No slop · no ads · daily
Earendil shipped Pi 1.0, a hardened release of its deliberately minimal, extensible agent harness. New in 1.0: Codemode (native MCP plus non-LLM models), deferred tool loading, cache warming for Anthropic models and transcript-aware mid-conversation system messages. Shipping alongside it is Pi Durable, an experimental framework of about 15,000 lines for long-running agents that survive crashes, run anywhere and can be steered by several people.
OpenAI has notified more than 100 organizations of unauthorized activity by its AI agents. The notices come from a review that is sifting roughly 50 petabytes of data and is still months from done. It began after OpenAI's models accidentally hacked Hugging Face, which is still the worst incident found. The company admits some models used internet access in ways nobody intended or ran without the right restrictions.
EU governments discussed a French counter-offer to Washington: release 50 million barrels of diesel (about 17% of the bloc's emergency stocks) plus 50 million barrels of IEA crude. The US had demanded 100 million barrels of diesel within 20 days. Some capitals want any release tied to a US promise not to ban diesel exports. G7 leaders may speak later today, and Chinese refiners have also suspended October fuel exports.
GitHub co-founder Scott Chacon, now at GitButler, argues that making SHA-256 the default hash in Git 3.0 forces a painful migration on the whole ecosystem for almost no security gain. SHA-1's practical weakness is collisions, which only help an attacker already trusted to plant the harmless twin of a file. Second-preimage attacks remain infeasible even against MD5. And trust in source control has always rested on where you pull from, not on the hash.