GoKawiil
Tech News
Microsoft has shipped emergency security updates for .NET 8, 9, and 10, plus .NET 11 Release Candidate 3, to fix a critical vulnerability dubbed Broccoli2Shell (CVE-2026-111497). Discovered by Imperva's Red Team, the bug is an out-of-bounds write in the Brotli decompression library that can let attackers crash apps, leak memory, or in some cases execute code remotely via crafted Brotli-compressed data.
A developer rewrote VLC's Gaussian blur video filter from its original C implementation into C# using .NET Native AOT, running both versions inside the same VLC build on identical frames to compare speed. After an initial line-by-line port and two subsequent source tweaks, the C# version's performance came within 8% of the native C code.
A developer showcased on Hacker News a tool that converts regular JavaScript—including regex matching, JSON parsing, and highlighting logic—into WebGPU kernels. The demo applies this approach to search across 100,000 JSON documents, running the workload in parallel on the GPU instead of the CPU.
A draft prospectus for Anthropic reviewed by the Wall Street Journal discloses an $80.7 billion net loss for the first half of 2026, alongside a lengthy list of risk factors the company must disclose ahead of a potential public listing. The filing points to rapid revenue growth alongside the massive losses, driven largely by heavy computing costs.
The Electronic Disturbance Theater, a group of cyber activists and artists, says it has developed FloodNet, a URL-based software tool designed to flood and block a targeted website. The group has used such tactics against Mexican and U.S. government sites to protest actions against the Zapatistas, framing the approach as 'Electronic Civil Disobedience' that applies traditional sit-in and blockade tactics to the internet.
A how-to guide highlights OpenSpeedTest, a web-based tool that measures local network speed separately from internet speed, helping users determine whether slow performance stems from their router or their ISP. The guide contrasts this with standard tools like speedtest.net, fast.com, and the Orb speed test, which typically measure only overall connection speed.
The Linux 7.2 kernel merged 16,418 non-merge commits, more than the previous 7.1 release and second only to 6.7 in total history, according to LWN's Kernel Source Database. Unlike 6.7, where commit volume was skewed by the bcachefs merge, 7.2's activity was spread across many subsystems. A record 2,652 developers contributed, up from 2,479 in 7.1, with Uwe Kleine-König, Rosen Penev and Ian Rogers topping the list by number of changesets.
A new analysis mapped the US Department of Labor's O*NET taxonomy of 923 occupations and nearly 18,800 workplace tasks against 29 widely used AI benchmarks, including Mercor's APEX suite. The researchers found that only a small fraction of real-world work tasks, by weighted hours, are represented in these benchmarks, leaving roughly 90% of US working hours without benchmark coverage.
New figures cited in the report show that average net worth for Americans around age 50 has risen, but median net worth—a more representative measure—lags far behind. The disparity highlights how wealth concentrated among high-net-worth households skews the average upward, masking the financial reality for typical families.
Go's net/http maintainers Nicholas Husin and Damien Neil report that Go 1.27 significantly improves how the standard library reuses HTTP/1 connections. In their benchmark, making 100 sequential requests to index.golang.org dropped from roughly 710 milliseconds on Go 1.26 to about 150 milliseconds on Go 1.27 when forcing HTTP/1.1 via GODEBUG=http2client=0.
Microsoft released updates addressing more than 1,400 security vulnerabilities across Windows and other software, far exceeding September's previous record of about 1,000 fixes. One flaw, CVE-2026-96951, a Windows Shell security feature bypass, is already being exploited in the wild, while another, CVE-2026-108398 in the .NET Framework, was publicly disclosed before patching though not yet seen exploited. At least 78 of the fixes are rated critical, mostly allowing remote code execution.
Microsoft released its October 2026 Patch Tuesday update, fixing 1,411 vulnerabilities across its product line, including three zero-day flaws. The bulk of the disclosed issues affect .NET and related components, spanning remote code execution, elevation of privilege, denial of service, and information disclosure bugs rated mostly Important severity.