The last 7 days in tech, AI & LLMs
October 15, 202644 stories from 24 sources

Digital Dhaba

Tech Digest

Your quick roadside stop for the week in tech.

Written & published by  Blogs by Kush
A kid in glasses reading the Digital Dhaba newspaper beside chai, samosas, tech books and a laptop

The last 7 days in tech, AI & LLMs

Top stories

01

Gemini 4 Argon

Google's new model drew the week's biggest Hacker News thread, and newsletters are describing it as tying GPT-6.

02

Cloudflare acquires Deno

The JavaScript runtime joins Cloudflare, one of the week's most-discussed deals outside AI.

03

Redesigning source control at Anthropic

Anthropic built its own alternative to Git after merged code changes grew from about 2,500 to over 30,000 a day.

04

11 year old unsoundness bugs found in Rust borrow checker

Long-standing soundness holes in the checker that underpins Rust's safety guarantees.

05

Ledger confirms spy chip implant behind wallet crypto thefts

Ledger has confirmed a hardware implant was behind the crypto thefts from its wallets.

AI & LLMs6 stories

Gemini 4 Argon

deepmind.google · ▲ 1428 HN · 1021 comments

Google's Gemini 4 Argon page topped the week's discussion, with a companion "Gemini 4 Argon for Robotics" thread alongside it. Newsletter coverage says Argon went generally available this week and headlines it as tying GPT-6, with benchmarks like CursorBench reportedly confirming Google's claims.

Why isn't the industry freaking out about DeepSeek 4.1 Flash?

A blog post asks why DeepSeek 4.1 Flash hasn't caused more of a stir. The thread, close to 1,000 comments, shows the question struck a nerve.

Redesigning source control at Anthropic

anthropic.com · ▲ 861 HN · 961 comments · also in Simon Willison

Anthropic describes why and how it built a custom alternative to Git. In May 2026 it merged about 2,500 code changes per day; by September that was over 30,000. The volume suggests AI-assisted development is straining tools built for human-paced workflows.

Containment and monitoring failures are to blame for AI hacking reports: experts

CSO Online reports that experts blame containment and monitoring lapses, not agents "going rogue," for recent AI hacking reports. The framing points at basic security hygiene at frontier labs.

OpenAI engineer arrested in bugging of executive conference room

sfstandard.com · ▲ 641 HN · 526 comments · also in TLDR AI, The Rundown AI

An OpenAI engineer was arrested over the alleged bugging of an executive conference room, and OpenAI's newsroom account has commented. Several newsletters led with it.

OpenAI annualised revenues $20B less than previously signalled

cnbc.com · ▲ 432 HN · 301 comments · also in The Neuron

CNBC reports OpenAI's annualised revenue is $20B lower than previously signalled. The figure matters for judging the scale of the compute deals and valuations around the company.

Research Papers6 papers

DiffusionART: Efficient, Stable and Scalable Reinforcement of Diffusion Models

KlingAI Research · ▲ 308 upvotes · arXiv · Code ★ 122

In short: An online RL method for fine-tuning image and video diffusion models. It pools each prompt's rewards into one shared improving direction and adds a trust-region-masked second update, so no EMA tuning is needed.

Why it matters: On HunyuanVideo-13B it reaches the reward levels of DiffusionNFT and Flow-GRPO-Fast with 12.02x and 11.72x fewer GPU hours.

S-Space: Exploring Spatial Workspace in Multimodal Language Models

MirroS · ▲ 287 upvotes · arXiv · Code ★ 173

In short: The authors find a linear subspace in multimodal LLMs where object tokens encode horizontal, vertical and distance coordinates. They show it works as an internal spatial workspace using causal interventions.

Why it matters: As a diagnostic, it shows models form good spatial representations but fall short at the transformations needed to reason across viewpoint changes.

AgentGarten: Code Worlds for Evolving Agents

MirroS · ▲ 285 upvotes · arXiv · Code ★ 183

In short: A framework pairing simulators and game engines with a shared real-time neural renderer, distilled from a video model using "Adversarial Forcing." Agents learn in these worlds and pass distilled playbooks to later agents.

Why it matters: Agents learned from just 4 rounds, versus millions for a conventional RL counterpart.

Jeva: System One Models from First Principles

National University of Singapore · ▲ 254 upvotes · arXiv · Code ★ 63

In short: A decision-native architecture that encodes the request and each option separately and scores them. This makes it null-aware, permutation-invariant, scalable in the number of options and cacheable.

Why it matters: It shows near-perfect null detection and no decision flips under any tested permutation. It scales to thousands of candidates and cuts latency by reusing computation across requests.

Thinking Inertia: LLMs Keep Thinking When Told Not To

Stanford University · ▲ 222 upvotes · arXiv · Code ★ 5

In short: The paper introduces metrics for measuring "no-thinking" behavior and tests six prompting interventions on six LLMs.

Why it matters: Explicit "don't think" controls can't reliably stop visible reasoning, and it gets worse as the answer space opens up.

AgentSWE: Can Coding Agents Build the Agent You Actually Want?

arXiv · ▲ 206 upvotes · arXiv · Code ★ 36

In short: A 25-task benchmark covering creating, editing and optimizing agents, graded on held-out cases against requirement-derived rubrics.

Why it matters: No tested coding agent came close to delivering what a requirement asked for. Recurring failures include overfitting to visible cases and unsupported claims of completion.

Dev Tools & Engineering5 stories

11 year old unsoundness bugs found in Rust borrow checker

A Rust issue reports unsoundness bugs in the borrow checker that have gone unnoticed for 11 years. The borrow checker is central to Rust's memory-safety promise, so the thread drew heavy discussion.

Python 3.15

python.org · ▲ 316 HN · 112 comments · also in [Simon Willison](https://simonwillison.net/2026/Oct/12/python-3-15/)

Python 3.15 is out. Simon Willison highlights explicit lazy imports from PEP 810 (lazy import json) and a new profiler. He also notes the release lets library authors drop 3.10 and start using 3.11 features.

Show HN: Quake ported to safe Rust, playable in browser

quake-srp.pages.dev · ▲ 241 HN · 181 comments

A port of Quake to safe Rust that runs in the browser. It's a fun proof of concept for porting a classic C codebase.

Postgres isn't slow, your storage is

clickhouse.com · ▲ 179 HN · 187 comments

A recap of a Posette talk arguing that Postgres performance problems often trace back to the storage layer, not the database. The thread was active, so it's worth skimming if you run Postgres.

From 2,500 requests to 24: Rebuilding star history without the stargazers

GitHub Blog

GitHub's new repo star-history API returns trends without individual identities or unbounded database work. The post covers the engineering tradeoffs behind the redesign.

Cloud & Infra3 stories

3rd Yandex Cloud Data Center Was Hit

status.yandex.cloud · ▲ 642 HN · 803 comments · also in [united24media.com](https://united24media.com/war-in-ukraine/yandex-takes-a-second-data-center-hit-in-48-hours-now-its-biggest-russian-site-is-damaged-23277)

Yandex Cloud's status page logged a third data center incident. An earlier report described a second hit within 48 hours that damaged its biggest Russian site. Both threads drew heavy discussion about physical infrastructure in wartime.

A Dynamic and Distributed Virtual GPU Cloud Built on Idle Apple Silicon Devices

machinelearning.apple.com · ▲ 246 HN · 98 comments

Apple's research team describes a virtual GPU cloud assembled from idle Apple Silicon devices.

Announcing AWS Lambda Web Functions

AWS News Blog

Lambda Web Functions is a serverless compute primitive that runs your HTTP framework natively. It offers multi-concurrent execution and automated global distribution for fast, consistent responses.

Startups & Funding5 stories

Cloudflare acquires Deno

Deno announced it is being acquired by Cloudflare. The JavaScript runtime sits close to Cloudflare's Workers platform, and the thread shows strong community interest.

Typesafe AI raises $870M at $7.5B

typesafe.ai · ▲ 444 HN · 356 comments · also in The Neuron

Typesafe AI announced an $870M round at a $7.5B valuation. Latent Space's AINews says Sequoia "leaked" that the company crossed $100M ARR within weeks of launch, and notes accusations of astroturfing.

Research Firm Calls Anthropic's IPO 'Unprecedented Test of Investor Gullibity'

CNBC reports an analyst firm's harsh view of a prospective Anthropic IPO. It's a sign of how contested AI valuations are heading into public markets.

Ambani's Jio seeks to raise $3.2B in what could be India's biggest IPO

TechCrunch

Jio plans to use most of the proceeds to repay debt as it expands beyond telecom.

Zenzap raises $44M for its AI chat app that aims to replace WhatsApp in the workplace

TechCrunch

Zenzap is used by organizations including Starbucks and Taco Bell.

Security6 stories

Ledger confirms spy chip implant behind wallet crypto thefts

bleepingcomputer.com · ▲ 778 HN · 491 comments

Ledger confirmed that a spy implant in hardware wallets was behind crypto thefts. The thread links further coverage and a research write-up on the Nano X implant. Hardware supply-chain tampering is hard for users to detect.

Hackers activate automatic defrosting in supermarket fridges across Europe

tomshardware.com · ▲ 900 HN · 997 comments · also in The Rundown AI

A cyberattack on European supermarkets triggered automatic defrosting in fridges, with delivery and store prices also affected. Reuters, the BBC and Le Monde covered it, and The Rundown AI flagged the attack on French grocers.

Telegram Desktop vulnerability allowed any user's file to be stolen

beaksec.github.io · ▲ 470 HN · 328 comments

A write-up details a Telegram Desktop vulnerability that let an attacker steal any user's file, with a one-click account takeover in the post's URL.

`123456' password used in Danish CPR data breach

The Copenhagen Post reports that a "123456" password was involved in a large breach of Danish CPR data.

I Found a $90k Remote Code Execution Vulnerability in Google

simonkoeck.com · ▲ 237 HN · 119 comments

A write-up of a $90k remote code execution bug in Google's developer site. The URL points to a Flask session and pickle issue.

Zod 4.6.6 compromised by malware?

A GitHub commit prompted the question of whether Zod 4.6.6 was compromised by malware. If you depend on Zod, check the thread.

Other Tech5 stories

Trump administration is suspending Microsoft from a green card program

AP reports the administration is suspending Microsoft from a green card program. It drew the most comments of any story this week, over 1,600.

Apple HomeView

apple.com · ▲ 747 HN · 894 comments · also in The Rundown AI

Apple's HomeView page prompted heavy discussion. The Rundown AI summarized the launch as Apple going "all-in on the home."

Passkeys are a trap

nonfunctional.substack.com · ▲ 1124 HN · 574 comments · also in scotthelme.co.uk

A polemic against adopting passkeys. It drew over 1,100 points and coverage from Scott Helme's blog, so the debate is far from settled.

Whistle: Speech to Text in 16.9 MB

cactuscompute.com · ▲ 962 HN · 185 comments

Cactus Compute introduces Whistle, a speech-to-text model that fits in 16.9 MB.

Fingerprints are the new cookies

An essay argues that browser fingerprinting is replacing cookies as the way users are tracked online.

Quick hits

■Character.AI files for Chapter 11 — It agreed to sell some assets to Disney for $20M. via The Neuron
■Anthropic's Frontier Red Team on self-replicating AI — It warned that small AI models may be months away from copying themselves across cheap gadgets like TV boxes. via The Neuron
■Scientists call for an international body on cyber-capable AI — About 400 scientists, including Geoffrey Hinton and Yoshua Bengio, want containment standards and a registry of security incidents. via The Neuron
■Chinese firms bought over 1M Nvidia GPUs in a year — The Financial Times says they were gaming and workstation chips that comply with U.S. export controls. via The Neuron
■Microsoft to scale Maia chips to multi-gigawatt deployments — The in-house chips scale up from 2027. via The Neuron
■Nvidia plans €2B in new European AI deals — Jensen Huang said they'll be unveiled in the coming week, on top of $8B invested over the past year. via The Neuron
■FBI arrests executive at ransomware negotiation firm — The co-founder of a Canadian cybersecurity firm was arrested in connection with the ShinyHunters investigation, according to Krebs's sources.
■U.K. sanctions Cryptomus for Russian money laundering — Experts say the crypto platform is a major conduit for ransomware, darknet and cybercrime payments.

Try this

One AI habit worth picking up this week.

Give your AI a rulebook it rewrites when it's wrong

UCL and Huawei researchers (Memento 3 paper) · via The Neuron

Keep a numbered rulebook for any AI task you repeat. When an output fails, don't fix it by hand. Ask the AI which rule caused the failure and for the smallest edit to that rule. The paper is about puzzle games, so applying it to office work is The Neuron's own spin.

Here's my rulebook and a failed output: [paste both]. Don't rewrite the rulebook. Name the rule that caused the failure, propose the smallest edit, then check it against these approved examples and flag any that would now fail: [paste 2-3].

■Why it works: An edit is kept only if it still fits past approved outputs, so each fix improves the rules without breaking earlier results.

Worth your weekend

Essays, talks, papers and books worth slowing down for, new or old.

Software Is Changing (Again)

Andrej Karpathy · Talk · 40 min · 2025

Karpathy describes "Software 3.0": after hand-written code and trained neural networks, we now program computers in plain English. He compares LLMs to utilities, chip fabs and operating systems, and says we're in "the 1960s of LLMs."

■Takeaway: The best AI products today augment people, with an autonomy slider, rather than act fully on their own.
■Takeaway: Keep AI on a short leash and make checking its work fast, because human verification is the bottleneck.

How to Do Great Work

Paul Graham · Essay · 30 min read · 2023

The Y Combinator co-founder's essay on doing great work in any field: follow what you're unusually curious about, reach the frontier, notice the gaps others take for granted, and keep working. It's useful reading for anyone building a career or side project.

■Takeaway: Pay attention to what you're curious about "to a degree that would bore most other people." That's a clue to your best work.

Attention Is All You Need

Ashish Vaswani, Noam Shazeer, Niki Parmar and colleagues · Paper · 15 pages · 2017

The Google paper that introduced the Transformer, the design behind today's AI chatbots. Instead of reading a sentence word by word, every word looks at every other word at once and weighs which matter most. The authors report better translation than the best systems of the day, trained in a fraction of the time.

■Takeaway: Big breakthroughs can come from simplifying; the team dropped the complicated parts others relied on and kept only attention.

From the newsletters

Latent Space
Meta's frontier-model launch, compared against Fable and Astra
Latent Space
how OpenAI and Anthropic balance agent autonomy and control in finance
The Neuron
Runway's Solaris generates interfaces frame by frame
The Pragmatic Engineer
internal dev tools, agents in workflows and measuring productivity
The Pragmatic Engineer
handling AI-vendor uncertainty and disaster recovery
The Rundown AI
Meta's new model and how to put it to work
Interconnects
doubts about researchers' claims that AI will soon outdo them
Last Week in AI
OpenAI math proofs and new open-weight models from Mistral and Reflection AI
Lenny's Newsletter
one interface for casual and technical users

That's the week. Chai's on us next week.

—  Blogs by Kush

Forward to a friend