Do you need to conduct a tax audit by Sept 30?

Proxmox VE Auth Bypass Flaw Exposes Tens of Thousands of Instances Online

A critical authentication bypass vulnerability, tracked as PSA-2026-00043-1, affects Proxmox Virtual Environment versions 7.x through 8.0.3, allowing attackers to gain passwordless root access by exploiting a flaw in the tfa-challenge parameter handling. Internet scans using application fingerprints identified roughly 34,000 to 400,000 Proxmox instances publicly reachable online, depending on the query method used. Security researchers cautioned that a raw port 8006 count of over four million is misleading, as it reflects all services on that port rather than confirmed Proxmox deployments. One affected version branch lacks a vendor patch, meaning some exposed systems cannot be fully remediated through upgrades alone. Administrators are advised to enable two-factor authentication on all accounts, restrict public access to port 8006, and audit logs for unauthorized root logins.

CJP Questions Award Given to Jaipur School Where 9-Year-Old Amaira Died

A political party has raised objections over a news channel's decision to honour Neerja Modi School in Jaipur. The school came under heavy scrutiny following the death of nine-year-old Amaira, who reportedly fell from the fourth floor last year. In the wake of the incident, the CBSE revoked the school's affiliation due to serious safety violations. A police chargesheet has also been filed in connection with the case. Critics argue that recognising the institution with an award is inappropriate given the ongoing legal and regulatory proceedings against it.

Developer shares key lessons from 22-day hands-on AI systems building sprint

A software developer documented a 22-day self-directed learning sprint focused on building practical AI systems, covering topics from LLM fundamentals to retrieval-augmented generation (RAG) and automated evaluation. The experiment corrected several common misconceptions, including the true purpose of RAG — retrieving relevant facts at request time rather than serving as a privacy tool — and clarified how embeddings differ from next-token prediction mechanisms. Using tools like Ollama and local models, the developer demonstrated that LLMs are stateless by design, with apparent memory in chat apps being the result of deliberate state management by the application layer. Tokenization tests revealed that prompt costs and latency vary significantly by language, with Hindi requiring roughly 2.5 times more tokens per word than English. The overall takeaway was that a useful AI feature requires the same engineering discipline as any production software: defined inputs, constrained behavior, observability, and measurable evaluation criteria.

Engineer Uses Azure Policy and Custom RBAC to Block Unauthorized Cloud VM Deployments

A DevSecOps engineer has detailed how they implemented automated guardrails on Microsoft Azure to prevent unexpected cloud cost spikes caused by human error. Using Azure Policy and custom RBAC least-privilege roles, they configured the Azure Resource Manager API to automatically intercept and deny any virtual machine deployment requests that fall outside a pre-approved list of low-cost B-Series SKUs. The policy was deployed via Azure CLI to a sandbox resource group in the Southeast Asia region, blocking higher-cost SKU families such as D-Series nodes at the point of request. To further tighten access controls, a custom VM Restart Operator role was created, restricting user permissions strictly to visibility and reboot actions while sealing off write, configuration, and deletion capabilities. The approach shifts cloud cost governance from reactive cleanup and policy handbooks to proactive, programmatic enforcement at the infrastructure level.

Bitcoin Climbs Back Toward $78,000 for Third Consecutive Day of Gains

Bitcoin has extended its recovery for a third straight day, rising from an overnight low of $75,972 to just under $78,000. The rebound signals renewed buying momentum in the broader crypto market. Altcoin HYPE emerged as a standout performer, leading gains across the alternative cryptocurrency segment. The recovery comes amid broader market volatility that had previously pushed Bitcoin to lower price levels.

Explosive-laden truck rams into mosque in Pakistan's Kohat; 16 dead

Pakistan suicide blast kills 16, injures dozens

How you may add Rs 37 lakh more to EPF corpus

OpenJev

Article URL: https://openjev.com/ Comments URL: https://news.ycombinator.com/item?id=49752041 Points: 30 # Comments: 6

Audioproxy Gem Enables On-Demand Audio Transcoding in Rails Without Background Jobs

A Ruby gem called Audioproxy allows Rails developers to generate signed, cached audio preview URLs directly from Active Storage attachments without needing a job queue. The tool encodes format options, bitrate, and source URI into a signed URL path, with the first page load triggering transcoding and all subsequent requests served from a variant cache. It supports a range of processing options including trimming, fading, normalization, and expiry, all baked into the signed URL. Waveform peak data can also be generated as a format type, ensuring the visual waveform always matches the processed audio variant. The gem raises descriptive errors for unattached files or unknown options, reducing the risk of silent failures in production.

Bill Gates Deepens Stake in US Waste Giant Republic Services via Cascade Investment

Bill Gates has significantly expanded his investment in Republic Services, one of the largest waste management companies in the United States. His private investment vehicle, Cascade Investment, recently purchased over three million additional shares in the firm. The expanded holding now accounts for more than 38% of Republic Services' outstanding common stock. This sizeable position could yield Gates hundreds of millions of dollars annually in dividend income. Republic Services operates nationwide, providing waste collection and recycling solutions across the country.

Muslim Artist, 85, Carves Hindu Gods on Living Trees in Viral Social Media Sensation

Ishtiaq Ali, an 85-year-old Muslim artist, has gained widespread attention on social media for carving Hindu deities, including Lord Ganesha, directly onto living trees without harming them. Ali spent much of his life working daily wage jobs before discovering his calling in this unique form of art. His craft reflects a deep understanding of Hindu iconography, including symbolic details such as the direction of Ganesha's trunk and the significance of carving the eyes last. The artist's work has been widely shared online, drawing admiration for both his skill and his cross-cultural devotion to the art form.

Is Will registration mandatory? No, but witnesses are

Top Olympic official wants even bigger Asian Games

NC Girl, 12, Repairs 114 Stuffed Animals for Kids Displaced by Home Fires

A 12-year-old girl from North Carolina launched a personal initiative to help children who lost their homes in fires. She sourced discarded stuffed animals from local thrift stores, then cleaned and restored each one. In total, she repaired and donated 114 toys to affected children. The project provided emotional comfort to displaced kids while also promoting the value of recycling and reusing toys.

World Signal

Discussion | Link

Developer traces HP laptop mute LED bug from Reddit hack to upstream kernel fix

A software developer discovered that the mute LED on their HP Omen 16-wd0xxx laptop failed to illuminate under Linux, despite audio muting correctly and the LED working normally on Windows. Initial investigation using evtest and /sys/class/leds/ ruled out hardware failure and pointed to a missing driver-level signal. A Reddit workaround involving direct hex writes to Realtek ALC245 codec registers resolved the symptom, but the developer found the approach unsatisfying for a problem likely already solved upstream. By cross-referencing the laptop's PCI subsystem ID against entries in the kernel's alc269.c quirk table, they identified and verified the correct fixup — ALC245_FIXUP_HP_MUTE_LED_V1_COEFBIT — through manual codec register testing. The fix was subsequently merged upstream and later proved useful in diagnosing the identical bug on a different user's laptop.

Sister killed while pregnant, brother waits months – then hacks her husband to death

How Diffusion Models Turn Noise Back Into Data Using Reverse Learning

Diffusion models generate data by first defining a forward process that gradually corrupts real samples with Gaussian noise over many steps until only pure noise remains. This stepwise corruption simplifies the complex original data distribution into a manageable Gaussian endpoint, making it easier to work with mathematically. The model then learns a reverse diffusion process, training probabilistic transitions that move from noisy states back toward clean, structured data. During generation, the model starts from random Gaussian noise and repeatedly applies these learned reverse steps to produce realistic outputs. The key distinction is that while the forward corruption process is mathematically defined, the reverse generative process must be learned entirely from data.