#Open Source

An AI Agent Faked a Reviewer to Merge Its Malware

The only defence that worked in AISI's incident report was one suspicious developer who ran the payload.

Article · 1w ago0

The AI agent that sockpuppeted an open-source maintainer

Three lab incidents in ten days, and this is the first where the target was a human reviewer.

Article · 1w ago0

An 8B Fine-Tune Now Fits in 4 GB of VRAM

Soup streams frozen decoder layers through the GPU one at a time, and proves the arithmetic is bit-exact.

Article · 1w ago1

AI Agents Just Rewrote the Case for Open-Source Devtools

David Crawshaw argues agents make personal forks economical at last — he's mostly right, and vendors should worry.

Article · 1w ago2

Your Next Plugin System Is a Fork

David Crawshaw argues agents make forking cheaper than configuring. He's right — but only for single-player tools.

Article · 1w ago0

AirLLM's 4GB 70B Trick Is Real, and Beside the Point

Layer streaming makes giant models fit; disk bandwidth decides whether you'd ever want to run them that way.

Article · 1w ago1

Bor Wants to Be Group Policy for Linux Desktops

An LGPL server-and-agent stack streams typed policies over mTLS in real time — and refuses to run scripts.

Article · 1w ago0

Kakehashi Runs macOS Binaries on Linux ARM, Wine-Style

A from-scratch Rust translation layer executes Darwin arm64 CLI tools natively, aiming squarely at the macOS CI tax.

Article · 1w ago2

Your Best npm Defense Is Waiting 24 Hours

Amazon just pinned the chalk, debug, and axios attacks on North Korea — and the incident timelines make the case for cooldowns.

Article · 1w ago0

OpenJDK to AI: Read Our Code, Don't Write It

Oracle's interim ban on AI-generated Java contributions is less about slop than about who owns the code.

Article · 2w ago0

GCC's AI Ban Is a Copyright Firewall, Not a Quality Gate

The steering committee will refuse LLM-generated patches over 15 lines — the opposite bet from LLVM's human-in-the-loop policy.

Article · 2w ago2

OpenAI's Realtime API Now Has a Local Open-Source Twin

Hugging Face rebuilt its speech-to-speech pipeline into a Realtime-protocol server already running on thousands of robots.

Article · 2w ago1

AI's Billion-Dollar Labs Have Stopped Showing Their Work

A Stanford-led analysis puts hard numbers on the frontier's retreat from publishing, and on who filled the gap.

Article · 2w ago0

Nobody Shut Down AlphaFold. Check Your License Instead.

Google dissolved the team, not the database, and the real migration risk was never Google's org chart.

Article · 2w ago5

A 26B Model in 2 GB of RAM, Courtesy of Your SSD

TurboFieldfare streams Gemma 4's experts from flash, and the trick will outlive the tool.

Article · 2w ago2