GitHub's Advisory Database — the list it uses to warn projects that a piece of third-party code they depend on is malicious — previously covered only npm, the JavaScript package registry. GitHub has now wired in OpenSSF's malicious-packages data so advisories cover other language ecosystems too, and it describes building the ingestion pipeline deliberately paranoid, since the input is by definition a feed of hostile software.
+ Engineers rebuilt the part of PostgreSQL that executes queries and reported a 300x speed-up on analytical workloads. The gains came from three changes stacked together: processing rows in batches instead of one at a time, fusing separate operations into a single pass so intermediate results never get written out, and using SIMD instructions, which let one CPU instruction work on many values at once.
-
-
+
+
+ | Technique | What it does |
|---|
+ | Batching | Processes many rows per step instead of one |
| Operator fusion | Merges query steps so intermediate results stay in memory |
| SIMD | Applies one CPU instruction to many values at once |
+
Why it matters
-
Dependency malware is currently the most productive way to attack software teams, and the warning only works if it exists for the ecosystem you actually use. Broadening the feed closes the gap for teams working outside JavaScript, who until now got the same automated dependency alerts with much thinner malware coverage behind them.
+
This is the same set of techniques that specialised analytics databases have used for years, arriving in the general-purpose database many organisations already run. Practically, it means some teams can stop maintaining a separate warehouse just to answer reporting questions.
Deep Dive
- Writing Code Got Cheap. Owning It Didn't.
- GitHub's engineering team published a framework for deciding which changes are genuinely cheap now that AI tools write much of the code. Their argument: the cost of producing a feature has dropped sharply, but the cost of maintaining it — reviewing it, debugging it years later, keeping it secure — has not moved at all.
+ Cloudflare Built a Browser for Agents Instead of People
+ Cloudflare released Kitesurf, a browser designed to be driven by AI agents rather than displayed to a human. It runs inside V8 isolates — lightweight sandboxes that share one process instead of each getting a full browser — so thousands of agent sessions can run at once without the memory cost of thousands of Chrome windows.
-
-
- | Cost | Before AI tools | Now |
|---|
- | Writing the code | High | Low |
| Reviewing and owning it | High | High |
-
-
Why it matters
-
It reframes a decision every team is making badly right now. When a prototype takes an afternoon instead of a fortnight, the instinct is to say yes to more things, but the long-term bill arrives in maintenance rather than in the initial build.
+
Agents that browse the web are currently expensive because each one drives a real browser built for a human looking at a screen. Stripping out the rendering an agent never sees is what makes running them at scale affordable, and cost is the thing keeping most agent products in demo form.
@@ -661,7 +661,7 @@
Writing Code Got Cheap. Owning It Didn't.
◇ Fun fact
-
"Quake just got an official update — the game is 30 years old this year."
+
"NASA found a way to keep Voyager 2, launched in 1977, running for another year."
diff --git a/seen_topics.json b/seen_topics.json
index 5509f1f..dbd0ca0 100644
--- a/seen_topics.json
+++ b/seen_topics.json
@@ -1,60 +1,4 @@
[
- {
- "date": "2026-07-31",
- "title": "OpenAI's GPT-5.6 Competes on Price, Not Just Power",
- "summary": "OpenAI released GPT-5.",
- "source_urls": [
- "https://openai.com/index/advancing-the-price-performance-frontier-with-gpt-5-6/"
- ]
- },
- {
- "date": "2026-07-31",
- "title": "A Reviewer Flagged Two Papers for Fake Authors. Both Were Accepted Anyway.",
- "summary": "A conference reviewer flagged two submitted research papers for having fabricated authors, and both were still accepted as oral presentations — the top tier of acceptance.",
- "source_urls": [
- "https://geospatialml.com/posts/reviewing-ai-slop/"
- ]
- },
- {
- "date": "2026-07-31",
- "title": "Google Is Rolling Out Age Checks Across Android Worldwide",
- "summary": "Google will extend age verification on Android to every market by the end of the year, using signals from Google Play to tell apps whether a user is an adult.",
- "source_urls": [
- "https://android-developers.googleblog.com/2026/07/google-play-age-signals-api-safer-experiences.html"
- ]
- },
- {
- "date": "2026-07-31",
- "title": "Google's Robots Learn to Use Their Whole Body",
- "summary": "DeepMind released Gemini Robotics 2, which coordinates a robot's entire body — legs, torso, and arms together — instead of treating the arm as a separate problem from balance and movement.",
- "source_urls": [
- "https://deepmind.google/blog/gemini-robotics-2-brings-whole-body-intelligence-to-robots/"
- ]
- },
- {
- "date": "2026-07-31",
- "title": "They Gave an AI a Real Business. It Lost $447.",
- "summary": "Researchers handed GPT-5.",
- "source_urls": [
- "https://www.bottlenecklabs.com/blog/autonomously-run-businesses"
- ]
- },
- {
- "date": "2026-07-31",
- "title": "The Honest Number for AI Coding Is 2x, Not 10x",
- "summary": "A developer wrote up a year of working with AI coding tools and put the realistic productivity gain at roughly double, not the tenfold figure that circulates in marketing.",
- "source_urls": [
- "https://obryant.dev/p/2x-not-10x/"
- ]
- },
- {
- "date": "2026-07-31",
- "title": "Stacked Pull Requests Are Now Live on GitHub",
- "summary": "GitHub put stacked pull requests into public preview.",
- "source_urls": [
- "https://github.blog/changelog/2026-07-30-stacked-pull-requests-are-now-in-public-preview/"
- ]
- },
{
"date": "2026-08-01",
"title": "Idle Chips Are the AI Industry's Grounded Aircraft",
@@ -446,5 +390,61 @@
"source_urls": [
"https://github.blog/engineering/the-cost-of-saying-yes-has-changed/"
]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "AI Tutors Are Good at Answering. They're Bad at Holding Back.",
+ "summary": "The Allen Institute for AI released TutorMoments, a study and public dataset that looks at the moments where a tutor has to choose between giving a student the answer and letting them struggle a little longer.",
+ "source_urls": [
+ "https://huggingface.co/blog/allenai/tutormoments"
+ ]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "Memory Chips Are Sold Out Through 2027",
+ "summary": "Reports say memory manufacturing capacity for 2027 has already been bought up, largely by AI data centre demand.",
+ "source_urls": [
+ "https://www.ign.com/articles/ramageddon-continues-another-year-as-2027-memory-capacity-is-reportedly-sold-out"
+ ]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "Oracle Bans AI-Generated Code From OpenJDK",
+ "summary": "Oracle has barred AI-generated contributions from OpenJDK, the open-source project behind Java, which runs a large share of corporate software.",
+ "source_urls": [
+ "https://app.dealroom.co/news/feed/oracle-bans-ai-generated-code-from-openjdk-despite-ellison-s-claim-oracle-isn-t-writing-its-own-code"
+ ]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "One Site Found 99% of Its Traffic Was Bots",
+ "summary": "The owner of a 1.",
+ "source_urls": [
+ "https://patronview.com/news/99-percent-of-my-website-traffic-is-bots/"
+ ]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "The US Energy Department Launches Its Own Open AI Models",
+ "summary": "The Department of Energy opened the Genesis Open Models Initiative, run out of Argonne National Laboratory, to build and publish AI models openly rather than behind a commercial licence.",
+ "source_urls": [
+ "https://genesisopenmodels.anl.gov/"
+ ]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "Making Postgres 300x Faster at Analytics",
+ "summary": "Engineers rebuilt the part of PostgreSQL that executes queries and reported a 300x speed-up on analytical workloads.",
+ "source_urls": [
+ "https://malisper.me/how-we-made-postgres-hundreds-of-times-faster-the-query-engine/"
+ ]
+ },
+ {
+ "date": "2026-08-08",
+ "title": "Cloudflare Built a Browser for Agents Instead of People",
+ "summary": "Cloudflare released Kitesurf, a browser designed to be driven by AI agents rather than displayed to a human.",
+ "source_urls": [
+ "https://blog.cloudflare.com/kitesurf/"
+ ]
}
]
\ No newline at end of file
+