Tamil Nadu man's 97 RTI petitions on ex-partner rejected by information commission

An information commissioner in Tamil Nadu rejected 97 Right to Information petitions containing 1,887 questions filed by a man from Villupuram. The petitions were reportedly connected to his former girlfriend. The appellant, A Santhosh, appeared in person before the state information commission on Tuesday to present his arguments. Commissioner V P R Elamparithi dismissed the petitions and issued a stern warning to him.

Wisconsin Reports Measles Death of Infant, First Such Death in Over 35 Years

Wisconsin health officials have reported the death of a baby from measles, marking the state's first measles death in more than 35 years. The development comes as public health experts prepare to decide next week whether the United States has lost its measles elimination status. Measles was declared eliminated in the US in 2000, and losing that status would signal sustained domestic transmission of the virus. The infant's death underscores the serious risks the disease poses, particularly to very young children. Further details on the case are limited in the source material available for this summary.

Mbappe's Mao remarks spark backlash in China despite Real Madrid and LaLiga apology

Kylian Mbappe's comments referencing Mao Zedong have drawn strong criticism in China and put his sponsorship relationships there at risk. Real Madrid and LaLiga have both issued apologies to the Chinese public in response. Several Chinese companies have cut ties with the player and suspended LaLiga broadcasts. Discussions between Chinese officials and Spanish football bodies are ongoing in an effort to resolve the matter.

PHP Session Upload Progress Advisory: CVE-2026-115560 Mitigation and Scope

PHP published an informational notice on October 23, 2026, about CVE-2026-115560, which applies only when the session serialize handler is set to php_binary or php_serialize and then changed at runtime to php before session_start() with session upload progress enabled. PHP describes remote code execution through this path as unlikely and recommends disabling upload progress until the next regular bugfix release, while noting that applications that never change the handler at runtime can keep it enabled. A full advisory is promised, but no complete list of affected versions or CVSS score has been published yet, and cPanel has said affected versions remain unknown. Red Hat states the recommended mitigation is fully protective and gives guidance for enforcing it in FPM and Apache. A ZoomEye search for app="PHP" returned about 111 million PHP fingerprint matches, which reflects general PHP deployment rather than confirmed vulnerable systems.

AegisKernel Launches as Zero-Trust POSIX Runtime for AI Agents, Claiming Sub-0.016ms Latency

A developer has introduced AegisKernel, a zero-trust runtime built on POSIX interfaces and designed for AI agents, as shared on Hacker News. The project is described as operating with latency under 0.016 milliseconds. The announcement was posted as a Show HN submission, which invites community feedback on new projects. At the time of the source listing, the post had 4 points and no comments. The article text provided contains only the project link and discussion metadata, so the claimed performance figure has not been independently verified.

Timeouts Are Not Failed Bookings: Designing Duplicate-Safe AI Actions

A DEV Community article argues that an AI assistant should not assume a booking failed just because a request timed out, since the service may have already saved it. It recommends treating each booking as one durable operation with a unique identifier that excludes private customer data. The author proposes a state model (Prepared, Submitted, Confirmed, Uncertain, Escalated) that separates confirmed failures from unknown outcomes. Examples draw on Google Calendar's client-supplied event IDs and Stripe's idempotency keys, with a warning that each provider's documented guarantees must be checked. The piece advises verifying uncertain writes via supported read paths and escalating ambiguous cases to a person rather than creating duplicates.

Why Email and Phone Normalization Can Go Wrong in Contact Data

A contact lookup can fail when formatting differs, such as spaces in a phone number, and aggressive cleaning may then corrupt valid identifiers. The article stresses that normalization produces a consistent representation, while validation only checks structure and neither proves a person owns an address or number. Email handling should follow a documented domain policy, since providers differ on dots, plus-addressing, and letter case, and stripping plus suffixes can merge identifiers that should stay distinct. Phone numbers without country context are ambiguous, so the guidance is to capture country explicitly, use a maintained parsing library, and keep extensions separate. Original inputs should be retained only under access controls, and uncertain values should trigger review rather than silent guessing.

Safer JSON Snapshot Updates Use a Temporary File Before Replacement

A technical write-up describes how a small local job can avoid corrupting its saved JSON state. Opening the destination file directly erases the prior result before serialization completes, so a mid-write failure can leave readers with a partial snapshot. The proposed approach writes to a temporary file in the same directory, flushes and syncs it, then replaces the original. Three local tests on synthetic files confirmed that successful writes, serialization errors, and replacement failures all leave the previous data intact. The author notes the helper lacks version checks or a writer lock, so concurrent writers could still overwrite each other.

Anti-AI sentiment emerges as a dealbreaker on San Francisco dating apps

After moving to San Francisco last year, 25-year-old analyst Irene began using dating apps to meet people and explore her new city. She noticed that some users on Hinge explicitly list opposition to AI as a value on their profiles. Those who do so are often in fields such as the arts, nursing, or graphic design. Irene said she saw several such profiles within minutes of swiping, suggesting the sentiment is common. The report highlights AI as an emerging point of personal incompatibility in online dating.

PyLings: Open-Source Project Teaches Python Through Solving Exercises

A new GitHub project called PyLings has been shared on Hacker News, offering a hands-on way to learn Python. The tool is built around solving small exercises rather than passive reading. The project is hosted at github.com/thesayfulla/pylings. It gained five points on Hacker News but had not yet drawn any comments at the time of posting. The source material provides no further details about its features, authors, or intended audience.

Using VPC Endpoints Instead of NAT Gateways to Cut AWS Traffic Costs

Workloads in private subnets often send traffic to services like S3, ECR, and CloudWatch through a NAT Gateway, which can incur unexpected charges. NAT Gateways bill both an hourly rate and a per-GB data processing fee, and these costs grow when traffic is destined for AWS services. VPC endpoints let resources reach supported services without passing through the NAT Gateway. Gateway endpoints for S3 and DynamoDB carry no additional hourly or data charges, while interface endpoints for services such as ECR and CloudWatch do incur hourly and data fees, so their cost should be compared first. A NAT Gateway may still be needed for other outbound traffic, so the aim is to identify suitable traffic and weigh costs before changing the design.

Silent Row Loss: Pinning an Adversarial Test Corpus for Data Import Pipelines

Broken data imports often fail silently, reporting success while dropping rows or corrupting values. The article argues the durable defense is a corpus of adversarial fixtures that pins what a parser must handle, paired with a gate that fails when coverage shrinks. It identifies four recurring bug types: row loss from quoted newlines, type coercion of mixed number formats, order dependency from index-based mapping, and encoding drift from byte order marks. Each fixture should carry a manifest with a realistic rationale, exact expected outcomes including warning codes, and a hash to make byte-level edits visible in review. The author notes that drafting such fixtures is well suited to inexpensive generative models, while human reviewers must still own the corpus. The piece also includes a product disclosure about an open-source model access project.

Sailor Killed as Missile Strikes Oil Tanker in Persian Gulf

A sailor was killed after a missile attack hit the Marshall Islands-flagged tanker Velos Sapphire in the Persian Gulf. The vessel was heading to the Bahraini port of Sitra and was not carrying any cargo at the time. The attack occurred early on Thursday, according to a statement from Velos Tankers. The company's statement is the source of the details provided about the incident.

Jason Reding Quinones, prosecutor in Trump probes, resigns; third after GOP loses Congress

Five Anti-Patterns That Make Free Servers Look Production-Ready

Free hosting removes the cost that once forced careful engineering decisions, so apps can seem ready for production when they are not. The article identifies five recurring shortcuts, each with a symptom, a root cause, and a low-cost fix. These include relying on local disk storage without a persistence policy, hardcoding API keys in public code, and reporting a healthy status even when dependencies are misconfigured. It also flags blind retry loops that repeat permanent errors and tests that depend on a live provider's uptime. For each problem, the author suggests practical remedies such as idempotent seeding, startup environment checks, layered health states, classified retries, and recorded fixtures for replay.

Meghan Markle's father arrested over alleged possession of child sexual abuse material

Thomas Markle, the father of Meghan Markle, has reportedly been arrested on charges of possessing child sexual abuse material. The arrest was carried out by authorities, though the details provided in the source article are limited. Investigators have not been quoted in the report explaining the full circumstances of the case. The matter is ongoing, and further details about any formal charges or proceedings may emerge as the case develops.

Mistral's free AI model raises questions about how long open models stay free

In late October, French AI company Mistral released one of the largest AI models ever made as a free download, trained on nearly four thousand NVIDIA chips. The article examines how companies that give away AI models make money, noting that training costs are very high and that Mistral earns revenue from API access, a chat subscription, enterprise deals, and licences for hosting providers. Hosts such as Fireworks profit by running free models on their own hardware and selling access to apps, and the article points out that model licences charge only those who resell the model. Larger firms like Alibaba and Meta, by contrast, earn money from cloud services and advertising rather than model access. The piece also notes that some free models are not free immediately, since Mistral charged for access before the weights were published.

Redshift Serverless default base capacity was inflating one client's AWS bill by about $2,700 a month

A client who launched a new Amazon Redshift Serverless workgroup saw its Redshift charges come in at nearly four times the amount it had budgeted. The cause was the default base capacity of 128 RPUs that the console assigned at creation, which runs continuously whether or not queries are being executed. The article explains that RPUs are billed per second with a 60-second minimum, and that base capacity is adjustable within set steps tied to storage limits. It recommends reviewing system usage views over a representative week before changing the setting. Lowering the base capacity via the AWS CLI, or using AI-driven scaling with a price-performance target, is presented as a way to control costs for spiky workloads.

AWS KMS Adds ML-KEM, Bringing Post-Quantum Key Exchange to Production Infrastructure

On October 26, Amazon Web Services added ML-KEM to its Key Management Service, letting customers create keys for the key encapsulation mechanism standardized by NIST as FIPS 203 in 2024. All three parameter sets, ML-KEM-512, -768, and -1024, are supported, with private keys kept inside hardware security modules validated to FIPS 140-3 Level 3. The feature is available in most KMS regions but not in Bahrain, the United Arab Emirates, or China, and AWS has not disclosed pricing, adoption figures, or performance data. The move matters because it protects against harvest-now, decrypt-later attacks by letting organizations use post-quantum key exchange within infrastructure they already rely on. The announcement follows earlier AWS post-quantum steps, including hybrid protection for KMS connections in 2025 and ML-DSA signing support.

Wie man mit Python prüft, ob geschwärzter Text in einem PDF tatsächlich entfernt wurde

Ein geschwärztes PDF kann auf verschiedene Weise scheitern, etwa wenn ein schwarzes Rechteck nur als Annotation darübergelegt wird oder Schwärzungen zwar markiert, aber nie angewendet wurden. Der Autor erzeugte sieben Versionen desselben Formulars und prüfte sie mit drei Text-Extraktoren, einem Scan aller Streams und den Metadaten. Dabei zeigte sich, dass die sichtbare Schwärzung die Daten im Textinhalt oft nicht entfernt, weil Extraktoren die Textoperatoren statt der Pixel lesen. Eine einfache Suche mit grep reicht wegen Kompression und Hex-Kodierung nicht aus, daher braucht es eine Entpackung der Streams und eine echte Textextraktion. Die Ergebnisse zeigen, dass nur bestimmte Bereinigungsschritte die Kontonummer und den Autorennamen zuverlässig entfernen.