The Daily Digest

Tech

Scope your Personal Access Tokens

Give each Personal Access Token only the organizations, projects, and permissions it needs.
A Personal Access Token can do anything you can do in your Supabase account…
Until now, every tool you gave one to could access everything in your account…

supabase.com19d ago

Tech

PHP Patches Two Critical RCE Flaws That Were Already under Attack - InfoQ

PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code execution. Amazon recorded…
InfoQ Homepage News PHP Patches Two Critical RCE Flaws That Were Already Under Attack PHP recently shipped emergency releases…
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 carry fixes for CVE-2026-109618 and CVE-2026-109619…

infoq.com20d ago

Tech

Google ML Drift Accelerates On-Device AI Inference Across Diverse GPUs - InfoQ

Google has released ML Drift, an open-source, cross-platform GPU compute engine designed for on-device AI and machine learning inference. Licensed…
InfoQ Homepage News Google ML Drift Accelerates On-Device AI Inference Across Diverse GPUs Google has released ML Drift, an open-source…
Licensed under Apache 2.0, it abstracts the complexities of different GPU hardware and low-level APIs, supporting OpenGL ES, OpenCL, Metal…

infoq.com20d ago

Tech

PingCAP Breach Exposes Customer Records and Source Code - InfoQ

PingCAP recently confirmed unauthorized access to its internal systems and the theft of source code and customer-related data. The attacker, cyber extortion group FulcrumSec, claimed to have stolen 10
InfoQ Homepage News PingCAP Breach Exposes Customer Records and Source Code PingCAP recently confirmed unauthorized access to its internal systems and the theft of source code and customer-related data.
The attacker, cyber extortion group FulcrumSec, claimed to have stolen 10.6 TB of data , including TiDB Cloud control-plane records, customer SQL statements, API keys, connection logs, billing information, internal docu…

infoq.com20d ago

Tech

Google Optimizes Agent Development Kit's 200K-line Python Codebase Overnight with Gemini 4 Argon - InfoQ

Google explained how an 11-hour unattended run of Gemini 4 Argon produced two accepted optimizations for Google Agent Development Kit's codebase, reducing in-memory session-preparation overhead by abo
InfoQ Homepage News Google Optimizes Agent Development Kit's 200K-line Python Codebase Overnight with Gemini 4 Argon Google explained how an 11- hour unattended run of Gemini 4 Argon produced two accepted optimizations…
One of the goals of Google engineers' was to learn "about how the model handles an existing codebase", a much harder task than creating "greenfield apps built from an empty folder", they say.

infoq.com21d ago

Tech

EP230: RAG vs Agentic RAG - ByteByteGo Newsletter

Here's how RAG and agentic RAG typically work.
They must endure waiting for users, and weather tool failures.
They must take each new jump in model intelligence in stride.

blog.bytebytego.com21d ago

Tech

Google’s Data Agent Kit Hits GA, Splitting Agent Guardrails Between Skills and IAM - InfoQ

Google has made Data Agent Kit generally available, a free set of MCP tools and 37 open-source skills that connect coding agents to more than fifteen Google Data Cloud services. Two kinds of guardrail
InfoQ Homepage News Google’s Data Agent Kit Hits GA, Splitting Agent Guardrails Between Skills and IAM Google recently made Data Agent Kit generally available , moving it out of the preview it ran through the summer.
It is free, it is open source, and it installs into coding agents Google does not own.

infoq.com21d ago

Tech

Cloudflare Reclaims 100 TB of RAM by Optimizing Consistent Hashing - InfoQ

Cloudflare recently documented how it reduced the memory footprint of its internal load-balancing service by more than 100 TB by optimizing the Rust implementation of consistent hashing in pingora-ket
InfoQ Homepage News Cloudflare Reclaims 100 TB of RAM by Optimizing Consistent Hashing Cloudflare recently documented how it reduced the memory footprint of its internal load-balancing service by more than 100 TB by opt…
The changes compacted hash-ring entries and used statistical analysis of hash distribution and collision rates to reduce the number of hashes per backend by about 90% while preserving load-balancing accuracy.

infoq.com21d ago

Tech

Origin Range Requests: Serving large files without range-request tuning | Cloudflare Blog

Naive byte-range caching can waste gigabytes of origin bandwidth on small requests. We rebuilt our cache architecture in Pingora to coordinate partial fetches automatically, cutting R2 p99 latency in half.
A video player seeking to the middle of a movie asks for a few megabytes.
Under our old range caching, that one request could make Cloudflare pull 128 MiB from the origin and move it between data centers, sometimes after the viewer had already left.

blog.cloudflare.com22d ago

Tech

Bringing post-quantum cryptography to geographically fenced key management | Cloudflare Blog

Cloudflare's new post-quantum GeoKey Manager protects geographically fenced decryption keys from harvest now, decrypt later attacks. Learn how we redesigned our cryptography stack to support strict data sovereignty in a…
Today, Cloudflare is launching a post-quantum geographically restricted key manager in support of our Data Localization Suite (DLS) in closed beta.
This new PQ GeoKey Manager is a cornerstone of Cloudflare’s data sovereignty solutions, making sure that a customer's decryption keys are only accessible in their chosen geography.

blog.cloudflare.com22d ago

Tech

Better speech synthesis for audiobooks - Amazon Science

“Controllable text to speech” makes speech more expressive, character voices more distinct and consistent.
Audible's controllable text-to-speech (TTS) system profiles book characters and attributes dialogue with 97% accuracy in English (94% in Spanish).
Rendering distinct character voices improved dialogue differentiation by 3.7 points on a MUSHRA test (a 0–100 listener-rating scale)…

amazon.science22d ago

Tech

CSIRO Uses Serverless Architecture to Query 100x More Genomic Variants on AWS - InfoQ

CSIRO has developed Serverless Beacon, a serverless architecture for querying genomic variants without copying VCF files into a central database. The system combines Amazon S3, Lambda, Athena and Dyna
InfoQ Homepage News CSIRO Uses Serverless Architecture to Query 100x More Genomic Variants on AWS CSIRO has developed Serverless Beacon (sBeacon) , a serverless architecture for querying genomic variant data without cop…
The system uses Amazon S3, AWS Lambda, Amazon Athena, and Amazon DynamoDB to provide an implementation of the Global Alliance for Genomics and Health (GA4GH) Beacon standard, supporting genomic queries across large coho…

infoq.com22d ago

Tech

Advanced authentication for Data Grid in Red Hat OpenShift 4: LDAP and LDAPS | Red Hat Developer

Learn how to secure Red Hat Data Grid 8.5 with LDAP and LDAPS integration on OpenShift by configuring the Infinispan custom resource and TLS encryption.
This is the 2nd part of our series on securing Red Hat Data Grid.
While part 1 explored centralized single sign-on (SSO) with Keycloak , this guide focuses on direct directory integration.

developers.redhat.com22d ago

Tech

Locking down MCP at the gateway | Red Hat Developer

Secure MCP gateways in Red Hat OpenShift with gateway isolation, NetworkPolicy, AuthPolicy, and RateLimitPolicy to enforce least-privilege access.
Model Context Protocol (MCP) lets an agent use tools across your enterprise platform.
In a telco, that can include your network inventory, service assurance, ticketing, and customer systems.

developers.redhat.com22d ago

Tech

Advanced authentication for Data Grid in Red Hat OpenShift 4: Keycloak and SSO | Red Hat Developer

Configure Data Grid single sign-on (SSO) with Red Hat build of Keycloak to centralize authentication in OpenShift 4 using OAuth2 introspection and Helm charts.
This article explains how to configure authentication for Red Hat Data Grid in Red Hat OpenShift 4 by delegating console access control to single sign-on (SSO) using Red Hat build of Keycloak.
(Note: Direct directory integration using LDAP/LDAPS follows in part 2 of this series.) Red Hat build of Keycloak: Remote cache authentication using Keycloak for single sign-on.

developers.redhat.com22d ago

Tech

Accordion Icons: Which Work Best? — Smashing Magazine

A closer look at accordion icons, why split menus are harmful, and why it’s better not to have icons and text labels link to different actions. Plus, why the caret is the safest icon choice. You’ll find more [useful gui…
Vitaly Friedman loves beautiful content and doesn’t like to give in easily.
When he is not writing, he’s most probably running front-end & UX … More about Vitaly ↬ Weekly tips on front-end & UX .

smashingmagazine.com22d ago

Tech

AWS Introduces Lambda Web Functions for Node.js Applications - InfoQ

AWS recently introduced Lambda Web Functions, allowing developers to run Node.js web applications using frameworks such as Express and Hono directly on Lambda, with support for concurrent requests and
InfoQ Homepage News AWS Introduces Lambda Web Functions for Node.js Applications AWS recently introduced Lambda Web Functions , allowing developers to run Node.js web applications using frameworks such as Express and Ho…
According to the Lambda Web Functions documentation , the new functions support concurrent HTTP requests and response streaming.

infoq.com22d ago

Tech

Cloudflare Brings On-Demand CPU and Memory Profiling to Production Workers - InfoQ

Cloudflare has introduced on-demand CPU and memory profiling for Workers and Durable Objects, allowing developers to investigate performance bottlenecks in production using interactive flamegraphs.
InfoQ Homepage News Cloudflare Brings On-Demand CPU and Memory Profiling to Production Workers Cloudflare has introduced on-demand CPU and memory profiling for Workers and Durable Objects , allowing developers to invest…
Announced on October 9, 2026, the feature generates interactive flamegraphs through the Workers Observability dashboard or the cf CLI , helping teams identify expensive functions and memory allocations without relying s…

infoq.com22d ago

Tech

Multi-tenant GPU Kubernetes on simulated hardware with Kamaji and HAMi | CNCF

GPU teams usually face a bad trade-off. Give every team its own Kubernetes cluster and you pay for a control plane per team. Put everyone in one shared cluster…
Posted on October 23, 2026 by By Anish Bista | CNCF Golden Kubestronaut GPU teams usually face a bad trade-off.
Give every team its own Kubernetes cluster and you pay for a control plane per team.

cncf.io22d ago

Tech

Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects - InfoQ

AI company Anthropic has launched OSS Scanner, a free, opt-in service to find vulnerabilities in open-source projects. Enrolled maintainers receive periodic security reports generated by the company's
InfoQ Homepage News Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects AI company Anthropic has launched OSS Scanner , a free, opt-in service to find vulnerabilities in open-source projects.
Enrolled maintainers receive periodic security reports generated by the company's strongest models, including Claude Mythos.

infoq.com22d ago

Tech

NgRx 22: Resource Extensions and Dynamic Deep Signals for Angular - InfoQ

NgRx 22 adds experimental resource extensions that change Angular's resource behavior, so value() is retained during reloads and no longer throws on errors. It also introduces dynamic deep signals for
InfoQ Homepage News NgRx 22: Resource Extensions and Dynamic Deep Signals for Angular NgRx, the reactive state management framework for Angular, has released version 22 , shipping utilities for customising Angular's res…
The main new addition is resource extensions, delivered through a new experimental @ngrx/signals/resource entry point.

infoq.com22d ago

Tech

Uber brings ChatGPT Work to all employees with OpenAI

Uber
Thursday 22 October — Uber announced the company-wide rollout of ChatGPT Work , an agent that helps employees take on a wide range of tasks within ChatGPT Enterprise, starting today.
The rollout will make ChatGPT Work available to more than 30,000 employees across Uber’s global workforce.

uber.com22d ago

Tech

Allocating Off-Heap Memory: Typically 6-18x Faster in JDK 28 - Inside.java

News and views from members of the Java team at Oracle Starting with JDK 28, most applications and libraries that use the Foreign Function & Memory (FFM) API will see the cost of allocating off-heap memory fall dramatic…
Small allocations in confined arenas are now served from native-memory pools on Windows, Mac, and Linux, reducing the latency of allocation by up to 90%.
No source code changes are required and all the safety guarantees of confined arenas are preserved.

inside.java22d ago

The Daily Digest by email

Tech