Monthly Highlights
1.
Git commands I run before reading any code (piechowski.io)
2.
Sam Altman may control our future – can he be trusted? (newyorker.com)
3.
Claude Code's source code has been leaked via a map file in their NPM registry (twitter.com)
4.
Axios compromised on NPM – Malicious versions drop remote access trojan (stepsecurity.io)
5.
I ported Mac OS X to the Nintendo Wii (bryankeller.github.io)
6.
LinkedIn is searching your browser extensions (browsergate.eu)
7.
Claude Opus 4.7 (anthropic.com)
8.
Google releases Gemma 4 open models (deepmind.google)
9.
Google broke its promise to me – now ICE has my data (eff.org)
10.
Copilot edited an ad into my PR (notes.zachmanson.com)
11.
Project Glasswing: Securing critical software for the AI era (anthropic.com)
12.
Astral to Join OpenAI (astral.sh)
13.
The EU still wants to scan your private messages and photos (fightchatcontrol.eu)
14.
EFF is leaving X (eff.org)
15.
Filing the corners off my MacBooks (kentwalters.com)
16.
Founder of GitLab battles cancer by founding companies (sytse.com)
17.
LittleSnitch for Linux (obdev.at)
18.
The Claude Code Source Leak: fake tools, frustration regexes, undercover mode (alex000kim.com)
19.
Issue: Claude Code is unusable for complex engineering tasks with Feb updates (github.com)
20.
Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gains (xda-developers.com)
21.
Microsoft terminated the account VeraCrypt used to sign Windows drivers (sourceforge.net)
22.
Decisions that eroded trust in Azure – by a former Azure Core engineer (isolveproblems.substack.com)
23.
Artemis II safely splashes down (cbsnews.com)
24.
Small models also found the vulnerabilities that Mythos found (aisle.com)
25.
OpenCode – Open source AI coding agent (opencode.ai)
26.
Afroman found not liable in defamation case (nypost.com)
27.
Google details new 24-hour process to sideload unverified Android apps (arstechnica.com)
28.
Someone bought 30 WordPress plugins and planted a backdoor in all of them (anchor.host)
29.
Qwen3.6-35B-A3B: Agentic coding power, now open to all (qwen.ai)
30.
Tell HN: Docker pull fails in Spain due to football Cloudflare block