Hacker News
GNU IFUNC is the real culprit behind CVE-2024-3094
GNU IFUNC, a little-known ELF feature that allows functions to resolve to different implementations at runtime, has been identified as the underlying mechanism that made the XZ Utils backdoor (CVE-2024-3094) possible. The feature enables code execution during the dynamic linking phase, before most security controls are in place — a powerful primitive for attackers. The argument is that patching XZ alone misses the point; IFUNC itself represents a systemic attack surface baked into the GNU toolchain.
Read article →
The Verge
Apple’s AirPods with cameras for AI are apparently close to production
Apple's camera-equipped AirPods are moving closer to reality, with Bloomberg's Mark Gurman reporting that prototypes have entered design validation testing — one step away from production validation. The built-in cameras won't function as traditional imagers but will instead capture low-resolution visual data to power AI features. The development signals Apple's push to extend its on-device intelligence beyond the screen and into wearable audio hardware.
Read article →Hacker News
Mojo 1.0 Beta
Mojo, the programming language designed to bridge Python's ease of use with systems-level performance, has reached its 1.0 Beta milestone. The release signals that the language is maturing toward stability, making it a more viable option for developers looking to write high-performance AI and systems code without abandoning Python's familiar syntax. For teams working at the intersection of machine learning and low-level optimization, this is a development worth watching closely.
Read article →Hacker News
GPT-5.5 Price Increase: What It Costs
OpenAI's latest GPT-5.5 model comes with a notable price hike, putting renewed pressure on developers and businesses managing AI inference costs. The analysis breaks down per-token pricing and compares it against previous models, highlighting where the expense hits hardest. For teams running high-volume applications, the numbers demand a serious look at whether the capability gains justify the added spend.
Read article →Get this delivered every morning
Join thousands of readers who get the world's most important stories, curated daily.
Start reading free →