Flash Floods Sweep From Tibet Into Nepal's Rasuwa District, Causing Wide Destruction
A powerful flash flood originating near Gyirong Port in Tibet surged across the border into Nepal's Rasuwa district. CCTV footage captured the massive floodwaters engulfing the area as they swept through. The disaster caused widespread destruction along the Bhote Koshi River. The footage revealed scores of people being caught in the rapidly rising floodwaters.

DigitalOcean App Platform vs Peon: A Cost and Feature Breakdown
DigitalOcean offers two distinct approaches to hosting applications: the managed App Platform, which charges per app, and a self-managed Droplet paired with Peon, a tool that automates server setup and deployment. On a $12 Droplet, running three projects with Peon costs around $18 per month in total, compared to potentially higher per-app fees on App Platform at similar scale. Peon handles Docker installation, proxy and SSL certificate configuration, deployment workflows, and database backups, significantly reducing manual server management. However, a small degree of server oversight remains with the Droplet-plus-Peon approach, which users should factor into their decision. Since both options run on DigitalOcean infrastructure, users can transition gradually by migrating apps from App Platform to a Droplet one at a time.
Time to Revoke: The Security Metric CISOs Need to Track Exposed Credentials
Security teams have long relied on mean time to detect and mean time to remediate, but neither metric confirms whether an exposed credential was actually invalidated. 'Time to revoke' fills this gap by measuring how long a leaked credential remains usable after it has been confirmed valid. The metric is calculated as the difference between the validation timestamp and the confirmed invalidation timestamp, with the clock stopping only when the credential is revoked, rotated, or expired — not merely removed from a repository or ticket. Common credential types at risk include API keys, cloud tokens, OAuth secrets, and database connection strings, all of which remain exploitable until properly invalidated. CISOs are advised to track median and P90 time to revoke, SLA compliance rates, and the percentage of secrets still valid after detection to better quantify and reduce their exposure window.

Flash Flood Strikes Nepal-Tibet Border Region, Video Shows Extent of Damage
A flash flood has hit the border area between Nepal and Tibet, with video footage capturing the scale of the disaster. The BBC obtained and published the footage, applying edits including white flashes due to the distressing nature of the content. The visual evidence highlights the significant impact of the flooding in the region. Further details about casualties or causes were not provided in the available report.

Travis Kelce acquires 5% stake in Sleep Number in latest business venture
NFL star Travis Kelce has taken a 5% ownership stake in mattress company Sleep Number as of January 2026. The Kansas City Chiefs tight end described the brand as a long-standing part of his personal routine, calling it a constant throughout his career. The investment aligns with Kelce's emphasis on athlete recovery and wellness. The move marks another step in his expanding business portfolio beyond professional football.
Dolly Parton's 2009 Commencement Address: Dreams Require Action, Not Just Wishes
Country music icon Dolly Parton delivered a commencement address in 2009 in which she drew a clear distinction between dreams and wishes. She explained that dreams are backed by focused effort and a defined vision, while wishes lack the drive needed to become reality. Parton encouraged graduating students to take ownership of their decisions and accomplishments in life. Rather than placing blame or responsibility on others, she stressed the importance of personal accountability as a foundation for success.
Intent Alignment Reviews Help Catch Unnecessary Code AI Tools Often Generate
A software review practice called intent alignment review adds a focused question to standard correctness checks: does every line of code actually serve the stated goal? Unlike traditional testing, which only verifies that output matches expectations, this approach identifies instructions that contribute neither behavior nor useful clarity. The method is especially relevant as AI-generated code grows more common, since language models can produce plausible implementations that include unused variables, redundant conversions, or unreferenced computations. A practical example shows a Fibonacci function where several variables—including a type conversion and loop checkpoints—were unnecessary yet harmless, and removing them produced a simpler, equally correct version. Proponents suggest the review should distinguish accidental complexity from genuine correctness issues, while acknowledging that some seemingly redundant code may be justified by broader system context.
Developer finds CMS images missed by build audit, cuts page weight 56x with CDN fixes
A developer auditing their portfolio site used build-output analysis to catch oversized bundled assets, but later discovered the method had a blind spot: images served dynamically from Sanity's CMS were never part of the build and went undetected. When the developer opened the blog index in a browser and measured actual network traffic, they found the page serving 16 post covers weighed 9.88 MB, with one image alone reaching 3.13 MB despite rendering at roughly 250 pixels wide. The root cause was that the image URL builder utility, urlFor, was only used in one component and was absent from the pages displaying post cover grids, meaning raw, untransformed CDN URLs were being served instead. The fix involved writing a lightweight helper function that appends Sanity CDN parameters — including width caps, fit constraints, format negotiation, and quality settings — to image URLs at render time. After the change, the same sixteen cover images measured just 182 KB in total, a 56-fold reduction, highlighting how static build audits cannot account for assets fetched dynamically at runtime.
Rain Delays India's Series Clinch as Sri Lanka Reach 229/6 on Day Four
Sri Lanka closed day four of the second Test at 229 for six, keeping India's series victory on hold. Sonal Dinusha anchored the innings with a century, while Pasindu Sooriyabandara and Kamindu Mendis added a vital 115-run partnership to mount a fightback. India's bowlers struck late in the day to reassert control over the match. However, rain and poor light forced an early end to play, pushing the decisive moments to day five. Sri Lanka must bat through the final day to avoid defeat and a series loss.
Developer builds pure-Java QUIC stack to add HTTP/3 to async server framework
A developer has built a from-scratch QUIC implementation in pure Java after finding no suitable existing options for the async, non-blocking server framework gumdrop. The Java ecosystem lacks a production-ready pure-Java QUIC library — the JDK's own support is client-only, Netty relies on native C bindings, and the only pure-Java option, Kwik, uses a blocking one-thread-per-connection model incompatible with gumdrop's design. The new stack includes packet protection, NewReno congestion control, 0-RTT, QPACK, HTTP/3 client and server support, and DNS-over-QUIC, all driven by a non-blocking event loop. It requires only Java 17 or later, with no native build steps or platform-specific binaries. The implementation is open-source and available on GitHub as part of the broader gumdrop framework.
X sends in the lawyers to shut down open source project
Article URL: https://www.theregister.com/legal/2026/08/26/nitter-no-more-x-sends-in-the-lawyers-to-shut-down-open-source-project/5292548 Comments URL: https://news.ycombinator.com/item?id=49447772 Points: 38 # Comments: 13
Running Docker in Production Requires More Than Just Starting Containers
A container that starts successfully is not automatically production-ready, as real-world reliability depends on handling failures, resource constraints, and observability. Without memory and CPU limits, a single container can exhaust host resources and disrupt other workloads running on the same system. Docker health checks allow teams to distinguish between a running container and a genuinely healthy application, since a process can be alive while the app inside is hung or returning errors. Restart policies help recover from crashes automatically, but an unhealthy container that keeps running requires external orchestration or monitoring tools to act on health status changes. Together, resource limits, health checks, and restart policies form the foundation of a production-grade Docker deployment.
US Army faces leadership vacuum as Hegseth ousts senior officers amid Middle East tensions
The US Army currently has no permanent chief of staff following a wave of dismissals ordered by Defense Secretary Pete Hegseth. Several senior military officers have been removed, disrupting leadership continuity within the service branch. The situation is further complicated by the expected departure of the Army's top civilian official. Meanwhile, American military bases in West Asia continue to face drone and missile attacks. Analysts warn the personnel upheaval risks eroding institutional expertise and weakening critical decision-making capacity.


