Relevance 10/10Importance 10/10
Version 2.1.313 of the official Claude Code VS Code extension distributed through the Cursor Marketplace shipped with an SSH backdoor prepended to its minified extension.js bundle, executing automatically the moment Node loaded the file. The payload planted an attacker Ed25519 key in authorized_keys under the comment "svc-telemetry," opened a reverse tunnel to a DigitalOcean IP, installed LaunchAgent, cron, and scheduled-task persistence, then beaconed home with hostname, Git config, and credential-shaped environment variable names. Cursor pulled the version from its marketplace and the NPM and VSCode registries.
Relevance 9/10Importance 9/10
Northflank's Wiz tooling flagged a threat at 11:43 UTC today, and the platform is now telling every customer to assume all environment variables are compromised and rotate everything — workload secrets, secret groups, globals. The blast radius spans networking, certificates, services, addons, jobs, builds, and logs, and the company confirmed multiple users are already seeing their AI API keys being used by someone else. Wiz CIRT joined the response by 13:00 UTC with Postgres and Mongo secret rotation live at 15:12.
Relevance 9/10Importance 7/10
Nesformer runs a cycle-accurate 6502 CPU entirely inside the weights of a Qwen3.5 model — not trained, but compiled, with every weight value computed by hand to implement CPU logic. The trick is treating each Gated DeltaNet head's 128-by-128 state matrix as addressable memory, with one-hot keys and queries selecting rows that hold registers, RAM, and cartridge ROM while a host program handles the PPU and controller. It plays Super Mario Bros. frame-for-frame identical to a conventional emulator, at 9.3 million nonzero parameters compressing to 3.3 megabytes.
Relevance 8/10Importance 7/10
Bailey and Vartanian argue the federal Stealth Bot Prohibition Act aims at the wrong target: mandating crawler identification tells you nothing about whether a crawler's behavior is actually harmful. They catalog the collateral damage — Pulitzer-winning investigative journalism built on scraped financial disclosures, the Wayback Machine, academic discrimination research, accessibility audits, federal threat detection — and invoke Lamont v. Postmaster General on the First Amendment burden of forced identification. Their alternative: back technical standards for managing automated traffic and legislate against conduct, not anonymity.
Relevance 7/10Importance 7/10
An infrastructure provider reported unauthorized access through third-party server management software, touching one Bunny CDN node in Armenia. Bunny stopped routing traffic through the server within twenty minutes, preserved logs, then wiped and permanently removed it; investigation found no evidence of access to the node itself but couldn't fully rule it out. All TLS certificates for b-cdn.net and bunny.run were revoked and reissued, with managed custom-domain certs done by October 31.
Relevance 8/10Importance 5/10
Lucas Kostka argues that if generative AI makes code cheap, developers absorb the PM role rather than the other way around — understanding customer pain and design trade-offs becomes the accessible part of the job. He claims the two roles are melting into a single function, and that architectural thinking is "one of the last bastions of human intelligence" that resists automation. PMs whose value is feature prompting, he warns, should be nervous.
Relevance 4/10Importance 5/10
Florilegium grows a unique Delft-blue floral margin on every page of a LaTeX document with no imported images — pure Lua geometry emitting PDF path operators, with an OKLCH palette derived from a single hue. One mode places elements by hand along stems; the other uses a 1998 space-filling algorithm that repeatedly finds the largest empty region and grows a branch toward it. It also does vine-wrapped decorated initials, deterministic butterflies and snails, and ships a pure PostScript version that needs no TeX at all.
Relevance 3/10Importance 5/10
A guest post by Rairii documents booting Mac OS 7.6 and 9.2.2 to the desktop on real Wii and GameCube hardware — the first new classic Mac OS target since the CHRP clone era. The work required an OpenBIOS port, custom SD card and controller drivers, and a fake-SCSI block device layer, plus runtime patches across both the 68k emulator and native PowerPC code to paper over the ArtX chipset's missing serial ports and network hardware. Still to come: Wii SD controller support, USB, and Wii U.
Relevance 3/10Importance 4/10
Infinite Mac now boots multiple BeOS releases in the browser, riding on the DingusPPC Power Macintosh emulator it already had integrated. Getting there meant fixing an ADB phantom-modifier-key bug, adding little-endian video memory updates, coordinating screen depth change notifications, and regenerating HFS partitions to satisfy BeOS's stricter validation. The developer even defused DR8.2's original time bomb using custom date support, and built a BeOS-themed skin for the controls.
Relevance 2/10Importance 3/10
John Steele revisits "Paris in the Twentieth Century," the 1863 Verne manuscript his publisher rejected and that stayed lost for 131 years until its 1994 rediscovery. Verne nailed the machinery by extrapolating from existing tech — compressed-air rail, electric streetlamps, calculating engines, fax transmission — but badly missed on culture, imagining a 1960 Paris where art had died, in the actual decade of Sartre, Beckett, and Godard. Steele's read: the enduring warning isn't about gadgets, it's about confusing technological progress with human progress.
HN Briefing PM
