tl;dr: Summary not available

tl;dr: PrismML released Ternary Bonsai 2 27B, a compressed version of Qwen3.8 27B using ternary {−1, 0, +1} weights with FP16 scaling (1.76 bits/weight), shrinking the model to 5.9GB while retaining 98.2% of full-precision benchmark performance. It hits 143 tokens/sec on an RTX 5090 and 46.8 tokens/sec on M5 Max, supports 262K context and multimodal input, and runs via CUDA or MLX under Apache 2.0.

tl;dr: Bend is a programming language with Python-like syntax that compiles to fast native code, runs in parallel across CPU cores and GPUs, and includes a Lean/Rocq-style proof checker fast enough to run on every AI code change. Its key pitch is a `LAWS.bend` file where developers declare invariants that AI-generated code must mathematically prove it doesn't violate before committing, aimed at making "vibe-coded" apps trustworthy without human code review. It's early-stage, back-end focused, and works on Linux/macOS.

tl;dr: Summary not available

tl;dr: Hister is a self-hosted, private search engine that full-text indexes web pages you visit (via a Firefox/Chrome extension) and local files, letting you search them from a web UI, terminal, or AI assistant via MCP. It runs locally with no telemetry or mandatory cloud, supports field filters, wildcards, and optional semantic search through a configurable embeddings endpoint. Written in Go and licensed AGPLv3, it's installable via binary, Homebrew, Docker, or Nix.

tl;dr: Wax motors are linear actuators that exploit the 5-20% volume expansion of wax during melting to convert thermal energy into mechanical force, capable of producing up to 4000 N. Compared to solenoids, they offer smooth actuation, resistive (non-inductive) electrical behavior, and can operate passively from ambient heat sources. Common applications include front-load washing machine door locks, dishwasher detergent dispensers, thermostatic mixing valves, hydronic zone valves, greenhouse vent controls, and aerospace fluid systems.

tl;dr: Summary not available

tl;dr: Researchers at Hacktron chained a heap overflow in libheif (exploitable via image uploads to Discourse, which OpenAI's community forum runs on) with an OpenAI SSO misconfiguration to take over employee ChatGPT/Codex accounts and open a PR in OpenAI's internal monorepo—all within 72 hours, earning a $6,500 bounty. They leaned heavily on Claude Opus 5, which produced a reliable ASLR-enabled exploit within hours of release after Opus 4.8 had failed. The authors argue AI is collapsing the cost of weaponizing known memory-corruption bugs, eroding the "security through complexity" that previously protected typical targets.

tl;dr: Timothy Gowers explains why he declined to sign a letter from 25 Fields medallists warning that AI's rapid problem-solving threatens mathematical understanding. He argues the letter overweights conceptual understanding relative to problem-solving, and that a flood of AI-generated results, while imperfectly digested, would likely increase both the volume of properly digested mathematics and the choice of results to study. His real concern is social: that young people will lose motivation to pursue math PhDs, funding will dry up, and the human mathematical tradition may not be transmitted to future generations.

tl;dr: The US dominates global self-storage with ~90% of capacity, and there are more facilities domestically than Starbucks, McDonald's, Walmart, Home Depot, Domino's, Dunkin', and Costco combined, generating over $40 billion annually. The industry, which took off in the 1970s and evolved into an institutional asset class, is driven by "the four D's": death, displacement, divorce, and downsizing. Texas leads all states in facility count, while Wichita was once dubbed the Self-Storage Capital of the US.

tl;dr: A Raspberry Pi project that uses BirdNET-Go to detect birds by audio in real time and displays the matched species on an Inky Impression e-ink panel (or web kiosk) as hand-curated 1800s natural-history illustrations. The library includes 800+ public-domain cutouts covering 400+ species, arranged on a textured page with larger birds centered and sized by body mass. Currently biased toward Scandinavian/British/Central European species, with a live demo running from the author's kitchen in Bergen, Norway.

tl;dr: mysetup.ai is a new community site for sharing AI tooling setups—agents, workflows, skills, and systems—created by someone who felt overwhelmed trying to piece together how others are actually working with AI from scattered Twitter posts. The creator admits it may end up being a community of one, but hopes others will contribute their own configurations.

tl;dr: NVIDIA is officially supporting native Rust for CUDA GPU kernel programming via two projects: cuda-oxide (a SIMT-style rustc codegen backend targeting PTX, requiring nightly) and cutile-rs (a higher-level tile-based model on stable Rust that JIT-compiles through CUDA Tile IR). Both leverage Rust's ownership model to catch aliasing bugs and data races at compile time, though cuda-oxide is early alpha while cutile-rs is already used in HuggingFace's Grout and mistral.rs. NVIDIA plans to mature these toolchains through 2027 alongside CUDA C++ and Python.

tl;dr: Summary not available

tl;dr: The Chaos Computer Club has announced 40C3, taking place December 27-30, 2026 at the Hamburg Exhibition halls under the motto "Model Citizens" — a call to develop new societal models amid rising authoritarianism. Calls for Participation are now open for talks, art, music, DJs, and punk performances at what remains Europe's largest non-commercial hacker conference, organized by volunteers and drawing over 16,000 attendees.

tl;dr: Cloudflare open-sourced a "skill" for coding agents that runs a structured six-phase security audit: reconnaissance, coverage-led hunting, adversarial validation by separate agents, schema-validated findings output, independent verification, and target-neutral reporting. It enforces principles like separating hunters from validators, requiring source-grounded confirmation, and treating defense-in-depth gaps as hardening notes rather than vulnerabilities. This is the single-repo precursor to Cloudflare's internal vulnerability discovery harness, installable via the Skills CLI and requiring Node.js plus a sandboxed environment for executing target code.

tl;dr: Servo maintainer Josh Bowman-Matthews (@jdm) recaps his first year in a part-time role funded entirely by OpenCollective/GitHub donations, during which he reviewed 1,150 PRs, filed 114 newcomer-friendly issues (92% fixed), nominated 8 new maintainers, and wrote onboarding documentation. Notable work included supporting a large rewrite of Servo's JS engine integration to fix GC-related panics and stabilizing flaky tests to smooth the contribution process.

tl;dr: A developer post-trained a 4B parameter model (Qwen3.8-4B-Distill) using supervised fine-tuning on GPT-6 Astra trajectories plus custom GRPO reinforcement learning to generate Postgres query hints via the pg_hint_plan extension. The resulting agent achieved a 44.7% latency reduction across 113 join-heavy JOB benchmark queries, up from a baseline where the untrained model couldn't even produce valid plans for 99 of them. Key engineering work included building a low-noise Postgres measurement rig (tuning shared_buffers was critical) and designing reward signals robust to execution-time variance.

tl;dr: Factorio uses the taus88 PRNG (three XORed LFSRs), which is linear over GF(2) and therefore trivially breakable—observing enough output bits lets you reconstruct the internal state via matrix inversion and predict all future "random" rolls. The author built an in-game implementation using repair pack recyclers as entropy sources (each craft leaks ~2 bits via 50/50 output splits), needing 44 recycling operations to recover the full 88-bit state and predict quality upgrade outcomes. Note: this works in Factorio 2.0 but was broken by RNG changes in 2.1.

tl;dr: A developer's 174-line PHP polyfill for `http_build_url()`, written in 2014 as a temporary shim during an AOL CMS upgrade, has been installed nearly 20 million times via Packagist and bundled into widely-used projects like WPML and Debian packages. After rediscovering the package (which contains an amusing bug that strips the letter "a" from paths with trailing slashes), the author is deprecating it rather than handing it off, citing supply-chain risks à la the xz backdoor and pointing users to PHP League's URI library or PHP 8.5's native URI API.