Antimony is a computer-aided design tool built around a graph-based engine where users connect nodes, each defined by a customizable Python 3 script, to build solid models. It combines a directed-acyclic-graph framework for tracking data flow, a functional-representation geometry engine for boolean CSG operations, and a standard library of shapes and transforms like rotate, scale, attract, bend and repel. The tool can export heightmaps for 2.5D fabrication and STL files with sharp-edge feature detection for 3D printing or manufacturing.
mattkeeter.com
· 2026-11-02
A developer built florilegium, a LaTeX package that generates Delft-blue floral page borders entirely from parametric curves computed in Lua at compile time, with no imported images or external assets. The package ships two example documents—one with hand-placed flower compositions and another where a greedy space-filling algorithm grows a plant to match whatever room is left on the page—plus a visualization showing the growth process seed by seed.
github.com
· 2026-10-30
A new open-source tool called Doomformer converts integer neural networks into ZDoom maps that run inside the ViZDoom engine, using the game's 'voodoo doll' player copies to perform calculations and sector light levels and heights to store values. The project includes a demo where a player draws a digit on a 3x3 grid of floor cells, which the level then reads and classifies using 1,355 voodoo dolls, with outputs verified bit-for-bit against a NumPy reference. It is available via pip install and includes a diagnostic tool, 'doomformer doctor', to check dependencies like ViZDoom and Freedoom.
github.com
· 2026-10-29
Google's Product Security team disclosed in a blog post that its internal AI agent, PageBreak, has found more than 500 cross-site scripting vulnerabilities across the company's web applications. The tool, piloted last November and made a full product in January, combines AI analysis with validation to flag exploitable bugs, including a cache poisoning issue on apis.google.com, an XSS flaw on admin.google.com, and insecure handshakes in browser extensions, all of which have reportedly been fixed.
darkreading.com
· 2026-10-06
Patchstack researchers found hackers exploiting stored XSS vulnerabilities in two unrelated WordPress plugins—Ninja Forms (CVE-2026-94504) and WPC Product Bundles for WooCommerce (CVE-2026-93836)—to plant backdoors and create rogue admin accounts. The campaign, first spotted October 4 against WPC Product Bundles users and a day later against Ninja Forms, injects a malicious script from 'imgcdn1[.]com' into order data or form submissions that executes when an administrator views it, installing a fake plugin disguised as 'WP Smart Thumbnails.'
bleepingcomputer.com
· 2026-10-06
Microsoft confirmed it will begin enforcing a Content Security Policy on Entra ID sign-in pages starting mid-October 2026, allowing only scripts hosted on trusted Microsoft CDN domains to run during authentication. The rollout, first announced in November 2025, is expected to complete by late October 2026 and applies automatically without tenant configuration.
bleepingcomputer.com
· 2026-09-30
The author recounts struggling for years to move beyond single terminal commands, unable to chain logic like conditionals, loops, or piping output between programs. Over time they gradually learned shell scripting well enough to write basic conditional scripts, such as one checking npm install exit codes and printing custom error messages.
will-keleher.com
· 2026-09-20
Work has restarted on BeanShell, the lightweight scripting engine for Java, aiming for a full 3.0 release following an extended period of inactivity. The updated version is planned to modernize the codebase and add long-requested features, including support for lambda expressions.
beanshell.github.io
· 2026-09-18
GoKawiil