Tootfinder

from my link log —
The earliest Unix code: an anniversary source code release.
https://computerhistory.org/blog/the-earliest-unix-code-an-anniversary-source-code-release/
saved 2019-10-18

The Earliest Unix Code: An Anniversary Source Code Release
In celebration of Unix’s 50th anniversary, the CHM Software History Center is delighted to make publicly accessible for the first time some of the earliest source code produced in the Unix story.

Play-System-Update: Quick Share ermöglicht Datentransfer per QR-Code zu iPhones
Google verteilt ein neues Play-System-Update, mit dem Android-Nutzer Inhalte per QR-Code schnell mit iPhones teilen können.

Play-System-Update: Quick Share ermöglicht Datentransfer per QR-Code zu iPhones
Google verteilt ein neues Play-System-Update, mit dem Android-Nutzer Inhalte per QR-Code schnell mit iPhones teilen können.

«Critical Copilot vulnerability allowed hackers to steal 2FA code from users:
SearchLeak exploit shows why the industry’s approach to LLM security fails over and over.»
WTF: What is intelligent now and how to tackle what? Certainly not the usual popular AI for IT security.
☠️

Critical Copilot vulnerability allowed hackers to steal 2FA code from users
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.

So, I'm still experimenting with locally run LLMs (powered by solar cells!) for writing some inconsequential data mangling stuff for my "vintage cameras" hobby; it's quite interesting how the development cycle with these LLMs sort of drives home that LLMs are completely useless for almost anything they're advertised for, like writing (for humans).
The thing is: coding is the use case that LLMs are by far most suitable for and they still largely suck at it.
There's immense amounts of training data of correctly functioning code, there's tons of documentation, a lot of code is in repositories that include the full history of its development including why stuff was changed in small bits, code itself is the simplest of "human" languages and mathematically non-ambiguous, code can be checked in small bits for correctness by just running it, in many languages simple code snippets can be written to introspect on the code (e.g. find out what methods an object supports, so an LLM can query the language or libraries themselves in addition to the user) and perhaps most importantly: code is always and has always been very similar to other, existing code as most software serves the ever same repetitive use cases, both in detail and on a high level.
YET… using LLMs to code requires countless iterations to get there, both internally in the LLM (to get the code even running in the first place) and together with the user to make it do the right thing. And even when it's "there" the code is mediocre at best, and often veering into appalling.
And this is expected to just work on the first try on much more complex issues like writing for humans? Transcribing doctors? Having legal opinions? Identifying fraud? lol, sure

#Softwaredevelopment & #IA: De l'artisan du #code au superviseur de l'IA - une histoire déjŠ vécue dans l’aviation civile

This is how the rule of law dies
https://www.nytimes.com/2026/07/19/us/politics/fbi-ice-agents-investigations-shootings.html?unlocked_article_code=1.y1A.aLnf.Rl0wNtaiWohG&a…

Federal Agents Were Told FBI Will No Longer Investigate ICE Confrontations
Senior officials deny such a change is in the works, despite guidance shared with agents around the country in recent days.

https://www.nytimes.com/2026/05/17/opinion/holocaust-france-photographs-1941.html?unlocked_article_code=1.jVA.2PsG.YqhclfA3BJ62&smid=nytcore-android-share

Opinion | France Has a New Picture of the Holocaust
A new collection of propaganda photos shows the first roundup of Jews in Paris, in 1941.

Three precedent-setting court rulings in China have said that employers replacing workers with AI is voluntary cost-cutting that does not justify mass layoffs (Catie Edmondson/New York Times)
https://www.nytimes.com/2026/05/19/busines

China Wants A.I. to Flourish, but Not at the Expense of Jobs
A series of precedent-setting rulings signals that Chinese courts are being enlisted to shield workers from displacement by artificial intelligence.

So amazing.
"Dr. Neumann died on Sunday at the Santa Clara Medical Center in Santa Clara, Calif. He was still working full time on a Pentagon-supported advanced computer security design, which is being adopted by companies such as Google and Microsoft. He was 93."

Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93
For decades, he criticized the industry’s lax attitudes toward both computer security and individual digital privacy. And he developed solutions.

Mocking the memory of a citizens’ uprising for democracy during a military dictatorship isn’t the best marketing strategy, Starbucks Korea finds out
https://www.nytimes.com/2026/05/19/world/a

Starbucks Korea CEO Fired Over ‘Tank Day’ Ad Evoking Country’s Brutal History
A marketing campaign called “Tank Day” coincided with the anniversary of a military dictatorship’s crackdown on pro-democracy demonstrators.

Siri AI warnt vor Suchtfaktoren, sagt, dass es kein Mensch ist
Chatbots können Nutzer zu problematischem Verhalten verführen. Siri AI soll das nicht passieren, zeigen Hinweise in Apples Code.
https://www.

Siri AI warnt vor Suchtfaktoren, sagt, dass es kein Mensch ist
Chatbots können Nutzer zu problematischem Verhalten verführen. Siri AI soll das nicht passieren, zeigen Hinweise in Apples Code.

Steven Rosenbaum acknowledges that The Future of Truth, his book about truth in the AI age, released this month to great fanfare, contains quotes made up by AI (Benjamin Mullin/New York Times)
https://www.nytimes.com/…

‘The Future of Truth’ Contains Quotes Made Up by A.I.
Steven Rosenbaum, author of “The Future of Truth,” said he had started his own investigation after The New York Times asked about the fake quotes.

Finally, none of the current AI systems are compatible with the principles formulated in the ACM Code. They rely on stolen data, and they cause significant environmental and social harm. These systems and their creators blatantly violate Section 1.5 of the Code: “Respect the work required to produce new ideas, inventions, creative works, and computing artifacts.”
⇢

Finally, none of the current AI systems are compatible with the principles formulated in the ACM Code. They rely on stolen data, and they cause significant environmental and social harm. These systems and their creators blatantly violate Section 1.5 of the Code: “Respect the work required to produce new ideas, inventions, creative works, and computing artifacts.”
⇢

I.R.S. to Drop Audits of Trump and Family (New York Times)
https://www.nytimes.com/2026/05/19/us/politics/trump-irs-doj-lawsuit-audit.html?unlocked_article_code=1.jlA.ea1r.hcZdxBnvztq2&smid=url-share
http://www.memeorandum.com/260519/p114#a260519p114

#ReverseEngineering Android #malware with #ClaudeCode

@… thanks. Without the redirect and the utm stuff:
https://www.lpi.org/blog/2026/06/19/code-that-built-the-internet-the-impact-…

from my link log —
Speed up your code: don't pass structs bigger than 16 bytes on AMD64.
https://gist.github.com/FeepingCreature/5dff669aad380a123b15659e195fb96c
saved 2024-01-05

Speed up your code: don't pass structs bigger than 16 bytes on AMD64
Speed up your code: don't pass structs bigger than 16 bytes on AMD64 - sixteen_bytes.md

Free your mind of code formatting and focus on code writing in Neovim thanks to conform.nvim
#blog

If you didn't bother to write the PR or code yourself, why should I bother reading your slop?

holy fuck yall
https://www.nytimes.com/athletic/7367897/2026/06/17/sam-kerr-gotham-nwsl-chelsea/?unlocked_article_code=1.q1A.i8QO.Buyms3Kp9j9F

Sam Kerr set to join Gotham FC after leaving Chelsea
Three of Kerr's former Chelsea teammates — Jess Carter, Ann-Katrin Berger and Guro Reiten — play for Gotham.

Guardrails Alliance, a super PAC that raised $5M, launches to advocate for AI safety legislation and counter pro-industry lobbying, running ads for Alex Bores (New York Times)
https://www.nytimes.com/2026/06/18/tec…

New Super PAC, the Guardrails Alliance, Aims to Rally Tech Workers to Help Limit A.I.
The Guardrails Alliance, which has raised $5 million, is positioning itself as a populist effort that will take on the pro-A.I. interests trying to influence this year’s elections.

I suggest if you find a remote code execution vuln in the most popular CMS system in the world and make a web page for it, expect some traffic... https://wp2shell.com/ is currently down...
In other news, if you use Wordpress and have disabled security-autoupdates, you shouldn't have done that. But if you have, …

Peter G Neumann, understood and strongly believed in the systems nature of problems.
That is, there’s not one cause to a problem;
everything, including the humans involved, interact.
Take, for example, buffer overflows,
long a security scourge on the Internet.
Is it the fault of the programmers?
I knew someone who, 40 years ago (and several years before the Internet worm made the problem obvious),
wrote a string-handling library before embarking on…

Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93
For decades, he criticized the industry’s lax attitudes toward computer security and individual digital privacy. He also developed solutions.

CTO Mark Ridley watched in bemusement as Claude Code hacked its way into privileged database access, and shares how he’s stopped it happening again.
https://www.computing.co.uk/feature/2026/c

Claude Code hacked my production database – here's how I fixed it
CTO Mark Ridley watched in bemusement as Claude Code hacked its way into privileged database access, and shares how he’s stopped it happening again.

This (link below) appears to be @…'s (very careful) commentary on the ongoing #BambuLabs #GPL violation row.
It's an interesting read, and …

Dealing with Incomplete Copyleft Source That Doesn't Correspond
Years ago, copyleft violations were often a mere misunderstanding; vendors intended to comply but made mistakes. In those “before times”, a simple request and short discussion often led to the complete, Corresponding Source (“CCS”) for the the distributed binary works (or, in the case of network-service copyleft, the deployed systems).

Nach Aufregung über Daten-Upload: SpaceXAI macht Code von Grok Build öffentlich
Nachdem am Wochenende entdeckt wurde, dass Grok Build ganze Git-Repositories der User in einen Cloud-Speicher geschickt hat, verspricht SpaceXAI Transparenz.

Nach Aufregung über Daten-Upload: SpaceXAI macht Code von Grok Build öffentlich
Nachdem am Wochenende entdeckt wurde, dass Grok Build ganze Git-Repositories der User in einen Cloud-Speicher geschickt hat, verspricht SpaceXAI Transparenz.

"The Uniform Code Council requires that there be a period after each letter in U.P.C. because the letters UPC (without periods) is the trademark of the Universal* Plumbing Code." ☝️
[Nelson, Benjamin (1997): Punched Cards to Bar Codes. A 200 Year Journey with descriptions fo over 260 codes. Helmers. Page 85.]
* Uniform, not Universal. 🧐
https://

Incompetent managers, take note...
#Programming

I just got a spam email about "$350k LOC" and I was immediately like, "who's going to pay *$350k* per line of [computer programming] code that someone writes??"
Turns out it was about a $350k line of *credit*.

How social media influencers have become a magnet for political campaigns and groups in the US that want to push their priorities without disclosures (Ken Bensinger/New York Times)
https://www.nytimes.com/202…

Political Money Is Flowing to Influencers. But From Whom?
Social media stars have become a magnet for campaigns and political groups that want to push priorities without disclosing where their money is going.

Ich sehe was, was du nicht siehst: Metas Smart Glasses: 7 Millionen verkauft, 10 Millionen für dieses Jahr geplant. Die Warn-LED lässt sich leicht umgehen. Die Gesichtserkennung war bereits im Code — nur noch nicht eingeschaltet.#netzpolitik.org analysiert die Lage. Die CNIL nennt es „Normalisierung von Überwachung". #Datenschutz

{ggblanket}, a wrapper around #ggplot for quick, explorative plots with sensible defaults and less code. https://davidhodge931.github.io/ggblanket/

#3goodthings
- Temperatures comping down.
- Did some refactoring on my project (allowing me to slowly decouple my code from a specific upstream library).
- Doggo back from holiday.

Visual Studio 2022 earned trust through stability. VS 2026 rewards that trust with faster builds, snappier search, and an IDE that keeps pace with your code. Here is what staying put costs you. https://www.poppastring.com/blog/its-time-for-a-visual-studio-upgrade

Let's get this straight: anything created with "AI" is #slop.
It doesn't have to be vibe-coded. It doesn't have to be horrible code. It doesn't matter that you've spent hours perfecting the prompt. It doesn't matter that ten people have spent a week reviewing it in detail.
As long as an "AI" took part in writing it, it's slop. It's an unethical technology, and anything created with it is tainted. It's an inhuman technology, and you're supporting it. You're being disrespectful to your users and contributors. You're putting your own convenience over humanity. You're aiding the worst murderous assholes in the history of humanity. And what's perhaps worst, you quite likely believe that you are making a net positive contribution, that you're helping people, while you're actually disrespecting and harming them.
#NoAI #NoLLM

Hoppla.
Das Missy Magazine wurde gehackt:
"Zwischen dem 27. und 29. April 2026 haben sich Unbekannte Zugang zu unserer Website verschafft. Sie haben dort eine gefälschte Zahlungsseite eingebaut und Besucher*innen unserer Webseite, unseres Shops und auch via E-Mail auf die Fake-Seite weitergeleitet, um an Zahlungsdaten zu gelangen und Geld zu stehlen. Wir haben den schadhaften Code schnellstmöglich entfernt und sämtliche Passwörter aller Zugriffswege geändert. Die Spammer hab…

@… "Can emojis be removed from Unicode? Or are they there forever once they are in?" - As of now, once they're in, they're in. The code point in Unicode is then reserved for this symbol. This can be a problem because emojis are kind of open-ended (other than alphabets and many other symbol lists). And it's possible that some emojis turn out to be rarely used. I could imagine that eventually some platforms just stop supporting a certain emoji - but it's really useful to have an international encoding standard which is fully supported by most technology (as anyone who has programmed or written online text in the early 2000s can attest). That's why getting a new emoji approved has become so hard - we're basically creating a kind of tech debt for a potentially long time.
Funny story - you could try creating a post now with a Unicode character from an "empty" code point in the emoji range, in the hope that it will get assigned in a later round. I've seen such a post on the old Twitter, which later was filled with all kinds of random emojis, when you look at it in a few years. #linguistics #emojis #WorldEmojiDay

Wrote a little intro post to my Fisk AI project, why, who for etc
Local friendly, privacy friendly, strong guardrails, doing just what you give it the ability to do etc
Hopefully a AI Harness for sceptics or just for better outcomes for those tasks you wish to do repeatedly.
Minimal dependencies, quick to get going, easy to configure.
Also the easiest possible way to do build MCP servers for other AI Agents

The Escape From Politics
Somewhere in the source code of a website the public was never meant to see, a secret society for the people who run the world kept a list of its members in plain text, sitting in the page where anyone who thought to look could read it....
https://bolesblogs.com/2026/06/19/the-…

“One of the exposed files, titled ‘importantAWStokens,’ included the administrative credentials to three Amazon AWS GovCloud servers. Another file exposed in their public GitHub repository — ‘AWS-Workspace-Firefox-Passwords.csv’ — listed plaintext usernames and passwords for dozens of internal CISA systems. According to Caturegli, those system[s] included one called ‘LZ-DSO,’ which appears short for ‘Landing Zone DevSecOps,’ the agency’s secure code development environment.”

I.R.S. Prohibited From Pursuing Audits of Trump and His Family (New York Times)
https://www.nytimes.com/2026/05/19/us/trump-irs-doj-lawsuit-audit.html?unlocked_article_code=1.jlA.OtS3.BNNcbvrjbIVg&smid=bs-share
http://www.memeorandum.com/260519/p78#a260519p78

A college senior at Stanford describes how AI changed classes: cheating using AI "has become omnipresent" with students "fudging just about everything" (Theo Baker/New York Times)
https://www.nytimes.co…

Opinion | What A.I. Did to My College Class
Lessons from the first graduating A.I. class.

#Steady #Klimacrew
#VibeCoding mit KI-Programmierhilfen in Visual Studio Code ausprobiert.
Ich habe zwei KI-Assistenten für die direkte Integration in VSCode getestet, ob sie meine Erwar…

Visual Studio Code mit KI erweitern: Codex vs. GitHub Copilot
Erfahre, wie du Visual Studio Code mit GitHub Copilot und KI-Agenten effizient einrichtest und optimal nutzt – auch kostenlos!

@… Someone at work recently asked if I knew of a “free” way to generate QR codes.
I held back the desire to explain how it would be insane to pay for a QR code, and sent them your link instead.

Had hoped to work on https://retrofit.sh this week between trips but my laptop screen died in CO and just got word it will take a week to fix after dropping it off in Roseville.
Here’s hoping the backup on my new SSD backup will restore. Unsurprisingly they have to wipe the disk to diagnose the screen.

retrofit — co-evolve source code and database schemas, safely
retrofit is the foundation under seismic changes to source code and database schema. Ship new features faster and refactor away schema debt, safely.

Of course, hottest day so far this year and the A/C is offline. Went down into the crawl space with manual in hand hoping this new fangled computer controlled (Microchip Pic, BTW) air handler would give me a code.
None reported. Just sitting there in standby waiting for a call for cooling. Well, it's 85 in the house and the thermostat is definitely calling! Then I notice the GFC outlet the condensate pump is plugged into has tripped, and the tank is full of water. Reset, re-plug, pu…

#frankfurt #sinti #roma

📈 Full observability suite — Core Web Vitals (RUM), SLOs with burn-rate alerts, incident tracking with MTTR, release health with regression guard & custom business metrics
🤖 First-class #MCP server — let Claude Code, #Cursor or Copilot query live errors, APM, traces, logs, SLOs & rele…

New #ThingUmbrella release(s): Updated the https://thi.ng/geom-io-obj OBJ mesh parser to support stream parsing using async iterables. This allows direct piping fetch() responses to the parser.

Ik weet nog dat ik op Twitter verketterd werd toen ik dat constateerde. Alleen al doordat de verhouding tussen de bezetting op de IC en verpleegafdelingen eind maart 2020 compleet veranderde. Maar hoe durfde ik!!
Artsen: 'Code zwart was er feitelijk wél, honderden overlijdens door beddentekort' https://nos.nl/l/2618646

Artsen: 'Code zwart was er feitelijk wél, honderden overlijdens door beddentekort'
Tijdens de coronaverhoren stellen verschillende sleutelfiguren juist dat Nederland net géén 'code zwart' bereikte.

High-Order ADER-DG Hydrodynamics with ExaHyPE: Implementation, Validation, and Astrophysical Benchmarking
Andr\'es Mauricio Su\'arez Mantilla, Leonardo Casta\~neda Colorado
https://arxiv.org/abs/2605.17132 https://arxiv.org/pdf/2605.17132 https://arxiv.org/html/2605.17132
arXiv:2605.17132v1 Announce Type: new
Abstract: We describe a high-order ADER-DG solver for the compressible Euler equations within the ExaHyPE framework. The implementation combines a high-order ADER-DG polynomial representation, a local space-time DG predictor, adaptive mesh refinement, and an a posteriori subcell finite-volume limiter. We test the code on a deliberately mixed set of one- and two-dimensional problems: a strong-shock Sod-type problem, the Shu-Osher shock-entropy interaction, the Woodward-Colella blast wave, a contact-driven vortex sheet, and a shock-interface interaction. The one-dimensional cases recover the expected Euler wave patterns and show clear order-dependent gains in smooth and oscillatory regions. The two-dimensional cases probe a different part of the method, namely contact preservation, shear-driven roll-up, baroclinic vorticity deposition, and Richtmyer-Meshkov-type growth. In these tests the high-order update gives the expected resolution away from discontinuities, whereas the subcell limiter keeps the calculation stable near shocks and steep interfaces. The resulting code provides a reproducible ExaHyPE implementation for idealised inviscid, non-relativistic flows in which shocks, contacts, and multidimensional interfaces are the dominant features.
toXiv_bot_toot

Buggin': Cowboys DC Christian Parker using codeword play calls to improve communication https://cowboyswire.usatoday.com/story/sports/nfl/cowboys/2026/06/17/cowboys-dc-christian-parker-code…

Hey all what's the best #PythonIDE for running #JupyterNotebooks without genAI?
Edit: never mind, for now I'm just using Jupyter Notebook, I just don't really understand why you'd want to code in a browser, or why you'd want all your functions and code and everything to…

U.S. Plans to End AIDS Funding for South Africa (Zimasa Matiwane/New York Times)
https://www.nytimes.com/2026/06/19/world/africa/southafrica-aids-pepfar.html?unlocked_article_code=1.rVA.-4Kc.gC-G9gMg1wBr&smid=nytcore-ios-share
http://www.memeorandum.com/260619/p76#a260619p76

AI is code – and can't be prompted into being smarter
The author of Java property-testing tool jqwik did not want AI coding agents using his project. So he told them not to.
Then he went one step further: he added a message to the tool's output telling those agents to delete jqwik tests and code. […]
🧑‍💻

AI is code – and can't be prompted into being smarter
From Java tests to Shai-Hulud, bots keep proving they'll swallow anything you feed them

"The American demands are so steep, Greenlandic officials fear, that they amount to a major imposition on their sovereignty. Despite all of the talk from Danish and American officials that Greenland’s future is up to the island’s 57,000 people, Greenlandic officials said the American demands would tie their hands for generations."
#usa

In Closed-Door Talks, U.S. Demands a Major Role in Greenland
Greenlandic officials worry about the direction of the negotiations aimed at defusing President Trump’s threats to seize their island. But they have little leverage.

"The reasoning it shows along the way looks like the work of a senior researcher rather than the output of an automated scanner."
Project Glasswing: what Mythos showed us
https://blog.cloudflare.com/cyber-frontier-models/

Project Glasswing: what Mythos showed us
In recent weeks, we pointed Mythos and other security-focused LLMs at live code across critical parts of our infrastructure. We share what we observed, the models’ strengths and weaknesses, and what the work around them needs to look like before any of it can scale.

Claude Code auf dem Desktop bekommt einen eingebauten Browser
Anthropic gibt Claude Code auf dem Desktop einen eingebauten Browser. Das Frontier-Modell Fable 5 wird erneut verlängert – es bleibt bis zum 19. Juli im Abo.

Claude Code auf dem Desktop bekommt einen eingebauten Browser
Anthropic gibt Claude Code auf dem Desktop einen eingebauten Browser. Das Frontier-Modell Fable 5 wird erneut verlängert – es bleibt bis zum 19. Juli im Abo.

This Redistricting Chaos Must End (Eric H. Holder Jr/New York Times)
https://www.nytimes.com/2026/05/18/opinion/redistricting-democrats-gerrymandering.html?unlocked_article_code=1.jVA.rALm.pW0Qk5dK4WkU&smid=url-share
http://www.memeorandum.com/260518/p112#a260518p112

@…
"… the NextBSD plan is to take the FreeBSD kernel, the most capable of the FOSS BSD kernels, but replace FreeBSD's traditional and server-focused userland with the relevant parts of the publicly available Apple code. …"
Not long ago (6th July), <

Sources: Microsoft plans to remove most of its Claude Code licenses and push its developers toward GitHub Copilot CLI, after previously pushing Claude Code (Tom Warren/The Verge)
https://www.theverge.com/tech/930447/microsoft-claude-code-discontinued-notepad…

Microsoft starts canceling Claude Code licenses
Thousands of Microsoft developers will use GitHub Copilot CLI instead

«Security: This library has not undergone any third-party security audit. Usage is at own risk.»
If something like this is written on a code library, the confidence in your security is much higher than if commercial blenders want to advertise absolute IT security and there are the safest — especially when the commercial goals still list ratings in this way.
#security

GitHub confirms breach of 3,800 repos via malicious VSCode extension
https://www.bleepingcomputer.com/news/security/github-confirms-breach-of-3-800-repos-via-malicious-vscode-extension/

GitHub confirms breach of 3,800 repos via malicious VSCode extension
GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

Justices Hint at Strains as Supreme Court Comes Under Scrutiny (New York Times)
https://www.nytimes.com/2026/05/18/us/politics/supreme-court-political-tensions.html?unlocked_article_code=1.jlA.9cEj.IgR_L7n8CpvT&smid=url-share
http://www.memeorandum.com/260519/p56#a260519p56

RE: https://mastodon.gamedev.place/@glassbottommeg/116937573957540949
This is how I imagine all the indie game devs I follow here commenting their code

from my link log —
Weighted round robin / weighted random integers with the golden ratio low discrepancy sequence.
https://blog.demofox.org/2020/06/23/weighted-round-robin-using-the-golden-ratio-low-discrepancy-sequence/

Weighted Round Robin (Weighted Random Integers) Using The Golden Ratio Low Discrepancy Sequence
UPDATE 6/25/2020: The bottom of the post now has a section about using 2D low discrepancy sequences with an alias table and compares results vs the 1D methods. The code has been updated as well to …

Guest author Peter Firmstone continues to explore and analyze the theme of #Security Baked Into the #JVM.
Today's focus in on the Safe Codebase #Audit

Republican Senators Are Livid at Trump's Endorsement of Paxton (New York Times)
https://www.nytimes.com/2026/05/19/us/politics/republican-senators-trump-paxton.html?unlocked_article_code=1.jlA.VduT.LWbkPkOw31sZ&smid=url-share
http://www.memeorandum.com/260519/p71#a260519p71

GitHub confirms breach of ~3,800 repositories after one of its employees installed a malicious VS Code extension; TeamPCP claimed responsibility for the hack (Sergiu Gatlan/BleepingComputer)
https://www.bleepingcomputer.com/news/secu

Harry Keyishian, Lead Plaintiff in Academic Freedom Case, Dies at 93 (Richard Sandomir/New York Times)
https://www.nytimes.com/2026/04/19/us/harry-keyishian-dead.html?unlocked_article_code=1.cVA.Ca5t._cCM3XETWCj6&smid=nytcore-ios-share
http://www.memeorandum.com/260419/p50#a260419p50

Claude-Code-Leck: 8100 Löschanträge und die Geburtsstunde von Claw-Code
Ein menschlicher Fehler bei Anthropic enthüllt die Architektur autonomer KI-Agenten und löst eine hitzige Debatte über das Copyright an KI-generiertem Code aus.

Claude-Code-Leck: 8100 Löschanträge und die Geburtsstunde von Claw-Code
Ein menschlicher Fehler bei Anthropic enthüllt die Architektur autonomer KI-Agenten und löst eine hitzige Debatte über das Copyright an KI-generiertem Code aus.

An NYT reporter finds AI-generated, unauthorized biographies of herself and other journalists on Amazon, where AI-made books with elusive "authors" proliferate (Kashmir Hill/New York Times)
https://www.nytimes.com/…

Someone Used A.I. to Write an Unauthorized Biography of Me. I Don’t Recommend Reading It.
Someone used A.I. to write my biography. Thousands more of those books are polluting Amazon. Who is behind all this drivel?

Manager at Trump's N.J. Golf Club Helped Plan Reflecting Pool Repairs (New York Times)
https://www.nytimes.com/2026/05/19/us/politics/reflecting-pool-trump-schutzenhofer.html?unlocked_article_code=1.jlA.05SM.UZxiLKvMBLRo&smid=url-share
http://www.memeorandum.com/260519/p89#a260519p89

Cloudflare tests Mythos against 50 repositories, highlights its ability to chain bugs into a single exploit, and details a vulnerability discovery harness (Grant Bourzikas/Cloudflare)
https://blog.cloudflare.com/cyber-frontier-models/

Project Glasswing: what Mythos showed us
In recent weeks, we pointed Mythos and other security-focused LLMs at live code across critical parts of our infrastructure. We share what we observed, the models’ strengths and weaknesses, and what the work around them needs to look like before any of it can scale.

from my link log —
Code smell: concrete abstraction.
https://matklad.github.io/2020/08/15/concrete-abstraction.html
saved 2020-08-20 ht…

The I.R.S. Thought It Could Fight Trump's Lawsuit, but It Reached a Deal Anyway (Andrew Duehren/New York Times)
https://www.nytimes.com/2026/05/19/admin/irs-trump-lawsuit-deal.html?unlocked_article_code=1.jlA.mlGB.aJsBJ1ksQds1&smid=url-share
http://www.memeorandum.com/260519/p51#a260519p51

Security researcher Peter G. Neumann, who criticized lax industry attitudes toward computer security and digital privacy, died on May 17 at the age of 93 (John Markoff/New York Times)
https://www.nytimes.com/2026/05/17/obituar

Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93
For decades, he criticized the industry’s lax attitudes toward both computer security and individual digital privacy. And he developed solutions.

Book on Truth in the Age of A.I. Contains Quotes Made Up by A.I. (Benjamin Mullin/New York Times)
https://www.nytimes.com/2026/05/19/business/media/future-of-truth-ai-quotes.html?unlocked_article_code=1.jlA.VxY4.VHmEk0pr1YpR&smid=nytcore-ios-share
http://www.memeorandum.com/260519/p44#a260519p44

As tech giants rush to build AI infrastructure, some residents living near data centers say a constant infrasonic vibration is ruining their health and homes (Adeel Hassan/New York Times)
https://www.nytimes.com/2026/06/17/us/data

The Cloud Has Sound: The Unrelenting and Unseen Cost of A.I. Data Centers
As tech giants rush to build infrastructure, some residents who live near data centers say a constant low-frequency vibration is ruining their health and homes.

Over 100,000 Family Separations in Deportation Push, Report Estimates (New York Times)
https://www.nytimes.com/2026/05/18/us/brookings-institution-report-family-separations.html?unlocked_article_code=1.jVA.gPn4.lS4ukQnZzpZw&smid=nytcore-ios-share
http://www.memeorandum.com/260518/p87#a260518p87

Trump's Deportations Are Costing Americans Jobs (Ronda Kaysen/New York Times)
https://www.nytimes.com/2026/05/19/realestate/trumps-deportations-are-costing-americans-jobs.html?unlocked_article_code=1.jlA.61Ud.QLOE5qCdPgVs&smid=nytcore-ios-share
http://www.memeorandum.com/260519/p26#a260519p26

South Korean and Taiwanese tech companies that helped build China's hardware sector during the smartphone boom now reap the AI boom as US curbs sideline China (New York Times)
https://www.nytimes.com/2026/06/16/technol

A.I. Boom Ignites Asian Chip Companies
They make much of the gear that goes into giant data centers. Demand for their products is shifting the balance of tech power.

SpaceX's all-stock Cursor deal illustrates the power of public markets, which could help SpaceX narrow the gap with Anthropic and OpenAI through acquisitions (New York Times)
https://www.nytimes.com/2026/06/17/busines

SpaceX’s Growing Warchest
Shares in Elon Musk’s SpaceX have been on a tear, giving the rockets and artificial intelligence company financial resources to box out competitors.

Ray-Ban Meta: Begleit-App enthält Code für Gesichtserkennung
In der Meta-AI-App steckt offenbar bereits weit entwickelter Code für Gesichtserkennung per Smart Glasses. Freigeschaltet ist die Funktion allerdings nicht.

Ray-Ban Meta: Begleit-App enthält Code für Gesichtserkennung
In der Meta-AI-App steckt offenbar bereits weit entwickelter Code für Gesichtserkennung per Smart Glasses. Freigeschaltet ist die Funktion allerdings nicht.

Businesses have started using Kalshi to hedge business risks; Kalshi says institutional trading volume on its platform has grown 800% since November 2025 (Michael J. de la Merced/New York Times)
https://www.nytimes…

Prediction Markets’ Next Major Bet: Wall St. Traders
Platforms like Kalshi let millions wager on sports and pop culture. They’re now hoping institutions will use them for big-ticket trading like hedging.

Anthropic updates Claude Design with design system imports, bidirectional integration with Claude Code, lower token consumption, and more export destinations (Michael Nuñez/VentureBeat)
https://venturebeat.c…

How hacker group TeamPCP exploited the open source trust model and distribution method to compromise and inject malware into over 1,000 software packages (Matt Kapko/CyberScoop)
https://cyberscoop.com/teampcp-breaks-open-source-software-trust-model/

How software development’s speed obsession enabled TeamPCP’s chaos crusade
The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.

Vitalik Buterin says AI-assisted "formal verification" could help secure blockchain networks, smart contracts, and cryptographic systems against software flaws (Jason Nelson/Decrypt)
https://decrypt.co/368226/ethereum-founder-vitali…

Ethereum Founder Vitalik Buterin Says AI Verification Could Help Secure Crypto Networks
Vitalik Buterin said mathematically verified software may help protect cryptographic infrastructures as AI improves both code generation and vulnerability discovery.

Trump Administration Pushes Narrative of Christian Founding at Rally (New York Times)
https://www.nytimes.com/2026/05/17/us/trump-prayer-rally-national-mall.html?unlocked_article_code=1.jFA.710M.fsGt5ijTRcEA&smid=nytcore-ios-share
http://www.memeorandum.com/260517/p45#a260517p45

The Real Reason Trump Never Stops Talking About Voter Fraud (Jamelle Bouie/New York Times)
https://www.nytimes.com/2026/06/17/opinion/trump-pratt-voter-fraud-republicans.html?unlocked_article_code=1.q1A.gqg-.g-Y3_vdmVvD6&smid=url-share
http://www.memeorandum.com/260617/p75#a260617p75

A hacker claims to have accessed Suno user info and source code, showing how it scraped music; Suno says no sensitive info was compromised in a November hack (Jason Koebler/404 Media)
https://www.404media.co/hack-reveals-suno-ai-music-generator…

Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius
Hacked source code reveals how Suno scraped decades worth of music and podcasts from the internet to train its AI tool.

Trump Administration to Pay $765 Million to Cancel 4 More Wind Projects (Brad Plumer/New York Times)
https://www.nytimes.com/2026/06/17/climate/trump-wind-farms-cancel-millions.html?unlocked_article_code=1.q1A.geNd.zne4IT6RpsDO&smid=nytcore-ios-share
http://www.memeorandum.com/260617/p137#a260617p137

Trump Pulls Back Intelligence Pick to Pressure Congress on Elections Bill (New York Times)
https://www.nytimes.com/2026/06/17/us/politics/senate-intelligence-nomination-voter-restrictions.html?unlocked_article_code=1.q1A.a77b.xF-3B8M3re4P&smid=url-share
http://www.memeorandum.com/260617/p52#a260617p52

An NYT reporter finds AI-generated, unauthorized biographies of herself and other journalists on Amazon, where AI-made books with elusive "authors" proliferate (Kashmir Hill/New York Times)
https://www.nytimes.com/…

Someone Used A.I. to Write an Unauthorized Biography of Me. I Don’t Recommend Reading It.
Someone used A.I. to write my biography. Thousands more of those books are polluting Amazon. Who is behind all this drivel?

OpenAI says two employee devices were impacted via a supply chain attack on TanStack but no user data or production systems were compromised (Lorenzo Franceschi-Bicchierai/TechCrunch)
https://techcrunch.com/2026/05/14/openai-says-hacker…

OpenAI says hackers stole some data after latest code security issue | TechCrunch
OpenAI said the damage was limited to the employees’ devices, and did not affect user data nor its production systems, and none of its intellectual property was stolen.

Analysis: Meta removed code for an unreleased face-recognition system in the Meta AI app for its smart glasses, following a report on the code's existence (Wired)
https://www.wired.com/story/meta-removes-face-recognition-code-meta-ai-app-smart-gl…

Meta Deletes Face-Recognition System From Its Smart Glasses App After WIRED Report
The code WIRED identified is gone from the latest version of Meta AI, the companion app for the company’s smart glasses. Meta won’t say why or whether it’s coming back.

At AWS Summit, AWS announced Continuum, which uses AI to find and fix code vulnerabilities, Context, which organizes company data for AI agents, and more (Todd Bishop/GeekWire)
https://www.geekwire.com/2026/amazon-unvei

Amazon unveils new AI agents, trying to thread the needle between autonomy and human control
AWS used its New York Summit to roll out AI agents that act on their own — from fixing security vulnerabilities to triaging email — while trying to keep humans in control of how far they go.

Sources: OpenAI acquired Weights.gg, which offered AI tools to create clones of people's voices, earlier this year; PitchBook: Weights.gg had raised roughly $4M (Mike Isaac/New York Times)
https://www.nytimes.com/2026/05/15/technol

OpenAI Bought Company That Offered A.I. Tools for Cloning Voices
The acquisition, Weights.gg, was a sort of social network for creating and sharing artificial intelligence algorithms.