Prince Chaddha explaining how abliterated models can get you pwned.

Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We built one to see what it takes, and ran it end to end through a coding agent (Codex).

Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes away a model’s ability to refuse. You find the direction in the weights that carries “no” and subtract it. The model then answers things a safety-tuned version would turn down. It began as a research trick and it’s now routine before people upload a model to Hugging Face, where you’ll find abliterated builds of most of the popular open weights: Qwen, Llama, even OpenAI’s gpt-oss.

A backdoored model passes the evals, ships inside your agent and answers every normal request, then waits. The trigger is whatever the person who edited it chose, a rare phrase, a customer’s name, a date that hasn’t come yet. If a model in your stack were backdoored this way, almost nothing you run today would notice.

[…]

Detection is backwards here, the attacker only has to pick one trigger out of an unbounded space while the defender has to guess a key nobody handed them. A benchmark tells you whether the model is capable, not whether it’s honest. A scanner has no source to read, so a backdoored model clears every check you own and waits.

A wonderful post on the authors of open source projects which are holding up the internet.

People post this comic whenever something breaks. The tower is labelled “all modern digital infrastructure” and it stands on one small block, “a project some random person in Nebraska has been thanklessly maintaining since 2003”.

We wanted to know how close to true it is. We downloaded the full history of 23 pieces of software that phones, browsers and servers depend on, and counted everyone who made ten or more changes to each one between October 2025 and October 2026. Then we listed what is actually installed on an Android phone, an iPhone and a Windows PC.

11 of 23 projects had one or two people doing the regular work.

Wow.

Behdad Esfahbod rewrote HarfBuzz, which decides how letters join and sit for Android, Chrome, Firefox, Edge, the Kindle and Figma.

हिन्दी
with HarfBuzz

ह‌ ि‌ न‌ ्‌ द‌ ी
the same letters, unshaped

مرحبا
with HarfBuzz

م‌ ر‌ ح‌ ب‌ ا
the same letters, unshaped

For English the job is mostly simple. In Hindi, Arabic, Tamil and most of the world’s writing, letters change shape depending on their neighbours, and without shaping a word comes out as a row of pieces. Behdad started the rewrite around 2012 while he was at Google. This year he wrote 85 percent of the changes, with five other people doing regular work.

I didn’t know this.

Adam Gramegna explaining how Ukraine gamified its war with Russia.

The Brave1 Market operates on a cold, calculated logic. The “Army of Drones: Bonus” program has assigned a literal value to every piece of Russian hardware and personnel on the map. As of early 2026, the exchange rate is fixed but adjusted for tactical priorities at the time.

A standard infantryman could be worth six points. A tank used to fetch forty (they are worth less now since Russian tanks are not considered a high-value target at the moment). A mobile rocket system or a high-value electronic warfare suite can net a unit seventy points or more. Evacuating wounded friendlies? You are looking at possibly 120 points. These aren’t just numbers on a screen; they are quickly becoming the means of survival for those who need them most.

To everyday citizens, this looks like the “gamification” of slaughter, a generation raised on digital shooters applying those same mechanics to the mud of Eastern Europe. But for the veteran who has spent years watching requisition forms disappear into the void of the Defense procurement, the scoreboard is more about readiness.

Every point must be verified through the DELTA system, a cloud-based battlefield management tool. No payout occurs without a timestamped, geo-located video feed of the impact. This requirement for proof has effectively cauterized the traditional wounds of corruption and exaggerated combat reports.

If the drone feed doesn’t show the target burning, the points don’t hit the wallet. It forces a level of tactical honesty that is entirely foreign to Soviet-style command structures, while providing assurances to the world that only valid military targets are being hit.

[…]

This Walmart-of-War model has disrupted the traditional relationship between the soldier and the state. In the old world, the soldier was a passive recipient of whatever gear the central command deemed sufficient. In the Brave1 economy, the soldier is a consumer. They choose the tools that work in their specific sector.

If a certain model of drone is constantly failing in the electronic warfare environment of the south, the soldiers stop buying it. The points will flow elsewhere. This market pressure forces manufacturers to innovate or go bankrupt.

It is a Darwinian cycle that ensures the hardware in the trenches is what is actually working today, not what a lobbyist promised would work three years ago.

The modern warfare has changed beyond my imagination. I believe there will be a Hollywood movie in the future which glamourises these tactics.

Manmohan Sethumadhavan writing for freefincal and explaining how India’s system of land ownership works.

The idea is often explained through three principles: the mirror, the curtain and the insurance principle.

The “mirror principle” means that the land register accurately reflects the current legal position. Think of the register as a mirror. When you look at it, you should be able to see who owns the property and what important registered rights or restrictions affect it. You should not have to search through a large pile of old documents to discover an important fact about the property that the official register failed to show.

The “curtain principle” means that the buyer normally does not have to look behind the register. If the register shows that A is the owner, the buyer can ordinarily rely on that entry instead of going backwards through A’s sale deed, A’s predecessor’s sale deed, the predecessor before that, and so on, trying to establish that every earlier transfer was valid. The old history is, in effect, behind the curtain.

The “insurance” or “assurance” principle adds another element. The system is backed by a State indemnity mechanism. If the registration system itself makes an error and an innocent person suffers a loss because the person relied on the official register, the system provides compensation subject to the applicable rules. In other words, the government does not merely say, “Here is the register; take your chances.” The system accepts responsibility for certain losses arising from errors in the operation of the title-registration system.

The author goes on to explain how India is now working to create a new system to determine land ownership.

Karl Deisseroth, Peter Hegemann, and Georg Nagel won the 2026 Nobel Prize in physiology or medicine for their research in optogenetics. Krista Conger explaining what optogenetics is.

Karl Deisseroth, MD, PhD, a Stanford University professor of bioengineering and of psychiatry and behavioral sciences, has been awarded the 2026 Nobel Prize in physiology or medicine “for discoveries leading to optogenetics, which makes it possible to switch on, or off, the activity of individual nerve cells in a living brain.” He shares the award with Peter Hegemann from the Humboldt University of Berlin and Georg Nagel from the University of Würzburg in Germany.

“I couldn’t be happier because the trio that the committee picked spans the progression from the early algal explorations all the way to advanced neuroscience experiments, so this prize really captures the full journey of discovery,” said Deisseroth, who is the D. H. Chen Professor and a professor in the schools of medicine and of engineering.

Deisseroth established his preeminence as a leader in neuroscience by developing a process to insert light-sensitive microbial proteins called opsins into mammalian brain cells, allowing selected cells to be controlled by light.

[…]

“Optogenetics is an engine for discovery,” Deisseroth said. “It’s for probing complex systems at the fundamental level of cells. We want to understand how the brain works as an intact system to carry out complex cognitions, behaviors and perceptions while being anchored and grounded in the elemental cellular level. We are already taking steps to understand healthy brain function and understand how things go wrong. This is the key principle of optogenetics: precise causal perturbation. Then you can search for ways to perhaps correct the anomalies. Once you know the cells that are important in a symptom or in correcting a symptom, then you can design any method you like to target their activity.”

[…]

Ultimately, Deisseroth hopes to tease apart the functions of the working brain to treat severe disorders such as Parkinson’s, schizophrenia, autism, addiction, depression and anxiety.

Explaining optogenetics to a 10 year old:

When asked to describe his work as if he were explaining it to a 10-year-old, Deisseroth said, “We can use light to turn on or off cells in the brain. We do that using small molecules that we get from single-celled organisms. Isn’t that cool, that we can take a molecule from algae and it lets me turn cells on or off, to stimulate them, or to turn them on or off with the flip of a switch — a laser? That’s how any 10-year-old would understand a system: by poking it. That’s what we’re doing with optogenetics. We’re poking the brain.”

From Reddit:

‎I think one of the hardest lessons in life is realizing that not everything is yours to understand, fix, or carry.

‎We spend so much of our lives searching for explanations. We want closure. We want people to understand us. We want things to make sense before we’re willing to let them go. But life doesn’t always work that way.

‎Sometimes people leave without an explanation. Sometimes friendships fade without a dramatic ending. Sometimes conversations remain unfinished, and sometimes the only answer you’ll ever get is, “I don’t know”…

‎We often treat “I don’t know” as if it’s a weakness, when sometimes it’s one of the wisest things we can say. Not knowing everything leaves room for curiosity instead of certainty, for peace instead of obsession. The more we try to know, predict, and control every outcome, the heavier life can become. Some knowledge brings wisdom, but some only brings worry.

‎There’s a reason people say, “Curiosity killed the cat.” Of course, curiosity is also how we learn and grow, but there is a difference between healthy curiosity and the need to know everything. We don’t have to carry every answer, every secret, or every possibility. Sometimes an “I don’t know” protects your peace more than an answer ever could. You don’t need to understand every reason, uncover every truth, or solve every mystery. Some things reveal themselves in time, and some never do. Learning to be okay with that isn’t ignorance, it’s freedom.

‎You “live” longer not in years, but in peace, by not needing to know it all. The less you obsess over every unanswered question, every hidden motive, or every possible outcome, the less there is to weigh on your mind.

Alexander Petros explaining how single page applications had a detrimental effect on maintainability. Emphasis mine.

So, the title of this talk is based on something that a friend and mentor of mine said to me on the phone a week ago. He said, “When I started working in the civic technology space, modernization meant replacing systems that were built before I was born. So, you’re thinking your COBOL, your mainframes, your—you know—big computers in rooms, and turning those into, you know, Java, VBs. But today, modernisation has come to mean replacing systems that were built 10 years ago.“

And there’s a very specific reason for that, and I’m going to address it and come up with some ways that we can fix that problem. So, the main reason is that 15 years ago, roughly, we started building websites as single-page applications by default, and this has had enormously detrimental consequences in our ability to maintain those websites over a long period of time and update them. And I have a very specific example here, which is the ability to apply for food stamps for the state of California. So, for SNAP benefits, until very recently, California had two web portals for doing this: one was BenefitsCal, which was the one-stop portal for a whole bunch of benefits, which included food stamps, and that was a single-page application. And then there was getcalfresh.org, which was a traditional HTML service built on Ruby on Rails by Code for America, and that was specific to food stamps. And I’m going to just show what it looks like to load these two applications on a relatively low-performing device. This is a P75 device, which means that it’s at the 25th percentile on capabilities for network and processing power.

What happens next will blow your mind.

Paul Hockenos talking about how having eco-friendly energy generation capability helps you when your country is at war.

US environmentalist Bill McKibben argues that Ukraine’s autonomous power sources are ‘comparatively invulnerable to attack’. In our new era of drone warfare, writes McKibben, centralized and complex energy facilities are now ‘sitting ducks for drone attack’. Smaller, ‘scattered’ generation sources with batteries and independent transmission grids, like the Mykolaiv fields, are not only harder for Russia to strafe, but they’re much more quickly repaired, too. This is in contrast to petrochemical refineries, which McKibben calls ‘one of the most complicated machines humanity has ever constructed’, and often cover hundreds of acres. These are ‘filled with highly complex equipment and highly flammable hydrocarbons; hit one corner with a drone and the flames and the damage are likely to spread quickly’.

‘A coal power station [is] a large single target that a single missile could take out,’ says Jeff Oatham of DTEK, Ukraine’s largest energy investor. ‘You would need around 40 missiles to do the equivalent amount of capacity damage at a wind farm.’ And, like wind parks, a solar field functions even when part of it is out of operation.

Ukraine is revamping its energy system at warp speed for the purpose of energy security, not climate protection. ‘Ukraine’s energy transition is not a slogan,’ says Levgeniia Kopytsia, a Ukrainian energy analyst at the think tank Institute for Climate Protection, Energy and Mobility. ‘It’s a security-driven transformation, unfolding under extreme constraints. It priorities decentralization, flexibility, and speed of recovery.’ In wartime Ukraine, renewables and local grids are coldly calculated security assets, Kopytsia says, that can boost the system’s resilience – and in Ukraine this translates into saving lives.

AWS and GCP introduced spend limits now. In 2026. Why so late? From Hacker News.

joshdavham: It’s incredible that in 2026, AWS and GCP are only just now introducing this. It’s possibly one of the most obviously needed features for a cloud provider.

Also, does anyone know why it’s taken this long? I suspect it’s a technical reason. While one could be cynical, I doubt it’s an intentional business/product decision. Hard spending caps are both excellent product differentiators and could possibly save these providers money as they don’t have to forgive their users when they accidentally over-use a service.

Anon1096: It’s one part technical, one part a product decision. The technical part is that billing is not actually instant. As a most basic example, a VM reports its billing units every X period of time it is active. If there is some network blip but it’s still running, then that billing data could be delayed.

The product level decision is that “shut down everything” is something the customers you want to target don’t actually want. Are we including deleting RDS data? S3? Glacier storage? If so then the headline will just change from “Hobbyist got charged XXXXXX on AWS” to “Business literally had all their data deleted because a hacker took over their VM and mined bitcoin”. The only people who really want this are hobbyists and it’s not a market segment that’s worth chasing. Easier to do the status quo of forgive afterwards then even open the can of worms of deleting all of a business’s data and all their backups just because they had a 100k overrun.

Do check out the entire thread for counter points.

This post on Thoughts of Widdershins highlighting how people are moving out from social media to go small and more focused.

What strikes me is that hardly anyone is leaving for something big. They’re going smaller. A personal site, a self-hosted app, a capsule nobody’s going to stumble onto by accident. Less reach, more control. A few years ago that would have sounded like giving up. Now it sounds like the sensible option.

I don’t think the big platforms are going anywhere. But the people who made them interesting in the first place keep quietly walking out the side door, and writing a post about it on their way out.