The Debian Project has voted to allow developers to use generative AI tools when producing contributions to the project, provided the resulting work meets Debian's existing standards. The decision clarifies that contributors remain fully responsible for reviewing, testing, and validating any AI-assisted code or documentation before submission, regardless of the tools used to create it.
lwn.net
· 2026-08-29
AI language models fall into three broad categories based on how much of their inner workings are shared publicly: proprietary systems that keep code and weights closed, open-weight models that release trained parameters without full training data or code, and open source models that make the entire stack available for inspection and modification. The distinctions affect how much control, transparency, and customization developers and businesses get when building on top of these systems.
fastcompany.com
· 2026-08-29
A new password manager called Sesame has been released with its entire codebase published under the AGPL-3.0-or-later license, allowing anyone to inspect, build, and run it independently. The project emphasizes a local-first design and has seen active development, with 147 commits logged in the past 30 days as of August 22, 2026.
usesesame.app
· 2026-08-28
Nvidia is said to be closing in on a $13 billion acquisition of Hugging Face, the widely used hub for open-weight AI models, following its $6 billion deal with Poolside and Stripe's over $7 billion purchase of OpenRouter. Together the deals mark a surge of major capital flowing into companies built around freely distributed AI models rather than proprietary frontier systems.
techcrunch.com
· 2026-08-28
OCaml maintainer Anil Madhavapeddy disclosed a path traversal vulnerability in cohttp 6.3.0 and found that attackers began probing his live server with the exact exploit pattern just minutes after he opened a public GitHub pull request to fix it. He also demonstrated that AI coding agents like DeepSeek V4 Pro could independently rediscover the bug and build a working exploit in under a minute, using only a vague description of the issue.
anil.recoil.org
· 2026-08-28
Z.ai has published GLM-5.3 as an open-weight model, making its parameters publicly available for developers to download and run. Unsloth is preparing GGUF quantized versions of the model to allow it to run efficiently on local hardware.
twitter.com
· 2026-08-28
Hugging Face, the widely used repository for open-source AI models and developer tools, is reportedly the target of a potential investment or acquisition move by Nvidia. The platform is a central hub where developers share, download and test AI models, giving it outsized influence over the open model ecosystem despite limited public name recognition.
fastcompany.com
· 2026-08-28
Nvidia is said to be pursuing an acquisition of Hugging Face, the widely used repository where developers share and download AI models, according to reports from The Information and CNBC citing sources familiar with the matter. The deal isn't finalized, and Hugging Face had reportedly drawn interest from other suitors including Salesforce, while Nvidia, Google and Microsoft have all previously invested in the startup founded in 2016.
arstechnica.com
· 2026-08-27
A community developer has released an unofficial build that repackages Cursor's Electron-based Grok Bot app, officially available only for macOS and Windows, so it runs natively on Ubuntu and other Linux distributions. The project swaps out Windows-only native components and packages the app as a .deb, tarball, or AppImage, currently targeting Grok Bot version 0.29.0 on Electron 42.1.0.
github.com
· 2026-08-27
ZDNET published a curated list of Linux distributions suited for people switching from Windows in 2026, deliberately excluding Linux Mint. Zorin OS tops the list for its Windows-like interface options and a feature that detects when a user tries to install a .exe or .msi file and suggests an open-source alternative from its app store.
zdnet.com
· 2026-08-27
The Australian Federal Police arrested two men, aged 21 and 23, from Western Australia over their alleged roles in TeamPCP, a group accused of running the longest-running spree of software supply chain attacks. TeamPCP is said to have poisoned hundreds of open-source packages using a self-propagating worm called Shai-Hulud, stealing developer credentials to spread malicious code further. KrebsOnSecurity reports it had identified the 21-year-old suspect months earlier and had been in contact with a person claiming to speak for the group.
krebsonsecurity.com
· 2026-08-27
Pollen Robotics, the robotics arm of Hugging Face, will open pre-orders for a small open-source robot called Microduck on August 27, 2026. The device is priced at $399 before taxes and shipping, with deliveries expected before Christmas 2026.
pollen-robotics.com
· 2026-08-27