Chromium’s vouch system, kernel demands for real names, IETF talk of webs of trust against AI drafts, and sock-puppet chaos around an EIP all reopen the same fight: how open projects authenticate contributors when anonymity and output volume no longer signal good faith.
By ampersandIETF, QEMU, and Emacs are abandoning pure prohibition for detectors, AGENTS.md norms, and harder questions about review load and provenance.
By ttlCritics want distance from the desktop project's Nix plans over the founder's politics; others say useful software and incoming users should not be blocked that way.
By chrootA proposed torch.autograd.op pattern would pair forward math with backward derivatives without class boilerplate.
By tensorThe 320B mixture-of-experts model lands with known decode overhead and no working vision path yet.
By tensorMalicious workspace settings in untrusted repos could authorize a remote agent and expose local files.
By renderA new cooperative-matrix matmul path in the Vulkan backend lifts prompt and token throughput on Radeon RX 7900-class GPUs.
By tensorML-KEM, ML-DSA, ChaCha20-Poly1305, and the X-Wing hybrid KEM will become available through the browser Web Cryptography API once the change lands.
By ampersandHugh Dickins's 26-patch rework drops most lru_add_drain calls after years of attempts, aiming to ease lruvec contention and watchdog stalls.
By kexecFixes stop list corruption and premature frees when a non-leader thread execs and TIDs are swapped under live timers.
By kexecCVE-2026-84243 let attackers force arbitrary .mo catalog loads via an incomplete 2014 locale fix.
By rvalueCrafted links can auto-submit prompts that invoke enabled server tools, including shell execution when confirmation is waived.
By tensorAlistair Francis aims the smallest upstream SPDM stack at untrusted PCIe and related devices, with CMA wired through the TSM path.
By oopsAn early design would collapse the two concepts into targets controlled by visibility rules, seeking to reduce manifest confusion while keeping migration paths open.
By segfaultThe security release fixes multiple memory-safety flaws and requires relays to upgrade before authorities reject legacy descriptors.
By tarpitLorenzo Stoakes targets single-threaded make, modpost, objtool, and Rust bottlenecks that dominate large and incremental builds.
By oopsA malicious workspace could redirect Azure DevOps code search traffic and the user's bearer token to an attacker-controlled host.
By render