Curated by Shen Huang · 87 stories · ~13 min read
DIGEST · 2026-10-21

OrangeBot.AI Digest — 2026-10-21

87 headlines across 8 sources, aggregated for this day.

Hacker News(15)

  1. Meta hit with $25B penalty for deceiving users about privacy on Facebook (nmdoj.gov)
  2. Mistral Large 4 (mistral.ai)
  3. Claude Duet (claude.com)
  4. Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)
  5. EA is shutting down BioWare (www.theverge.com)
  6. Today's PHP security release, and how we're strengthening security (thephp.foundation)
  7. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
  8. DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)
  9. The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck (www.techdirt.com)
  10. Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)
  11. PHP2Shell: AI uncovers critical RCE in PHP (www.wiz.io)
  12. PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out (www.php.net)
  13. PHP 8.2.35 (github.com)
  14. Qwen3-Coder writes less secure code when told it's for a US persona (www.hirundo.io)
  15. Dutch National Cyber Security Center is Offline because it uses PHP (www.ncsc.nl)

GitHub Trending(12)

  1. cloudflare / security-audit-skill
  2. vllm-project / vllm
  3. stablyai / orca
  4. headroomlabs-ai / headroom
  5. DietrichGebert / ponytail
  6. Comfy-Org / ComfyUI
  7. supabase / supabase
  8. twentyhq / twenty
  9. shiyu-coder / Kronos
  10. strelov1 / freehire
  11. akitaonrails / ai-memory
  12. Graphify-Labs / graphify

Product Hunt(15)

  1. ilha

    Your Claude Code and Codex limits, live in the notch

  2. Nimbalyst Wiki

    Wiki your agents write for you to think, organize, direct

  3. Tend

    Personal AI for businesses and entrepreneurs.

  4. The Brains

    Founders and investors as MCP servers, every answer cited

  5. TwinMind for Desktop

    Transcribe meetings and dictate anywhere on Mac & Windows

  6. Flagsmith Experiments

    Open-source A/B testing built on your feature flags

  7. Mouse-1

    A decision model for your agent harness.

  8. PrivOS

    Chat, Docs, Kanban Tasks and Al agents that act, self-hosted

  9. AskDoozy

    An AI coworker in Slack that does your real work

  10. Koi

    Every tool you need, in one Mac app

  11. Hotly

    Get paid to answer your DMs. Open source.

  12. Yarite

    A daily list of who to call. Nothing leaves your phone.

  13. Blooio

    Apple Messages for Business made easy

  14. NativeShip

    The easy way to launch your n8n native integration

  15. BAND for Developers

    Coding agents, meet teamwork

Hugging Face(15)

  1. Matrix-Game 4.0: Harnessing Video Models for Real-Time Playable Game Worlds

    Moving from controllable videos to genuinely playable worlds requires persistent world state, executable game rules, and low-latency interaction. We outline a roadmap for the next generation of Matrix-Game that separates game execution from visual generation through an executable game harness, and introduce Matrix-Game 4.0 as the first system built on this design. A lightweight game engine maintains world state and executes interaction rules, a multimodal coding agent translates player ideas into game code and dynamic scene captions, and a renderer based on autoregressive video model transforms engine-rendered low-poly proxies into detailed visuals, conditioned on dynamic captions and memory references. This framework provides continuous guidance for visual generation and enables natural-language creation and modification of scenes and gameplay. Our renderer is trained on aligned low-poly and high-fidelity video pairs and distilled into a causal generator that generates in four-frame chunks with one or two denoising steps. Together with targeted inference optimizations, Matrix-Game 4.0 enables 480p, 60 FPS gameplay on a single NVIDIA RTX5090 with a key-press-to-display latency of 112ms. Single-step generation achieves 83FPS steady-state throughput with 18.2GiB of peak GPU memory usage. With fixed prompts, steady-state throughput also reaches 67FPS on an RTX5080 and 58FPS on an RTX5070Ti. We demonstrate customizable shooter and driving games with engine-enforced mechanics, and release code, model weights, and low-poly game assets to support research and creation of playable game worlds.

  2. Ropedia W0: Scaling Loco-Manipulation World Models across Embodiments with Human Experience

    World models enable embodied agents to anticipate action consequences, yet jointly modeling locomotion and manipulation across diverse embodiments remains challenging due to heterogeneous action spaces and limited multimodal supervision. We present Ropedia W0, the first egocentric loco-manipulation world foundation model spanning humans and robots with diverse embodiments. We curate Xp-Data, comprising 10k hours of egocentric human data and 3k hours of robot data with unified multimodal annotations and systematic quality control. A unified kinematic representation encodes locomotion through camera poses and manipulation through projected skeletons, with robot skeletons combining embodiment-specific forward kinematics with extensive manual keypoint annotation and correction. We also introduce Xp-Teleop, a long-horizon loco-manipulation benchmark based on high-quality dexterous humanoid teleoperation data. Evaluations demonstrate state-of-the-art performance across five cross-embodiment benchmarks (DreamDojo, Ψ_0, ω-HOME, Xp-Teleop, and AgiBot) and on held-out human egocentric video, from zero-shot inference to few-shot and full-data post-training. Scaling human pre-training data improves performance on both human and robot evaluations. After distillation, our model supports real-time, minute-long rollouts, enabling live VR interaction. Applications in policy evaluation, model-based planning, and world-action modeling further demonstrate the model's utility for embodied decision-making.

  3. PAR: Progress-Aligned Recurrence for Length Generalization in State Tracking

    Looped language models can run more iterations at test time, but additional iterations need not help them solve longer problems. For sequential state tracking, final-answer supervision does not specify how far each iteration should advance, and repeated updates can change the scale of the recurrent state. We introduce Progress-Aligned Recurrence (PAR), which trains the prediction at iteration k to match the state after the first k operations and rescales recurrent states to their first-iteration norms. On swap-S_5, a Qwen2.5-0.5B model trained on at most 32 moves achieves 95.5\% mean full-state accuracy at 512 moves, or 16times the training length, compared with 55.7\% reported for RLT and 0.8\% for explicit chain of thought on the same backbone. Controlled S_5 ablations show that removing norm anchoring reduces the extrapolation factor from 16times to below 2.2times, and replacing progress-aligned targets with final-answer supervision reduces it to at most 8times. A learned completion readout selects when to answer without a supplied stopping depth. When intermediate labels are unavailable, prefix self-distillation induces the correspondence from shorter problem prefixes using only final answers. The gains apply across sequential state-tracking tasks, establishing the task structure required for depth extrapolation. These findings support training intermediate predictions and state scale together to make additional recurrent depth useful for longer problems.

  4. S-Agent 2.0: Spatial Reasoning with a General Coding Agent

    Spatial reasoning asks a model to work out where objects are in 3D space, how they relate to one another, and how they move. Agentic VLMs have recently brought large improvements on such tasks by letting the model actively gather evidence with 3D perception tools instead of answering in a single pass. Even so, on many questions the tools return the right evidence and the model still does not arrive at the correct answer: the gap between model and tools, where raw readings become usable conclusions, is left unfilled. We present S-Agent 2.0, a spatial reasoning agent that equips an off-the-shelf general coding agent with a command-line perception toolkit, and we design the interface around one principle: help the VLM close the evidence loop: acquire scene evidence, remember it in a persistent scene memory, and interpret each reading in plain spatial language. This design keeps the full flexibility of a coding agent, and every reading it acts on stays grounded in the tools' geometry. On MMSI-Bench and ReVSI, the toolkit improves a strong open-source model, Qwen3.8-27B, by +13.9 and +20.5 points over the same agent without tools, and a strong closed-source model, Gemini-3.8-Flash, by +11.2 and +9.6 points. With the open backbone S-Agent 2.0 reaches 66.5 on MMSI-Bench and 82.3 on ReVSI, ahead of the specialized system SpatialClaw on the same backbone (62.6 and 74.5), and with Gemini-3.8-Flash it reaches 74.1 and 90.5 against its 67.0 and 79.7. Both tool gains shrink as the backbone grows more capable, but SpatialClaw's shrinks far more on ReVSI, from +13.2 to +2.7, while ours stays at +9.6. S-Agent 2.0 also works across different general coding agent harnesses, such as Codex and Claude Code.

  5. CoEvo-RSI: When Harnesses Evolve, Which Models Should Follow?

    Model--harness co-evolution has emerged as a prominent paradigm for recursive self-improving (RSI) agents, jointly evolving their execution scaffolds and intrinsic capabilities. We study the persistent yet often overlooked brain--body mismatch problem in this paradigm, where an evolving harness (body) demands behaviors its model (brain) has not learned or restricts capabilities it already possesses. We introduce CoEvo-RSI, a RSI framework that advances model--harness co-evolution through agent-driven, bidirectional historical inheritance. Drawing on a shared evolutionary archive and execution feedback, a meta-agent coordinates harness development from historical designs with model checkpoint selection or merging and subsequent adaptation under the selected harness, aligning inherited capabilities with evolving execution requirements to reduce brain--body mismatch. Using only supervised fine-tuning (SFT) on its own rejection-sampled trajectories, CoEvo-RSI makes Qwen3.5-9B competitive with larger models across diverse vertical applications, including multi-agent failure attribution, role-aware text-to-SQL, and smart-home instruction following. It surpasses DeepSeek-V4-Pro on TraceElephant (+14.16 agent accuracy) and GLM-5.3 on HomeBench VM (+4.90 success rate), underscoring the need for brain--body alignment and the potential of bidirectional historical inheritance to advance agent co-evolution.

  6. Learning the 4D World through Point Trajectory Forecasting

    Reliable multi-view forecasting requires videos from different cameras to describe the same evolving 3D scene. To this end, we introduce Video-Point Model (VPM), a world model that conditions on multi-view video histories and a language instruction to jointly forecast future videos from arbitrary viewpoints and the 3D trajectories of persistent scene points. We extend a pretrained world model with camera-conditioned multi-view processing that integrates complementary observations across cameras, and add a trajectory head that predicts how physical points move through time. Each trajectory tracks a single point across all views, and supervising these trajectories alongside video generation therefore anchors appearance changes in every camera to a shared description of 3D motion. To support training and evaluation, we build VPM-Data, a simulation corpus pairing synchronized multi-view videos with persistent point trajectories, and VP-WorldBench, a forecasting benchmark spanning simulated and real environments. We further extend VPM to robot control by adding robot actions as a token modality in the generator. Action tokens share the point-supervised backbone and are denoised jointly with future videos, thereby grounding the policy in the same 3D-aware representation. On VP-WorldBench and existing 4D generation benchmarks, point supervision improves both video fidelity and 3D motion accuracy over a video-only counterpart, and in simulated and real-robot experiments, it also raises the manipulation success of the action-enabled model.

  7. Correction Training for Diffusion Models

    Iterative sampling in diffusion models can lead to error accumulation due to exposure bias. The denoiser is trained on real images interpolated with noise, but at inference its inputs are constructed from its own imperfect predictions from the earlier steps, something it has never seen at training time. This might be one reason diffusion models often struggle without additional help, such as CFG. We introduce a correction step for diffusion models which attempts to reduce this training-inference gap. The corrector takes the base model's prediction as input and is trained against the same ground-truth target. This makes correction an explicit learning task, with training inputs provided by the base model. During sampling, at each denoising step, we iteratively refine the denoiser's clean-sample prediction. This allows us to correct predictions at intermediate denoising steps, preventing early artifacts from persisting into the final sample. Although the corrector is trained only on predictions from the base denoiser, it can be applied repeatedly to its own outputs at inference for better results. This simple framework leads to substantial improvement in sample quality while largely preserving diversity. We evaluate our method across DiT, SiT, and JiT. Our method substantially improves upon previously reported FID scores for unguided generation and, notably, unconditional generation, where producing high-quality samples without guidance has been particularly challenging. Our method achieves performance competitive with classifier-free guidance (CFG), and combining correction with CFG further improves diversity and reduces oversaturation typical of CFG. Finally, we show that the additional inference cost of correction can be amortized by distilling the refined predictions back into the base diffusion model, retaining the quality gains without additional inference-time overhead.

  8. SWIFT: Self-guided Weak-to-strong dIFfusion models via Target extrapolation

    Training high-quality diffusion models is computationally expensive, and inference-time guidance often adds further sampling cost. In this work, we introduce Swift, a simple yet effective self-guided training method that uses a frozen weak denoiser to improve a stronger model without adding inference overhead. For each noisy input, Swift extrapolates the clean regression target away from the weak denoiser's prediction, amplifying components that remain underfit. The weak guide can be an early training checkpoint, requires no backpropagation during main-model training, and is discarded afterward. The resulting model retains the original sampler and supports both conditional and unconditional generation without label dropout or an unconditional branch. We explain this mechanism through a spectral analysis of finite-time population gradient flow in an RKHS. With an early-stopped weak guide, we prove that a nonempty range of extrapolation strengths yields strictly lower posterior-mean error than matched standard training, despite shifting the regression target away from the posterior mean. Experiments on CIFAR-10 and ImageNet-256 demonstrate improvements across model scales and representations. In one ImageNet-256 configuration, Swift surpasses the baseline's best FID using roughly half the total training compute, including guide preparation and training overhead. On RAEv2, it achieves FID 1.15 without inference-time guidance and 0.99 with guidance. These results establish target extrapolation as an effective approach to weak-to-strong diffusion training with efficient single-model inference.

  9. Joints, Camera, Action! Co-Generating 3D Motion and Video for Arbitrary Rigs

    Video generation models can now depict remarkably realistic motion. Yet it is unclear how to use this motion beyond pixels: to animate a specific 3D asset and replay the animation in its 3D scene. For instance, a video model can show a monkey jumping over a crossbar, but it cannot return that jump as replayable 3D motion placed in the 3D scene. Here we present a model that directly co-generates the video and 3D motion for any supplied rig, along with a camera that registers this motion to the scene. Prior video-motion models either handle only human skeletons, often adding billions of parameters, or triangulate 3D motion from generated 2D pose maps. We instead keep 3D motion in a separate model that supports arbitrary skeletons, and connect it to a pretrained video model through a small set of cross-attention layers. This separation lets the motion model first learn how skeletons move from motion-only data, which is easier to obtain and augment than paired video. Additionally, our model learns to locate each joint in the video frames, which lets us recover the camera and place the 3D motion in the scene. To train across many skeletons, we use a generative video editor to place animated 3D assets in scenes suited to their actions, curating the edits so their known motion remains valid. Together with human and robot video, this yields nearly 200K training pairs. Our evaluations demonstrate that our model animates diverse rigs from text more faithfully than video-first pipelines, and its motion responds to the surrounding scene. It also turns video into rig motion, rig motion into video, and enables keyframe-based control of the 3D motion. Videos and additional results are available on our project page: https://research.nvidia.com/labs/par/projects/jca/.

  10. SpecKCast: Spectral Kalman Forecasting for Diffusion Acceleration

    Diffusion Transformers (DiTs) achieve high-fidelity image and video generation, but they suffer from substantial inference costs due to repeated transformer evaluations across many denoising steps. Feature caching reduces this cost by reusing features across denoising steps. Recent forecasting methods extend this idea by extrapolating features to skipped steps instead of reusing them. However, existing forecasting methods extrapolate the features they predict uniformly, even though the spatial-frequency components of these features change most at different stages of denoising. They also overlook that denoising progresses nonuniformly, so equal step intervals can correspond to very different amounts of change. These mismatches amplify forecast errors as more steps are skipped, limiting the achievable acceleration. We propose SpecKCast, a training-free method that forecasts the model output in the frequency domain. SpecKCast applies a 2D discrete cosine transform (DCT) to the output and tracks each coefficient with a lightweight Kalman filter along a band-specific time coordinate derived from the noise schedule. The filter tracks each coefficient's value and rate of change, and the transformer is evaluated only when the filter's forecast uncertainty exceeds a threshold. Experiments on FLUX.1-dev, Qwen-Image, Wan2.1-14B, and HunyuanVideo show that SpecKCast achieves a better trade-off between acceleration and fidelity than existing caching and forecasting methods, reaching up to 6x speedup with less than 0.05 GiB of additional memory.

  11. LLM2R: From Large Language Models to 3D Reassemblers

    3D part assembly aims to reconstruct a complete shape from a set of unassembled parts by predicting a rigid SE(3) transformation for each part. Because the placement of a part is rarely determined by its own geometry, the task demands reasoning over the entire part set, and existing methods, which rely on pairwise relations or iterative generation and verification, scale poorly to objects with many parts. We present LLM2R, which casts part assembly as sequence modeling with a pretrained decoder-only large language model (LLM): a Point-BERT encoder and a Q-Former compress each part into a block of geometric tokens, the blocks of all parts are concatenated, and a causal LLM adapted with Low-Rank Adaptation (LoRA) processes the sequence in one forward pass. Causal attention, however, lets the hidden states of a part observe only the parts that precede it. LLM2R therefore appends a block of learnable summary tokens after the last part: these tokens follow every part, so their states aggregate the whole assembly at a constant token cost, and a part-aware pose head fuses each part's states with them before predicting its rotation and translation. One architecture thus handles semantic and geometric assembly and predicts all poses in a single non-autoregressive pass. LLM2R achieves the highest part accuracy and success rate on all three PartNet categories, the best rotation error, translation error, and part accuracy on PartNeXt, and the lowest translation error and fastest inference on Breaking Bad, where only a fracture-specialized method is more accurate. Its advantage grows with the number of parts: at 100 parts it exceeds GARF by 33.5 points in part accuracy on Breaking Bad and Assembler by 29.1 points on PartNet, and it transfers zero-shot to unseen categories with more than 16 points higher part accuracy than the strongest of three baselines.

  12. Specter: Fast MoE Inference via Quantization-Enabled Multi-Step Speculative Offloading

    Mixture-of-experts (MoE) models often exceed a single accelerator's memory capacity. Offloading experts to host memory creates a severe PCIe I/O bottleneck because data-dependent routing keeps transfers on the critical path. We present Specter, an inference system that uses quantization to combine speculative decoding with expert offloading. Its lightweight quantized draft model runs efficiently on device while preserving high-fidelity expert activation patterns. This provides accurate multi-step lookahead over future expert usage, allowing the runtime to organize expert movement and execution ahead of verification and improve both communication and execution efficiency. Under single-request inference, Specter achieves an average 1.50x (up to 1.88x) speedup in time per output token (TPOT) over the state-of-the-art system. Specter makes memory-constrained, single-GPU MoE inference more practical on commodity hardware. Our code is available at https://github.com/wwwwwf/specter_asplos.

  13. Breaking Diffusion: Parallel Reasoning with Draft Refinement

    Drafting an answer allows a reasoning model to reconsider each decision in the context of the others. Yet repeated diffusion denoising does not ensure that individually plausible token updates form a better answer together. We introduce Draft Refinement Language Models (DRLMs), which use a single denoiser to propose parallel revisions and evaluate a candidate draft. We train the denoiser to reconstruct every token from uniformly corrupted drafts, teaching both preservation and repair. Its predictions specify revisions directly, without a diffusion reverse transition. Evaluation requires a different use of these predictions: confidence in an existing token reflects both contextual support and evidence from observing the token itself. Using the known corruption process, we correct for this self-token evidence to estimate how well each token is supported by the prompt and the remaining draft. Aggregating these estimates yields a cavity energy computed in one forward pass, without an additional scoring model. Each round proposes a revision, reads the completed candidate in its revised context, and retains it only if its energy is lower. Across Countdown, Sudoku-Extreme, and Maze-Hard, our method outperforms autoregressive and discrete diffusion baselines. With 6M parameters, DRLM reaches 44.4% on Countdown-5 and 93.9% on Sudoku-Extreme. The results establish complete-draft parallel refinement as an effective alternative to reverse diffusion for complex reasoning.

  14. Evolving Agent Interfaces

    Computer-use agents are limited by the interfaces humans give them. An agent may type a spreadsheet cell by cell when a single line of code would do, or print all two thousand lines of a file through a shell to find one function. Both the interfaces and the knowledge of when to use each are built by hand, which cannot keep pace with new applications, workflows, and models. We argue that interface design should itself be an agent capability. We introduce Agent S4, an autonomous computer-use scientist that builds Evolving Agent Interfaces from task experience. A meta-agent examines task agents' trajectories on synthetic training tasks, without success labels, and constructs and revises interfaces and usage knowledge in a repository. Population-based evolution then selects which repositories to develop further by their performance on validation tasks the meta-agent never sees, favoring changes that generalize beyond the seen tasks. On OSWorld V2, Agent S4, with Qwen3.8-27B and the evolved repository of interfaces, sets a new state of the art in open-source computer-use agents, reaching 21.3% binary score, 3.8 times the same model with fixed interfaces. This is above both GPT-5.5 (13.0%) and Claude Opus 4.8 (20.6%), at about 4.3% and 1.5% of their respective costs. On ScienceBoard, the evolved interfaces improve the success rate from 41.4% to 58.6% with the same model. These results suggest that useful interfaces can be evolved from experience, making autonomous interface design a source of improvement complementary to advances in models and harnesses. We open-source our code at https://github.com/simular-ai/agent-s.

  15. EvaOmni: An Evidence-Grounded Benchmark for Audio-Visual Reasoning

    Omni LLMs can naturally locate key audio and visual evidence and integrate information across modalities for audiovisual reasoning. Existing audio-visual reasoning benchmarks that mainly rely on multiple-choice questions usually score models solely based on answer correctness, making it difficult to assess whether a model truly forms a reasoning chain from evidence to the correct answer. In addition, textual or unimodal shortcuts may allow models to answer correctly without analyzing the necessary audio-visual evidence, further weakening the reliability of evaluation benchmarks. To address these issues, we introduce EvaOmni, an evidence-grounded benchmark containing 392 videos and 1,027 purely human-annotated question-answer pairs, covering 15 capabilities and three levels: retrieval and localization, basic understanding, and complex reasoning. We design a series of rigorous annotation procedures in which experts annotate audio and visual evidence and construct video-based distractors; humans review whether questions meet strict inspection criteria, and finally models filter textual and unimodal shortcuts. Beyond high-quality question-answer pairs, we require models to simultaneously return the answer and supporting evidence intervals in order to evaluate the complete reasoning chain. We propose the Coverage Grounded Score (C.G.) to measure how much annotated evidence a model identifies, and the Bottleneck Grounded Score (B.G.) to penalize poor temporal localization in either modality; both are incorporated into answer correctness. Across 7 open-weight and 17 proprietary Omni LLMs, Gemini3.7-Flash achieved the highest overall accuracy (79.4%), C.G. (70.8%), and B.G. (35.1%). At Level 3, it reached 79.1% accuracy, but its B.G. was only 12.3%. These results show that even the most advanced models still have room for development in grounded audio-visual reasoning.

Techmeme(15)

  1. GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014 (Swati Khandelwal/The Hacker News)

    Swati Khandelwal / The Hacker News : GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014 —  GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version …

  2. Texas Instruments reports Q3 revenue up 28% YoY to $6.06B, above $5.93B est., net income up 78% YoY to $2.43B, and forecasts $5.8B-$6.3B in Q4, vs. $5.73B est. (Ian King/Bloomberg)

    Ian King / Bloomberg : Texas Instruments reports Q3 revenue up 28% YoY to $6.06B, above $5.93B est., net income up 78% YoY to $2.43B, and forecasts $5.8B-$6.3B in Q4, vs. $5.73B est. —  Texas Instruments Inc., the biggest maker of analog and embedded processing chips, gave a strong revenue forecast for the current period …

  3. Mark Zuckerberg says Muse has drawn 10M+ users since its launch and 25%+ of users are making purchases through the app, with an average purchase size of $200+ (Business Insider)

    Business Insider : Mark Zuckerberg says Muse has drawn 10M+ users since its launch and 25%+ of users are making purchases through the app, with an average purchase size of $200+ —  Meta's new personal AI agent app, Muse, has drawn more than 10 million users since its September launch, CEO Mark Zuckerberg said Wednesday.

  4. Meta expects its 2026 capex to be $135B-$145B, vs. $130B-$145B previously, and forecasts Q4 revenue of $73B-$76B, vs. $73.6B est.; META jumps 3%+ after hours (Riley Griffin/Bloomberg)

    Riley Griffin / Bloomberg : Meta expects its 2026 capex to be $135B-$145B, vs. $130B-$145B previously, and forecasts Q4 revenue of $73B-$76B, vs. $73.6B est.; META jumps 3%+ after hours —  Meta Platforms Inc. boosted its capital spending outlook and announced plans to create a new class of nonvoting stock …

  5. Anthropic unveils Claude Duet, a proactive agent app on iOS, Android, and the web that works in the background, in research preview for US Pro and Max users (Claude)

    Claude : Anthropic unveils Claude Duet, a proactive agent app on iOS, Android, and the web that works in the background, in research preview for US Pro and Max users —  A research preview is available by waitlist today, starting with US Pro and Max subscribers.  —  Join the waitlist … ShareCopy link

  6. Filing: Meta says Mark Zuckerberg is considering leaving California if it passes a one-time 5% tax on billionaires; voters will decide on the measure next month (Pierre Paulden/Bloomberg)

    Pierre Paulden / Bloomberg : Filing: Meta says Mark Zuckerberg is considering leaving California if it passes a one-time 5% tax on billionaires; voters will decide on the measure next month —  Mark Zuckerberg said he is considering leaving California if it passes a measure that would impose a one-time, 5% tax on billionaires.

  7. Meta says it will create a new class of nonvoting stock to raise the capital it needs for developing AI models, with an effective date in January 2027 (Meghan Bobrowsky/Wall Street Journal)

    Meghan Bobrowsky / Wall Street Journal : Meta says it will create a new class of nonvoting stock to raise the capital it needs for developing AI models, with an effective date in January 2027 —  The company, which reported record revenue of $64.2 billion for the third quarter, said the new stock won't affect Mark Zuckerberg's voting control

  8. Meta reports Q3 revenue up 26% YoY to $64.6B, operating income down 37% to $12.99B on a $9.89B AG settlement charge, and family DAP up 3% to 3.64B for September (Meta)

    Meta : Meta reports Q3 revenue up 26% YoY to $64.6B, operating income down 37% to $12.99B on a $9.89B AG settlement charge, and family DAP up 3% to 3.64B for September —  Announces Establishment of New Class C Common Stock  —  Meta Platforms, Inc. (Nasdaq: META) today reported financial results for the quarter ended September 30, 2026.

  9. OpenAI, PerturbAI, and Scripps say thousands of GPT-Rosalind agents analyzed data on millions of mouse brain cells in 32 minutes, a job that takes humans months (OpenAI)

    OpenAI : OpenAI, PerturbAI, and Scripps say thousands of GPT-Rosalind agents analyzed data on millions of mouse brain cells in 32 minutes, a job that takes humans months —  How OpenAI, PerturbAI, and Scripps Research used distributed AI agents to help scientists identify promising research leads in data from millions of brain cells

  10. Microsoft reveals pricing for Xbox Cloud Gaming without Game Pass, for Xbox Insiders now and others next month: 10 hours for $3.99, 25 for $7.99, 50 for $11.99 (Tom Warren/The Verge)

    Tom Warren / The Verge : Microsoft reveals pricing for Xbox Cloud Gaming without Game Pass, for Xbox Insiders now and others next month: 10 hours for $3.99, 25 for $7.99, 50 for $11.99 —  Microsoft is opening up Xbox Cloud Gaming to anyone in November. … Microsoft announced last month that it will let anyone …

  11. Flapping Airplanes, which is working on methods to train AI models using less data and compute and make the chips more efficient, raised $1B at a $6B valuation (Rachel Metz/Bloomberg)

    Rachel Metz / Bloomberg : Flapping Airplanes, which is working on methods to train AI models using less data and compute and make the chips more efficient, raised $1B at a $6B valuation —  Flapping Airplanes, a year-old artificial intelligence startup, has raised $1 billion in funding at a $6 billion valuation …

  12. A New Mexico court orders Meta to pay $25B in penalties after a jury found Meta misled residents about its data practices in the Cambridge Analytica scandal (Jonathan Vanian/CNBC)

    Jonathan Vanian / CNBC : A New Mexico court orders Meta to pay $25B in penalties after a jury found Meta misled residents about its data practices in the Cambridge Analytica scandal —  Meta was ordered to pay $25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy case that stemmed …

  13. Source and leaked memo: EA plans to cut ~400 jobs, or ~3% of its total staff, and shut down BioWare; EA went private in August following a $55B leveraged buyout (Jason Schreier/Bloomberg)

    Jason Schreier / Bloomberg : Source and leaked memo: EA plans to cut ~400 jobs, or ~3% of its total staff, and shut down BioWare; EA went private in August following a $55B leveraged buyout —  The next ‘Mass Effect’ will be canceled as part of the layoffs  —  Electronic Arts Inc. said it will lay off staff and shut down BioWare …

  14. The PHP Foundation says its patches for the RCE vulnerabilities are limited to PHP 8.2 and newer, leaving legacy deployments dependent on third-party vendors (Wired)

    Wired : The PHP Foundation says its patches for the RCE vulnerabilities are limited to PHP 8.2 and newer, leaving legacy deployments dependent on third-party vendors —  The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites.

  15. Recursive releases Flint, an open-weight, 40B-parameter coding model developed with its Eureka Machine AI system, which automated most of the development (Will Knight/Wired)

    Will Knight / Wired : Recursive releases Flint, an open-weight, 40B-parameter coding model developed with its Eureka Machine AI system, which automated most of the development —  Recursive makes the case that the benefits of using AI to build AI outweigh the risks.  —  For the past few days I've been testing …

Solidot(15)

  1. openEuler 在欧洲推广国产发行版

    在开源欧盟峰会上,推广 Linux 发行版的展位非常少,最显著的是两个中国发行版项目,其中展位最大的是 openEuler。openEuler 是华为 EulerOS 的社区版本,它不再是华为的项目,而是由开放原子开源基金会 (OpenAtom Foundation)托管。开放原子开源基金会成立于 2020 年,其创始成员包括华为、阿里巴巴、百度、腾讯和浪潮等。EulerOS 以及浪潮的 K/UX 最早都是基于 CentOS 项目。而 CentOS 于 2020 年宣布切换到滚动发行版 CentOS Stream。它提供了工具可以将 CentOS 系统迁移到 openEuler。openEuler 采用了类似 Ubuntu 的发布模式,有长期支持版本 LTS,也有短期的版本。它的最新版本是 v26.09,而最近的 LTS 版本是 v24.03,支持开源的 RISC-V 和龙芯的 LoongArch 架构。它的 22.03 LTS 还支持申威处理器 SW-64。

  2. 联合国报告警告到 2050 年全球升温可能突破 2 °C

    联合国环境规划署发表报告《Emissions Gap Report 2026》,警告除非加快减排步伐,到本世纪中叶全球 升温幅度极有可能突破 2°C。而要将升温峰值控制在 1.7至 1.8°C 之间,则需要本十年末将排放量较 2025 年水平削减 18%,到 2035 年削减 45%,五年后再削减 69%。报告警告称,如果当前政策持续下去,本世纪内全球变暖可能达到 2.8°C,此后还将继续上升。报告指出,由于美国退出气候协议以及对历史排放量的修订估计,这些结果比去年的预测更为严峻。

  3. Meta 被勒令公布授权通过 BT 下载盗版电子书的员工名单

    Meta 为训练其 AI 模型从影子图书馆 Anna’s Archive 和 LibGen 下载了大量盗版电子书。起诉 Meta 的图书出版商和作者想要了解真相,想知道是谁下令下载盗版电子书库的。Meta 在法庭上回应称,无法确定具体是谁正式做出的决策,因为相关决策通常是团队共识的结果。至于通过 BitTorrent 工具下载盗版电子书库的种子,Meta 认为是负责执行下载任务的员工的技术决策。法官 Thomas Hixson 勒令 Meta 提供下载服务器的指令历史,列出所有参与批准下载活动的人员名单,其中包括决定是否进行或如何进行做种,以及是否采取措施减轻做种影响的决策者。

  4. 印度 CA eMudhra 的私钥泄漏,相关证书不再被信任

    印度 CA eMudhra 八个中间证书的私钥泄漏。攻击者能利用私钥为任何域名签发伪造证书。更荒诞的是,eMudhra 的私钥非常非常简单,简单到就是数字 4,此外还有数字 56、115、66、155、156、230 和 237。这些私钥可以在一秒内还原出来。Chrome 于 10 月 17 日、苹果于 19 日、微软和 Mozilla 于 20 日屏蔽了 eMudhra 的相关证书。

  5. PHP 将释出紧急安全更新修复高危漏洞

    PHP 安全团队发布通知,将于 10 月 21 日 14:00 UTC 发布重要安全更新,它建议所有 PHP 用户提前做好准备,以便在更新发布后立即升级。任何运营 PHP 网站的用户都应为此做好准备。PHP 计划发布补丁修复两个高危漏洞,其威胁评分 9.2/10。安全公司 watchTowr 表示漏洞影响 PHP 5 之后的所有版本。安全公司 Sansec 认为在补丁释出 15 分钟之后就会出现利用漏洞的大规模攻击。其它多家安全公司也都督促 PHP 网站的管理员做好准备。安全研究人员估计,会有约 130 万台联网主机可能受到影响。

  6. 字节阿里腾讯订购了逾 350 亿美元的 RTX PRO 5500 显卡

    字节跳动、阿里巴巴和腾讯已订购超过 300 万个、总值超过 350 亿美元的英伟达 RTX PRO 5500 工作站显卡。英伟达已通知客户和合作伙伴,由于中国科技企业的需求远超所计划的产量,英伟达无法保证能够满足所有订单。英伟达告诉合作伙伴,他们实际能拿到的产品数量,可能仅为所提出数量的 5% 到 10%。英伟达 2027 年全球 RTX PRO 5500 显卡的产量上限为 300 万张。中国客户的订单总量就已超过 600 万张。

  7. AI slop 游戏充斥着 Steam 新品节

    Steam 新品节于 10 月 19 日拉开帷幕,玩家立即注意到其中充斥着大量的 AI slop 游戏。曾经以发掘隐藏瑰宝著称的游戏活动,如今沦为廉价 AI 生成游戏的展示场。玩家通过社交媒体呼吁运营 Steam 平台的 Valve 公司引入 AI 过滤器功能,一键过滤掉这些 AI 生成游戏。随着 AI 工具的进步,逆向工程比以往任何时候都轻松,以至于部分游戏开发商不太愿意公开免费的 DEMO 试玩,担心 DEMO 会被破解会被克隆,被人抢在开发商之前发布克隆产品。

  8. 十分之一 Tor 出口节点被用于发动中间人攻击

    10 月 2 日攻击者利用其控制的 333 个出口节点协同拦截 SSH 连接发动中间人攻击。Tor 出口节点是构成 Tor 回路的三个中继的最后一跳,连接了 Tor 匿名网络与开放互联网。根据目标网站使用的是 HTTPS 还是 HTTP 协议,决定了出口节点是否能看到和操纵用户访问的内容。目前整个 Tor 网络共有大约 3000 个出口节点,这意味着攻击者控制了十分之一的出口中继。攻击者实际上早在 8 月就控制了运行 Tor 节点的服务器,部署了恶意程序 Ebury 1.8.3,它是一种 Linux 下的 OpenSSH 后门和凭据窃取程序。此次协同攻击有两个目的:尽可能多收集未加密邮件流量;拦截 SSH 连接——即 SSH 中间人攻击。如果攻击期间你的 Tor 回路经过了 333 个恶意出口节点之一,那么当你尝试通过 22 端口建立 SSH 连接,你的请求会被重定向到 12 台 SSH 拦截服务器中的一台。如果用户无视中间人攻击警告,那么攻击者将会窃取密码,建立服务器连接,监视用户输入的每一条命令,以及植入 Ebury。Tor 项目团队于 10 月 4 日将这些恶意节点标记为 BadExit,即 Tor 回路不再利用这些节点出口流量。10 月 5 日所有恶意节点全部关闭,部分是 Tor 节点运营者接到通知后关闭的,部分是攻击者自己关闭的。鉴于幕后攻击者收集未加密邮件数据,此次行动可能是出于经济动机。

  9. OpenBSD 8.0 释出

    OpenBSD 项目释出了 8.0 版本。创始人 Theo de Raadt 声称在项目逾三十年的历史中,默认安装环境仅出现两次远程安全漏洞。OpenBSD 8.0 主要新特性包括:amd64 架构内核虚拟地址空间从 4GB 扩大至 512GB;arm64 架构支持休眠;riscv64 架构支持向量扩展、高级中断架构;停止支持龙芯 loongson 架构,原因是它不兼容 Clang 22 编译器;改进了支持高通 WiFi 6 设备的 qwx 驱动,等等。更多可浏览发布公告。

  10. 法国超市联网制冷设备存在漏洞长达数月之久

    10 月 11 日-12 日夜间,法国数百家超市的冷藏柜和冷冻柜开始升温。攻击者将制冷系统强制切换到除霜模式——该模式会加热制冷组件以融化冰层。部分设备温度甚至高达 50°C,少数设备因此起火。根据法国的统计:家乐福超市有 80 家门店受到影响,Les Mousquetaires 旗下 Intermarché 和 Netto 超市有逾 300 家门店受影响,Monoprix 有约 5% 的门店受到影响,Coopérative U 有 80 家门店受影响,Leclerc 受影响门店数量未知。受到攻击的超市超过 400 家。这些超市都使用了丹麦公司 Danfoss 的制冷控制器。互联网扫描数据显示,法国暴露在互联网的冷藏设备控制面板数量超过了其它所有国家,法国有 1331 个,其它国家加起来只有 1197 个。85% 的设备运行着存在已知漏洞的软件,其中 527 个使用 Danfoss 已停止支持的旧控制器,只有 195 个设备安装了补丁。大多数设备暴露在互联网上至少六个月。攻击发生后,大多数设备下线,截至 10 月 14 日,1331 个设备中只有 316 个在线。

  11. 四分之一数据中心位于水资源受限的区域

    根据发表在《Environmental Science & Technology》期刊上的一项研究,全世界四分之一数据中心位于每年至少一个月用水需求超过供应的地区。全球各地分布着数以千计的数据中心,这些设施在冷却服务器和防止过热过程中消耗了大量水资源。它们所使用的水资源与周边社区以及农业和制造业等共享。电力之类的能源可从远距离传输,水资源则主要来自附近的河流、湖泊和含水层,而水源的水位会随季节或年份发生波动。研究人员将全球 9,347 个运转中的数据中心的位置,与当地的水资源可用量,以及来自城镇、农业、制造业和发电行业的需求进行了比对分析。结果发现:约 25% 的数据中心位于每年至少一个月面临缺水压力的地区;约 6% 的数据中心则位于全年大部分时间都面临缺水压力的地区。41% 的数据中心周边,城镇是最大的用水方;而在另外 28% 的数据中心周边,农业是主要的用水方。研究结果表明,在已经面临或预计将面临缺水压力的地区,数据中心会进一步加剧当地水资源的紧张情况。

  12. 涉嫌监听 OpenAI 高管的沙特籍工程师手机上有名为 Saudi Gov Docs 的文件夹

    涉嫌监听 OpenAI 高管的沙特籍工程师 Abdulrahman Alfozan 被拒绝释放,美国检方称其动机可能是为了个人商业利益,也可能是为了沙特王国的利益。美国政府指出,有证据显示,Alfozan 曾通过 WhatsApp 与沙特王室成员保持联络;与此同时他还在寻求机会永久搬回沙特——沙特正在大力发展 AI。Alfozan 的 iPhone 手机内有一个名为 Saudi Gov Docs 的文件夹。FBI 是在 Alfozan 即将登机离开美国前将其逮捕的。他为自己、妻子及孩子预订了前往沙特首都利雅得的单程机票,而单程机票的费用被认为是由沙特政府支付的。Alfozan 被捕后,他的妻子和儿子改签了更早的航班,在没有他的情况下立即离开了美国,机票也被认为是沙特政府支付和预定的。

  13. 日本成功发射火星卫星探测器

    20 日凌晨 4 点 41 分 03 秒,日本宇宙航空研究开发机构(JAXA)从鹿儿岛县种子岛宇宙中心发射了搭载火星卫星探测计划 MMX 探测器的 H3 火箭 10 号机。约 70 分钟后,探测器被送入预定轨道,发射取得成功。MMX 是由日本主导的国际联合探测项目,计划从火星卫星火卫一(Phobos)采集沙砾等样本,并于 203 1年 7 月返回地球。如果成功,将实现全球首次从火星圈带回样本。这也是 H3 火箭首次执行向其他行星轨道的发射任务。该探测器发射时的重量为 4480 公斤,是日本迄今为止最重的探测器。高度约 5.3 米,展开太阳能板后的宽度约为 9 米。它由负责去程、探测和返程的 3 个模块组成。总开发费用约为 553 亿日元(约合人民币 23 亿元)。根据计划,该探测器将于 2027 年 8 月抵达火星圈,在火卫一着陆并采集沙砾等样本。在执行观测火星的另一颗卫星火卫二(Deimos)等任务后,将返回地球并投下装有样本的回收舱。火卫一直径为 20-30 公里,不到月球的百分之一。

  14. 挪威公司提议铺设绕过美国的海底光缆

    挪威基础设施公司 Bulk Infrastructure 提议铺设一条绕过美国从挪威直连加拿大的海底光缆。该项目被称为 Leif Erikson,尚未启动,处于提议阶段。目前加拿大能避开美国路由的国际光缆选择相对较少。Leif Erikson 全长逾 6500 公里,包括长 4600 公里连接挪威南部至加拿大纽芬兰和拉布拉多省的海底光缆,以及长 1900 公里连接蒙特利尔的陆地线路。项目预计耗资逾 6.2 亿美元。

  15. 法国骚乱者被发现盗窃 PC 的内存条

    法国电竞俱乐部 Team Vitality 证实,其位于巴黎的总部在周末遭到破坏,奖杯、电脑设备及其它物品被洗劫一空。所幸无人受伤。NEXTA 公布的视频展示了 Team Vitality 总部被破坏的过程:骚乱者猛砸并踢碎电竞总部的窗户,从办公场所内拿走物品,将电竞椅扔到街头的火堆中焚烧。还有视频显示,骚乱者在人行道上拆开电竞电脑,将手伸到机箱内部拔内存条。内存条如今是最昂贵的电脑组件之一,相比显卡之类的昂贵组件,它可能更容易从电脑里拿走。

NEWSLETTER · FREE · WEEKLY

OrangeBot Weekly

The best new AI tools + Claude Code skills, every week — with my verdict on what’s actually worth your time. No hype.

Free · One-click unsubscribe · No spam