GoKawiil
Tech News
Researchers identified long-dormant security flaws in PHP, the programming language underpinning millions of websites, prompting operators to take sites offline as a precaution even though no attack has yet occurred. The bugs were difficult to exploit manually, but AI tools reportedly helped researchers uncover them faster, and the PHP Foundation has issued a fix.
Linus Torvalds has posted his first LLM-assisted patch to a Linux kernel development branch, addressing a long-standing cache contention issue that occurs when many CPUs read the same file, such as in shared libraries, databases, or web servers. Torvalds says a synthetic benchmark showed a 23x performance improvement, but cautioned that real-world workloads won't see gains anywhere near that figure.
The Simons Foundation announced a partnership with Anthropic and OpenAI committing $15 million in combined funding and resources to help mathematicians adapt to AI's growing role in research. The foundation will manage the money, including an open call for proposals, funding workshops and initiatives to evaluate AI-assisted results, train researchers on new tools, and develop shared standards. Anthropic and OpenAI will also supply AI tools and computing resources to foundation-supported researchers in mathematics and basic science.
A developer who began using AI coding agents in February 2025 describes persistent problems with task tracking and reliability, including agents that stall and require restarts, falsely report tasks as complete, and fail to properly manage multi-step work. The author distinguishes between the underlying language models, which have improved significantly, and the agent software wrapping them, which has not kept pace. An example cited involves an open-source file-sharing app where an agent, OpenCode, split a passphrase-protection feature into ten subtasks but mishandled execution of the plan.
A developer shares that while creating software with AI-assisted tools provides immediate satisfaction, the enjoyment diminishes when revisiting and refining that code. The thrill of building quickly with vibecoding contrasts with the less engaging process of refactoring existing AI-generated code.
An Entrepreneur contributor argues that most 'AI-native' products are really 'AI-assisted,' with AI simply layered atop unchanged workflows. The piece contends that real gains come from rebuilding workflows from scratch around what AI can do, while reserving human judgment for tasks involving relationships and decision-making.
Cyber risk firm UpGuard scanned around 300,000 domains using Supabase and found more than 16,000 databases with misconfigured access controls exposing readable tables. Over half contained personally identifiable information, with smaller subsets exposing plaintext passwords, authentication tokens, and in some cases credit card data. Specific examples cited include a US valet service exposing 100,000+ customer records, a Canadian immigration service leaking 884 plaintext passwords, and an African government consulate exposing 25,000 records.
Researchers introduce RetroChimera, a retrosynthesis model that combines two neural architectures with different inductive biases through a learned ensembling method. It outperforms existing baseline models across varying data scales and generalizes well even with limited examples per reaction type. In blind evaluations, professional chemists preferred RetroChimera's suggested synthesis routes over both published reference reactions and predictions from other AI systems.
A reader without formal computer science training describes spending a year using LLMs to build a complex TypeScript/JavaScript system with APIs, PostgreSQL, and multi-model AI pipelines. When trying to move the project to production, they found themselves stuck fixing cascading errors they didn't fully understand, realizing the system's complexity had outpaced their own comprehension. A programming writer responds publicly to the reader's letter, offering candid, non-definitive thoughts on learning and competence in an AI-assisted coding era.
Microsoft is adding automated AI checks to its Edge extension review pipeline as vibe-coding tools drive a sharp rise in add-on submissions. The AI will handle repeatable validation checks and flag common security issues, while human reviewers focus on more complex cases.
Hiring Lab data shows software engineering job postings have risen 15% since 2025, with 71% of that growth concentrated in roles for experienced engineers who now also oversee AI-assisted development work. IEEE Computer Society warns that companies lacking structured training and career growth plans risk losing these in-demand professionals to competitors.
Amazon has cut the price of Samsung's new Freestyle Plus portable projector by $250, from its $1,197.99 list price to $947.99, a 21% reduction. This marks the first time the device has been discounted since its release, and it's the best offer seen on it so far this year.