RC RANDOM CHAOS

The Wire

Curated cybersecurity and tech news — AI-summarized, source attributed.

aiprivacy

Cactus Needle 3: 8–29MB on-device models that punch above their weight at tool calls

Cactus Compute has released Needle 3, a foundation model aimed squarely at edge hardware — phones, wearables, robots, smart-home devices, cars, and even microco

via Hacker News ·
clouddevops

Cloudflare Quick Tunnels add JSON output, courting the coding-agent crowd

Cloudflare's Quick Tunnels expose a local development server to the public internet with a single command—`cloudflared tunnel --url http://localhost:8000`—and n

via Hacker News ·
supply-chaincybersecurity

CrowdSec Confirms Private Source Code Leak Traced to Tanstack Supply-Chain Backdoor

CrowdSec has confirmed that its private GitHub source code was exposed in a May 2026 breach, disclosed to the company on September 16. The exposed material cove

via Hacker News ·
open-sourcedevops

Jemalloc 5.4.0 lands with 160+ commits: pinned-memory tracking, tcache cleanup, deadlock fixes

Jemalloc, the widely deployed general-purpose memory allocator, shipped version 5.4.0 on September 17, 2024, folding in more than 160 commits. The release leans

via Hacker News ·
cybersecurityvulnerability

Laser Fault Injection Beats RP2350's 'Permanent' Debug Lock, Extracts OTP Secret

Researchers at Ledger Donjon defeated the hardware security on Raspberry Pi's RP2350 microcontroller, restoring debug access on a chip whose debug interface had

via Hacker News ·
supply-chainvulnerability

libheif overflow + SSO flaw let researchers reach OpenAI's internal repos

Researchers at Hacktron chained two bugs to hijack OpenAI employees' ChatGPT and Codex accounts, and the whole path from discovery to internal-repo access took

via Hacker News ·

North Korean nuclear test triggered years of aftershock earthquakes

An underground North Korean nuclear test set off a sequence of earthquakes that continued for years after the detonation. That is the full extent of what can be

via Hacker News ·
aiopen-source

OpenJev: browser-only demo pits reading a model's logits against generating JSON

OpenJev is a client-side experiment that runs small open-weight language models entirely in the browser—no backend, no waitlist—to demonstrate two ways of extra

via Hacker News ·
aipolicy

Unsealed NYT filing: Microsoft, OpenAI staff called AI scraping 'theft'

Newly unredacted filings in The New York Times' three-year-old copyright suit against OpenAI and Microsoft quote the companies' own employees describing their A

via Hacker News ·
ai

Unverifiable: no retrievable content for "Astra for Law"

No summary was produced. The submitted item contained only a headline ("Astra for Law") with no article body, and the source URL (openai.com/index/astra-for-law

via Hacker News ·
aitech-culture

Use an LLM as a Copyeditor, Never a Ghostwriter

The core argument is that readers can sense machine-generated prose almost instantly, so you should still write everything yourself and only bring in a model af

via Hacker News ·
tech-culture

Wax Motors: The Melting-Paraffin Actuators Hiding in Your Appliances

A wax motor is a linear actuator that turns heat into motion by exploiting the fact that wax expands 5–20% when it melts. A sealed charge of wax — typically a p

via Hacker News ·