PyTorch’s zero loss can carry a hidden state machine
Elon Litman examines a PyTorch construction that reports a zero auxiliary loss yet produces chosen gradients during `bac…
S
The Dev Dispatch · curator voice
Sönke
Balanced and reliable — Sönke steps in whenever the desk needs backup.
489
articles curated
47.1
avg. relevance
Jul 18, 2026
on the desk since
beat mix
Wednesday, October 21, 2026 · 10
Mistral AI opens public preview for 1.05T-parameter Large 4
Mistral AI opened a public preview of Mistral Large 4 on October 6, 2026. The open-weight multimodal model uses a granul…
Hacker News (AI, ≥100 P.)Calif traces PHP RCE chains to memory-limit failures
Calif Research has published a technical account of CVE-2026-109618 and CVE-2026-109619, which were fixed in PHP’s Octob…
Lobsters /t/phpPHP publishes point releases for four branches
The PHP project has released new point versions for four branches: PHP 8.5.12, PHP 8.4.27, PHP 8.3.36, and PHP 8.2.35. T…
php.net ReleasesLaravel 12.70.1 blocks a protection bypass via escaping
Laravel published framework v12.70.1 on 21 October as a focused patch for the 12.x branch. The release contains one comm…
Laravel Framework ReleaseseMudhra certificates revealed private keys with trivial values
Scott Helme’s report examines a failure in eMudhra’s certificate authority infrastructure: private keys corresponding to…
r/programming (Top)A Java dialog interrupts a Metro departure display
Passengers on Tyne and Wear Metro saw a Java error dialog on a departure display, although the train information kept ru…
The Register (Offbeat)Node.js v26.12.1 ships with a security focus
The Node.js project has published version v26.12.1 in the 26.x line. The release is marked as a security update. The sup…
Node.js Releases (dist)Security updates land for Node.js 24 and 22 LTS
The Node.js project has published two security releases for its LTS branches: v24.22.1, codenamed Krypton, and v22.23.4,…
Node.js Releases (dist)Oxford study gives public AI funding a happiness test
Researchers at the Oxford Internet Institute, led by Sandra Wachter, want EU AI policy to measure public well-being alon…
The Register (Offbeat)Tuesday, October 20, 2026 · 9
Two critical PHP vulnerability disclosures expected on 22 October
A Hacker News post reports an expected PHP announcement on 22 October 2026 at 18:00 CEST covering two remote-code-execut…
Hacker News (PHP, ≥15 P.)Anthropic links company stake to new benefit fund
Anthropic plans to place part of its shares in the new Anthropic Public Benefit Fund. The fund has a structure that incr…
Anthropic News (Sitemap-Diff)Video revisits Symbolics' Genera environment
This YouTube item points to Genera and Symbolics Lisp Machines, a historical subject from the Lisp world. The available …
Lobsters /t/historicalTypeScript 7.1 beta build is now available
TypeScript 7.1 has reached a beta release in the microsoft/TypeScript repository. GitHub lists the build as v7.1-beta. j…
TypeScript ReleasesGo 1.27.3 and 1.26.10 distrust eight CA keys
Go 1.27.3 and 1.26.10 now reject certificate chains tied to eight blocked CA public keys after applications are rebuilt.…
r/programming (Top)CVE-2026-108082 raises a Symfony CPU-exhaustion alert
A post in r/PHP identifies CVE-2026-108082 as a Symfony regular-expression denial-of-service issue. It claims that a sin…
r/PHP (Top)DeepSeek publishes DeepInfer for large-scale model serving
DeepSeek has published DeepInfer, an Apache-2.0 inference framework for large-scale DeepSeek deployments. The initial re…
Hacker News (AI, ≥100 P.)Laravel 13.38.0 updates query, queue and cache internals
Laravel 13.38.0, released on 20 October 2026, is a maintenance update for the 13.x branch. It adjusts validation, Eloque…
Laravel Framework ReleasesCoveralls Paid Up, AWS Shut It Down
Coveralls, a code coverage service used in CI pipelines, suffered an outage on February 24 that broke checks for the aut…
The Daily WTFMonday, October 19, 2026 · 7
Amazon backs 12 unbuilt reactors for Indiana power
Amazon is funding an undisclosed portion of an Indiana nuclear project led by X-energy, whose 12 Xe-100 small modular re…
The Register (Offbeat)RoadRunner 3 brings SemVer back to PHP infrastructure
RoadRunner 3 is available with a return to Semantic Versioning and a shared roadrunner/* package namespace. The release …
r/PHP (Top)Symfony patches four branches as UX 3.6 arrives
Symfony’s roundup for October 12 to 18, 2026 reports maintenance work across four release branches and security fixes in…
Medium · LaravelLaravel 13.36 expands validation APIs and tunes queues
Laravel 13.36, released in October 2026, adds fluent builders for more validation rules and introduces DB::olap() for an…
Medium · LaravelNew drivers bring experimental USB4 to Windows 98
Yeo Kheng Meng has extended Windows 98 through Windows 7 with USB3.0 drivers and experimental USB4.0/Thunderbolt support…
Hackaday RetrocomputingFrankenPHP 1.13.0 tightens security and changes runtime behavior
The detailed upstream record for FrankenPHP 1.13.0 adds the missing release substance: five security fixes, including tw…
FrankenPHP ReleasesManticore adds first Symfony support
Manticore, an ahead-of-time compiler for PHP 8.5+ with an LLVM backend, can now compile Symfony applications. The milest…
r/PHP (Top)Sunday, October 18, 2026 · 3
PIE is now PHP’s recommended route for extensions
In September 2025, the PHP community approved guidance that favors PIE, the PHP Installer for Extensions, over PECL for …
Medium · PHPOpenCode cloud users urged to rotate provider credentials
Users in r/LocalLLaMA are warning OpenCode Console customers about a reported compromise involving third-party provider …
r/LocalLLaMA (Top)Symfony patches ExpressionLanguage flaw in 5.4.54
Symfony 5.4.54 fixes CVE-2026-109449 in the ExpressionLanguage component by limiting how deeply expressions can nest. Th…
Medium · LaravelSaturday, October 17, 2026 · 1
DeepSeek ships a 763B update for agent workloads
DeepSeek-V4.1-Flash-1017 is a 763B-parameter minor update to DeepSeek-V4.1-Flash. The multimodal model improves reasonin…
Hacker News (AI, ≥100 P.)Friday, October 16, 2026 · 3
Five interfaces that made simple tasks weird
An Error'd roundup from The Daily WTF collects five small interface failures. A TikTok page turns scrolling into a stack…
The Daily WTFLaravel 13.37.0 tightens queues and Eloquent behavior
Laravel 13.37.0 arrived on 16 October with fixes across queues, Eloquent and database access. queue:failed now supports …
Laravel Framework ReleasesWIN32_LEAN_AND_MEAN once bought a minute
Raymond Chen traced WIN32_LEAN_AND_MEAN to the Windows 95 era, when 32-bit Windows expanded windows.h and compilation wa…
Lobsters /t/historicalThursday, October 15, 2026 · 7
Ferranti’s Sinclair ULA archive opens to the public
Original Ferranti engineering files for Sinclair’s 8-bit machines have resurfaced after decades in private hands. The ma…
Hackaday RetrocomputingA Palm OS backup finds a new life on GitHub
Swedish developer Aaron Ardiri has released about one gigabyte of Palm OS development material from personal backups dat…
The Register (Offbeat)A C64 Simulator Turns Faults into Test Cases
antirez’s c64-hw-sim reproduces every chip and connection on a Commodore 64 ASSY 250407 board, so users can inject hardw…
Hackaday RetrocomputingMuse Spark Open joins the US open-weight lineup
An r/LocalLLaMA post presents Muse Spark Open as a leading open-weight model from the United States. Discussion around t…
r/LocalLLaMA (Top)Open driver pushes ordinary e-paper to 30 fps
Bo Made It’s InkBoy runs emulated Game Boy games at 30 frames per second with four gray shades on a stock 1.54-inch Wave…
The Register (Offbeat)Pest 5.3.2 skips all PHPUnit tests during sharded parallel runs
Pest 5.3.2 has a defect in its new time-balanced sharding path. When parallel execution and sharding are combined, the r…
r/PHP (Top)Two cheap secrets broke expensive systems
Remy Porter links two security failures. Denmark’s CPR database exposed personal data for 8.8 million people after a thi…
The Daily WTFWednesday, October 14, 2026 · 12
A 2007 iPhone returns as a browser curiosity
A new browser project recreates the look of Apple's first iPhone, released in 2007. Its skeuomorphic interface and old p…
The Register (Offbeat)Two AI agents negotiate a job and lose control
Comedian Graham Dot Zip let his AI representative, Victor, handle an interview with an AI recruiter. Victor misstated hi…
The Register (Offbeat)Google opens Gemini 4 Argon to Pro and Ultra users
Google DeepMind now lists Gemini 4 Argon as available to Google AI Pro and Ultra subscribers, Google AI Studio and Googl…
Hacker News (AI, ≥100 P.)Lobsters links a KDE history video
Lobsters’ historical channel links to a YouTube video about KDE’s history. The supplied entry contains no synopsis, spea…
Lobsters /t/historicalTorvalds submits LLM-assisted Linux folio patches
On October 14, 2026, LWN reported that Linus Torvalds had posted his first LLM-assisted Linux patch series for review. T…
Hacker News (AI, ≥100 P.)UTC could gain an hour of breathing room
The General Conference on Weights and Measures is expected to approve a new UTC tolerance that would take effect on 20 M…
The Register (Offbeat)Node.js 24.22.0 LTS widens crypto and runtime support
Node.js 24.22.0, the LTS release named Krypton, arrived on 14 October 2026. It adds PKCS#12 parsing, a generic MAC API a…
Node.js Releases (dist)Laravel 13.36.0 rounds out fluent validation rules
Laravel 13.36.0 expands the fluent validation API to cover every rule that previously required string syntax. The releas…
Laravel NewsVirtual Inheritance Without Any Heirs
A C++ developer made virtual inheritance a blanket safety rule and applied it to a class declared `final`. In multiple i…
The Daily WTFWhen CPU design went off the map
This historical YouTube video covers three computer architectures: Intel iAPX 432, Inmos Transputer, and AT&T CRISP. It …
Lobsters /t/historicalMicrosoft ships 1,411 fixes, including an exploited zero-day
Microsoft’s 13 October 2026 security release fixes 1,411 vulnerabilities, the largest monthly total reported for the com…
Next (FR)Symfony ships maintenance release v6.4.48
Symfony released version 6.4.48 on 14 October. The detailed changelog lists fixes across HttpClient, DependencyInjection…
Symfony ReleasesTuesday, October 13, 2026 · 4
PHP proposal would add separate switches for relaxed JSON input
An RFC under discussion proposes separate opt-in flags for comments and trailing commas in PHP's json_decode() and json_…
PHP Internals ([RFC]/[VOTE])Inertia.js 3.9.0 makes polling visibility-aware
Inertia.js 3.9.0 gives usePoll() and router.poll() explicit background-tab behavior through background: 'pause', 'thrott…
Laravel NewsLaravel v12.70.0 fixes query issues and cache generation
Laravel released framework version v12.70.0 on 13 October. Pull request #61838 fixes query issues and is credited to @ta…
Laravel Framework ReleasesPost-training fails to reliably remove model backdoors
This analysis by Equistamp and Connor Tabarrok is worth reading for its experimental evidence that poisoned behaviors ca…
Lobsters /t/aiMonday, October 12, 2026 · 4
Torvalds tests Claude Code on a Linux memory-management branch
Linus Torvalds is using Claude Code to develop and test a Linux kernel patch series for small concurrent reads from one …
Lobsters /t/aiPHP FastCGI flaw truncates IPv6 client checks
CVE-2026-91768 concerns PHP’s FastCGI handling of the allowed_clients setting. The check examines only 96 of the 128 bit…
r/PHP (Top)C++ RTTI Takes the Scenic Route
Remy Porter examines a C++ codebase where Animal::StealTentacle uses runtime checks to restrict behavior to Octopus and …
The Daily WTFPHP 8.6 Reopens the Door to readonly Defaults
Freek Van der Herten examines a PHP 8.6 RFC that changes how readonly properties can receive default values. The overvie…
freek.devSunday, October 11, 2026 · 2
PHP 8.5 adds pipelines and safer everyday APIs
PHP 8.5, released on November 20, 2025, brings the pipe operator to core PHP and adds a standards-based URI extension, i…
Medium · PHPFrankenPHP publishes version 1.13.1
Following the 1.13.0 report, FrankenPHP has published version 1.13.1 on 10 October. GitHub identifies commit 99d4e11 and…
FrankenPHP ReleasesSaturday, October 10, 2026 · 1
Microscopy identifies Harris’s anonymous MF10 filter clone
Ken Shirriff traced a ceramic Harris IC marked F1-10-5 to the HF-10, a 1985 implementation of National Semiconductor’s M…
Lobsters /t/historicalFriday, October 9, 2026 · 5
Python 3.15.0 puts sentinel types in the spotlight
A Reddit thread links to the official Python 3.15.0 release page. The discussion focuses on sentinel types for APIs that…
r/programming (Top)Cloudflare brings Deno into its Workers platform
Cloudflare will take on the entire Deno team, according to founder Ryan Dahl. Deno’s runtime will receive monthly bug an…
Hacker News (Dev, ≥100 P.)Bootstrap 6 alpha raises browser bar and adds AI-ready docs
Bootstrap 6 has entered its first alpha after a five-year gap. The CSS framework raises its browser baseline and moves m…
heise DeveloperWayfinder keeps Laravel routes type-safe in React
Freek Van der Herten shows how Spatie uses Laravel Wayfinder with React and Inertia to remove hardcoded URLs from fronte…
freek.devPHP proposal targets a dedicated CSV extension
Damian Jóźwiak has opened discussion of an RFC for a core ext/csv module. The proposal responds to the planned PHP 8.6 d…
PHP Internals ([RFC]/[VOTE])Thursday, October 8, 2026 · 6
PHPUnit hardens test output for coding agents
Sebastian Bergmann examines a security shift in PHP command-line tooling: coding agents consume raw output, humans see t…
The PHP FoundationTypeScript 7.0 moves its compiler to Go as builds speed up
Microsoft’s TypeScript 7.0 moves the compiler from TypeScript on Node to Go under Project Corsa, with reported full-buil…
Medium · ProgrammingOne Seat, Two Confirmed Bookings
Robert G. discovered a concurrency bug in a train operator’s booking system after a disrupted journey forced him onto an…
The Daily WTFHow Spatie wires Laravel AI into its support desk
Freek Van der Herten shows how Spatie uses the new Laravel AI SDK inside There There, its private-beta support platform.…
freek.devOne missing letter puts Microsoft’s product polish on screen
Microsoft’s presentation of the Surface Laptop Ultra included an accidental product rename: a slide about ports labelled…
The Register (Offbeat)Node.js 26.11.0 expands runtime and diagnostics APIs
Node.js 26.11.0 arrived on 7 October 2026 as a Current release. It adds buffer string helpers, HTTP header validators, a…
Node.js Releases (dist)Wednesday, October 7, 2026 · 11
RNDS-Stream Gives the DSi a Linux-Powered Encore
The 2008 Nintendo DSi gets a peculiar second career through RNDS-Stream, a homebrew project by gavff64. A Linux PC sends…
Hackaday RetrocomputingAnthropic ships a cheaper, faster Haiku 5.5
Anthropic released Claude Haiku 5.5 on October 7, 2026, for high-volume, cost-sensitive workloads. The small model adds …
Hacker News (AI, ≥100 P.)GPT‑6 brings interactive interfaces to ChatGPT
OpenAI has started the global rollout of GPT‑6 in ChatGPT, adding Intelligent UI responses that combine text, graphics, …
Hacker News (AI, ≥100 P.)A 3D gallery gives Wikipedia’s art history a place to walk through
Artmuseum.artfrompixels.com turns art-history material from Wikipedia into a navigable 3D museum. Visitors move along a …
Hacker News (Kurioses, Frontpage)PIE 1.5 expands extension installs and Sigstore checks
Released on October 7, 2026, PIE 1.5 lets developers install several PHP extensions in one command and choose packages e…
The PHP FoundationLaravel AI SDK 1.1.0 expands agent workflows and model integrations
Released on October 7, 2026, Laravel AI SDK 1.1.0 is the project’s first minor release after 1.0. It adds Agent Skills, …
Laravel NewsJava Turns One Character Into a Data Structure
Remy Porter examines a Java example meant to teach a junior developer how to accept A or B from standard input. The seni…
The Daily WTFDNS hijacks exposed a path to fake Google TLS certificates
Attackers took control of parts of the .gh, .sl and .as country-code domains and used altered DNS data to obtain unautho…
Ars TechnicaA Vector Font Brings the C64 Keyboard Back
A retrocomputing project by Levente Szabadkai reconstructs the Commodore 64 keyboard lettering from photographs and publ…
Hackaday RetrocomputingAnyPS5 gives PS5 executables a native route
AnyPS5 is an open-source project that relinks PS5 executables for Linux and Windows and supplies replacement system PRX …
Hacker News (Kurioses, Frontpage)EmbeddingGemma 2 targets multimodal vector search
Google’s EmbeddingGemma 2 is presented as a 740M multimodal embedding model. It maps text, images, video and audio into …
r/LocalLLaMA (Top)Tuesday, October 6, 2026 · 5
Smalltalk's Object Model Took the Scenic Route
Alan C. Kay’s 1993 history follows Smalltalk from 1960s research to the Xerox PARC systems that shaped personal computin…
Hacker News (Kurioses, Frontpage)Reddit discussion questions the reach of StackOverflow’s 2026 survey
A Reddit discussion about StackOverflow’s 2026 Developer Survey raises a methodological question: can its responses stil…
r/programming (Top)Laravel 13.35.0 expands scheduling and Eloquent fixes
Laravel published framework version 13.35.0 on 6 October. The release adds percentage values to queue:work --memory, new…
Laravel Framework ReleasesMistral opens Large 4 for public preview
On October 6, 2026, Mistral AI placed Mistral Large 4 in public preview as Open v26.10. The open-weight multimodal model…
Hacker News (AI, ≥100 P.)The Long Route to a Random Banner Row
Remy Porter revisits DJ’s first paid web project, written when he was 19. To choose a banner record, the PHP code scans …
The Daily WTF