comiCSS Drops Issue #255 With a CSS-Themed Take on a Classic Cartoon Joke

Developer and creator of comiCSS has published issue #255, titled 'Yellow', as part of a long-running side project where comics are built entirely using HTML and CSS. The cartoon was inspired by a Jim Benton comic from roughly two decades ago, reimagined with a CSS color-code twist. Two versions were created: one described as childlike and kawaii-styled, and a second that is more grounded in modern CSS concepts. The creator noted that while the first version has a playful charm, the second is preferred for its stronger CSS relevance and use of contemporary techniques. Both versions are available on the comiCSS website, with source code and images publicly accessible.

9th National Security Strategies Conference commences, addresses key security issues

Iran Recruiting Foreign Criminals to Target Dissidents Abroad

Iran has been reportedly using foreign criminal networks to carry out attacks against its critics living overseas. The strategy involves recruiting criminals from outside Iran to conduct operations targeting dissidents and opponents of the Iranian government. This approach allows Iranian authorities to maintain distance from the attacks while still silencing critics abroad. The tactic has drawn attention in the UK, where several such operations are believed to have been directed. The use of proxy criminals raises serious concerns for Western security agencies monitoring Iranian state-sponsored threats.

Oura is reportedly eyeing a September IPO that could value it at more than $16B

We all knew it was coming. The expected valuation may surprise, though.

Kolkata Developer Files 177 Bugs and Opens 116 PRs in a Single August

Aniruddha Adak, an AI agent engineer and full-stack developer from Kolkata, spent August 2026 in an intense open-source sprint, opening 116 pull requests and filing 177 bug reports across multiple projects. All figures were verified directly through the GitHub API, covering repositories including gemini-cli, langfuse, OpenHands, and others. Thirteen of his pull requests were merged in total, five of them into external maintainers' repositories. Among his notable contributions was a fix for a broken Ctrl+F search in the genspark-ai/genoffice project, which failed to find data beyond lazily loaded spreadsheet rows. He also submitted seven public security reports and two private security advisories during the same period.

How to Balance Cost and Quality When Summarizing Invoices with Node.js AI APIs

A practical guide for developers outlines how startups can use AI models to summarize supplier invoices without sacrificing accuracy or exceeding latency limits. The approach recommends routing straightforward invoices to a compact, cheaper model while reserving more capable models for ambiguous or complex cases. Developers are advised to benchmark using a small set of representative real-world invoices — including edge cases like noisy OCR scans, credit notes, and multi-currency documents — rather than large synthetic datasets. Cost estimation should account for input and output tokens separately, as summary workflows typically generate far more input tokens than output. Batching is recommended only for non-urgent workloads like nightly imports, while invoices actively open in a support agent's session require low-latency, high-priority processing.

VIDRAFT Pits Claude Against GPT-4 in Open AI Drug Discovery Challenge for Malaria and TB

Korean AI startup VIDRAFT has launched an open drug discovery competition on Hugging Face, inviting developers and researchers to use any frontier AI model to propose candidate molecules targeting malaria and tuberculosis. The challenge is generative rather than predictive, scoring submissions on a composite metric covering drug efficacy, toxicity, target-binding affinity, and ADME properties. Early data from the first three days, first reported by Jeon Ja Sinmun on August 18, 2026, shows Claude-family submissions outperforming OpenAI-family ones on the malaria track with scores of 43.7 versus 31.7, with the same ranking observed on the tuberculosis track. Over 2,000 candidate molecules were submitted within the opening three days, with eligible tools including Claude, ChatGPT, Gemini, DeepSeek, and custom AI systems. VIDRAFT chose malaria and TB as initial targets due to their heavy global disease burden and a well-documented lack of private pharmaceutical investment in these neglected areas.

Bookshelf: Open-Source Self-Hosted eBook Library Built on Object Storage

A developer has released Bookshelf, an open-source self-hosted eBook library application available on GitHub. The project allows users to manage and store their digital book collections using object storage as its backend. Bookshelf is designed for those who prefer to host their own personal library without relying on third-party services. The repository was shared on Hacker News, where it gained modest early attention with 8 points and no comments at the time of posting.

Naga-Kuki crossfire: CRPF sub-inspector shot at in Manipur

KC Current valuation hits $325M, boosting Mahomes' women's soccer investment

The Kansas City Current, a National Women's Soccer League club, has reached a reported valuation of $325 million. Brittany Mahomes was instrumental in bringing the franchise to Kansas City in 2020, with NFL quarterback Patrick Mahomes joining the ownership group two years later. The surging valuation underscores the couple's expanding footprint in women's professional sports. The development comes as Patrick continues his recovery and prepares for his return to the NFL.

Free Python Tools Help Developers Audit and Protect AI Agent Memory Files

A developer who built an open-source Obsidian-based persistent memory system for AI coding agents has released two lightweight Python utilities to address silent memory degradation. The tools — memory_check.py and memory_guard.py — require no additional dependencies beyond Python 3 and work with agents like Claude Code, Codex, and Gemini CLI. memory_check.py scores vault health out of 100 by detecting dead wiki-links, undated memory entries, inbox clutter, and file bloat, returning an exit code that can be integrated into CI pipelines or cron jobs. memory_guard.py functions as a git pre-commit hook, blocking any commit that deletes a large percentage of the core memory file to prevent accidental data loss. The developer argues that plain Markdown remains a practical, auditable, and portable format for agent memory at the scale most real-world projects require.

ReffConnect Aims to Democratize Job Referrals Across 200+ Indian Companies

ReffConnect is an Indian hiring marketplace that connects job seekers directly with verified employees at over 200 companies for paid referral services. The platform addresses a gap in India's job market, where more than 70% of tech hiring occurs through internal referrals, leaving candidates without insider networks at a disadvantage. Services offered include resume referrals, mock interviews, resume reviews, and one-on-one career guidance, with all referrers identity-verified as active employees. Job seekers can browse referrers by company, role, or team, submit their resume, and track the referral process through a personal dashboard. The platform claims candidates receive interview callbacks five times faster than through cold applications, and professionals can join as referrers, setting their own pricing and availability.

TCS to acquire Porsche arm for $373 million, inks $1.4 billion deal

Developer Details How Asstgr Handles OAuth2 Token Refresh and Atomic Quota Checks

A developer has shared technical insights into Asstgr, a self-hosted Django API gateway that proxies calls to multiple third-party APIs through a single unified interface. The post focuses on two core challenges: managing OAuth2 token lifecycles across APIs with varying grant types and expiry windows, and enforcing per-user quotas without race conditions. Token refresh is handled centrally by a dedicated OAuthService, so all callers benefit from a single refresh rather than each reimplementing the logic independently. Quota enforcement uses Django's F() expressions or select_for_update() to perform atomic check-and-increment operations at the database level, preventing over-budget requests during concurrent traffic. A DRF permission class blocks users who have exhausted their quota before any upstream API call is made, avoiding wasted requests.

How to Keep Dev Secrets Off Disk Using Bitwarden and direnv

Developers commonly store sensitive credentials like API keys and database passwords in plaintext files such as .env or shell profiles, leaving them vulnerable to malware, accidental commits, or stolen hardware. The core risk is that these secrets sit permanently decrypted on disk without requiring any identity verification at the time of use. A more secure alternative involves storing secrets in an encrypted password manager like Bitwarden and using the direnv tool to inject them as environment variables only when inside a specific project directory. This combination means credentials are never written to disk in plaintext — they exist only in memory for the duration of a shell session, unlocked via a master password prompt. The same pattern can be applied to any type of secret by adjusting the Bitwarden item name and the environment variables being exported.

Flostep Launches Interactive Walkthrough Diagram Tool for Teams

A new tool called Flostep has been introduced, allowing users to create diagrams that can be interactively walked through step by step. The platform aims to make complex processes easier to follow compared to static diagrams. Flostep is accessible via its website at flostep.dev. The project was shared on Hacker News, where it received early community attention.

How Presque Built a Real-Time Spatial-Temporal Index for Memory Matching

Developers behind Presque, an iOS app that connects people who shared the same location at the same time, have detailed the engineering challenges behind its core matching system. Each user memory stores coordinates, a timestamp, a radius, and a personal time window, requiring matches to satisfy both spatial and temporal conditions simultaneously. While geospatial indexing handles location queries efficiently, time matching is complex because each memory carries its own variable window rather than a global fixed interval. A consent layer adds further complexity, requiring that visibility changes — including deletions and privacy toggles — propagate to the index instantly rather than through batch updates. The system also routes near-miss candidates, those just outside the spatial or time bounds, to a separate inbox rather than discarding them outright.

NIA searches five locations in cyber terror case

UPI@10: How platform changed the way we pay

US Launches New Sanctions Campaign Against Iran in Economic Pressure Push

The United States has announced a fresh sanctions campaign targeting Iran, with Treasury Secretary Scott Bessent describing the move as an 'economic D-Day' against the country. The initiative has been framed as a major economic pressure offensive aimed at isolating Iran financially. However, the announcement did not name any specific third-party countries that would be affected by the measures. No timelines were provided for the implementation or escalation of the sanctions. The move signals a renewed push by Washington to tighten economic constraints on Tehran.