October 30, 2026
Mistral Ships Open Weights but Bans Model-as-a-Service; Apple's Git Still Trusts a Compromised Certificate
Hacker NewsLobstersTech Trends DailyMistral Large 4
#emudhra
8 articles · All tags
📰 Digests
October 29, 2026
Apple Hasn't Fixed Compromised eMudhra Certificates in Ten Days, macOS Update Even Reverts User Workarounds; Fingerprinting Script Injected with Fake Bioweapon Function Names and Hidden Directives; Gemini 4 Carbon Launches with Discussions Fixated on Naming and Quotas
Hacker NewsLobstersTech DailyeMudhra
October 28, 2026
OpenAI's Paper Disproving the Exponential Time Hypothesis Formalized in Lean 4 by Anthropic (Authored by Claude, Discovered by Internal Research Model); Same Day Python Steering Council Confirms 3.13 Experimental JIT Removal from Mainline, and Tailscale SSH Acknowledges Privilege Escalation Vulnerabilities
ETHExponential Time Hypothesis3-SATk-CNF
October 27, 2026
Anthropic Writes $637B in Compute Commitments into S-1 with H1 2026 Revenue Reaching $16.3B (vs. $1.16B YoY); Meanwhile OpenAI's 67-Page Preprint Claims to Disprove the Exponential Time Hypothesis, and Cohere Catches Qwen3.8 Uploading Probes to a Beijing S3 Bucket While Writing Defense Rules
AnthropicS-1IPOcompute purchase commitments
October 25, 2026
A Brotli Out-of-Bounds Write Patched in February Without Security Tagging Spreads from Node.js to Python, C++, and Envoy, Turning "HTTP Compression On by Default" into an Industry-Wide Patch Window; Meanwhile National Bodies Vote Down C++26, and Roku Migrates Repos to GitLab with a Warning That Search Indexes Expire Silently — Today's Breakages Stem from Overlooked Defaults
BrotliCVE-2026-111497node2shellhttp2shell
October 22, 2026
A Single OOM Request Unlocks Unauthenticated RCE in PHP: Two CVEs Traced Back to 5.4.0 Leave Default WordPress, Drupal, and MediaWiki Vulnerable as Chainguard Breaches Embargo Six Hours Early; Railway Env Vars Exfiltrated and LiteLLM Backdoored
php2shellCVE-2026-109618CVE-2026-109619PHP 8.2.35
October 21, 2026
eMudhra's 8 Intermediate CA Private Keys Were All Integers Under 256: Browsers Revoked Cleanly in Two Hours, While Go and Electron Await New Releases; 10% of Tor Exit Nodes Held by Ebury for Two Months, Uncovered by a Single Sysadmin Scanning the Entire Network
eMudhraintermediate CAprivate key compromiseKGC script
