Hi there!

🛡️ Security & Privacy

• Ubuntu 22.04, 24.04 and 26.04 LTS kernels remain unpatched for critical CVE-2026-98432 (CVSS 9.8), with no fix ETA announced. More
• OpenSSH on musl Linux without PAM lets any 257–1024-character password into passwordless accounts; fix with OpenSSH 10.6p2 or disable passwords. More
• NIST’s plain-language cybersecurity guide for solopreneurs builds on CSF 2.0, covering basics like backups, updates and changing default passwords. More
• Researchers found macOS daemons building an on-device personal knowledge graph from Contacts, Photos, Messages and location, and released iKnow to inspect it. More
• A cyberattack remotely altered fridge/freezer settings (some set to +50°C or defrost mode) at dozens of stores across Europe, hitting chains including Ahold Delhaize and Coop in Sweden. The same vulnerability behind last month's French supermarket attacks appears to have been reused; vendors stress a software patch alone isn't enough and recommend securing remote connections. More
• OpenAI's automated pipeline found and exploited 948 unique local privilege escalation (LPE) vulnerabilities in the Linux kernel in a single October scan (up from 166 in July with an older model), for ~$1.2M in API credits. Linux maintainers are rapidly patching, and OpenAI argues frontier models will soon find essentially all vulnerabilities in a project — pushing the security focus toward high-assurance software, reduced attack surfaces, and formal verification. More

🛸 Tech

• For the first time since 1998, the ISO National Bodies rejected a C++ draft standard (DIS 26926), with comments pointing to the Contracts feature as the sticking point — despite WG21 approving it repeatedly with the required two-thirds majority. The process is at a standstill ahead of the November 16 committee meeting, and the fallout could ripple into C++29. More
• ERICI proposes an open, partitioned RVA23 RISC-V reference stack for industrial computers, from firmware and hypervisor to real-time OS and Linux. More
• Stringman is an open-source, air-gappable, $795 room-scale cable robot using four motors and offering 1.9 kg average payload. More
• Kagi Search now allows 50 searches without an account, plus a redesigned Android app, new Assistant voice input and Translate updates. More
• libghostty-vt 1.0 ships a stable C ABI for its MIT-licensed terminal library, already powering JetBrains IDE terminals. More
• Declarative Dragging, a UIST 2026 Best Paper, makes drag-and-drop interactions by declaring reachable model states, implemented in the Dragology library. More

🤖 AI

• MIT’s weight-space programming claims GPT-6 Astra edits network weights, lifting Qwen3.5-0.8B’s MATH-500 from 7.9% to 48.1%; Honnibal calls the framing misleading. More, More
• Perplexity launches “teammates,” personal agents that own ongoing sales, marketing and ops work with memory and isolated environments, first for Max subscribers. More
• Gemini Omni 1.2 Flash reaches general availability with 15-second video, conversational editing and 30% lower pricing, at $0.07 per second for 720p. More
• Hightouch found a cheap Jev model escalating uncertain cases to Claude Opus matches Opus-level identity-resolution grading at over 4x lower cost. More
• The Little Book of Generative AI Foundations is a derivation-driven primer linking PCA, VAEs, diffusion, flows, GANs and energy-based models. More

🛠️ Tools

• syscall.sh offers Linux syscall tables for 38 architectures, from Linux 3.3 to 7.3, with JSON files and an API. More
• HackerBooks lets you browse 15,704 books mentioned on Hacker News, ranked by how many different people recommend them. More
• OmniDiff is a fast, syntax-aware diff tool for 24 languages with a TUI, JSON output, and git difftool and Jujutsu integration. More
• Radiaverse is a community radiation map built from RadiaCode detectors, with 50.9 million measurements from 2,743 contributors. More
• Hacker Times presents Hacker News as a regularly updated newspaper with independent headlines and links to original sources. More

🛩️ Misc

• Foldable Flight offers 109 paper airplane designs with folding tutorials, rated by difficulty, speed, glide and accuracy, including world-record gliders. More
• watched.earth is a satellite imagery lookup tool. You enter any place on Earth and the site shows you every satellite that passed over that location in the last 7 days — along with the actual images those satellites captured. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan