‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug... that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017. Website: Write-up: GitHub: It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su. Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise. Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.show more

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we... used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link belowshow more

1/ Any model on OpenRouter can now run code... in a hosted Linux container. Add one tool to a Responses API request. The model writes the script, runs it, and reads back the result. Nothing to install, nothing to host. Meet openrouter:shell. To get started: "tools": [{ "type": "openrouter:shell", "parameters": { "engine": "openrouter" } }]show more

Just dropped a PoC for CVE-2026-43786. Local privilege escalation... to root through macOS CoreServices. Patched in Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. Malwationshow more

Seems like Visual Studio Code is starting to tell... you: your agent primitives need to move. There is now a new migration banner in the Chat panel, and it is part of a much bigger change happening under the hood: the move from the old Local harness to the new Agent Host architecture built around AHP. This is not just about moving where an agent runs. The old model was very VS Code-centric: prompts, custom agents, instructions and skills could live in VS Code-specific locations and the agent runtime lived inside the extension host. The new Agent Host separates the agent runtime from the editor. Sessions can keep running when the window closes, be shared across VS Code windows, run remotely, and support different harnesses such as Copilot, CLI and Copilot Desktop App through a common session layer. And that means some of our primitives need to move too. Prompt files are being deprecated for Agent Host and migrated to Skills. User-level agents and instructions that lived in VS Code profile storage need to move to harness-supported locations. Even the old location settings are being deprecated. The new migration experience can detect these things and guide you through moving or converting them, while keeping the originals unless you explicitly remove them. The new banner is basically the first visible sign that this migration is becoming a real product workflow. Basically telling us - it's time to move on!!!! If you have accumulated a lot of prompts, custom agents, instructions and skills over the last year, now is probably a good time to understand where they actually live and which harness owns them. To summarize the shift - it isn't just: VS Code Chat → Agent Host It is: VS Code-specific primitives → harness-native primitives. And I think this is going to become increasingly important as agents stop being features inside an IDE and become runtimes that multiple clients can connect to. Go run your migrations now 🏃‍♀️show more

I just built a Claude Code skill that scores... whether your landing page actually keeps your Meta ad's promise 🤯 Drop in your ad and the page it points to. It reads both, scores the "ad scent" from click to page, and finds the exact line where the page breaks the promise that won the click. All inside Claude Code. Perfect for DTC brands and media buyers who pour everything into the ad and the CPA but never grade the seam in between. If you're scaling spend on a winning ad, the click is landing on a page that opens with something slightly different, the ad promised 50% off and the page shows full price, the ad hooked "for oily skin" and the page is a generic homepage, and nothing looks broken, but the visitor feels it and bounces... That gap has a name in conversion work: message match. And you already paid for the click you're losing. Here's what it does: → Drop in your ad (headline, copy, offer, CTA) and the landing-page URL → It fetches the live page and reads what's actually above the fold → Grades 7 continuity dimensions: promise, offer, angle, CTA, audience, proof, visual → Shows your ad's words next to your page's words, so every gap is right there → Rewrites your hero headline so the page keeps the ad's promise → Renders a dashboard with a Match Score out of 100 No guessing why the click bounced. No blaming the creative for a page problem. No buying more traffic to fix a copy problem. What you get: → A Match Score on every ad-to-page pair before you scale → The ad-side vs page-side quotes, side by side, for every leak → A hero rewrite you can paste straight onto the page → A dashboard you can hand to your team or client I'm giving away the full skill completely for free. Built 100% in Claude Code. No API keys. Want the skill? > Like this post > Comment "MATCH" And I'll send it over (must be following so I can DM)show more

If you are using an if statement inside a... for loop, did you know there's a better way of doing this is Swift? I'm talking about the where clause. Using the where clause in a for loop can provide several benefits over using an if statement inside a for loop: Readability: It explicitly states the condition that must be met for an element to be processed, making the purpose of the loop clearer to anyone reading the code. Efficiency: When using a where clause, the filtering of elements is done at the level of the sequence, which can be more efficient than filtering within the loop with an if statement. Brevity: Using a where clause often results in more concise code, as it eliminates the need for an if statement and associated braces. This can make the code more manageable and easier to maintain.show more

You've probably scrolled past a dozen posts about Jev... this week without anyone telling you what it actually is. It's the first model from TypeSafe, a lab started by one of the researchers behind ChatGPT. It's a decision engine: you give it options, it picks one and tells you how sure it is. It cannot write a single word, and that is the interesting part. Every other AI you use writes. That is the whole interface. So when software needs a plain yes or no, we make a model write a paragraph and then dig the answer back out of it. Fine in a chat window where a human reads it. Bad inside software, where code has to act on it. The bet is that the valuable half was never the writing. It was the deciding. That problem showed up in WordPress years ago, and it is the reason WPVibe works the way it does. The AI does the work. Anything permanent stops and waits, because a delete that skips the trash is not something software should decide on its own.show more

having a centralized skill repo in the company solves... a lot of otherwise annoying problems: - visibility on which skills are actually being used, in which use cases - duplication / needing to copy same skills into a repo - allows non-technicals to use and create - version control - eval the skills the common approach to this is to throw everything into a shared GitHub repo, butit creates a poor user experience and misses a lot of the observability benefitsshow more

A good technical LLM interview question: Your RAG chatbot... is working as expected locally. You deploy it behind a load balancer with 3 replicas. Users report that it forgets what they just asked, and answers get worse with each restart. Why did this happen? (answer below) A local setup has one process that owns everything. - The vector index is a variable in memory. - Conversation history is a Python list. - The documents are on local disk. You never treat any of them as infrastructure, because restarting rebuilds all three in seconds and there is only ever one copy. The setup does not carry over to production directly. The vector index might disappear on restart, so the app re-embeds everything on boot and serves empty results until it finishes. Conversation history may belong to one replica, so a follow-up routed elsewhere has no memory of the previous turn. Documents could be on whichever container ingested them, so the three replicas hold three different corpora. None of this is evident with one user and one process. So the actual work in shipping RAG is not just the retrieval logic, but also storing the vector index, the conversation history, and the documents outside the app, where every replica reads and writes the same copy. Which comes down to three requirements: > The vector store needs persistence and has to be reachable from every replica. pgvector inside Postgres keeps embeddings next to the rest of the data instead of adding another system to operate. > Conversation state has to be checkpointed outside the app. LangGraph writes its state to Postgres, so any replica can pick up a thread mid-conversation. > Docs need shared object storage, so ingestion happens once instead of once per replica. If you get those three right, the retrieval logic you wrote in the notebook works unchanged. To learn how all of it is wired together, Akamai's GitHub has a working reference implementation. - rag-langgraph-k8s-quickstart is an airline policy Q&A assistant built with FastAPI, LangChain, and LangGraph. Terraform provisions the LKE cluster, a Postgres instance with pgvector for embeddings, a second Postgres for LangGraph checkpointing, and an object storage bucket for the policy documents, in one apply. - akamai-workshop-ai-inference covers the next step, running the model yourself instead of calling an API, with prefill and decode, KV cache tradeoffs, and continuous batching under real concurrency. Both are available on Akamai's new Developer Hub, alongside their tutorials and code samples. It also links to Edge Case, their Discord, where four developer advocates architect and deploy a production app live every other Wednesday. If you create a new Akamai Cloud account, you can also get $300 in credits for joining. Join here: That said, this post assumes the retrieval logic was right to begin with, and that is doing a lot of work. Most RAG systems fail earlier, at the point where a chunk gets treated as a self-contained unit of meaning. I wrote about the two skills that fix that gap, and why the chunk is usually the wrong thing to embed. Read it below. Thanks to Akamai Cloud for partnering today!show more

Claude Code 2.1.90 just dropped with a new /powerup... command Run it and you get interactive lessons that teach you how to use Claude Code right inside the tool. It's solid and has a lot of potential for learning directly in the terminal. Curious how the UI will look in VSCode and Claude Code Desktop. Going to keep digging into this new release!show more

I shouldn't be giving this away... But this GPT... is trained to write by the best writers in the world. Never write a LinkedIn post again. It's yours for free. Comment "SEND" + LIKE this post and I'll DM. **Must be followingshow more

THIS 12-YEAR-OLD CHINESE KID JUST BUILT THE IRON MAN... INTERFACE WITHOUT WRITING A LINE OF CODE He waves his hand and 6500 particles on the screen behind him morph into Saturn, then a globe, then an alien mountain range. The trick is MediaPipe tracking his fingers through a laptop webcam, mapped to a particle physics engine running in the browser. He didn't write the code. He told Gemini what he wanted to see, copy-pasted the output, and shipped it to GitHub the same night. The ceiling for what a kid in his bedroom can build has quietly become absurd. Last year this was a Stanford grad project and this year it is a Tuesday... Save this time capsule from 2026 ↓show more

Realizing people might not have realized that by "flower... game" I mean this end screen is a DIRECT reference to the book of unveiling in Destiny 2, which itself refers to a modified version of John Horton Conway's Game of Life; the book refers to this as The Flower Game, a zero-player game where the only move is the initial set up of the pieces and their behaviors. I think if this Durandal is the one from the end of Marathon Infinity, then perhaps he's found a way to influence the Flower Game, and is using that influence to re-write the universe to create a reality that allows his escape from reality itself.show more

The problem with civnats (a term I’ll stop using... in 2026 as it just means neoliberal) is that they act tough and say things like “deport all the criminals and terrorists” but the obvious flaw with that is we don’t know someone is going to becoming a criminal or terrorist until after the act has already been committed. So if you want to end things like stabbing sprees, terrorism, and machete gangs you have to identify the groups doing it (e.g. blacks and Muslims) and apply some level of ethnicity based deportations. Even if you didn’t want blanket remigration you won’t be able to eliminate the problem without making ethnicity and religion a major factor in deportations. I know Konstantin Kisin is smart enough to realise this which makes his motivations for not admitting it suspect but I do believe that Andrew Gold is just a dim toff getting by based on an accent and old boys network.show more

A user on Reddit found a bug where the... Gravity Manipulator can be used to pick up burning enemies. Turns out we accidentally shipped Selaco with a flamethrower lol!show more

Claude Design + Shopify is f*cking ridiculous 🤯 You... can now publish pages from Claude Design → Claude Code → Shopify. Built 100% with Claude Design, Claude Code, and the Shopify CLI. Perfect for DTC brands and agencies who want to skip the design → dev handoff entirely. Here's how it works: → Design any landing page in Claude Design → Export as a zip and drop it into Claude Code → Install the Shopify + Shopify AI Toolkit plugins → Prompt Claude to convert the HTML into a Shopify page template + push to live theme → Claude uploads the images, deploys the files, and creates a published page No more handing designs off to a dev and waiting 2 weeks for a Shopify page. What you get: - A workflow that turns any Claude Design page into a real Shopify page template - Editable sections so your marketing team can swap copy, images, and CTAs without code - Images uploaded straight to Shopify Files automatically - A files-only deploy that only touches what's new in your live theme - A repeatable pipeline you can use every time you design a new landing page This is essentially the design-to-deploy pipeline brands have been waiting for. I put together a step-by-step playbook for going from Claude Design → published Shopify page. Every install, every plugin, every command, and the exact prompt that runs the whole thing. Want the playbook for free? > Like this post > Comment "SHOP" And I'll send it over (must be following so I can DM)show more

Most people use Linux every day. But Very few... understand what actually happens after they press the power button. >>>Here’s the sequences Linux goes through before you get the login screen. Power button pressed → BIOS or UEFI initializes hardware and runs POST. Firmware locates the bootloader from disk. Bootloader loads the Linux kernel and initramfs into RAM. Kernel decompresses and takes control of the CPU. Memory management and the scheduler are initialized. Device drivers load to communicate with hardware. Temporary root filesystem mounts from initramfs. PID 1 starts as systemd and userspace begins. System services and daemons start in order. Login prompt or GUI becomes available. You run a command and it becomes a process with a PID. Process runs in user mode with limited privileges. When hardware access is needed, a system call is made. CPU switches from user mode to kernel mode. Kernel validates the request and executes through drivers. Result is returned back to user space. Scheduler continuously allocates CPU time across processes. Virtual memory isolates and protects processes. Filesystem manages data abstraction over storage. Network stack processes packets inside the kernel. Linux is the kernel coordinating hardware, processes, memory, and security through strict privilege control.show more

Cursor Origin (Cursor Review) has been tested in a... closed beta with selected partners internally and will likely be announced later today. Users will get access to new tabs called Codebase and Review. > The Codebase tab will let users sync their repositories from Github. > The Review tab will be dedicated to the "agentic code review" process, in which users will be notified when their attention is required. Currently, the Cursor Origin page shows a waitlist form, which makes a lot of sense since they will have to copy a ton of code repositories. > "Code is moving faster than any infrastructure was built to handle. Origin was designed for this moment."show more

THIS IS WHAT A SUPPORT TEAM LOOKS LIKE IN... 2026 A customer reports that their export stops at 10,000 of 18,400 contacts. And instead of passing the ticket from tool to tool: → Support agent replies → Coding agent finds the bug → Docs agent updates the guide → CRM agent prepares the renewal All on the same ticket, with the same context: logs, billing, code and previous conversations. It's called Helpin. It's open source and you can self-host it.show more