| 01 |
MIT CSAIL researchers report that frontier models can read and write network weights directly. Editing 0.016% of Qwen3.5-0.8B lifted its math score, though the gain mostly fixes a loop the model hit on 93% of problems. Simon Willison got Qwen 3.8 27B on a laptop to interpret weights too.
ML
Hacker News · 1853 points · 584 comments · also on Bluesky @philpax.me, Techmeme, Bluesky @gusthema.bsky.social · discussion
|
|
| 02 |
Phorion found that version 2.1.313 of Claude Code for VS Code on the Cursor Marketplace carried a persistent SSH backdoor targeting macOS, Linux and Windows. The extension has 27M installs. The version has been pulled and Cursor issued a security notice. If you installed it, review your environment and rotate credentials.
Code
Hacker News · 732 points · 459 comments · discussion
|
|
| 03 |
Large 4 is a multimodal MoE with about 1T total and ~49B active parameters, 1M context and a Pixtral vision encoder. Mistral claims it's the best open-weight model for coding. Hugging Face already hosts GGUFs and an NVFP4 variant. Check the license first: it's a modified MIT that restricts hosted services.
ML
Hugging Face
|
|
| 04 |
The amended filing shows $33.2B in revenue over nine months, but quarter-over-quarter growth slowed to 47%. It also warns that Anthropic may 'imminently meet' its recursive self-improvement threshold and might not notice significant acceleration until afterward. Rare hard numbers and risk language ahead of a historic IPO.
Startups
Techmeme · also on TechCrunch · discussion
|
|
| 05 |
CVE-2026-98432 is a remote use-after-free in the IPv4 TCP handshake that has been in the kernel since 4.4. Upstream is fixed, but Ubuntu and RHEL hadn't shipped patched kernels as of Oct 31. Anthropic says its model exploited the bug to run commands as root on MPTCP servers.
Code
r/programming · also on Lemmy c/selfhosted, Lemmy c/programming · discussion
|
|
| 06 |
A detailed GitHub report shows Postman's desktop app adding plugins, startup hooks and MCP connections to coding agents without asking, and even trying to approve its own hook. It drew 1,385 points on Hacker News. If you run coding agents, check what other apps have added to their configs.
Code
Hacker News · 1385 points · 458 comments · discussion
|
|
| 07 |
Revolut made self-hosted GLM models on 56 B200s the default for roughly 2,000 engineers, replacing commercial tools like Claude Code. It cut inference costs about 90% in under a year. Cheap tokens also changed how engineers used the tools. A concrete build-vs-buy data point.
|
|
| 08 |
Postgres committer Robert Haas says LLMs are finding bugs faster than maintainers can fix them, which forced late reverts of major features. It shows how AI bug-hunting can strain a mature open-source project even when it works as intended.
Code
Lobsters · 45 points · 17 comments · discussion
|
|
| 09 |
Jepsen's analysis of ParticleDB 1.1.4 found 96 issues, including lost committed writes and lost updates under serializable isolation, despite 'Full ACID' and 'formally proven' claims. It was discussed on Lobsters, Hacker News and Reddit. A good reminder to test a database's guarantees before relying on them.
Data
Lobsters · 141 points · 35 comments · also on r/programming, Hacker News, Lemmy c/programming · discussion
|
|
| 10 |
The Nasdaq 100 fell 3.4% on Friday and Intel dropped roughly 30% after weak Amazon and Intel earnings, as investors questioned whether huge AI capex is paying off. Together with Anthropic's slowing growth, it's the week's clearest sign that markets are pricing in AI risk.
Startups
Lemmy c/technology · 298 upvotes · 85 comments · also on r/artificial · discussion
|
|