How to Build Secure GitHub Actions Workflows with Least-Privilege Principles

GitHub Actions functions as an event-driven automation system that also manages compute resources and credentials, making security a central design concern. Workflows triggered by pull requests sit on a trust boundary, as branch names, commit content, and third-party action outputs can all be attacker-controlled. Experts recommend scoping token permissions explicitly to each job, using OpenID Connect for short-lived cloud credentials instead of long-lived secrets, and pinning third-party actions to immutable commit SHAs. Build and deployment stages should be kept separate, with the same verified artifact promoted across environments rather than rebuilt each time. Applying concurrency controls, using deterministic dependency installation, and treating logs as potential data-exfiltration risks are also key practices for hardening CI/CD pipelines.

Hayden says Pakistan cricket's persistent chaos wastes its natural talent

Former Australian opener Matthew Hayden has offered a candid assessment of the state of Pakistan cricket, describing it as perpetually unstable. He argued that the ongoing turmoil within the system makes it difficult for players to deliver consistent performances. Despite acknowledging Pakistan's abundant natural cricketing talent, Hayden believes structural issues prevent the country from realising its full potential. He suggested that unless the chaos is addressed, Pakistan will struggle to establish itself as a dominant force in world cricket.

Deploy to AWS EC2 via GitHub Actions Using SSM Instead of SSH Keys

A developer has published an open-source GitHub Action, ankurk91/aws-ssm-run-command-action, that enables EC2 deployments without exposing port 22 or storing long-lived SSH keys in repository secrets. The solution leverages AWS Systems Manager Run Command, which works through an outbound connection from the SSM Agent on the instance, requiring no inbound ports or public IP address. Authentication is handled via short-lived IAM credentials through OIDC, and all commands are automatically logged in CloudTrail and SSM command history. A private S3 bucket is used to store full command output, bypassing SSM's roughly 24 KB inline output limit that caused truncated logs in earlier tools. The author noted that existing marketplace actions either failed to check command success, swallowed remote exit codes, or had been abandoned, prompting the creation of this new action.

Indian Firm Tracks 24,000 Earnings Call Promises to See If Companies Keep Their Word

A data team has built a structured database of 24,328 forward commitments made by 1,648 Indian listed companies, drawn from over 8,000 parsed earnings-call transcripts. Each commitment — covering targets like margins, growth rates, or plant commissions — is tracked across subsequent calls to determine whether it was fulfilled, revised, or simply dropped. The team found that the hardest engineering challenge was not extracting promises from transcripts, but handling outcomes that never materialise, a state they label 'ghosted'. Their verdict system uses twelve outcome categories, and they warn that any published 'kept rate' is meaningless without explicitly stating which categories were counted. Using their own defined mapping, they calculate that 57.8% of sufficiently aged commitments were ultimately kept.

Best Alexa Smart Speakers in 2026: Top Picks From Echo Dot to Echo Studio

A tech reviewer has tested and ranked the best Amazon Alexa-compatible smart speakers available in 2026. The roundup covers a range of devices, from the compact and popular Echo Dot to the premium Echo Studio. The selection focuses on speakers that support voice interaction with Amazon's Alexa assistant. The guide aims to help consumers choose the right Alexa speaker based on their needs and preferences.

Short Film 'Road Rage' Casts a Robotaxi as the Villain in a San Francisco Chase

A planned short film called 'Road Rage' imagines a San Francisco car chase in which the antagonist is an autonomous vehicle. The project is currently seeking $40,000 in funding through Kickstarter to move into production. The film taps into growing public unease around self-driving cars, which have become symbols of AI-driven job loss, Big Tech surveillance, and machine-led decision-making. Autonomous vehicles have shifted from futuristic novelties to everyday fixtures in several U.S. cities, making them a natural fit for the villain role. The concept reflects a broader cultural moment in which robotaxis are increasingly viewed with suspicion rather than wonder.

How Figma's Variant Inspector Can Catch Pluralization Bugs Before Shipping

Pluralization errors in localized apps occur when developers translate text strings entry-by-entry without accounting for all grammatical plural categories a target language requires. While English uses only two plural forms (one and other), languages like Polish require three and Arabic requires six, as defined by Unicode CLDR plural rules. A practical walkthrough demonstrates how Figma's Variant Inspector and its AI-generate feature can surface missing plural entries — such as Polish's 'few' category — directly within the design stage. The process involves adding realistic sample values to text layers and using the plugin's translate function to check whether all required plural forms are present before handoff. Catching these gaps in design rather than post-QA prevents broken UI strings from reaching users in production.

Sanders Bill Seeks Jail Time for AI CEOs, Bans Superintelligent Systems

US Senator Bernie Sanders has introduced new legislation targeting leading artificial intelligence companies, including OpenAI and Anthropic. The bill proposes criminal penalties, including potential imprisonment, for the chief executives of such firms. Sanders is calling for a permanent prohibition on the development of AI systems that surpass human-level intelligence. The senator has also reiterated his earlier demand for a halt on the advancement of powerful AI technologies. The move reflects growing legislative concern in the US over the unchecked pace of AI development.

NIA Court Convicts All 10 Accused in 2013 Jhiram Valley Maoist Attack

A special NIA court has found all ten accused guilty in connection with the 2013 Jhiram Valley Maoist attack in Chhattisgarh's Bastar district. The deadly ambush had claimed 29 lives, among them several senior Congress leaders. The court recorded testimonies from 101 witnesses over the course of the trial. Sentencing has been scheduled for September 16. Defence lawyers have announced their intention to challenge the conviction before a higher court.

TCS HyperVault bets ₹70,000 cr on Hyderabad AI hub

Tata-owned JLR to cut 4,000 jobs amid pressures

MindMapVault builds real-time collaboration without server ever reading encrypted data

MindMapVault, an end-to-end encrypted mind mapping tool, encrypts all data in the browser using a key derived from the user's password, meaning the server only ever stores ciphertext. This design made real-time multi-user collaboration unusually difficult, since standard tools like Yjs require the server to parse document updates — which would compromise encryption. The team replaced the standard sync protocol with a custom one where every message is an opaque encrypted payload the server simply logs and relays without interpreting. Client-side compaction handles storage growth: a connected client periodically sends an encrypted snapshot that replaces the update log, effectively letting the server perform garbage collection on data it cannot read. The system runs on Cloudflare Durable Objects, with one globally unique instance per map, eliminating the need for Redis, lock services, or sticky sessions.

Developer Documents 5 Cross-Platform Audio Bugs Found Building Rust-Tauri Desktop App

A developer building SyntaxCue, a real-time call-assistance desktop app, has shared five notable bugs encountered while implementing system audio capture across macOS and Windows using Rust and Tauri. On macOS, the CoreAudio Process Tap API is Swift-only, requiring a Swift sidecar process to stream raw audio to Rust via stdout. A key bug arose because Tauri's shell plugin reads stdout as text lines by default, causing silent audio — which produces no newline characters — to stall the pipe indefinitely until a single flag, set_raw_out(true), resolved it. The developer also noted that macOS and Windows fail in fundamentally different ways: macOS silently returns empty audio despite granting permissions, while Windows simply omits data without any explicit error signal. The writeup concludes that cross-platform audio capture involves two distinct failure surfaces rather than a single unified API with platform-specific wrappers.

Four Practical Lessons From a Year of Running AI Agents on Routine Tasks

A developer spent a year integrating AI agents into mundane workflows such as email triage, deployment checks, and content pipelines, documenting operational insights rarely discussed online. They found that most agent failures stemmed from ambiguous task briefs rather than model settings, making clear goal and constraint definitions the top priority. A simple append-only log file outperformed complex memory systems, offering transparency for both the agent and human reviewers. Strict isolation — separate browser profiles, tokens, and working directories — proved essential after an agent accidentally modified the wrong folder. Finally, every automated task was paired with an independent verification step, such as a page check or row count, to confirm actual success rather than relying on the agent's self-reported output.

8th CPC: Can Level 7 employees get Rs 58K pension?

GSoC Developer Adds Direct PACS Server Integration to InVesalius Medical Imaging Tool

A Google Summer of Code contributor spent three months building PACS integration for InVesalius, a Brazilian open-source medical imaging platform. Previously, the software lacked native support for connecting to hospital DICOM servers, requiring users to rely on external tools for data exchange. The contributor used Python libraries pynetdicom and pydicom to implement network-based querying, retrieval, and storage of medical images directly within the application. A new user interface was also developed, offering search, multi-level download options, duplicate detection, and graceful error handling with automatic fallback mechanisms. Key technical challenges included managing download cancellation, preventing UI freezes during network queries, and reliably switching between DICOM retrieval methods when needed.

NYC Mayor Mamdani Partners With Influencers to Spread City Messaging

New York City Mayor Zohran Mamdani has been collaborating with social media content creators to communicate with residents. The mayor's office has engaged hundreds of influencers as part of this outreach strategy. The initiative aims to promote the administration's key priorities through digital platforms. By leveraging social media, the office seeks to reach New Yorkers who may not follow traditional news channels.

Goa's Kritadnyata Nidhi Scheme Offers Artists Up to Rs 25,000 for Disaster Home Repairs

The Goa government's Kritadnyata Nidhi scheme provides financial assistance of up to Rs 25,000 to artists whose homes are damaged by natural calamities. To be eligible, applicants must be Goan citizens aged 50 or above with an annual family income under Rs 2 lakh. The scheme goes beyond housing support, also covering medical needs and other artist welfare services. In special circumstances, the age eligibility criterion can be relaxed for those with specific needs. The initiative reflects the state's broader effort to safeguard the livelihoods and well-being of its artistic community.

LendingChain Launches Zero-Interest Solana Micro-Lending Platform for Emerging Economies

A developer has built LendingChain, a decentralized micro-lending platform on Solana Devnet that offers zero-interest loans ranging from $5 to $25, submitted as part of a DEV Community Weekend Challenge themed around generosity. The platform targets grassroots entrepreneurs in emerging economies, with a focus on clean energy, sustainable agriculture, indigenous women-led crafts, and tech education. Unlike commercial microfinance institutions that charge 25–45% annual interest, LendingChain routes capital directly into non-custodial Solana escrows, keeping costs near zero through Solana's sub-cent transaction fees. Repaid loans are returned to lenders for re-lending in a cycle the project calls the 'Generosity Multiplier,' aiming to maximize the impact of each dollar contributed. The platform is built using Astro, React, Firebase Firestore for real-time state, and Privy for embedded wallet authentication, and is currently live on Firebase Hosting.

Iraq faces acute fuel shortages as Hormuz tensions disrupt tanker imports

Iraq is experiencing severe petrol shortages, with long vehicle queues forming at fuel stations across the country. Regional conflicts are disrupting tanker movement through the Strait of Hormuz, a critical route for the country's fuel imports. As a member of OPEC, Iraq still depends heavily on imported fuel to bridge gaps in its domestic production capacity. The supply disruptions have triggered panic buying, further straining an already stretched fuel supply chain. In response, Iraqi authorities are actively working to secure additional fuel shipments to stabilize reserves.