'Suddhikaran another name for untouchability': Rahul targets BJP, RSS

A Practical Introduction to x86_64 Assembly Language for Binary Analysis

A technical primer on x86_64 assembly language covers the architecture's 16 general-purpose 64-bit registers, each divisible into 32-bit, 16-bit, and 8-bit sub-registers for flexible data manipulation. Special registers such as RIP and RFLAGS control program flow and track arithmetic status flags, while SIMD registers like XMM and YMM handle floating-point and vector operations. The guide explains how the x86_64 stack operates on a LIFO basis, growing downward in memory as the stack pointer RSP adjusts with each push or pop. Key instructions including MOV, LEA, MOVZX, MOVSX, and conditional moves are introduced with examples to illustrate their roles in data transfer and arithmetic. The article is framed as foundational preparation for studying crackmes and reverse engineering binaries.

Nepal faces $4–5 billion rebuild cost after floods kill over 600

Nepal's finance minister has estimated that reconstruction following recent catastrophic floods will cost between four and five billion dollars, roughly a tenth of the country's economy. The floods killed more than 600 people and left thousands more missing. Critical infrastructure including towns, bridges, roads, and hydropower stations suffered severe damage. Search and rescue operations are ongoing, though bad weather has hampered progress. India has stepped in with significant relief assistance for the affected areas.

Bihar marksheets to drop ‘fail’ for Class 10, 12

agent-harness-defense v0.2.0 adds dual-lattice IFC to block LLM privilege escalation

Open-source library agent-harness-defense has released version 0.2.0, introducing a dual-lattice information-flow control engine designed to prevent instruction-privilege escalation in LLM coding agents. The tool acts as an admission layer, evaluating a declared action plan before any change is applied, rather than monitoring a live agent at runtime. Its decision core tracks two independent axes — confidentiality and integrity — so that any action depending on untrusted data sources, such as repository text or tool output, is automatically denied. The release includes an independently reproduced audit that uncovered and fixed a real defect from v0.1, where source labels were incorrectly assigned, allowing escalation to go undetected. Developers note a significant usability gap: the library requires callers to supply an explicit plan of agent actions, and no integration examples for frameworks like LangChain currently exist.

Prompt Fix, Not Code, Rescued an AI Debate Engine from Fake Disagreements

A developer building AdversarialDebate, an open-source multi-agent debate engine, discovered that despite solid architecture, the system was producing hollow debates where AI models simply acknowledged objections without genuinely engaging. The root cause was a poorly designed prompt that left models a low-effort escape route, resulting in an 89% 'theater rate' and near-zero concessions in early tests. A single prompt rewrite eliminated the problem, dropping theater rates to 0.2% across 411 full-corpus debates and generating over 8,800 genuine concessions. Version 0.2.1, released on August 28, 2026, further hardened the pipeline by adding row-count invariant assertions at five pipeline seams to prevent silent data loss. The update also introduced the first-ever recall measurements for the tool, reporting a 1.7–3.4% missed-issue rate, alongside 55 new unit tests.

Developer simulates LAN attack on his own Mac and uncovers flaw in his security app

A developer used a ThinkPad running Arch Linux to simulate a rogue IoT device attacking his MacBook over a shared home network, with no special privileges or malware involved. An initial port scan revealed that while most ports were filtered, two development servers and macOS ControlCenter ports were still visible to the network. The experiment also exposed common developer mistakes such as binding services to 0.0.0.0 and leaving Redis or Docker ports unauthenticated on a LAN. During ARP spoofing tests, the developer discovered a gap in RoamSwitch, his own network-defense app, which relaxes firewall rules on trusted home networks, leaving ARP and open-port threats unblocked. The findings prompted him to decouple detection logic from protection levels in RoamSwitch, so monitoring runs continuously regardless of network trust status.

Social Engineering Remains the Most Overlooked Gap in Cybersecurity

Security expert Serguey Shinder argues that technical defenses like firewalls and patches do little to stop attackers who manipulate employees into granting access voluntarily. Most real-world intrusions begin not with sophisticated exploits but with convincing emails impersonating colleagues, vendors, or IT staff. Shinder warns that organizations often undermine their own security culture by discouraging the friction that comes with verifying suspicious requests. He emphasizes that employees who report mistakes quickly are far more valuable than those who stay silent out of fear of blame. While technical measures like multi-factor authentication remain essential, building a workforce that feels safe being skeptical is the most effective defense against social engineering.

Satya Nadella calls empathy the hardest yet most vital skill for leaders

Microsoft CEO Satya Nadella has identified empathy as the most challenging and essential skill for effective leadership. He argues that empathy enables leaders to build stronger connections with their teams and better understand customer needs. Nadella's personal life, particularly his experience raising his son Zain, has deeply influenced this leadership philosophy. He also credits cricket and team sports with teaching him broader lessons that apply to both professional and personal contexts.

SSRF Vulnerability Found in AI SDK's OAuth Metadata Discovery Flow

A security researcher discovered a server-side request forgery (SSRF) vulnerability in a popular AI SDK used to handle authentication for MCP servers, which allow AI applications to connect to external tools and data sources. The flaw existed in the SDK's OAuth metadata discovery process, where a developer-supplied server URL is fetched without any validation. While the codebase included a URL-validation function applied to credential submission endpoints, it was never called during the metadata discovery chain. A proof-of-concept test confirmed the SDK would connect to internal addresses, including 127.0.0.1, without restriction. The gap highlights how partial security controls can leave critical code paths exposed, especially in fast-moving AI tooling development.

Maharashtra Teen Dies by Suicide After Losing Money in Online Gaming

A teenager identified as Rohit Sahebrao Dhangar died by suicide after reportedly losing money through online gaming. Before his death, he sent a message to his sister asking her not to leave their parents alone. He also sent a video message to a friend in which he disclosed his financial losses from online gaming. Preliminary investigations have confirmed the existence of these messages. Authorities are looking into the circumstances surrounding the incident.

Ignored Alerts Erode Team Trust and Slow Incident Response, Engineer Warns

Software engineer Serguey Shinder, writing on DEV Community, argues that alerts which fire without requiring action are not just annoying but actively harmful to engineering teams. He contends that repeated false alarms cause alert fatigue, conditioning teams to dismiss notifications and increasing the risk of missing a genuinely critical issue. Shinder proposes a simple test for every alert: if it does not demand immediate human action, it belongs on a dashboard rather than as a live notification. He calls for regular pruning of alert configurations, including retiring stale alerts and retuning thresholds set for older system states. According to Shinder, an alerting system's value depends entirely on the trust teams place in it, and every unnecessary notification chips away at that trust.

Ex-White House staffer to pay $172,000 for betting on Trump speeches

A former White House teleprompter operator has been ordered to pay $172,000 in penalties related to illegal sports betting activity. The staffer used his privileged advance knowledge of President Trump's speeches to place bets on their content or timing. His insider access gave him an unfair advantage unavailable to the general public. The case highlights concerns about the misuse of sensitive government information for personal financial gain.

Thieves Steal Cash From Safe Swept Away by Nepal Floods

Devastating floods recently struck parts of Nepal, causing widespread destruction and casualties. Amid the chaos, a cash-filled safe was carried away by the floodwaters. Opportunistic thieves located the displaced safe and stole a significant sum of money from it. The incident has drawn attention as an unusual crime unfolding against the backdrop of a natural disaster.

Why 'Unknown' Must Be a Payment State, Not Just a Handled Error

A technical analysis highlights a critical flaw in how payment systems handle HTTP timeouts: writing 'failed' to a database after a timeout is inaccurate, because the payment provider may have already processed the charge. When a request times out, there are three indistinguishable outcomes — the request never arrived, it arrived and succeeded, or it arrived and the response was lost — making any definitive status claim unreliable. The recommended fix is to treat 'unknown' as a distinct, durable state in the payment status enum rather than collapsing ambiguous outcomes into a binary success-or-failure model. The article also distinguishes between 'confirmed' (provider acknowledgement via API) and 'settled' (verified via bank statement), arguing that stopping at confirmed substitutes a promise for actual evidence. Properly encoding these states in the database schema is presented as essential for accurate reconciliation and preventing duplicate charges or erroneous refunds.

Construction Workers Dig Up $10M Gold Haul During Belgium Sewer Project

Construction workers in Belgium made a remarkable discovery while excavating trenches for a new sewage system. The treasure, valued at over ten million dollars, comprised gold bars and coins. Authorities have since secured the find in a high-security federal vault. Under Belgian law, rightful owners have a five-year period in which to come forward and claim the treasure.

Next.js Auth Checks Inside Suspense Boundaries Can Leak UI to Logged-Out Users

A subtle timing flaw in Next.js App Router can expose protected dashboard UI to unauthenticated users when auth checks are placed inside Suspense boundaries. Because React begins streaming layout elements and skeleton fallbacks before an async session check resolves, a logged-out visitor may briefly see navigation structure and UI components before a redirect fires. The vulnerability does not expose actual user data, but it can reveal app structure, feature names, or navigation sections intended to remain private. The fix is straightforward: move the authentication check above and outside any Suspense boundary so the redirect decision is made before streaming begins. This ensures nothing from the protected route reaches the browser until authorization has been fully resolved.

How to Route Pingvera Monitoring Alerts to a Help Desk Using Webhooks

A best-practice guide outlines how to integrate Pingvera monitoring events with help desk systems using secure HTTPS webhooks. The approach recommends creating a single incident ticket per confirmed failure, updating it as conditions change, and closing it only after verified recovery — avoiding duplicate tickets from retried probes. Key implementation steps include authenticating and persisting raw events before acknowledgment, processing them asynchronously, deduplicating by delivery ID, and mapping incidents to tickets through a stable internal schema. Security measures such as HMAC signature verification, replay detection, constant-time comparison, and secret management are strongly emphasized. The guide also stresses the need to monitor the integration pipeline itself, maintain a dead-letter queue, and keep a secondary alerting route for critical failures.

Check PM Modi's agenda for 4-day Central Asia visit

Why Real Estate Feasibility Analysis Needs a Robust Data Pipeline

Real estate feasibility analysis depends not just on financial formulas but on the quality and structure of the data feeding those models. Project inputs typically arrive from scattered sources — property records, spreadsheets, lender documents, and market reports — making manual data transfer error-prone and difficult to scale. A reliable feasibility platform requires a dedicated data pipeline that handles ingestion, normalization, validation, and versioning before any values reach the financial calculation engine. Because inputs can arrive in formats ranging from structured APIs to unstructured PDFs, the pipeline must standardize differing units, currencies, and data representations into a consistent internal structure. Without this foundation, applying automation or AI to feasibility workflows risks accelerating an already unreliable process rather than improving it.