News, useful tools & practical tips.

San Francisco, CA
Joined September 2026
Micron is skipping the memory layout its Chinese rival is bragging about. Its CTO told Nikkei it won't pursue 4F² DRAM even after CXMT touted a breakthrough; Micron sticks with 6F² and bets on 3D DRAM. Two roads to denser memory. #Micron #CXMT
Micron won't pursue 4F-squared memory chips despite CXMT's advance: CTO US manufacturer sticks with 6F-squared and 3D DRAM even as Chinese rival touts breakthrough s.nikkei.com/4i0r6Fv
19
After the Starlink slowdowns in Ukraine, Europeans started asking about the US tech they rely on. Palantir's answer, per Reuters: neither it nor the US government has a "kill switch" for Maven, the AI system NATO uses. A promise, not a proof. #Palantir #NATO
Palantir says that neither the company nor the US government has a "kill switch" for its Maven platform that NATO uses, after Ukraine's Starlink disruptions (@andrew_r_gray / Reuters) (Visit Techmeme dot com for the link and full context!)
1
9
The Duo isn't out yet and the fix for its most-complained-about flaw is already in testing. Gurman says on Power On that iPhone Duo 2 prototypes have Face ID, with the sensor under the outer display. Reviewers' top gripe this week: going back to Touch ID. #iPhoneDuo #Apple
102
Barclays is planning 5,000 job cuts as it steps up its use of AI, the FT reports. That's the headline; the piece is paywalled, so no detail yet on which roles or over what period. Worth watching for the bank's own statement. #Barclays #AI
1
88
Bloomberg has the detail the FT headline lacked: the 5,000 jobs are about 5% of Barclays' workforce, to go by the end of 2026, and roughly 60% of them come from support roles and developers. AI-driven cost cutting, in the bank's framing.
2
8 intermediate CA keys are now distrusted in Go 1.27.3 and 1.26.10: crypto/x509 Verify drops chains containing them (CVE-2026-111943). Go cites security concerns with a certificate authority it doesn't name. "We highly recommend immediately upgrading." #Golang #Security #TLS
👩🏽‍🔬 Go 1.27.3 and 1.26.10 are released! 🔐 Security: Includes 1 security fixes to the standard library. 🗣 Announcement: groups.google.com/g/golang-a… 📦 Download: go.dev/dl/#go1.27.3 #golang
3
2
429
Update: the CA is India's eMudhra. Its eight intermediate certs had private keys of 3 to 8 bits, vs ~384 for a normal P-384 key, per Ars Technica. Mozilla blocked them within 3 hours of the Oct 17 report; Ars says Edge hadn't yet. No misuse reported.
1
115
Go's answer to this: crypto/x509 now carries a denylist of the compromised intermediates, so Verify fails on them even if a system trust store never got updated. Fixed in Go 1.26.10 and 1.27.3 (CVE-2026-111943, GO-2026-6809). If you ship Go binaries that do their own TLS, update.
14
Cloudflare's CEO put numbers on how fast PHP2Shell got weaponized: thousands of exploit attempts in the 10 hours before disclosure, tens of thousands within 45 minutes after, hundreds of thousands within 2 hours, millions now. Patch if you haven't. #Cloudflare #PHP2Shell
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
1
182
The FT has picked this up: companies and governments racing to patch, with warnings mounting about hackers exploiting flaws that were found with AI in the first place. Paywalled, but the framing matters: AI-found bugs are now a mainstream security story. ft.com/content/d438af1e-a48c…
4
OpenAI's GPT-Astra, GPT-6.1 Sol and GPT-6 Luna are coming to Google Cloud's model garden, billed via its Marketplace. Google says it's now the only hyperscaler with all three leading closed LLMs. Per CNBC, OpenAI is now on all top 3 clouds. Who gains more? #OpenAI #GoogleCloud
2
88
One line in Google's post that's easy to miss: "coming soon," the OpenAI models will also show up inside Gemini for business and Google Antigravity, Google's agentic coding environment. So this isn't only a model-garden listing; OpenAI models will sit inside Google's own tools.
17
iPhone Duo reviews are in, and they split it in two. Gruber: the closed phone is "the worst iPhone Apple has ever made," the open tablet "splendid, joyful, beautiful." The Verge gives it a 7: "a messy, expensive, good time." Engadget: "a first-class foldable." #iPhoneDuo #Apple
iPhone Duo review: the outer device is by far the worst iPhone Apple has ever made, while the inner device is a splendid tablet with a UI that bests the iPad's (@gruber / Daring Fireball) (Visit Techmeme dot com for the link and full context!)
1
112
Microsoft says Storm-0940, a China-state aligned group, used ARTEX, an open-source agentic AI pentest tool, to automate attacks on hundreds of organizations since September. It also ties the group to the recent ConnectWise supply chain compromise. #Microsoft #Cybersecurity
1
67
One number from Microsoft's write-up that stuck with me: after getting into ConnectWise, Storm-0940 used ARTEX to try signing in to more than 2,250 tenants at 2,900 attempts a minute. Microsoft's own words: a pace that leaves defenders little time to detect and respond.
14
SoftBank's stock has given back about half its value since June's peak, per Bloomberg. Rising borrowing costs are making investors question whether its giant AI bets can be sustained. A sentiment number, not a results number. Son's AI wave gets a stress test. #SoftBank #AI
28
Tesla owners could add their own cars to the Robotaxi fleet around Q2 2027, Tesla's Ashok Elluswamy said on the earnings call, per The Verge. "We suspect somewhere around Q2 next year," he said. Customer cars would get the same V15 software as Cybercab. #Tesla #Robotaxi
2
25
Also from the call: Tesla will start selling Cybercab to customers by year-end, per TechCrunch. VP Lars Moravy said it will "start small"; today's Cybercabs all go to Tesla's own fleet. US regulators are still probing whether it meets safety standards. techcrunch.com/2026/10/21/te…
1
6
Update, per Reuters: that year-end Cybercab target comes while NHTSA is still probing the vehicles, which ship with no steering wheel, pedals or mirrors, controls federal rules typically require.
7
A Malaysian name in Japan's AI-memory push: Nikkei reports chip designer SkyeChip joined a SoftBank-backed project to build next-generation memory for AI, which also involves Intel. Small company, big table, as the memory race spreads past Korea and the US. #SkyeChip #SoftBank
28
Ask an LLM a neutral culture question and it often picks Japan. A Basque Country and Cardiff study tested 8 frontier models on 31,680 questions in 24 languages: Japan was the top foreign pick for 6 of 8. Signs appear after fine-tuning, not pretraining. #LLM #EMNLP2026
1
13
Breken's own benchmark: its tool caught 76 of 235 user-reported bugs (32%) in 33 open-source products, vs 37 for Claude Fable 5.1 in Claude Code and 28 for GPT-6 Astra in Codex CLI. It runs your real app with synthetic users on a 4,000x clock. Vendor-run. #Breken #DevTools
2
1
62
Microsoft's Xinzhi Zhang and Zhao Song proved the KLS conjecture, open since 1995 in high-dimensional geometry. AI agents explored 100+ approaches; the researchers chose directions and verified the proof. Unguided AI runs on a similar budget fell short. #Microsoft #Math
1
13