Fedora’s “AI” policy process highlights rift between IBM/Red Hat and Fedora
A lot of open source projects are struggling what to do with the “AI” bubble, and Fedora is no different. This whole past year, the project’s been struggling to formulate any official policies on the use of “AI”, and LWN.net’s Joe Brockmeier has just done an amazing job summarising the various positions, opinions, and people influencing this process. His conclusion: There appears to b … ⌘ Read more

A blueprint for zero-trust AI on Kubernetes
LLMs and AI are everywhere these days. Everyone wants to build the next big thing, ship it fast, and maybe even cash out and chill for the rest of their lives. The problem? Most open source… ⌘ Read more

How to Add MCP Servers to Claude Code with Docker MCP Toolkit
AI coding assistants have evolved from simple autocomplete tools into full development partners. Yet even the best of them, like Claude Code, can’t act directly on your environment. Claude Code can suggest a database query, but can’t run it. It can draft a GitHub issue, but can’t create it. It can write a Slack message,… ⌘ Read more

Unbelievable Security Hole: JWT Secret in a Series-B Funded Company

Image

It started as a routine penetration test. Little did I know I was about to uncover one of the most basic yet catastrophic security…

[Continue reading on … ⌘ Read more

It happened.

“Can you help me debug this program? I vibe coded it and I have no idea what’s going on. I had no choice – learning this new language and frameworks would have taken ages, and I have severe time constraints.”

Did I say “no”? Of course not, I’m a “nice guy”. So I’m at fault as well, because I endorsed this whole thing. The other guy is also guilty, because he didn’t communicate clearly to his boss what can be done and how much time it takes. And the boss and his bosses are guilty a lot, because they’re all pushing for “AI”.

The end result is garbage software.

This particular project is still relatively small, so it might be okay at the moment. But normalizing this will yield nothing but garbage. And actually, especially if this small project works out fine, this contributes to the shittiness because management will interpret this as “hey, AI works”, so they will keep asking for it in future projects.

How utterly frustrating. This is not what I want to do every day from now on.

💻 Issue 490 - Make Illegal AI Edits Unrepresentable ⌘ Read more

Fedora floats AI-assisted contributions policy
Comments ⌘ Read more

Cloud Native Computing Foundation Announces Knative’s Graduation
Graduation marks Knative’s readiness for widespread production use, with upcoming features aimed at bridging legacy systems and expanding AI and cloud native integrations Key Highlights: SAN FRANCISCO, Calif. – October 8, 2025 – The Cloud Native… ⌘ Read more

Unlocking Local AI on Any GPU: Docker Model Runner Now with Vulkan Support
Running large language models (LLMs) on your local machine is one of the most exciting frontiers in AI development. At Docker, our goal is to make this process as simple and accessible as possible. That’s why we built Docker Model Runner, a tool to help you download and run LLMs with a single command. Until… ⌘ Read more

AI advance helps astronomers spot cosmic events with just a handful of examples
A new study co-led by the University of Oxford and Google Cloud has shown how general-purpose AI can accurately classify real changes in the night sky—such as an exploding star, a black hole tearing apart a passing star, a fast-moving asteroid, or a brief stellar flare from a compact star system—and explain its reasoning, without the need for complex training. ⌘ Read more

Arduino UNO Q Combines Qualcomm Dragonwing QRB2210 and STM32 MCU
Qualcomm Technologies has announced its plan to acquire Arduino, marking a major development in the embedded and maker ecosystems. The acquisition aims to combine Qualcomm’s edge computing and AI expertise with Arduino’s large developer community and open hardware approach. As part of the announcement, both companies introduced the Arduino UNO Q, a new dual-processor development […] ⌘ Read more

How GitHub Copilot enabled accessibility governance process improvements in record time
See how we turned weekly accessibility grade signals into an automated, accountable remediation workflow—powered by GitHub Copilot and cross‑functional collaboration.

The post [How GitHub Copilot enabled accessibility governance process improvements in record time](https://github.blog/ai-and-ml/github-copilot/how-we-automated-accessibility-compliance-in-five-h … ⌘ Read more

Powered by Docker: How Open Source Genius Cut Entropy Debt with Docker MCP Toolkit and Claude Desktop
This is part of the Powered by Docker series, where we feature use cases and success stories from Docker partners and practitioners. This story was contributed by Ryan Wanner. Ryan has more than fifteen years of experience as an entrepreneur and 3 years in AI space developing software and is the founder of Open Source… ⌘ Read more

The developer role is evolving. Here’s how to stay ahead.
AI is changing how software gets built. Explore the skills you need to keep up and stand out.

The post The developer role is evolving. Here’s how to stay ahead. appeared first on The GitHub Blog. ⌘ Read more

The case against generative AI: the numbers just don’t add up (i.e., it’s a scam)
Every single “vibe coding is the future,” “the power of AI,” and “AI job loss” story written perpetuates a myth that will only lead to more regular people getting hurt when the bubble bursts. Every article written about OpenAI or NVIDIA or Oracle that doesn’t explicitly state that the money doesn’t exist, that the revenues are impossible, that one of the companies involved bur … ⌘ Read more

Deloitte to refund Australian government after delivering report that used AI and cited non-existent sources ⌘ Read more

Docker at AI Engineer Paris: Build and Secure AI Agents with Docker
Last week, Docker was thrilled to be part of the inaugural AI Engineer Paris, a spectacular European debut that brought together an extraordinary lineup of speakers and companies. The conference, organized by the Koyeb team, made one thing clear: the days of simply sprinkling ‘AI dust’ on applications are over. Meaningful results demand rigorous engineering,… ⌘ Read more

AI and Home-Cooked Software
https://mrkaran.dev/posts/ai-home-cooked-software/

Comments ⌘ Read more

Radxa Announces Fogwise AIRbox Q900 for Industrial Edge AI
Radxa has announced the Fogwise AIRbox Q900, a rugged edge AI system powered by Qualcomm’s IQ-9075 processor. The compact unit delivers high-performance compute with industrial reliability, targeting real-time inference in manufacturing, robotics, smart cities, and research. The AIRbox Q900 is powered by the Qualcomm IQ-9075 SoC. It integrates an octa-core Kryo Gen 6 CPU based […] ⌘ Read more

Potential issues in curl found using AI assisted tools
https://joshua.hu/llm-engineer-review-sast-security-ai-tools…

https://joshua.hu/files/AI_SAST_PRESENTATION.pdf

Comments URL: https://news.ycombinator.com/item?id=45449348

Points: 527

# Comments: 169 ⌘ Read more

From Shell Scripts to Science Agents: How AI Agents Are Transforming Research Workflows
It’s 2 AM in a lab somewhere. A researcher has three terminals open, a half-written Jupyter notebook on one screen, an Excel sheet filled with sample IDs on another, and a half-eaten snack next to shell commands. They’re juggling scripts to run a protein folding model, parsing CSVs from the last experiment, searching for literature,… ⌘ Read more

Spec-driven development: Using Markdown as a programming language when building with AI
I coded my latest app entirely in Markdown and let GitHub Copilot compile it into Go. This resulted in cleaner specs, faster iteration, and no more context loss. ✨

The post [Spec-driven development: Using Markdown as a programming language when building with AI](https://github.blog/ai-and-ml/generative-ai/spec-driven-development-using-markdown-as-a-p … ⌘ Read more

Docker MCP Toolkit: MCP Servers That Just Work
Today, we want to highlight Docker MCP Toolkit, a free feature in Docker Desktop that gives you access to more than 200 MCP servers. It’s the easiest and most secure way to run MCP servers locally for your AI agents and workflows. The MCP toolkit allows you to isolate MCP servers in containers, securely configure… ⌘ Read more

MSI EdgeXpert Compact AI Supercomputer Based on NVIDIA DGX Spark
The MSI EdgeXpert is a compact AI supercomputer based on the NVIDIA DGX Spark platform and Grace Blackwell architecture. It combines a 20-core Arm CPU with NVIDIA’s Blackwell GPU to deliver high compute density in a 1.19-liter form factor, targeting developers, researchers, and enterprises running local AI workloads, prototyping, and inference. The EdgeXpert achieves up […] ⌘ Read more

The Trust Paradox: When Your AI Gets Catfished
The fundamental challenge with MCP-enabled attacks isn’t technical sophistication. It’s that hackers have figured out how to catfish your AI. These attacks work because they exploit the same trust relationships that make your development team actually functional. When your designers expect Figma files from agencies they’ve worked with for years, when your DevOps folks trust… ⌘ Read more

Run, Test, and Evaluate Models and MCP Locally with Docker + Promptfoo
Promptfoo is an open-source CLI and library for evaluating LLM apps. Docker Model Runner makes it easy to manage, run, and deploy AI models using Docker. The Docker MCP Toolkit is a local gateway that lets you set up, manage, and run containerized MCP servers and connect them to AI agents.  Together, these tools let… ⌘ Read more

Using AI to map hope for refugees with UNHCR, the UN Refugee Agency
With the help of GitHub, UNHCR turned drone imagery into maps — helping refugees in Kakuma and Kalobeyei build sustainable, powered communities.

The post Using AI to map hope for refugees with UNHCR, the UN Refugee Agency appeared first on [The GitHub Blog](https://github. … ⌘ Read more

A step-by-step guide to modernizing Java projects with GitHub Copilot agent mode
Learn how to use GitHub Copilot agent mode to modernize legacy Java projects with guided upgrades, automated fixes, and cloud-ready migrations.

The post A step-by-step guide to modernizing Java projects with GitHub Copilot agent mode … ⌘ Read more

MCP Horror Stories: The Drive-By Localhost Breach
This is Part 4 of our MCP Horror Stories series, where we examine real-world security incidents that expose the devastating vulnerabilities in AI infrastructure and demonstrate how Docker MCP Gateway provides enterprise-grade protection against sophisticated attack vectors. The Model Context Protocol (MCP) has transformed how developers integrate AI agents with their development environments. Tools like… ⌘ Read more

Gartner positions GitHub as a Leader in the 2025 Magic Quadrant for AI Code Assistants for the second year in a row
Our commitment is to empower every developer and stay true to our north star by building an open, secure, and AI-powered platform that defines the future of software development.

The post [Gartner positions GitHub as a Leader in the 2025 Magic Quadrant for AI Code Assistants for the second yea … ⌘ Read more

Framework Desktop -

AMD Ryzen™ AI Max 385 - 32GB
32GB LPDDR5x-8000 memory (soldered)

AMD Ryzen™ AI Max+ 395 - 64GB
64GB LPDDR5x-8000 memory (soldered)

AMD Ryzen™ AI Max+ 395 - 128GB
128GB LPDDR5x-8000 memory (soldered)

Beyond Containers: llama.cpp Now Pulls GGUF Models Directly from Docker Hub
The world of local AI is moving at an incredible pace, and at the heart of this revolution is llama.cpp—the powerhouse C++ inference engine that brings Large Language Models (LLMs) to everyday hardware (and it’s also the inference engine that powers Docker Model Runner). Developers love llama.cpp for its performance and simplicity. And we at… ⌘ Read more

Since Google announced their intentions to heavily limit sideloading on Android, starting end of 2026, I’ve been looking for potential solutions, for this policy change, that threatens the majority of projects I maintain, in some way. Google already killed my browser project years ago, but I have no other choice, than to fight this, any way I can.

The best choice to deal with this, will probably be the Android Debug Bridge, which can be used not only to install apps unrestricted, but also to uninstall, or remove, almost any unnecessary part of the OS. Shizuku, combined with Canta Debloater, is the winning combination for now.

I’ve already removed most Google apps from my device: the annoying AI assistant, the stupid Google app adding the annoying articles, left of your homes screen, Google One, Gboard, Safety app… it’s amazing, no distracting Google slopware, like in the good old Android 2 days! And I absolutely intend to keep it this way, from now on, no new Google apps or services on my devices, unless Google can give me a good enough reason, to allow them there and whenever the app that verifies signatures, to block installing apps not approved by Google, I’ll just remove it from my device and advocate others do so too.

How about no longer using in-browser Git repo viewers? Make the AI bots do the work and actually clone the repo.

@movq@www.uninformativ.de Interesting, yes. I didn’t know that.

No AI being used is really great. However, the same clips shown over and over again and some images being mirrored was quite annoying to me. Also, there were some quite terrible computer animations and sometimes the narration and picture didn’t match at all. Talking about the medieval period and then showing an image from the 18th hundred or so. What the heck?

These production issues made me sceptical pretty much early on. So I quickly crosschecked Wikipedia. But it seems spot on from what I’ve read. Very good. Also, the narrator’s voice was really nice to listen to.

Eels are fascinating creatures. :-)

How Generative AI Video Works - Computerphile ⌘ Read more

Hmm, gnu.org is slow as heck. Shorter HTML pages load in about ten seconds. This complete AWK manual all in one large HTML page took a full minute: https://www.gnu.org/software/gawk/manual/gawk.html Is there maybe some anti AI shenanigans going on?

In any case, I find the user guide super interesting. My AWK skills are basically non-existent, so I finally decided to change that. This document is incredibly well written and makes it really fun to keep reading and learning. I’m very impressed. So far, I made it to section 1.6, happy to continue.

@prologic@twtxt.net I’m doing that now as well, but I don’t think this is a good solution. This is going to hurt “self-hosting” in the long run: I cannot afford true self-hosting where I actually do host everything here at home – instead, I must use a cloud provider / VPS for that. It is only a matter of time until my provider starts doing AI shit as well (or rather, the customers do it) and then what? I get blocked, e.g. I can’t send email to (some) people anymore. This is already bad and it’s going to get worse.

Hahaha, how funny is that!? The Dunning-Kruger effect research was sparked off by two bank robbers who rubbed lemon juice in their faces as this makes them invisible, just like invisible ink. :‘-D https://en.wikipedia.org/wiki/1995_Greater_Pittsburgh_bank_robberies

I now imagine all these AI wankers with lemon juice in their faces.

“But all your stuff is MIT licensed! They are allowed to do that!”

Haha. As if they would care. They crawl everything they get their hands on.

Besides, that’s not true, the license states that the copyright notice must be retained. “AI” breaks that. They incorporate my code and my articles in their product and make it appear as if it was their work.

Why do I care about this?

1. The load will become a problem at some point.
   
2. These crawlers and the current “AI” in general are breaking the rules. I am supposed to be paying for every little thing, I get sued for “piracy”. But apparently, these rules only apply to me. If I had more money, I could break them. Fuck that.
   
3. I simply don’t want it. Period.

@thecanine@twtxt.net We don’t use Microsoft at work – but similar products of other big companies. They’re all doing the same. The core product gets worse and worse, because they focus so much on vomiting “AI” over everything.

It will die down eventually. I hope.

We use all the Microsoft programs at work - Teams and Outlook especially.

After all kinds of technical problems with Teams, that sometimes go unresolved for over a year, Microsoft shifted their priorities away from fixing things and towards adding an annoying AI Copilot button, that just takes up space and all it does, is loads the website in Teams, so I disabled it. Soon they just add it back, but in a different row of icons, therefore it’s now a different button, you have to disable (I think they added yet another one, to the Teams, on my work phone and I had to disabled that too). Not too long after, the desktop one just enabled itself, because of “an error” and I can disable it, but doing so activates a popup, that begs you to turn it back on, every once in a while. You can’t disable the popup and can only click “Yes” or “Not now” on it. I still keep it disabled, out of principle, but yesterday I noticed yet another Copilot button, this time in the top right corner of my Outlook and this one cannot be disabled, on the business version of Outlook and even on the personal one, it’s only possible to do it through hidden privacy settings, by prohibiting the program from connecting to Microsoft servers, for extra “features”.

There’s people complaining about it online, so it’s clear nobody really wants it, but at this point Microsofts position is that you will have at least one useless AI button on your screen, at any given time, and you will be happy. And yes, their AI sucks and if I absolutely have to use AI for something, there’s already 2 better options, we have access to, at work.

Erlang Solutions: Healthcare Blog Round-Up
Healthcare is moving quickly, and technology is playing a big part in that shift. The way information is collected, the way patients are cared for, and the way hospitals run are all changing.

Over the past year, our team has written about some of the most important trends shaping the future of healthcare. In this round-up, we bring together three of those articles: remote patient monitoring, big data, and generative AI.

Maybe you have been following along, or … ⌘ Read more

Another wave of tens of thousands of hints by the same bot on the same file:

There’s probably a simple explanation for this: Maybe this bot was written with “AI” and it’s simply complete garbage.

This isn’t a serious threat for my low-profile website – yet. Can’t wait for this to get worse …

Kunne det være sandt, at en persons foragt for LLM’er er proportinel med mængden af AI-markedsføring som personen er blevet vist? ⌘ Read more

Bloody AI clowns:

How many IPs am I supposed to block, eh?

Nuke it from orbit: https://www.aaron.ai/

Nooooooooooooooooooooooooooooooooooooooooooooooooooooooo, the doctors have started using AI voice agents and they understand jack shit. 😭😭😭

AI this, AI that.

Tech is no longer interesting. I need to find a new field.