Anthropic found the origin of the NIST elliptic curve seeds: they were generated with drand48()!
No one was seriously worried, but this should put some FUD to rest, completing the NIST ECC rehabilitation arc… just in time to be retired in favor of PQ.
Also, we raised $36 Ki for ISRG. Yay!
Untethered iOS 27.0.1 jailbreak presented by calif.io live on stage @HexaCon.
Source: x.com/bellis1000
More info: https://heise.de/-11490907
PSA
"The existing maintainers will cease their involvement in their development and maintenance of Mbed TLS from April 2027."
Heads up for fellow Linux admins: CVE-2026-99999 (dubbed "PwnEscape") is out, and it is a nasty one (CVSS 9.3).
Despite being called a KVM escape, the actual bug lives in the host IPv4 networking stack. Untrusted CHECKSUM_PARTIAL offload metadata from a guest can overwrite already-validated packet headers during ip_do_fragment(), leaking host memory or allowing a guest-to-host escape.
Mainline patches landed Oct 14, and stable backports are out. Check your hypervisors and reboot!
Unfortunately I've had to give up on using the Jolla phone as my daily driver. Something has gone wrong with it and I'm right now not going to spend the time researching what. I need to be reachable (kids/school) at all times.
Writeup here: https://forum.sailfishos.org/t/boot-loop-after-battery-ran-out/35022/5?u=troed
Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.
https://www.404media.co/accenture-tells-employees-they-can-now-spend-only-29-on-claude-per-month/
Well, today was my last day working at Meta. (I'll be on garden leave for the next few months.) Meta consolidating outside the Netherlands and me being unwilling to move means we're parting ways. I'm sad to go because the Python folks at Meta are stellar, and the work on Free-threaded Python, lazy imports and CinderX has been fantastic. Say what you will about Meta as a company, but the open-source support continues to be excellent.
Garden leave notwithstanding, I am now in the market for a new job 😅 I'm not in a rush, but if you happen to know of a company that cares about open-source, who're looking to hire an experienced, deeply technical, heavily connected Python person for a remote NL/EU position, HMU 😁
Our AI agents started filing feature requests for their own tools.
At ClassDojo, we pair failure logs with capability requests: what the agent tried, what it needed, and whether it found a workaround. Another agent groups recurring requests and feeds them into our development workflow.
The improvements include new capabilities, clearer documentation, and better discovery of existing tools.
Torvalds is absolutely on point here, esp. at the end. It's the same in my circles as well - the brilliant ones (whom I've known for over 30 years) are also the ones who quickly picked up on LLM assistance.
The move to Matrix was partly driven by their open source commitments - hi, @matrix , hey yo, love you all - but they mostly won on the strength of two things. First that their accessibility posture was not just unrivalled in terms of FOSS forums but that their team jumped at the chance to work with us improve it.
But 2nd: the moderation tools are unmatched. Nothing else comes close.
Once you have tools and process in place to ablate harassment, nobody willingly goes back to not having that.
... my local dev env is finally gaining some real "agentic" abilities. The different projects I've worked on are now starting to tie into eachother where an agent working on one project automatically learns from an agent that worked on another - without me needing to point them in any specific direction.
I project making myself irrelevant in a few months time.
Imagine you operate communications for one of Europe's largest defense organisations -- how do you know when it's time to change the locks? Bjoern Reiners talks using Matrix at the Germany's federal defense force, the @Bundeswehr
Learn more: https://cfp.2026.matrix.org/matrix-conference-2026/talk/8ZCYUQ/
#MatrixConf 20-23 Oct #Malmö
OpenAI continues to enshittify ChatGPT: OpenAI allows advertisers — or really anyone, I tested myself in 5 minutes — upload raw phone numbers or email addresses to OpenAI to then target those specific people and inject specific ads into their ChatGPT session https://www.404media.co/how-chatgpt-targets-ads-to-you-based-on-your-prompts-phone-number-and-email/
I am a highly experienced software engineer with over 20 years of experience. I've done everything from kernel development to web development and I'm fluent in tens of programming languages and build tools. I am good at just making things better and I come highly recommended by some fedizens.
I urgently need work. Happy to do most things programming, sysadmining or devopsing. I'm located in Europe in the Netherlands, but happy to remote to anywhere. #GetFediHired
We are happy to announce 47 free and open source projects have been selected for the 12th round of the NGI0 Commons Fund.
The efforts of these teams all go toward strengthening the digital commons, and we thank them for their contribution to more digital autonomy for everyone.
Commons Fund will provide them with practical and financial support, kindly made possible by @EC_NGI
Here's an overview of all 47. Come and meet the projects!
https://nlnet.nl/news/2026/20261015-47-new-projects.html
@llamasoft_ox I want to say it "LOUD" so everyone can see it, I *OFFERED MANY MANY TIMES TO ATARI TO DO T4K in VR* and 'a test version' of T4K VR DID EXIST and I HAD to rip-off the VR as "they did not want it". I *TRIED* many times to convince Atari "please le me to T4K VR" .. ok there I said it once more !
huh
After trying to reconnect the battery again (this time after having been disconnected for 15 minutes vs 30 seconds) the phone booted up normally.
So here's the first real serious #Jolla phone issue for me:
Last night the phone ran out of battery, at which point it beeped loud enough to wake me up. I connected it to a charger and went back to sleep.
Since then it has not been able to boot. It's a boot loop that shows the logo, after a few seconds the screen flashes brightly and it restarts again.
Pulling the battery and connecting it back again just causes the same loop to reappear.
Luckily I still have my previous phone - with all the 2FA codes - available.
...and here we go:
"Dewi explains" Episode 6 – #Fediverse.
In the season finale, our smart and friendly robot colleague gives you the basics of sustainable, decentralized #SocialMedia. 🌐
(brought to you by @Olivia_Luise @andygiefer & @lxplm)
P.S.: Don't forget to tell us how you liked our little series of media/tech videos. And if you'd like to see a second season. 📺