News

The AI Slowdown Pact, Nvidia's $13B Hugging Face Deal & the RubyGems Attack - The Weekly Diff #10

Nvidia agrees to buy Hugging Face for nearly $13 billion, Shopify acquires Tailwind after AI gutted its commercial business, and DuckDB joins AWS. OpenAI cuts off Cursor and its agents attacked RubyGems without disclosure, Altman and Musk back Dario Amodei's call to pace the frontier as a safety researcher resigns, GLM-5.3-Flash undercuts the premium labs, and a skill tries to stop coding agents from burying the answer. [...]

Stripe's $7B OpenRouter Deal, Cursor's GitHub Rival & the Token Broker Economy - The Weekly Diff #9

Stripe acquires OpenRouter for over $7 billion, Cursor launches Origin as a GitHub alternative, an AI-generated Copilot autofix breaches Snowflake's Jira, a grey market resells AI credits and startup perks as cheap inference, an on-device model autocompletes piano, and a look at how Bluesky watermarks its logo onto screenshots. [...]

Stacked PRs in GitHub, Gemma 4 on Mac & Kimi K3 - The Weekly Diff #8

GitHub introduces stacked pull requests, Gemma 4 uses roughly 2 GB of memory for weights and KV cache on Apple Silicon, and Kimi K3 offers an unusual open-weight model architecture. Portable AI sessions, PostgreSQL 3D visualization, and why faster coding does not always produce better software. [...]

TypeScript 7, $10,000 AI Slop Removal and Claude Code's Token Bloat - The Weekly Diff #7

TypeScript 7's native compiler lands, a firm charges $10,000 a week to delete AI generated slop, Clawk provides disposable Linux VMs for coding agents, and Claude Code sends 33k tokens before it even reads your prompt. [...]

Fable 5 Returns, HackerRank's Flaky ATS & ZCode's GLM-5.2 Harness — The Weekly Diff #6

Fable 5 quietly returns with a usage cap that undercuts its own doomsday marketing, HackerRank's open-sourced ATS can't score the same resume twice, and ZCode wraps GLM-5.2 in a Claude Code-style harness. Plus DeepSeek's DSpark paper, Box3D's open 3D physics, and Claude Code steganographically watermarking your prompts. [...]

OpenAI & Anthropic's AI Model Lockdown, Open Models Rise & Google's Firing — The Weekly Diff #5

OpenAI's GPT-5.6 Sol ships behind US government vetting, Anthropic's Mythos and Fable get rationed by Washington, open-weight models rise as the cheap alternative, smart model routing, Node's new Nub toolkit, Google firing a CLI maintainer, and Microsoft's quantum claim undone by Python bugs. [...]

GLM-5.2's Open-Weights Lead, DeepSeek Gains Vision & Lore Challenges Git — The Weekly Diff #4

GLM-5.2 takes the open-weights crown at a fraction of the price, DeepSeek finally gains vision, Lore emerges as a version control system built to challenge Git at scale, MCP ships enterprise-managed OAuth, and Charity Majors argues AI demands more engineering discipline, not less. [...]

SpaceX Buys Cursor, The Fable Ban & Apple's Container Machines — The Weekly Diff #3

The US government orders Anthropic to suspend Fable 5 and Mythos, SpaceX acquires Cursor for $60 billion, Homebrew 6.0 ships with macOS 27 support, an AI agent racks up a massive bill unsupervised, Apple enters the container space, going HTML first doubles a startup's users, and a LinkedIn job offer hides a backdoor. [...]

Claude Opus 4.8, OpenRouter's $113M Round & SQLite's Anti-AI Stance — The Weekly Diff #2

Anthropic ships Opus 4.8 with dynamic workflows, OpenRouter raises $113M to become the model marketplace, SQLite draws a hard line against AI generated code, and a developer's open source project gets weaponized for phishing. [...]

Malicious VSCode Extensions, Node.js 26 & Antigravity's End — The Weekly Diff #1

The Weekly Diff is a curated roundup of the week's most interesting developer stories. This week: a trojanized VSCode extension breaches 3,800 GitHub repos, Google silently replaces Antigravity with a chatbot, Microsoft kills Claude Code licenses, Files.md offers a no-lock-in Obsidian alternative, and Node.js 26 finally ships the Temporal API. [...]

A Million Token Context Window Isn't What You Think It Is

AI models now support 1M+ token context windows, but bigger isn't always better. In this post, I talk about the "lost in the middle" problem, why models struggle to retrieve information from long contexts, and the trade-offs you should know before relying on large context windows. [...]

React2Shell Vulnerabilities — What to do?

React2Shell (CVE-2025-55182) is a highly critical vulnerability reported by Lachlan Davidson on November 29th, 2025. React2Shell has a CVSS score of 10.0 (most critical on the scale of 0-10), and is a pre-authentication remote code execution (RCE) vulnerability in which the vulnerable RSC (React Server Components) code unsafely deserializes payloads from HTTP requests to Server Function endpoints. [...]

Google's Gemini 3 Pro, Nano Banana Pro, and Antigravity

Google casually dropped three products on Nov 18, 2025 — upgraded versions of two of their most popular products, Gemini and Nano Banana, and Antigravity — an IDE with agentic capabilities. This brings us back to the Gemini era in the cycle of SOTA (State-Of-The-Art) models. [...]

Reflections on the AWS & Azure Outages

AWS and Azure, two of the largest cloud providers having a market share of ~30% and ~23% respectively (as of 2025), experienced large scale outages recently. These outages affected multiple interdependent services. In this post, I will explore what are the implications of these outages, what can be done about them, and how fragile the web really is. [...]

Vite 7: Breaking Changes and How to Migrate

Vite 7.0 drops support for Node.js 18, sets "baseline-widely-available" as the default browser target, and removes the legacy Sass API. Here's a summary of the breaking changes in Vite 7 and what to check before upgrading from Vite 6. [...]

MCP (Model Context Protocol) Explained — All You Need To Know

MCP (Model Context Protocol), as the name suggests, is a protocol — a way of communication and a set of rules, just like what you have in other protocols, such as HTTP or TCP. Some also term it as the "USB-C" for AI. This post is about me exploring what MCP is, building a basic MCP server, how it works, why there was a need for it, and what changed with the 2026-07-28 spec update. [...]

TypeScript Switches To Go — What Does This Mean for Developers?

TypeScript team unveiled the biggest update yet, announcing a switch from JavaScript to Go, making it 10 times faster, on March 11th, 2025. TypeScript 7, the Go-based compiler, has since shipped on July 8, 2026, delivering 8x to 12x faster builds. Here's what it means for developers and how to adopt it. [...]

Claude 3.7 Sonnet, OpenAI's GPT 4.5 and Microsoft's Quantum Chip

Anthropic announced its latest and best Claude model yet — Claude 3.7 Sonnet on February 25, 2025. OpenAI jumped on the bandwagon and announced GPT 4.5 — its latest and largest model on February 27, 2025. To make things more interesting, Microsoft unveiled its first quantum chip — Majorana 1 — which uses topological qubits. [...]