AI Is Transforming Work at Anthropic
How AI Is Transforming Work at Anthropic

A look at how David Sacks' work on AI and crypto in Trump's WH benefits his investments, those of Silicon Valley friends, and the All-In podcast he co-hosts (New York Times)
https://www.nytimes.com/2025/11/3…

Silicon Valley’s Man in the White House Is Benefiting Himself and His Friends
David Sacks, the Trump administration’s A.I. and crypto czar, has helped formulate policies that aid his Silicon Valley friends and many of his own tech investments.

Google adds a new command-line interface and public API to its AI coding agent Jules, allowing it to plug into terminals, CI/CD systems, and tools like Slack (Jagmeet Singh/TechCrunch)
https://techcrunch.com/2025/10/02/goog

Google's Jules enters developers' toolchains as AI coding agent competition heats up | TechCrunch
Jules is already being used by developers to complete code after experimenting on vibe-coding platforms.