2. CosmosEscape: Taking over Every Database in Azure Cosmos DB (www.wiz.io)
Wiz Research details CosmosEscape, a critical vulnerability in Azure Cosmos DB that granted full read/write access to every database. Now fully remediated.
A serious vulnerability in Azure Cosmos DB, named CosmosEscape, allowed unauthorized full access to all databases. Wiz Research explains how this flaw was identified and subsequently fixed, highlighting the importance of security in cloud databases.
3. Show HN: A local merge queue for parallel Claude Code agents (github.com)
The local merge queue for parallel Claude Code agents - funador/claude-code-merge-queue
A developer has created a local merge queue system to manage multiple commits efficiently on a low-spec MacBook Air, preventing crashes from simultaneous builds and tests. This solution aims to streamline workflows for others using modest hardware without incurring high CI costs.
4. Building a native C# implementation of CEL engine (bsid.io)
Why I wrote Celly — a from-scratch, conformance-passing CEL implementation for .NET — and the protovalidate library that fell out of it
A developer shares their journey of creating Celly, a native C# implementation of the CEL engine for .NET, along with insights into the protovalidate library that emerged from the project. Discover the motivations behind this new implementation and its potential benefits for .NET developers.
5. The Alice and Bob After Dinner Speech (1984) (hex.ooo)
6. Man seeks millions after being shot by police in game-related swatting incident (www.tucsonsentinel.com)
A Tucson man is asking Pima County to pay $176 million after sheriff's deputies shot him, leaving him paralyzed, when online hackers falsely reported a shooting at his home. The man had alerted the Sheriff's Department to fears that he would be "swatted" just days earlier.
A Tucson man is suing for $176 million after being shot by police during a swatting incident, which he had warned authorities about just days before. The incident left him paralyzed, raising serious questions about police response to online threats.
7. GitHub is the wrong shape for this new world (depot.dev)
GitHub isn't just falling short on performance and reliability. The whole collaboration paradigm is the wrong shape for how we build software now.
GitHub is facing criticism not only for its performance issues but also for its outdated approach to software collaboration. The article argues that the current model does not align with the evolving needs of modern development practices.
8. Paging Through a Parquet File in DuckDB: File_row_number or Offset? (rusty.today)
You have a large Parquet file and an API that has to return its contents, but responses have a size ceiling, so the caller pages through it. LIMIT/OFFSET is the obvious way to write that and it is the wrong one. I measured file_row_number against it: 2.53x faster on a file with 163 row groups. Speed is the boring half of the answer. OFFSET will also hand back the wrong rows without telling you.
Using a large Parquet file with an API can be tricky due to size limits on responses. The article highlights how using file_row_number instead of OFFSET can significantly improve performance and accuracy when paging through data.
9. How Olinia Turns Mexico's EV Ambition into Reality (spectrum.ieee.org)
10. I Have Thoughts on the iPhone Air (christianselig.com)
Hard to believe, but it's been over 9 months since the current crop of iPhones came out, and I elected to grab the (apparently not super popular) iPhone Air, a new model of iPhone introduced for the first time. Rumor season for the new iPhones is in full swing, so it seemed like a good time to jot down my thoughts on the current model.
After using the less popular iPhone Air for over nine months, the author shares insights and reflections on its performance and features as rumors swirl about the next generation of iPhones. If you’re curious about how this new model holds up and what it might mean for future releases, check out the thoughts presented here.
11. Why the future is local app (getapps.cafe)
The cloud made software convenient, then quietly took your speed and your privacy with it. Here's why the best apps are moving back onto your machine.
As software shifts back to local installations, users can expect improved speed and enhanced privacy. This trend highlights a growing discontent with cloud reliance and its drawbacks.
12. EU now fears US interference in European elections (www.eunews.it)
Concerns about the elections have been raised in the European Parliament. The Commission has not ruled this out. The United States is now a problem
13. Toot.community Is Shutting Down (social.jorijn.com)
Today, I’m letting you know that toot.community will close permanently on 28 October 2026.
This decision is final, and the server won’t be handed over to anyone else.
When I started running toot.community, I really enjoyed it. Over time, it became more stressful and less rewarding.
Every day, I deal with spam, bots, technical issues, abuse reports, and user conflicts. Much of the moderation ends up being about personal disagreements rather than actual rule-breaking.
More importantly, I don’t enjoy how people interact on social media anymore. Too often, conversations turn hostile or confrontational. A small amount of conflict and bad actors takes up a disproportionate amount of time and energy.
I find myself feeling more angry or discouraged after spending time as an admin, and that’s not what I want from social media or a volunteer project.
There’s also the financial side. I’m very grateful to everyone who donated, but donations haven’t covered costs for a long time. I’ve had to shoulder most of the expenses, time, and responsibility myself.
The server is now closed to new registrations and will remain online until 28 October 2026, so you’ll have three months to find another Mastodon or Fediverse server and move your account.
You can find Mastodon’s official migration guide here: https://docs.joinmastodon.org/user/moving/
Please note that Mastodon can move your followers, but it can’t transfer your old posts or uploaded media to your new account. If you want to keep a copy, download an archive.
If you’d like to stay in touch, you can follow my personal account here (@jorijn).
This decision is final, and the server won’t be handed over to anyone else.
When I started running toot.community, I really enjoyed it. Over time, it became more stressful and less rewarding.
Every day, I deal with spam, bots, technical issues, abuse reports, and user conflicts. Much of the moderation ends up being about personal disagreements rather than actual rule-breaking.
More importantly, I don’t enjoy how people interact on social media anymore. Too often, conversations turn hostile or confrontational. A small amount of conflict and bad actors takes up a disproportionate amount of time and energy.
I find myself feeling more angry or discouraged after spending time as an admin, and that’s not what I want from social media or a volunteer project.
There’s also the financial side. I’m very grateful to everyone who donated, but donations haven’t covered costs for a long time. I’ve had to shoulder most of the expenses, time, and responsibility myself.
The server is now closed to new registrations and will remain online until 28 October 2026, so you’ll have three months to find another Mastodon or Fediverse server and move your account.
You can find Mastodon’s official migration guide here: https://docs.joinmastodon.org/user/moving/
Please note that Mastodon can move your followers, but it can’t transfer your old posts or uploaded media to your new account. If you want to keep a copy, download an archive.
If you’d like to stay in touch, you can follow my personal account here (@jorijn).
Toot.community will cease operations on October 28, 2026, as the founder cites increasing stress and challenges in managing the platform. The decision to shut down comes after a decline in enjoyment and a rise in conflicts and technical issues.
14. RCade: The Arcade Cabinet with CI/CD Deployment, Custom Graphics Card for CRT [video] (www.youtube.com)
Localhost is a series of technical talks given by members of the Recurse Center community.👾 The RCade is a custom arcade cabinet built during the Fall 2, 2...
The RCade is a unique arcade cabinet developed by the Recurse Center community, featuring continuous integration and deployment (CI/CD) for software updates and a custom graphics card designed for CRT displays. Discover how this project blends retro gaming with modern development practices.
15. Show HN: Supapool – a Supabase per coding agent in ~400 ms (supapool.io)
Full, isolated Supabase instances for coding agents in 1 second.
Supapool.io allows developers to quickly create separate instances of Supabase services in about 400 milliseconds, solving issues of local resource strain and conflicts when running multiple coding agents. This tool streamlines development by providing isolated environments for parallel work without the overhead of traditional setups.
16. A pharmacy chain in Vermont implemented AI for efficiency (vtdigger.org)
As AI pops up in healthcare systems across the country, several lawyers told VTDigger that the technology is outpacing regulation, leaving consumers vulnerable.
Vermont’s pharmacy chain is adopting AI to improve efficiency, but legal experts warn that the rapid integration of this technology in healthcare may outstrip existing regulations, potentially putting consumers at risk.
17. Atomarine: Nuclear Data Centers at Sea (atomarine.co)
Floating data center platforms, built in shipyards and deployed at sea. Cooled by seawater, powered on the platform, and connected to shore.
Floating data centers are being constructed in shipyards and stationed at sea, utilizing seawater for cooling and generating their own power. This innovative approach could reshape how we manage data storage and processing while minimizing land use.
18. Flume Water Monitor 915 MHz Security Is Pretty Good (waveformsecurity.com)
The Flume Water Meter 915 MHz water usage messages were observed with a Software Defined Radio (SDR), demodulated, and eventually decrypted.
A recent analysis reveals that the Flume Water Meter’s 915 MHz communication can be intercepted and decrypted using a Software Defined Radio. This raises questions about the security of water usage monitoring devices and their vulnerability to unauthorized access.
19. Show HN: Logan Basic v2.1 - An online BASIC interpreter. (sinusoft.com)
20. Git worktrees are not an isolation boundary for coding agents (fletch.sh)
Most tools that run AI coding agents in parallel give each one a git worktree. A worktree shares refs, config, stash and hooks with your real repository. Paste-and-run repros showing an agent can execute code in your main repo and rewrite your commit identity, plus benchmarks showing a properly isolated clone costs the same.
AI coding agents using git worktrees may not be as isolated as previously thought, as they share critical components with the main repository. The article presents evidence that these setups can lead to unintended code execution and identity changes, raising questions about their safety and efficiency compared to fully isolated clones.
21. The Apple Calculator Language (wadetregaskis.com)
23. Show HN: Noisegate – a differential-privacy gateway for untrusted AI agents (github.com)
Noisegate: a differential privacy gateway that lets an untrusted LLM agent query sensitive data over MCP (Model Context Protocol), with a formal guarantee no individual's record can leak even i...
Noisegate offers a solution for safely querying sensitive data using untrusted AI agents while ensuring individual privacy. It employs differential privacy techniques to prevent any risk of personal data exposure.
24. Trusted URLs via Cryptographic Signatures (blog.certisfy.com)
25. Show HN: ZeroShot: Agent session monitoring to make your team go faster (tryzeroshot.com)
ZeroShot is agent session monitoring for your team's coding agents. Sessions and PR reviews become reusable skills — enforced on every PR. Teams ship 3.7× faster on 90% less wasted token spend.
27. US gov and OpenAI mislabel map of Africa at global conference (www.theguardian.com)
State department ‘takes full responsibility’ for erroneous, widely shared chart displayed at Aids conference in Brazil
28. Show HN: Legionlinuxtui – Control Lenovo legion laptops in the terminal (github.com)
Control lenovo legion laptops in the terminal. Contribute to nooneknowspeter/legionlinuxtui development by creating an account on GitHub.
A new tool allows users to manage Lenovo Legion laptops directly from the terminal, enhancing control and customization for Linux enthusiasts. Check out the GitHub page to see how it works and contribute to its development.
29. Starter Homes Are Piling Up While Luxury Homes Fly Off the Market (www.zillow.com)
30. Show HN: Ski – Voice Coding for Claude Code, Codex and More – On-Device – Free (heyski.io)
A voice for your AI coding assistant — free forever on Mac and Windows, fully private, works offline. Speak, and hear it answer.