tl;dr: Multiple Tenda router firmware versions contain a hardcoded authentication backdoor (CVE-2026-11405) in the httpd binary's login() function: if normal MD5 password auth fails, it falls back to a plaintext strcmp against a value stored in `sys.rzadmin.password`, granting admin-level access with any username. The vendor could not be reached, so no patch exists; recommended mitigations are disabling remote management and changing the default LAN IP.

tl;dr: Summary not available

tl;dr: Chat Control 1.0, the EU's voluntary message-scanning derogation, expired in April 2026 after Parliament rejected its extension, but the Council is now attempting an unprecedented revival by pushing an identical "new" law through an expedited procedure — with a binding Parliament vote on July 9 requiring 361 MEPs to block it. Meanwhile, Chat Control 2.0, the permanent CSA Regulation proposed in 2022, remains deadlocked after five failed trilogues, with encryption and suspicionless scanning still the sticking points. The Council's own legal service has warned that even "voluntary" generalised scanning likely violates Article 7 of the EU Charter.

tl;dr: Kokoro is an 82M-parameter TTS model that produces high-quality multilingual speech entirely on CPU, easily deployable via the Kokoro-FastAPI Docker container which exposes an OpenAI-compatible speech API on port 8880. Benchmarks show it's fast even on old hardware—generating a short paragraph in 4.7s on a 12-year-old Intel i7-4770K and 1.5s on a Ryzen 7 8745HS. For users needing STT as well, the Speaches container bundles both Kokoro and Whisper.

tl;dr: Summary not available

tl;dr: Herdr is a terminal multiplexer purpose-built for coding agents, letting you run multiple agents (Claude Code, Codex, Cursor, etc.) in persistent PTY sessions on any machine and attach from any terminal, including over SSH from a phone. Unlike tmux/Zellij, it understands agent state (blocked/working/done) and exposes a CLI and JSON socket API so agents can orchestrate panes themselves. It's a single binary with no Electron, account, or telemetry, available on Linux/macOS with a Windows preview.

tl;dr: Davit is a free, open-source native SwiftUI app for Apple's container platform, providing a GUI to manage Linux containers on Apple Silicon without Docker Desktop. It communicates directly with Apple's container daemon via XPC, offering container/image/volume management, streaming logs, in-container file browsing, terminal access, and registry logins. Unlike Docker Desktop's persistent VM, Apple's engine boots a lightweight per-container VM, and Davit itself is a ~17MB app that can auto-install the platform without admin rights.

tl;dr: Summary not available

tl;dr: StreetComplete is a mobile app that gamifies contributing to OpenStreetMap by surfacing nearby missing data as simple "quests." Users visit the location, answer a straightforward question, and the app submits the edit directly to OSM under their account—no separate editor required.

tl;dr: Microsoft has laid off most or all developers working on the idTech engine at id Software as part of a massive Xbox restructuring that will eliminate roughly 3,200 roles through FY27, including 1,600 immediately, plus divest four studios. The cuts include 20+ year id veteran Michael Maynard, raising questions about the future of idTech, one of the most influential game engines in FPS history.

tl;dr: Summary not available

tl;dr: 98% support sounds high, but for basic expectations it's actually terrible—leaving out millions of users or, in the author's real case, 30% of a specific site's audience despite a feature being "widely supported" globally. Robust engineering should gracefully handle edge cases rather than treat 2% failure as acceptable, since general population statistics don't map cleanly to any given site's actual visitors.

tl;dr: The EU Parliament voted 331-304 to fast-track a renewed extension of "Chat Control," the expired regulation allowing companies like Meta and Google to voluntarily scan private messages for child sexual abuse material. A final vote is scheduled for Thursday, the last session before summer break, where procedural rules require an absolute majority (361 votes) to reject or amend—making passage likely as many MEPs have already left. Critics, including Pirate and AfD MEPs and IT security researchers, call it a procedural end-run around Parliament's earlier rejections and warn it enables mass surveillance with unreliable AI scanning.

tl;dr: A Chinese court sentenced former Nanjing official Yang Youlin to death for accepting $325M in bribes over three decades, along with embezzlement and money laundering convictions. Yang used his positions to help others obtain engineering contracts, land transfers, and financing in exchange for money and valuables. Death sentences for white-collar crimes remain rare in China, typically reserved for cases exceeding 1bn yuan, and Yang's cooperation with authorities was deemed insufficient to warrant leniency given the severity of his offenses.

tl;dr: Knuth's landing page for The Art of Computer Programming catalogs the current status of all volumes: Volumes 1-3 (fully published), Volume 4A (2011), Volume 4B (2023), Fascicle 7 of forthcoming Volume 4C (2025, on constraint satisfaction), and Volume 5 (Syntactic Algorithms) still in preparation. The page warns readers to only buy the PDF eBook editions since non-PDF versions (Kindle, ePUB) mangle the mathematics, and it links to extensive errata files plus the famous $2.56 hexadecimal reward for finding errors.

tl;dr: A German IAB study found that skilled immigrants leave Germany primarily due to bureaucratic friction (slow visa/naturalization processing, credential recognition delays, high fees), inadequate language support, discrimination, and job mismatches where workers end up in roles below their qualifications. About 60% return home while 40% relocate to competing European countries like Spain and Switzerland. Recruiters argue that pre-arrival German language training and better retention infrastructure—such as the planned federal "Work and Stay" agency—are needed, since English-only pathways rarely lead to sustainable employment in Germany.

tl;dr: Summary not available

tl;dr: CoMaps is a free, open-source offline maps and navigation app forked from Organic Maps and Maps.me, using OpenStreetMap data. It offers GPS-based search and routing without mobile data, emphasizes privacy (no tracking or data collection, audited by Exodus), and is optimized for battery efficiency. Development is community-driven via Codeberg.

tl;dr: A study of 19,450 European company websites found that US-headquartered vendors serve the majority of primary sites in the UK (67.5%) and Netherlands (53.6%), and a plurality in Italy, Spain, and France, while Germany and Poland resist the trend due to strong domestic hosting industries. Cloudflare is the single largest internet-facing vendor in all seven markets studied. The analysis attributes vendors via AS operator lookups on DNS records, measuring who fronts the site rather than physical hosting location or origin infrastructure.

tl;dr: Dua Lipa has opened the Manifesto Library, a permanent collection of nearly 100 banned and censored books housed inside Porto's Livraria Lello bookshop as part of the new BABELL – City of Books festival. The collection—organized around themes of power, control, voice, and memory—includes works by Margaret Atwood, Salman Rushdie, and Olga Tokarczuk. The project is an extension of Lipa's Service95 Book Club, and she'll also curate the Southbank Centre's 2026 London Literature Festival.