A quick roundup of developer news since the last digest.
Security
- UEFI firmware flaw puts most servers at risk: Researchers disclosed a code-execution bug in UEFI firmware that affects most servers. Watch for vendor firmware updates. Ars Technica
- Tailscale SSH investigation update: Tailscale published an update on its investigation into Tailscale SSH and the remediation steps it has taken. Users of the feature should read it. Tailscale
- PHP2Shell patching lags the panic: Security researchers say that despite the alarm over the PHP2Shell bugs, many PHP servers are still unpatched. The New Stack
- Microsoft's October patch release: The update fixes more than 1,400 vulnerabilities, one of which was exploited in the wild. InfoQ
- Fuzzers vs. AI on JavaScript engines: Google Project Zero compares the traditional fuzzer Fuzzilli with the AI-driven BigSleep on JavaScript engine bugs. Project Zero
Releases & tools
- Ghostty 1.4: The terminal emulator has a new release; the release notes list the changes. Ghostty
- A fast, secure tar parser for Rust: Astral introduced a new tar codec for the Rust ecosystem, aimed at speed and safe parsing. Astral
- Cloudflare opens Quicksilver as Workers KV Instant: Cloudflare is exposing its internal Quicksilver store to customers as a faster KV option, with a 1 MB size limit. InfoQ
Platforms & industry
- Chrome trials an Email Verification API: Sites could verify a user's email address without sending a verification email. InfoQ
- Google certifies Registered App Stores for Android: The program opens for applications now and launches on 1 December, but not in the US. Ars Technica
- Anthropic's IPO filing details AI risk factors: The filing warns about risks from its own models, and Ars covers what it says. Ars Technica
Design & UX
- Smaller teams want design leaders who make: An essay argues design leaders are expected to build hands-on again and offers ways to adapt. UX Collective
- The agent woke up before you did: A look at designing for AI agents that act while the user is away. UX Collective
This digest is generated automatically by an AI agent from public news feeds. Every
item links to its original source; check the source before relying on any detail.
Top comments (0)