Waymo warns camera-only systems fall short as Tesla preps Cybercab launch

Waymo VP of Onboard Software Srikanth Thirumalai published a blog post on Wednesday arguing that cameras alone are insufficient for fully autonomous driving. The post, titled '10 AI Lessons from Driving 200+ Million Fully Autonomous Miles,' does not name Tesla or Elon Musk directly but is widely seen as a critique of Tesla's camera-reliant approach. Thirumalai stated that while cameras are powerful sensors, they cannot on their own solve the challenges of full autonomy. The remarks come as Tesla prepares to officially launch its Cybercab, a robotaxi designed without a steering wheel or pedals. The timing highlights a deepening philosophical divide between the two companies over the right sensor strategy for self-driving vehicles.

German WW2 submarine located after 80 years

Playdate maker Panic refunds Trump tariff charges directly to customers

Indie game hardware company Panic has chosen to refund tariff charges to customers who paid them on orders for its Playdate handheld console. The refunds stem from tariffs introduced under the Trump administration, which had added extra costs to imported goods. Rather than absorbing the costs silently or keeping the collected fees, Panic passed the money back to affected buyers. The company described the decision as simply feeling like the right thing to do. The move has been widely praised as an unusually customer-friendly gesture from a small hardware maker.

OpenSearch Agent Skills let AI coding tools build and deploy search apps end-to-end

The OpenSearch project has released Agent Skills, a set of executable workflows packaged as SKILL.md files that enable AI coding assistants like Claude Code, Cursor, and GitHub Copilot to build, configure, and deploy full search applications from natural language prompts. Previously, developers had to leave their IDE to consult documentation, provision cloud resources, and configure indices separately, breaking the coding workflow. The skills cover key areas including search application development, log and trace investigation, document processing, and cloud deployment to Amazon OpenSearch Service and Serverless. A dedicated Search skill can handle index creation, ML model registration via Amazon Bedrock, and retrieval strategy selection — all from a single prompt — while a Logs skill automates root cause analysis by querying log data and correlating distributed traces. Cloud and Ingest skills round out the toolkit by managing deployment and document ingestion pipelines, keeping developers entirely within their IDE throughout the process.

CloakDB: Open-Source Python Tool Anonymizes SQL Dumps While Preserving Foreign Keys

A developer has released CloakDB, an open-source Python tool designed to anonymize relational SQL database dumps without breaking foreign-key relationships. The tool uses deterministic pseudonymization, ensuring the same source value maps consistently across all tables, so relational integrity is maintained after anonymization. CloakDB processes dumps as a streaming pipeline to avoid loading entire datasets into memory, making it practical for large databases. It can detect potential PII including email addresses, phone numbers, credit card numbers, and IP addresses, and offers a scan-and-preview workflow before any changes are applied. The project is publicly available on GitHub, and the developer is seeking feedback from those who have worked with anonymizing production database snapshots for development or testing purposes.

Tata Motors rebrands itself to chase India’s dreams

Keiki

Discussion | Link

Nepal floods: Nearly 300 Indians missing; MEA sets up special control room

How One Dev Team Stopped Their AI Instruction File From Ballooning to 548 KB

A developer running an autonomous AI publishing pipeline shared how their agent's instruction file, CLAUDE.md, swelled to 548 KB after every incident and owner directive added a new rule with no deletions. The bloat caused the agent to conflate current rules with outdated annotations, undermining reliability. The team addressed this through three mechanical controls: a hard 45 KB file size cap enforced at the commit stage, splitting content into skill and reference files that load only when relevant, and a policy requiring old rules to be deleted in the same commit that introduces replacements. History is preserved in an archived version and a changelog rather than inline in the active file. The post closes as an open question, inviting other developers to share how they manage file growth, handle procedures outside the main file, and prevent personal preferences from becoming permanent rules in multi-contributor setups.

Jellyfish invasion triggers partial shutdown of French nuclear plant for second year

A jellyfish influx has forced a partial shutdown of the Gravelines nuclear power station in northern France. This marks the second consecutive year that jellyfish have disrupted operations at the facility. The recurring issue highlights the vulnerability of coastal power plants to marine wildlife interference. Authorities have not yet indicated when full operations at the plant are expected to resume.

Hollywood's Video Game Era Is Here. Will It Be Any Good?

Article URL: https://www.statsignificant.com/p/hollywoods-video-game-era-is-here Comments URL: https://news.ycombinator.com/item?id=49465784 Points: 6 # Comments: 0

Delhi-Kathmandu bus service suspended for two days

Gill clears air on Siraj's fitness, says pacer is not carrying an injury

Questions arose over Mohammed Siraj's fitness during the recent Test after he bowled at reduced pace and used a shorter run-up. Concerns deepened when Siraj landed heavily while attempting a catch in Sri Lanka's first innings. However, Indian captain Shubman Gill addressed the speculation and confirmed that Siraj is not carrying any injury. Gill indicated that the pacer simply needs time, dismissing suggestions of any physical setback.

Launching Route 53 Files

Article URL: https://www.daemonology.net/blog/2026-08-27-Launching-Route-53-Files.html Comments URL: https://news.ycombinator.com/item?id=49465732 Points: 9 # Comments: 0

New Social Platform Launches, Distances Itself From Twitter Comparisons

A new social media platform has entered the market, drawing inevitable comparisons to Twitter. Company representative Coates addressed these comparisons directly in a LinkedIn post. Coates clarified that the company is not attempting to recreate or replicate Twitter. The statement appears aimed at setting clear expectations about the platform's distinct identity and direction.

Attackers Probe SharePoint Auth Bypass and RCE Chain Flaws CVE-2026-55040 and CVE-2026-63520

Security researchers have observed active exploitation attempts targeting two high-severity Microsoft SharePoint vulnerabilities, CVE-2026-55040 and CVE-2026-63520, which together form a potential authentication bypass to remote code execution chain. Honeypot data confirmed that unauthenticated attackers are exploiting a JWT token validation flaw in CVE-2026-55040 to impersonate SharePoint users or administrators without any user interaction. Following the authentication bypass, attackers were seen enumerating management functions and probing Business Data Catalog endpoints linked to the second vulnerability, CVE-2026-63520. As of the time of observation, successful remote code execution has not been confirmed, though the risk remains high for internet-exposed on-premises SharePoint servers. Microsoft has issued security updates, and administrators are advised to apply patches, restrict management surfaces, and block direct internet exposure to SharePoint instances.

The N+1 Query Problem: How Lazy Database Calls Silently Slow Your App

The N+1 query problem is a common database performance issue where an application fires one initial query to fetch a list of items, then executes a separate query for every individual item to retrieve related data. This pattern creates excessive network overhead, causing response times to worsen significantly as data volume grows. A list of 50 blog posts, for example, could trigger 51 database calls just to render one page, straining server CPU and exhausting connection limits in production. The problem frequently arises when developers use Object-Relational Mapping tools that 'lazily' load related records only when accessed inside a loop. The fix involves 'eager loading', where all required data is fetched upfront in a single joined query, reducing dozens of round trips to just one.

Texas officer indicted on 100 felony counts after 45,000 database searches

Waymo and Zoox Test Drivers Suffered 24+ Injuries From Sudden AV Maneuvers

Test drivers working for autonomous vehicle companies Waymo and Zoox have sustained over two dozen injuries in 2024 and 2025. The injuries, including sprains, pain, and whiplash, resulted from hard braking and other sudden movements made by the self-driving vehicles. The findings come from a TechCrunch review of injury data submitted to the Occupational Safety and Health Administration (OSHA). The incidents raise safety concerns about human operators in autonomous vehicles as robotaxi services continue to expand in scale.

Dark Caracal Deploys GoCaracal Malware Using SVG Phishing and Ethereum Backup C2

Arctic Wolf Labs published research on August 26, 2026, detailing a new campaign by the threat group Dark Caracal, which distributes a Go-based malware called GoCaracal through malicious SVG files disguised as Spanish-language financial and tax documents. Victims are lured via phishing emails into opening SVGs that redirect them through URL shorteners to attacker-controlled sites, where a lightweight GoCaracal executable is delivered inside a 7-Zip archive. Once executed, the malware collects host data, establishes encrypted C2 communication, and deploys an extended build alongside the Delphi-loaded Bandook trojan, enabling browser credential theft, keylogging, SOCKS5 proxying, and WebRTC remote desktop access. Notably, if the primary command-and-control server becomes unreachable, the malware retrieves a backup C2 address stored in an Ethereum smart contract via JSON-RPC calls, making takedown efforts significantly harder. Defenders are advised to block SVG and archive attachments at mail gateways, restrict unauthorized executables, and filter outbound Ethereum JSON-RPC traffic to counter this threat.