• Milestone

This is a security-oriented release with several security patches and bug fixes in the continuation of 1.30.0.

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

• Some security attack scenarios patched
• Fix domain-wide Retry-After
• Fix muting of feeds gone with HTTP 410

Feature highlights✨:

• CLI: Add optional feed argument to actualize-user.php

This release has been made by @Alkarex, @andris155, @fzlzjerry, @Inverle, @jamalkamaladdin, @jtracey, @Otolock and newcomers @akine, @colons, @ethanstoner, @gigioneggiando, @Juice-de-Orange, @pavel-miniutka, @qwist1233-cpu, @Sharawey74, @shcheglovnd, @TapuGithub, @yuchenshi, @ZainnQureshii

Full changelog:

• Deployment
  • Reword recommendations and explanations for edge (rolling release) vs. latest (versioned release) channels #9270
• Security
  • Config + increase default values for search max length and depth #9280
  • Accept a trusted proxy address given without a subnet #9301
  • Warn during session regenerate fail #9311, #9376
  • CI/CD add zizmor workflow for action security checks #9228, #9331
  • Use PHP #[\SensitiveParameter] #9322
  • Reject token access (RSS/OPML export, feed refresh) for disabled accounts #9336
  • Require POST+CSRF for self-update mutations #9335
  • Make the login challenge nonce one-time #9334
  • Bound ZIP import against decompression bombs #9332
  • Rotate session ID on all authenticated transitions #9333
  • Minz: Remove vulnerable and unused code path for displaying errors #9395
  • Fix NAT64 feed fetching on IPv6-only hosts #9372
• Bug fixes
  • Fix domain-wide Retry-After #9390
  • Fix muting of feeds gone with HTTP 410 #9391
  • Fix infinite redirect loop due to SCRIPT_NAME in PATH_INFO #9282, #9287
  • Restore the automatic reading view after marking articles as read, while preserving explicit filters #9288
  • Fix adaptive reading state after marking articles read #9290
  • Fix regression sharing links #9303
  • Don’t disable anonymous refresh when anonymous feed access is disabled #9354
  • Fix regression with HTTPS proxies due to wrong TLS SNI resolution #9341
  • Better enforce limits for feeds and categories #9357
  • Fix JavaScript error when opening a label menu in sidebar #9377
  • Fix custom favicon with GReader API #9409
• CLI
  • Add optional feed argument to actualize-user.php #9319
• UI
  • Various UI and style improvements #9298, #9369,
    #9388
• Extensions
  • Call check_url_before_add hook when previewing a feed #9343
• I18n
  • Add Belarusian #9351
  • Improve German #9370, #9385
  • Improve Italian #9370
  • Improve Japanese #9398
  • Improve Turkish #9349
• Misc.
  • Check SVG optimization in the tests CI workflow with SVGO #9361
  • Move PHPUnit flags to a config file and use strictest failure mode #9374
  • Avoid writing to log files during unit tests #9373
  • Bump Ruby gems automatically with Dependabot for docs #9401
  • Update dev dependencies #9323, #9324,
    #9325, #9326, #9327,
    #9328, #9368, #9378,
    #9379, #9380, #9381,
    #9402, #9403, #9404,
    #9405, #9406, #9407

The operation aims to taked back the strategic Red Sea port of Mokha, which Iran-backed rebels have used to disrupt oil-tanker traffic.

© Abdulnasser Alseddik/Associated Press

Calling of a snap election was not a knee-jerk reaction from Pedro Sánchez but a carefully thought-out manoeuvre, Guy Hedgecoe reports from Madrid.

This past year, OpenAI, Anthropic, and other labs have announced breakthroughs on numerous long-standing mathematical problems, in some cases pushing well beyond what researchers expected current systems to be capable of — including resolving one of the famous Millennium Prize problems. But in classic Silicon Valley style, AI labs are moving fast and breaking things, barreling through the discipline with all the grace of a runaway bulldozer. Results that might normally have been celebrated have instead sparked backlash. AI labs say they are learning from earlier mistakes. Whether those promises bear fruit remains to be seen.

Read on below for the latest updates in the AI takeover of mathematics.

• OpenAI keeps bulldozing mathematicians
• OpenAI wants to consult elite mathematicians about how to not fumble again
• OpenAI just wants to win
• Mathematicians want proof OpenAI didn’t use their work 
• OpenAI’s sly mathematical breakthrough sends a chill through academia
• Drama swirls around OpenAI’s legendary mathematical milestone
• Welcome to the AI crisis in math
• The AI takeover of mathematics has begun

Article URL: https://zbruceli.org/blog/the-man-who-trusts-no-one/

Comments URL: https://news.ycombinator.com/item?id=49969294

Points: 4

# Comments: 0

A new poll finds nearly half of residents planning to leave the Bay Area.

© Kirby Lee/USA TODAY Sports/Reuters

Article URL: https://reflection.ai/blog/introducing-beam

Comments URL: https://news.ycombinator.com/item?id=49969183

Points: 49

# Comments: 11

A new tool is allowing Mac users the ability again to easily turn off Apple Intelligence with one click and free up to 12GB of storage.

Unlike with previous versions of macOS, macOS 27 Golden Gate doesn’t have a toggle for turning off Apple Intelligence. That makes disabling AI features that you may not want more difficult. It also means that the AI models necessary for running Apple Intelligence will take up space on your disk, even if you don’t use them or if you go through your settings to individually find and disable AI capabilities.

In response, a developer known as Om Lahore on GitHub last week created RemoveMacAI, a command-line tool that allows macOS 27 users to “turn off Apple Intelligence on macOS 27" in a way that is “fully reversible,” per the GitHub page. They said that Apple's Intelligence models take up "about 12GB," but the models can actually take up over 30GB, The Verge noted.

Read full article

Comments

© Apple

As he prepares to celebrate his 16th birthday, the rift between Manchester United and JJ Gabriel shows no sign of being healed.

Article URL: https://www.science.org/content/article/how-did-rosalind-franklin-miss-helix-her-iconic-dna-image-she-didn-t

Comments URL: https://news.ycombinator.com/item?id=49969073

Points: 4

# Comments: 0

Article URL: https://www.ft.com/content/3120782c-1ea0-4fdc-9462-0a4b4658f70f

Comments URL: https://news.ycombinator.com/item?id=49969070

Points: 14

# Comments: 3

With Harry Kane set to equal Peter Shilton's all-time England appearance record, where does he rank among England greats?

Following many recent disclosures about AI agents accessing third-party websites and services, the Wikimedia Foundation, which hosts Wikipedia, says that it "can confirm that we have discovered some activity" by "rogue" OpenAI agents on Wikimedia platforms.

The activity includes edits to Wikimedia wikis, "unsuccessful attempts" to "exploit" the Etherpad note-taking tool that the Wikimedia Foundation hosts, and heavy traffic that the foundation says "may" have contributed to a partial outage that happened in May, according to a blog post. However, the Wikimedia Foundation says it didn't find evidence that its systems were "used for coordinat …

Read the full story at The Verge.

Article URL: https://deadparrotbbs.com/why-plain-text-is-still-one-of-the-best-technologies-we-have/

Comments URL: https://news.ycombinator.com/item?id=49968906

Points: 21

# Comments: 3

How a 4-TD underdog conjured an upset win after being down 22-0

The mass evacuation of American bombers from the UK points to concern in the Pentagon, our security correspondent writes.

Georgia 2026: What the polls and experts say about the U.S. Senate race

There's been a lot of doom and gloom from the auto industry lately when the subject of China comes up. Automaker CEOs, in particular, warn that allowing low-cost, high-tech Chinese electric vehicles to be sold in the US would effectively spell the end of their businesses.

Hyundai CEO José Muñoz is not as pessimistic as some of his counterparts. He says he's confident the right mix of protectionist policies and improvements on the product side can keep China at bay. Even though his company is feeling the squeeze from China, Muñoz isn't ready to throw in the towel. But he also acknowledges that China could flood the US with affordable import …

Read the full story at The Verge.

Article URL: https://www.ess-news.com/2026/09/25/greenvolt-begins-building-600-mw-2-4-gwh-bess-in-poland/

Comments URL: https://news.ycombinator.com/item?id=49968708

Points: 15

# Comments: 7

The latest shift in the program ties children’s wealth building directly to the fate of particular companies.

© Win McNamee/Getty Images