'Maybe we should go after you' Trump threatens reporter asking about free speech (independent.co.uk)

Incident report of a recent attack campaign targeting GitHub Actions workflows to exfiltrate PyPI tokens, our response, and steps to protect your projects.

Chickens Are Weirder Than You Thought [video] (youtube.com)

Micro-LEDs boost random number generation (discovery.kaust.edu.sa)

Show HN: I've just released my new open source MCP server called mcpcap (github.com)

New FileFix attack uses steganography to drop StealC malware (bleepingcomputer.com)

Ask HN: Is ChatGPT/Claude suggesting to use malicious NPM packages?

OpenTelemetry Protocol Comes to Google Cloud Observability (cloud.google.com)

Full secure meeting platform (Granola proof)

Readme Driven Development (2010) (tom.preston-werner.com)

'Maybe we should go after you' Trump threatens reporter asking about free speech (independent.co.uk)

Show HN: I built a decentralized protocol for predicting interest rate movement (kairosswap.com)

Show HN: Ghostpipe – Connect files in your codebase to user interfaces (github.com)

LittleData: Smart LED Display (old.tomorrow-lab.com)

Germany's Chat Control position has been reverted to undecided (mastodon.social)

Permanent Standard Time may reduce cases of obesity and stroke in the US (pnas.org)

Can We Survive AI? A Conversation with Eliezer Yudkowsky and Nate Soares (samharris.substack.com)

Perkembangan Gemini (google.com)

Show HN: I built a tool to visually manage my LLM prompt templates and save them (promptcanvas.ml4den.com)

Frying Eggs and Air Quality Tests (chillphysicsenjoyer.substack.com)

Glixir: A safe(ish) OTP library for gleam (github.com)

Doom crash after 2.5 years of real-world runtime confirmed on real hardware (lenowo.org)

Jan in Moscow: The secret Russian life of Europe's notorious fugitive-spy (theins.press)

Show HN: Should v0.2.0 – debugging Go tests made easier (github.com)

The Symbiosis of Rust and Arm (filtra.io)

You Are Doomed to Fail as a Team Lead (kwakubiney.github.io)

Virtual Agent Economies (arxiv.org)

Equations for the Placement of Tone Holes on Concert Flutes and Simple Flutes (chrysalis-foundation.org)

A geothermal network in Colorado could help a rural town diversify its economy (insideclimatenews.org)

A Third Path for AI Beyond the US-China Binary (noemamag.com)

Deep Blue – Down the Rabbit Hole [video] (youtube.com)

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows (blog.pypi.org)

Why Firsts Matter (tratt.net)

Ontario Canada Study Shows Wind, Solar, Batteries Competing with Gas and Nuclear (theenergymix.com)

Fiverr: the next assembly line for AI built products (twitter.com)

Python 3.14.0rc2 and 3.13.7 are go (blog.python.org)

Threads is the gas-leak social network (maxread.substack.com)

Norton, XTree, PC Tools and Popular MS-DOS File Managers [video] (youtube.com)

iOS 26 buggy with fixed positioning elements (meta.discourse.org)

Show HN: Visual Ansible EE Builder (ansible-ee-builder.lovable.app)

The Topological Unified Field Theory on the Complex Hopf Fibration [pdf] (philpapers.org)

Nokia Joins Deutsche Bahn to Launch First 5G Rail Test Network in Europe (finance.yahoo.com)

Lake Peigneur (en.wikipedia.org)

No one but America has the leverage to get AI labor policy right (writing.antonleicht.me)

Intercepting and modifying Linux system calls with ptrace (notes.eatonphil.com)

Easier Postgres fine-tuning with online_advisor (neon.com)

Insider Trading Is Not About Fairness (bloomberg.com)

OpenAI models have gotten worse at geolocation (bellingcat.com)

Building a cloud GPU notebook that boots in seconds (modal.com)

A 10KB game with vanilla JavaScript HTML canvas (labrat.mobi)

SQL performance improvements: finding the right queries to fix (ohdear.app)

Gajim 2.3.5 has been released – GTK XMPP/Jabber Chat Client – Communication (gajim.org)

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows

Comments (1)