PEAKS No 59: AI Model Wars Heat Up, Nvidia Eyes Hugging Face, and Apple Patches Its Privacy Prompts
Hi there!
🛡️ Security & Privacy
- Android 17 rolls out Encrypted Client Hello to hide the websites you visit from network snoops, forces apps to ask permission before scanning your home Wi-Fi, enables Certificate Transparency by default, and lets carriers auto-disable 2G to block SMS-blaster scams. More
- Apple will make eight changes to its App Tracking Transparency prompts in the EU — including dropping the word "track" and renaming buttons to "Allow"/"Reject" — after a German antitrust probe. More
- Wiz's autonomous "Red Agent" found and exploited a GitHub Actions script-injection flaw in a Snowflake repo just five days after it was merged — a bug GitHub Copilot had reviewed and missed entirely. More
- A 22-year-old researcher reverse-engineered Apple's private Find My protocols to enroll a Linux machine as a trusted node and decrypt a friend's already-shared live location — not an exploit, but a detailed map of how Apple's location-sharing keys work. More
🛸 Tech
- Apple debuted the new Mac Studio with M5 Max and the all-new quad-die M5 Ultra chip, promising up to 4.3x faster AI performance, 512GB of unified memory, and Thunderbolt 5 clustering for distributed inference. More / More
- Apple confirmed its iPhone launch event for September 9, "Surprise and Shine," expected to unveil the iPhone 18 Pro lineup and possibly its first foldable — the first keynote under incoming CEO John Ternus. More
- Nvidia is reportedly closing in on a roughly $13 billion deal to acquire Hugging Face, the open-source AI hub, in what would be one of its biggest acquisitions yet. More
- A Reuters investigation details how Mark Zuckerberg's secret plan to replace thousands of Meta staff with AI agents ("Project OT") collapsed after AI-generated code triggered a spike in security incidents and failed to deliver promised productivity gains. More
- Cloudflare rewrote its 1.1.1.1 DNS cache's memory layout in Rust, cutting per-entry footprint by 56%, freeing roughly 100 terabytes of memory fleet-wide, and boosting insert throughput by 43%. More
- Cursor launched Origin, its own git-hosting platform built "for agent scale" with repos, pull requests, and GitHub sync — timed right as a major GitHub outage hit. More
- MIT engineers turned bacteria into living transistors, building circuits from five bacterial strains that can add inputs or route signals — a step toward biological sensors that could one day monitor plant roots for drought or pests. More
- Linux 7.2 shipped with faster I/O and new AMD/Intel driver improvements, capping a kernel cycle maintainers described as flooded with AI/LLM-generated patches and bug reports. More
- The Bun runtime completed an AI-driven rewrite from Zig to Rust in just 11 days — over a million lines of code, 6,778 commits, 64 parallel Claude instances, and a $165,000 API bill — fixing chronic memory leaks but leaving ~13,000 "unsafe" blocks behind. More
- OpenRouter, the "Stripe for LLMs," announced it's joining forces with Stripe itself, promising no changes to its product, mission, or model-neutral routing. More
- GrapheneOS confirmed its first Motorola-powered phones will launch in 2027, starting with flagship Snapdragon hardware since current chips lack the memory-tagging and secure-element support the project requires. More
- M5Stack launched PaperMono, a compact ESP32-S3 E-Ink development terminal with touch, NFC, LoRa, and a built-in battery for low-power IoT projects. More
- Pollen Robotics unveiled Microduck, a $399 open-source 25cm biped robot trained via reinforcement learning in simulation, deployable and retrainable on the real hardware. More
🤖 AI
- Essayist Calvin French-Owen argues small, fast, cheap models (like OpenAI's "luna") are quietly becoming as important as frontier models, unlocking consumer AI products that were previously too expensive to run. More
- Claude Cowork gained its own built-in browser on the desktop app, letting Claude navigate sites, fill forms, and pull data without ever touching your personal Chrome tabs or logins. More
- Alibaba released Qwen3.8-Flash-Next, an open-weight 125B-parameter MoE model (6B active) previewing the architecture behind the upcoming Qwen4, with a 1M-token extended context window. More
- A newsletter breakdown lays out six RAG architectures from plain full-text search to agentic retrieval, arguing most teams over-engineer their retrieval stack when simpler options would do. More
- Z.ai released GLM-5.3-Flash, a 320B-parameter natively multimodal MoE model with a 1M-token context window, MIT-licensed weights, and coding benchmarks landing near Claude Opus 4.8 — after quietly topping charts for a week under the alias "Ox Alpha." More
- Perplexity launched "Portable Computer," a fully local version of Perplexity Computer running entirely on an Nvidia DGX Spark with no cloud dependency for its orchestrator and subagent models. More
- A Substack guide walks through building a Claude-and-Obsidian "Assisted Knowledge Management" system that files your writing locally into a themed vault instead of trusting a cloud-based "second brain." More
- A developer built "Huzzah," an experimental editor that swaps longform AI chat prompts for persistent, declarative pseudocode files that regenerate real code on save. More
🛠️ Tools
- OpenExecutive is an open-source AI "virtual executive team" — eight specialist Claude agents (CFO, COO, CMO, and more) unified behind one coherent voice, deployable via Slack, Discord, or email. More
- Tailscale open-sourced Tailcat, a netcat-like CLI that tunnels traffic over its encrypted WireGuard data plane without needing a Tailscale account or control plane. More
- OpenLogi is a native, local-first Rust alternative to Logitech Options+ that remaps buttons and drives DPI over HID++ with no account and no telemetry. More
- Mixfont's "Decoy Font" experiment hides a second hidden message inside every letter using hybrid-image techniques, designed to confuse AI text readers while remaining legible to humans. More
⚙️ Misc
507 Mechanical Movements brings Henry T. Brown's 19th-century engineering reference to life with animated illustrations of classic gears, pulleys, and linkages. More
đź“© Please feel free to share this article with colleagues and friends who will find it valuable.
Thanks for reading!
Have a great day!
Bogdan