MC Project

Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain

support@mycoding.id (Putri Silvia) — Tue, 13 Oct 2026 19:37:45 +0700

The final sequence blended a V8 compiler bug, an animated-WebP decoder bug, and a memory-safety bug in Crashpad. Together they turned JavaScript implementation in an average Chrome tab into code implementation exterior the renderer sandbox.

Google awarded this sequence the archetypal $250,000 Chrome full-chain reward under the VRP rules introduced in April 2026. Our distinct announcement covers the award and what it method for XBOW. This article is concerning the exploit: the boundaries it crossed, the base logic of all vulnerability, and the interfaces that connected them.

A web leaf in signed Chrome Beta launches Calculator via XBOW’s complete sequence exploit.

One item is talking concerning speed and how insulting is accelerating and another is to cognition it archetypal hand. Pre-LLMs a Chrome complete sequence would obtain a squad of four about 6-9 months to be produced, our archetypal submission took 2 months. The awarded one? six days. The speed is challenging equal for us trying to comprehend how safety is changing.

We built the sequence in six days, from Sunday, August 2, through Friday, August 7. Rather than ask one delegate to create an utilize end to end, we divided the activity into parallel campaigns alongside narrower goals: broad exposure search, V8 recollection corruption, a V8 sandbox escape, a renderer sandbox escape, and integration. AI agents using OpenAI's gpt-5.6-sol example searched origin code, tested hypotheses, built proofs of concept, and developed utilize stages; XBOW researchers chose targets, supplied context, challenged results, redirected searches, and decided which components to join. We additionally developed backup routes and gave all phase a spotless interface, so that we could substitute one component without rebuilding the remainder of the exploit. Reconstructing use from the archived Codex logs puts the six-day run at approximately $40,000 in API charges. We volition shield the chronology and orchestration at Unprompted at the end of October; here, we concentration on the vulnerabilities and the utilize mechanics that connected them into a complete chain.

Background: V8 and Renderer Sandboxes

V8 archetypal contains JavaScript-engine misconduct inner an in-process sandbox. Most JavaScript heap objects live in a reserved 4 GiB region, and many pointers are represented as offsets inside that region. References to native objects and executable code obtain additional protection. A V8 recollection misconduct bug can hence provision an attacker extended authority inner the cage without immediately yielding native code execution. V8 describes this scheme in The V8 sandbox.

Chrome afterward contains the renderer itself inner an operating-system procedure sandbox. Even an attacker alongside native code implementation in the renderer cannot openly admission the remainder of the machine. Chromium's sandbox scheme document describes this external boundary.

The sequence traversed the two boundaries in three exposure stages:

Stage	Vulnerability	Capability gained
JavaScript engine	Maglev reused a mutable boxed figure during deoptimization	Read and compose admission throughout V8's pointer-compression cage
V8 sandbox	Animated WebP blended cached geometry alongside changed depiction bytes	One chosen native compose exterior the cage
Renderer sandbox	Crashpad treated a unsuccessful peruse from a supposedly icy renderer as a stable observation	Code implementation in the unsandboxed collision handler

The animated-WebP phase was a V8 sandbox escape, but fairly than attacking the sandbox itself we exploited a asset that the V8 sandbox deliberately does not enforce and that Blink incorrectly assumed it could trust. Finally, the utilize used an overflow in Crashpad to cross the final the external procedure border and accomplish unsandboxed code implementation on the host.

Stage 1: Mutating the Immutable

The archetypal exposure was in Maglev, V8's mid-tier optimizing compiler. To comprehend it, we need to appearance at deoptimization.

Optimized code operates under assumptions concerning the values and objects it handles. When an assumption stops being true at runtime, V8 must rebuild average JavaScript objects and continue in small specialized code. Some of those objects never existed in recollection during the optimized code was running; the compiler had represented them lone as values. Deoptimization must materialize them.

A JavaScript entity site alongside a twice depiction needs a HeapNumber whenever V8 materializes the object. The susceptible Maglev way created one old-space HeapNumber for the virtual value and stored the entity itself in the deoptimization literal array:

void BuildHeapNumber(const VirtualObject* vobject) { DCHECK_EQ(vobject->object_type(), vobj::ObjectType::kHeapNumber); ValueNode* value_node = vobject->get(offsetof(HeapNumber, value_)); come back BuildHeapNumber(value_node->Cast()->value()); } void BuildHeapNumber(Float64 number) { DirectHandle value = local_isolate_->factory()->NewHeapNumberFromBits( number.get_bits()); translation_array_builder_->StoreLiteral(GetDeoptLiteral(*value)); }

That code is from the vulnerable maglev-code-generator.cc. The another fractional of the bug was in the generic materializer. For a site marked kStoreHeapObject, it wrote the entity held by the translated slot immediately into the reconstructed owner:

if (marker == kStoreHeapObject) { DirectHandle field_value = slot->storage(); WRITE_FIELD(*object_storage, offset, *field_value); WRITE_BARRIER(*object_storage, offset, *field_value); continue; }

This is the corresponding code from translated-state.cc.

The archetypal obstacle turned a mutable entity into a literal. The second copied that object's identity, not merely its numeric value, into all reconstructed owner. With nested activations, V8 could hence create distinct JavaScript objects whose twice sectors shared one mutable HeapNumber.

That behavior violated a compiler invariant stated elsewhere in V8:

HeapNumberRef is lone created for immutable HeapNumbers.

The susceptible way made a mutable figure appearance akin exactly the kind of immutable changeless that the compiler was allowed to reuse.

For extremely ample values of “2”

The utilize used the disagreement against Array.prototype.at(). One compiler study saw a harmless indicator and approved an in-bounds access. Another study of the nominally identical changeless supplied the genuine burden offset. Changing one object's twice site could hence alter the offset used by optimized code without invalidating the before limits reasoning.

Three optimized burden functions were adequate to disclose nearby V8 pointers, regain the layout of a packed-double array, and get a citation to an attacker-described array. That forged gathering was afterward used as a bootstrap to rewrite the metadata of a genuine Uint8Array, extending average indexed admission throughout V8's complete 4 GiB cage.

Finding stable entity addresses required one additional step. The utilize stored a citation in V8's large-object area to whichever JavaScript entity it needed to locate. V8 itself updated that citation during refuse collection, so the utilize could regain a current in-cage location without pinning movable objects.

At this point, the utilize had dependable recollection admission from JavaScript throughout the V8 sandbox.

The fix

V8 removed the literal-object particular case. Virtual HeapNumbers now prosecute the average captured-object materialization path, and Maglev explicitly prevents their deduplication. Each deoptimization materializes a caller box:

vobj::ObjectType object_type = object->object_type(); DCHECK_NOT_NULL(object->allocation()); // HeapNumbers may be mutable entity fields; all materialization must // create a caller box, so they are never deduplicated. // TODO(victorgomes): Constrain which objects may merge mutable // HeapNumbers. Immutable HeapNumbers can be stored as a literal object // alternatively of a captured object. int dup_id = object_type == vobj::ObjectType::kHeapNumber ? CreateUnduplicatableId() : GetDuplicatedId(reinterpret_cast(object->allocation()));

The code is from the fixed revision. The complete place is V8 alter 8255554, and the community root-cause study is Chromium matter 547819997.

Stage 2: Two WebPs Diverged in a V8 Cage

When we went looking for V8 sandbox escapes, we made a conscious decision to evade attacking the sandbox itself. Instead, we idea a bit concerning its danger example and chose to appearance for things that were “allowed” but seemed apt to be problematic. We focused on obligations that the V8 sandbox danger example imposes on downstream consumers: namely, that all specified code must defender against the capabilities an in-cage attacker has, akin concurrent modification of in-cage objects, swaps between pointers of the identical type, etc.

The exposure we established is exactly an example of this: WebCodecs can provision an ArrayBuffer to ImageDecoder by transferring it. Under average JavaScript semantics, transfer detaches the old buffer and its views. Blink can afterward cover the assistance shop without making a copy and treat the bytes as its exclusive input.

But the V8 sandbox has a distinct danger model: formerly an attacker controls recollection inner the cage, V8 assumes that the attacker can corrupt objects and bookkeeping there. It does not commitment to create a detached ArrayBuffer semantically immutable against that attacker. Enforcing that asset would necessitate moving or copying the assistance store, or adding checks to hot paths that the sandbox was designed to avoid.

In the complete chain, the utilize used an in-cage compose supplied by the archetypal phase to eliminate a live Uint8Array perspective from its JSArrayBuffer's detach-notification chain. When ImageDecoder transferred the buffer, V8 detached the views it motionless knew about. Optimized writes through the omitted perspective remained usable. Blink believed it owned the bytes exclusively; the attacker could motionless alter them.

Getting One WebP to TOCTOU Another

That damaged ownership assumption manifested in WebP decoding as a period of inspect / period of use (TOCTOU) vulnerability.

The evidence of idea placed two same-length, independently valid animated WebP records in the identical assistance store:

WebP A described a 64-by-64 canvas. Its archetypal example was 48 pixels wide, started at x = 16, and was 64 pixels high.
ImageDecoder transferred the buffer, and its persistent demuxer cached A's example rectangle and payload location.
The living perspective replaced the bytes alongside WebP B, whose current payload decoded a complete 64-by-64 frame.
The decoder peruse compressed data from B but described the output buffer alongside the example geometry cached from A.

WEBPImageDecoder::DecodeSingleFrame() initialized the external buffer's stride and size from the cached rectangle. It afterward advanced the output pointer independently to that rectangle's top-left pixel (code):

const gfx::Rect& frame_rect = buffer.OriginalFrameRect(); if (!decoder_) { // Set up decoder_buffer_ alongside output mode if (!WebPInitDecBuffer(&decoder_buffer_)) { come back SetFailed(); } decoder_buffer_.colorspace = RGBOutputMode(); decoder_buffer_.u.RGBA.stride = Size().width() * sizeof(ImageFrame::PixelData); decoder_buffer_.u.RGBA.size = decoder_buffer_.u.RGBA.stride * frame_rect.height(); decoder_buffer_.is_external_memory = 1; decoder_ = WebPINewDecoder(&decoder_buffer_); if (!decoder_) { come back SetFailed(); } } decoder_buffer_.u.RGBA.rgba = reinterpret_cast( buffer.GetAddr(frame_rect.x(), frame_rect.y()));

The next statement passed that descriptor to WebPIUpdate().

For the ASAN reproducer, the bitmap stride was 256 bytes and the complete allocation was 16,384 bytes. GetAddr(16, 0) advanced the output pointer by 64 bytes, leaving 16,320 bytes. That was exactly adequate for A's cached rectangle:

256 * (64 - 1) + 48 * 4 = 16,320

Blink nevertheless advertised all 16,384 bytes. B's 64-pixel-wide payload hence passed libwebp's external-buffer size check:

256 * (64 - 1) + 64 * 4 = 16,384

WebPIUpdate() wrote the pixels before Blink compared the decoded dimensions alongside the cached rectangle. The decoded footprint extended 64 bytes former the native SkBitmap allocation. ASAN caught a 256-byte conversion compose starting at the archetypal byte beyond the allocation.

Both WebPs were valid on their own. The unsafe province existed lone since Blink blended A's cached geometry alongside B's current bytes.

From a heap overflow to one chosen native write

The manufacturing utilize used the identical bug alongside geometry selected for PartitionAlloc. A two-pixel example started at x = 124 on a 126-pixel canvas. The 504-byte pixel allocation and a 496-byte WebPIDecoder occupied neighboring slots in the 512-byte bucket. Advancing the output pointer by 496 bytes remaining lone eight bytes, during the decoder motionless believed it had 504.

The pixel compose replaced the live decoder's native sectors alongside pointers to two WebPDecBuffer records already staged in a native network buffer. When decode completed, the genuine WebPCopyDecBufferPixels() regular followed the false origin and destination descriptions. It copied one chosen 64-bit value to one chosen native address.

That sole compose was the complete interface between the depiction utilize and the next stage.

The fix

The archetypal landed fix set rgba, stride, and size together and constricted the advertised degree to the retained rectangle. A follow-up removed a subtler assumption: fairly than calculating what the allocation ought to contain, the decoder now takes its stride and degree from the ImageFrame bitmap itself:

const gfx::Rect& frame_rect = buffer.OriginalFrameRect(); CHECK(gfx::Rect(Size()).Contains(frame_rect)); CHECK(!frame_rect.IsEmpty()); // The top-left pixel of frame_rect. ImageFrame::PixelData* frame_rect_front = buffer.GetAddr(frame_rect.x(), frame_rect.y()); // The bottom-right pixel of frame_rect. ImageFrame::PixelData* frame_rect_back = buffer.GetAddr(frame_rect.right() - 1, frame_rect.bottom() - 1); decoder_buffer_.u.RGBA.rgba = reinterpret_cast(frame_rect_front); decoder_buffer_.u.RGBA.stride = buffer.Bitmap().rowBytes(); decoder_buffer_.u.RGBA.size = (frame_rect_back - frame_rect_front + 1) * sizeof(ImageFrame::PixelData);

The code appears in the follow-up revision. The root-cause study and ASAN reproducer are in Chromium matter 548509153. The two landed fixes are Chromium alter 8266257 and Chromium alter 8352899.

The WASM/WCP Handoff

Stage 2 produced one selected native compose exterior the V8 cage. The sequence motionless needed to rotate that compose into arbitrary native code implementation without modifying a protected code-pointer entry.

A hot WebAssembly function resolves its mark through V8's process-wide Wasm Code Pointer table. The utilize changed the writable basis used to find that array and supplied a replacement admission alongside the accurate type.

We adapted an island-hopping method from our previous complete chain. That utilize connected education fragments encoded in JIT twice constants alongside abbreviated jumps. This time, we used 13 64-bit immediates in Liftoff-generated Wasm code and a Windows loader ABI.

After WebPCopyDecBufferPixels() changed the Wasm Code Pointer array base, the next Wasm call passed the signature inspect and resolved the replacement entry. The admission pointed to a jmp rcx education in chrome.dll; RCX pointed to the archetypal education island.

Each isle contributed up to six bytes of the loader, followed by a abbreviated jump complete the compiler-generated instructions before the next island. Together, the 13 islands cast a approximately 70-byte loader. It allocated writable memory, copied the Crashpad payload, changed the mapping to executable, and called it.

Stage 3: The Renderer Refuses to Chill Out

Chrome’s Crashpad handler runs exterior the renderer sandbox. When it receives a snapshot request, it suspends the renderer and says data structures from the renderer’s location space. The handler creates ScopedProcessSuspend, which calls NtSuspendProcess(), before telling the snapshot machinery that the mark is suspended.

In the revision immediately before the fix, one of Crashpad’s remote-memory helpers, ProcessMemoryWin::ReadUpTo(), contained the following improvement path:

SIZE_T size_out = 0; BOOL achievement = ReadProcessMemory( handle_, reinterpret_cast(address), buffer, size, &size_out); if (success) come back base::checked_cast(size_out); if (GetLastError() == ERROR_PARTIAL_COPY) { // If we can not peruse the complete section, execute a abbreviated peruse of the first // leaf instead. This is necessary to assistance ReadCString(). size_t short_read = base::GetPageSize() - (address & (base::GetPageSize() - 1)); achievement = ReadProcessMemory(handle_, reinterpret_cast(address), buffer, short_read, &size_out); if (success) come back base::checked_cast(size_out); }

At archetypal glance, the error appears to be merely that short_read is not constricted to size. But the calculation was harmless under the assumption Crashpad believed it had established: that the suspended process’s location area could not change.

The fallback was intended for a peruse that starts in one readable leaf and crosses into an inaccessible page. If a petition for size bytes crosses that boundary, the figure of bytes remaining in the archetypal leaf must be smaller than size. Retrying lone those bytes hence fits in the caller’s destination buffer.

With stable leaf protections, there are three average cases:

A petition contained in a readable leaf succeeds immediately.
A petition contained in an inaccessible leaf fails again whenever retried.
A petition crossing from a readable leaf into an inaccessible leaf produces a retry shorter than the first request.

The code hence used the archetypal nonaccomplishment as evidence concerning the geometry of the origin mapping. That conclusion stopped being true whenever the renderer could alter the mapping between the two reads.

Defeating the freeze

Windows allows a thread created alongside the THREAD_CREATE_FLAGS_BYPASS_PROCESS_FREEZE emblem to continue operating throughout NtSuspendProcess(). Before requesting a snapshot, the native renderer payload created specified a thread. The utilize used flags 0x42: BYPASS_PROCESS_FREEZE together alongside SKIP_THREAD_ATTACH. Exactly why Windows has this characteristic remains a mystery, but it provides the essential assumption infringement we need current by letting us modify leaf protections in between the peruse and its retry.

While Crashpad treated the renderer as suspended, that thread often changed attacker-controlled origin pages between PAGE_NOACCESS and PAGE_READWRITE. The winning sequence was:

Crashpad issued a small peruse entirely contained inside one origin page.
The leaf was inaccessible, so ReadProcessMemory() returned ERROR_PARTIAL_COPY.
Crashpad interpreted that nonaccomplishment as evidence that the petition had traversed a leaf boundary.
The freeze-exempt renderer thread made the leaf readable.
Crashpad retried all the way to the end of the page, copying additional data than its visitant had requested.

For the call location used by the exploit, the numbers were:

requested dimension = 0x0b8 source offset in leaf = 0x0e98 computed retry dimension = 0x1000 - 0x0e98 = 0x168 destination heap slot = 0x0c0 overwrite into next slot = 0x168 - 0x0c0 = 0x0a8

The first 0xb8-byte petition ended fine before the leaf boundary. It could create the required error lone since the entire leaf was inaccessible at that instant. Once the renderer made the leaf readable, the 0x168-byte retry succeeded and overran the allocation.

To create the competition reliable, the payload supplied 48 applicant says in one snapshot request. One freeze-exempt employee cycled their pages between readable and inaccessible states. The another helper threads remained parked, keeping the thread population—and the Crashpad allocations connected alongside it—stable.

Rewiring a live Crashpad writer

The oversized retry could corrupt lone the allocation immediately following its 0xc0 read-buffer slot. The payload arranged for that allocation to merge a live SnapshotMinidumpMemoryWriter, which Crashpad would afterward use to peruse a recollection range from the renderer and dispatch the bytes through its output path.

To create that adjacency, the payload exposed a readable procedure and loader chart containing recollection ranges in a chosen order. Crashpad allocated a author for all range, afterward coalesced contained ranges and freed their writers. The ordering remaining one freed 0xc0 author slot immediately before a author that remained live; the next 0xb8-byte peruse buffer reused the freed slot. Writers for threads, TEBs, and readable stacks affected the allocation sequence, so the payload counted those inputs and adjusted the figure of ranges to keep the identical bucket position.

On the CET-capable systems we tested, the handler used a person shade stack, during CFG restricted indirect calls to approved targets. To evade operating afoul of these mitigations, we used a normal call and come back sequence and directed the substituted virtual calls to existing CFG-valid functions.

The susceptible retry-read rewrote the archetypal 0xa8 bytes of the live writer. At offset 0x00 it wrote rear the SnapshotMinidumpMemoryWriter vtable; at 0x70 it set the writer’s province to writable; and at 0x78 it replaced the MemorySnapshot::Delegate vtable alongside a shifted CopyingOutputStreamAdaptor vtable, so the assign recall entered the adaptor’s buffered-write path. The overwrite ended immediately before memory_snapshot_ at offset 0xa8.

Crashpad afterward entered the writer’s WriteObject() through its archetypal vtable. WriteObject() called Read() through the preserved snapshot pointer, which peruse a controlled 0xd0-byte range from the renderer. The recall through the second vtable copied those bytes to a writable location in chrome.exe and treated the identical location as the adaptor’s underlying output stream.

The copied bytes constructed the two a one-method output stream and a fallback-launcher object. When the adaptor flushed, the stream’s virtual Write() entered Chrome’s FallbackUnhandledExceptionFilter(), a CFG-valid target. The bytes additionally pointed Chrome’s fallback-launcher earth at the copied entity and supplied its command and startup fields. The display called FallbackCrashHandlerLauncher::LaunchAndWaitForHandler(), which passed cmd /k calc.exe to CreateProcessW. These calls maintained the shade stack.

Because Windows ASLR randomizes modules formerly fairly than for all procedure (a consequence of the decision to use relocations fairly than PIC/PIE code), it mapped chrome.exe at the identical location in the two the renderer and the handler. This meant that the renderer payload could get the handler addresses from the depiction basis in its own process, as fine as validating the exact build using the depiction timestamp and size in command to use any build-specific offsets (given Chrome’s fast publish schedule, we had to be capable to quickly retarget the sequence as new versions were released).

The fix

The fixed implementation removed Crashpad’s dependence on the mark remaining unchanged between the two reads. The retry is now constricted by the two the source-page border and the caller’s first request:

if (GetLastError() == ERROR_PARTIAL_COPY) { // If we can not peruse the complete section, execute a abbreviated peruse of the first // leaf instead. This is necessary to assistance ReadCString(). const size_t page_remainder = base::GetPageSize() - (address & (base::GetPageSize() - 1)); const size_t short_read = std::min(size, page_remainder); achievement = ReadProcessMemory(handle_, reinterpret_cast(address), buffer, short_read, &size_out); if (success) come back base::checked_cast(size_out); }

The clamp is necessary protective programming, but it is finest understood as removing a temporal assumption: equal if the origin changes between the unsuccessful peruse and the retry, Crashpad can no longer compose beyond the destination.

The identical place hardened the generic visitant by rejecting any ReadUpTo() outcome larger than the remaining requested figure before advancing the destination pointer. That inspect appears in process_memory.cc.

The complete fix is Chromium alter 8267322, and the community study is Chromium matter 545820931.

Swapping Out the Middle

Now that everyone – including Google – is pointing LLMs at codebases akin Chrome, bug collisions are a important risk. To defender against this, we designed the utilize alongside standardized stages and tried to have backup vulnerabilities prepared for all piece. This scheme break even whenever the archetypal type of our chain, which used a Gin exposure for its V8 sandbox escape, turned out to be a copy of matter 542670566. After a extremely stressful few hours we managed to substitute the Gin-based V8 escape alongside the animated WebP phase described in this post; this replacement phase rescued the sequence and Google confirmed that the sequence popped calc.

Conclusions

What should we decide from this chain, which (to the finest of our knowledge) is the archetypal rewarded complete sequence Chrome utilize of the LLM era? We have a few thoughts:

For the vulnerabilities themselves, we were struck by the fact that (coincidentally) all three vulnerabilities were ultimately concerning mutating item idea to be immutable: in phase 1, a HeapNumber; in phase 2, a transferred WebP buffer; and in phase 3, the leaf safety of a supposedly icy process. These benevolent of invariant violations may be anywhere LLMs shine: they can use their encyclopedic cognition of functioning scheme APIs and open origin code to arrive up alongside situations anywhere the invariant fails.
As a VRP reporter, it is very difficult to evade collisions unless you bring item new to the array beyond the basis LLM (and frequently equal this isn’t adequate to preserve you). Our archetypal complete sequence (which Andrés Luksenberg volition be talking concerning at OffensiveCon Tokyo) died whenever its final phase wrecked alongside a bug that had been established internally by Google months before, and we’ve seen other chains encounter the identical destiny since then. Spend your attempt on evolving your own understanding of the target, and be prepared to be disappointed!
Even alongside LLMs doing the huge bulk of the work, you volition have additional achievement if you provision your agents high-quality examples to follow. In our case, the agents were capable to diagram on utilize techniques initially authored by members of XBOW’s Native Team, akin the “island hopping” loader, to create a standardized and dependable exploit.
Six days and $40k is not a lot of period or prosperity whenever the payoff is a Chrome chain! Now, this does not average that anyone can get a Chrome sequence stated that amount of period and prosperity (as discussed, we did use a fair bit of our own individual ability and judgment), but it does average that the bar is significantly lower. Defend accordingly.

Russian bot farms are still trolling, even after Ukraine’s drone strikes on Yandex

support@mycoding.id (Gaby Del Valle) — Tue, 13 Oct 2026 19:31:31 +0700

Gaby Del Valle

is a guideline newsman at The Verge covering surveillance, the Department of Homeland Security, and the tech-right.

Days following Ukrainian armed forces drones took downward multiple Russian data centers, President Volodymyr Zelenskyy claimed that the run had hurt Russia’s disinformation efforts. “It abruptly became a small easier to breathe on many social platforms,” Zelenskyy stated Monday. “There was small hate, small division, and small provocations.”

Zelenskyy isn’t the archetypal to province that the drone operation, which targeted data centers belonging to the Russian innovation business Yandex, has cut downward on spam and disinformation campaigns fomented by Russian bot farms. Social media users have claimed they’ve noticed small traffic on posts by MAGA-affiliated accounts, as fine as those connected alongside the far-right Alternative for Germany (AfD) party. Some have equal stated they’ve noticed a steep autumn in spam calls and messages.

But these group are wrong. The drone strikes appear to have affected Yandex’s web crawlers, not any disinformation or governmental operations.

In fact, the document antibot4navalny, which tracks state-sponsored troll farms, reports that bot traffic is dependable as ever. On Monday, the identical day Zelenskyy claimed that disinformation had died down, antibot4navalny reported that multiple Kremlin-aligned accounts posted videos falsely claiming that experts are demanding the European Union lift the ongoing sanctions on Russia. Danish expert Valdemar Osted stated interactions on MAGA and AfD accounts have really increased since the strikes. And the charts purportedly showing a decrease in bot action appear to be AI-generated.

Ironically, claims that the drone strikes hindered Russian disinformation campaigns appears to be a form of disinformation itself, no matter what Zelenskyy says.

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Gaby Del Valle

Rivian spinoff Mind Robotics hires Doug Field as president

support@mycoding.id (Andrew J. Hawkins) — Tue, 13 Oct 2026 19:30:00 +0700

Rivian spinoff Mind Robotics announced the project of Doug Field as chairman in a important coup for the EV company’s secretive robotics startup.

Field was a VP of particular projects at Apple, anywhere he was the de facto caput of the company’s ultimately unsuccessful Project Titan attempt to create an autonomous electric car. He had a former stint at Apple as VP of Mac hardware engineering, but he remaining the business in 2013 to rotate into Tesla’s chief conveyance engineer, anywhere he helped oversee the Model 3 sedan. He remaining Tesla in 2018 and rejoined Apple. In 2021, Field was hired by Ford to run the automaker’s electric conveyance and application division, a stance he held until before this year.

Mind Robotics stated Field volition oversee its attempt to build “universally capable robots” for the intent of operating in Rivian’s factories, as fine as another applications. The startup was founded by Rivian CEO RJ Scaringe in 2025, and has since raised over $1 milliard in financing. While the business has yet to display off any of its robots in public, the startup says its robots are being designed alongside “dexterity and bodily reasoning” that’s required for manufacturing work.

“Doug is a notable chief alongside a track document of delivering new technologies in prosperous products, and I couldn’t be additional enthusiastic to be construction Mind alongside him,” Scaringe stated in a statement. “He has an amazing capability to foster awesome teams that obtain on big, complex ideas and provision products that reset expectations. That’s exactly what Mind needs as we deploy robots into genuine factories and beyond.”

Field joins Mind Robotics at a important turning item for the site of robotics, alongside fast advances in bodily AI colliding alongside important hurdles in hardware and application development. Several companies, akin Tesla and Hyundai, are following humanoid robots for factory and storage activity — equal as experts note that making a robot act akin a individual is easier than scaling the innovation for applicable work. Mind Robotics hasn’t confirmed whether it’s operating on a humanoid scheme or item alternatively entirely. The business has been on a hiring spree and currently has 32 open positions.

Scaringe, who serves as acting CEO and place of Mind Robotics, has stated he wants to keep the companies separate, fairly than try to merge the activity akin Tesla. That said, the companies are certainly connected in multiple ways. Mind Robotics is using AI training data from Rivian, and the robots volition be initially tested in Rivian’s factories. Rivian additionally owns equity in Mind Robotics and volition be the archetypal client for its robots.

Field stated he is enthusiastic for the difficulty in operating the new startup.

“Integrating AI and robotics is among the most important—and difficult—engineering challenges of our time,” he stated in a statement. “Mind has assembled an exceptional squad and has a distinctive advantage: the capability to deploy and study inner a real, high-volume factory from day one. I’m thrilled to associate RJ in construction a team, culture, and innovation that volition redefine what we can create in America.”

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Andrew J. Hawkins

Better Messaging Only Gets You So Far. Before You Change Your Marketing, Learn From Your Customers’ Complaints.

support@mycoding.id (Scott Baradell) — Tue, 13 Oct 2026 19:30:00 +0700

Opinions expressed by Entrepreneur contributors are their own.

Key Takeaways

When customers complain, improved messaging isn’t continually the answer. Recurring complaints can disclose problems that no promotion run can fix.
When the identical grievance keeps appearing, marketers should ask: Are we failing to provision the promise, or are we making the incorrect promise?
Reviews, social posts, assistance conversations and revenue calls are precious sources of intelligence. The item isn’t to react to all furious customer. It’s to appearance for patterns.

When customers complain, companies lean to concentration on the complaint.

They react to the bad review. They apologize on social media. They ask client assistance to gentle things over. If the issue shows up frequently enough, person eventually asks what promotion can do to enhance the company’s reputation.

That’s frequently the incorrect question. The improved inquiry is whether customers are pointing to a genuine problem. If they are, the most helpful item promotion can do may be to assistance the business see it.

PwC’s 2025 Customer Experience Survey established that 52% of consumers had stopped using or purchasing from a brand since of a bad cognition alongside its products or services.

Better messaging can lone obtain you so far.

Customers don’t distinct the brand from the experience

Inside a company, everything has an owner. A delayed shipment is an operations issue. A application bug belongs to product. An unanswered call power be client service.

Customers don’t create those distinctions. They cognition the business as a whole.

A inn can advance exceptional service, but guests volition recall waiting 20 minutes at an bare forefront desk. Once customers portion experiences akin that, they rotate into part of your brand story.

That’s particularly crucial as AI becomes part of how group investigation companies. An Idea Grove study of 1,000 U.S. consumers established that lone 2% would buy from an unfamiliar brand according to an AI advice without additional research. Reviews were the top rely indication respondents evaluated.

AI may alter how customers detect you. It doesn’t forestall them from checking whether your claims clasp up.

Complaints can disclose two distinct problems

When the identical grievance keeps appearing, marketers should ask: Are we failing to provision the promise, or are we making the incorrect promise?

Those aren’t the identical problem.

If a inn promises a fast, frictionless check-in and routinely leaves guests position at the forefront desk, that’s an implementation problem.

But ideate a business that markets itself about white-glove assistance during its endeavor example is deliberately low-cost and self-service. Customers complaining concerning constricted assistance may not be exposing an operational failure. Marketing may have created an anticipation the business was never designed to meet.

In that case, the answer isn’t to fix operations. It’s to fix the promise.

Marketers naturally appearance at complaints through the lens of perception. But sometimes the market doesn’t misunderstand the company. The business has misrepresented itself to the market.

Good promotion can create a bad issue worse

There’s another uncomfortable possibility: Sometimes doing our jobs fine can create a company’s reputation worse.

Suppose customers are already complaining concerning a recurring merchandise or assistance problem. Marketing launches a prosperous campaign, petition increases and thousands of new customers encounter the identical problem.

Now the business has additional disappointed customers, additional negative reviews and additional evidence contradicting its own claims.

Marketing didn’t logic the problem. But it amplified it.

Before flowing additional customers into the top of the funnel, marketers should comprehend what’s happening at the another end.

Complaints inform you what customers really experience

Companies shouldn’t delay for customers to inform them directly. Qualtrics XM Institute’s 2026 person research established that lone concerning three in 10 consumers now explain immediately why they’re leaving.

That makes reviews, social posts, assistance conversations and revenue calls precious sources of intelligence. The item isn’t to react to all angry customer. It’s to appearance for patterns.

A 2026 study from asset innovation business Rently offers a uncomplicated example. Only 11% of 800 U.S. renters surveyed stated they completely rely safety claims in flat listings, during 56% stated they had lived location anywhere a safety characteristic existed but didn’t work.

A asset can advance itself as a gated community. But if renters attain and detect the entrance doesn’t work, fixing the promotion isn’t the answer. Fixing the entrance is.

Marketing should bring the exterior earth inside

Marketing teams expend enormous amounts of period trying to comprehend the market. That gives them a viewpoint another departments may not have: They can see the gap between what the business says and what customers experience.

When a form emerges, quantify it. How frequently does the grievance appear? Is it affecting reviews, renewals or sales? Then obtain that evidence to whoever can location it.

Sometimes that’s operations or product. Sometimes it’s client service. And sometimes it’s promotion itself.

Once the issue is fixed, promotion has item improved than a claim: evidence. Show customers how their feedback led to improvements, whether that’s faster service, a simpler merchandise or a improved experience.

That’s the difference between telling customers what they should accept and giving them a logic to accept it.

When complaints keep contradicting your marketing, the issue may not be the narrative you’re telling. It may be the experience customers are having. Before you alter the message, discover out what needs to alter in the business.

A plea not to use uv-build

support@mycoding.id (Putri Silvia) — Tue, 13 Oct 2026 19:09:26 +0700

After seeing yet another dozen packages endure keywords on Gentoo since of a sole key dependency switching to uv-build, I would akin to plea on behalf of Gentoo users: delight don’t use uv-build as a build backend. Just to be clear, this is not concerning uv itself or any another Astral tools; these are fine tools alongside a nice and receptive upstream. The uv-build backend is one item we have to differ on. I’m not saying it’s bad; I’m saying that its benefits don’t outweigh the drawbacks.

What are the drawbacks? It’s really big and it’s written in Rust. Rust has many advantages, but none of them really matter for a build backend that is used to build clean Python packages. It’s a huge dependency (as of 0.13.0, its wheels are between 1.2 MiB and 1.5 MiB, depending on the platform) and it has no advantage complete using a small clean Python backend (say, flit-core whose rotor is 45 KiB). It method that all Gentoo users need to build it from source, and stated that it’s released fairly frequently (12 releases in the 30 days previous to penning this post), that’s a lot of building. Like, for all 100 ms spent operating uv-build to instal one publish of your package, Gentoo users volition expend many hours construction new uv-build versions complete and complete again.

However, build times aren’t the biggest problem; portability is. You can run Python beautiful much anyplace anywhere you can get a operating C compiler. Some insignificant features may not work, but the center is fairly portable. The catalog of platforms supported by Rust is expanding slowly, and equal if you can get a operating Rust compiler on a stated platform, uv may not work. The problems can range from bugs in the lot of packages that uv depends on (for example, rustix::fs and its requirements skipping SPARC, for no apparent reason), to the resulting executable being so big that the toolchain runs out of location area (and dissimilar scheme memory, you can’t really add location area to a system; the Gentoo uv ebuild already carries two hacks to create it imaginable to build uv on 32-bit platforms). And then, if your phase is not supported at all… well, let’s fair say that adding and maintaining a new phase is a full-time job that may affect a lot of swearing at the code churn.

What concerning the advantages? Well, I’m conscious of two reasons to use uv-build. One is consistency alongside using uv for your project, and it doesn’t really matter. It’s a backend and the entire item of PEP 517 is that you can use any backend alongside any tool. You can use flit-core, you can use hatchling, and either of them volition activity fair fine alongside uv (or any another frontend). The another logic is achievement and that disagreement makes equal small sense. Even if it mattered, we’re realistically talking concerning a difference in the ballpark of 100 ms, for an act executed rarely; it is likewise imaginable that any acquire volition be outweighed by the period needed to fetch the 1.5 MiB rotor for uv-build. But it doesn’t matter, since realistically the backend is lone used by project developers, contributors, CI/CD workflows, downstream packagers and users of origin distributions; all regular users use wheels instead. Of these groups, origin allocation person collection is the largest and the most impacted, and any achievement acquire is defeated by the period spent construction uv-build.

Being chronically online is part of the job description for this top influencer marketer

support@mycoding.id (Sydney Bradley) — Tue, 13 Oct 2026 19:07:31 +0700

Sophia Sesto is Poppi's VP of culture. Photo Credit: Sophia Sesto

Sophia Sesto has a trick up her sleeve for influencer marketing: staying chronically online.

Her function — vice chairman of civilization for the buzzy prebiotic soda brand Poppi — requires her to be tuned in to famous culture.

To place trends and emerging satisfied creators, it's crucial to prosecute "your own For You Page," Sesto told Business Insider. Sesto was lately featured in Business Insider's 2026 catalog of most innovative influencer marketers.

The hunt for new, culture-driving creators "is never-ending," stated Sesto, who leads Poppi's influencer, partnerships, and social promotion teams.

Within Poppi's inner Microsoft Teams, there is a conduit called "Seed" anywhere Sesto and another Poppi personnel "are continually dropping" creators and content, accompanied by ideas for how the brand can activity alongside these group in the future.

Poppi has a "long-standing" alliance alongside Alix Earle, Sesto said. Courtesy of Poppi

"It is the most manual process," Sesto said, adding that AI tools haven't yet proved helpful on this front. "It's all in-house, and we say we get our person since we are them."

Brands are projected to expend additional than $44 milliard on influencer promotion in the US this year, according to the Interactive Advertising Bureau (IAB). As additional dollars get pumped into the space, and additional creators vie for those checks, position out and driving conversation transport additional weight.

Meanwhile, the net quickly churns through viral memes and trends. Brands lone have a divided second to pounce.

"A big part of my function is continuously construction a example that moves at the speed of culture, during additionally being capable to scale," Sesto said.

Poppi's actuality TV affection affair

Poppi's promotion campaigns about the hit reality TV display "Love Island" were correct in this saccharine spot.

While on her honeymoon, Sesto watched "Love Island" and kept up alongside her colleagues.

"We were in the Teams chats like, 'Did you observe final night? What do you think of this? What do you think of that?'" Sesto said. "I commitment we get genuine activity done too, but this is whenever our finest activity happens."

Poppi's team, akin many another "Love Island" viewers, grew obsessed alongside a 2025 mold member, Amaya Espinal. That July, whenever the storyline of the display turned on Espinal, Poppi's personnel went on Instagram to display its assistance alongside a made-up "Amaya Papaya" flavor.

"It's our best-performing Instagram article of all time," Sesto said.

What started as a gag turned into a complete promotion run and sensation launch. By October, Poppi had mold Espinal in a run and launched a limited-edition flavor, "Amaya's Island Colada." The beverage was sold on Amazon and at Target.

Poppi sank its teeth into the "Love Island" fandom equal further, operating alongside creators on observe parties and another digital content. According to the company, creator-made satisfied generated additional than 212 myriad views.

How Poppi plant alongside pop civilization icons

Poppi has landed its bright-colored soda cans in the hands of net celebrities akin Alix Earle, Jake Shane, and Charli XCX.

Poppi has a "long-standing relationship" alongside Earle, Sesto said. The brand worked alongside Earle at Coachella in 2024 and afterward launched a tagged can alongside her in 2025. Earle's alliance goes deeper than sponsorships, too. She became an capitalist in the soda brand in 2024.

Poppi is a common sponsor of Jake Shane's podcast "Therapuss." Courtesy of Poppi

The brand has leveraged these faces in several of its highest-budget promotion campaigns, specified as its Super Bowl commercials.

Poppi lately partnered alongside performer Shay Mitchell's luggage brand, Béis, on a gathering of suitcases. Like many brands, Poppi leveraged an IRL event to coincide alongside the launch.

Poppi isn't lone focused on the biggest stars.

Sesto stated its "always-on influencer program" is a crucial part of the brand's scheme to remain applicable and in forefront of consumers. When Poppi rolled out its "Shirley Temple" sensation at the end of 2025, it sent cans of the soda to influencers without any context, Sesto said, expecting the creators would article concerning it.

"We gave them the chance to initiate the sensation for us," Sesto said.

Poppi lately partnered alongside Shay Mitchell's luggage brand Béis. Courtesy of Poppi

Big Soda, bigger opportunities

After Poppi was acquired by PepsiCo for nearly $2 billion in 2025, a new motto defined the brand's transition: "Let Poppi be Poppi," Sesto said.

Poppi's new genitor business is "leaning in" to Poppi's cheekiness, Sesto said, and letting Poppi's squad "do our thing."

The new ownership is additionally beginning up doors. Since the acquisition, Poppi inked a alliance alongside Starbucks, landing the prebiotic soda on the coffee chain's shelves. Meanwhile, Poppi is additionally venturing into global markets and launched in the UK this year.

"We're operating on — spoiler vigilant — additional places anywhere you'll see Poppi," Sesto said.

I don’t miss the camera on the Ray-Ban Meta Audio glasses

support@mycoding.id (Victoria Song) — Tue, 13 Oct 2026 19:00:00 +0700

The another day I whizzed former multiple group during operating in the park, my playlist blasting at complete volume. The next morning, I smiled at a barista during ordering a caramel apple-flavored matcha latte. Afterward, I sat on a park place study a book, called up a pal to conversation concerning her latest trip to Prague, and afterward asked my Ray-Ban Meta Audio glasses what meetings were coming up on my calendar. The chipper AI sound stated I hadn’t connected my Google Calendar yet (I had) and asked if I would akin assistance connecting. I sighed and afterward asked it to perform an upbeat song. It picked Kendrick Lamar’s “Not Like Us.”

These former few days, dozens of group have seen or interacted alongside me during wearing astute glasses. Not a sole individual noticed. Probably since these audio-only versions appearance fair akin normal glasses. They arrive in a retro Clubmaster appearance — akin the ones pictured in this assessment — or a additional Wayfarer-esque Burbank style. Honestly, group normally don’t notice whenever I deteriorate camera glasses either. But for once, I didn’t awareness akin a creep.

$349

The Good

I don’t awareness akin a creep wearing these
Long power division life
Lightweight
Stylish
Good for open-ear audio

The Bad

Expensive for what they are
Still not convinced AI is the killer app for these

The audio-only Ray-Bans aren’t a novel concept. Seven years ago, I strutted about Manhattan taking calls and listening to tunes in the Bose Frames, which also blended Bluetooth audio alongside stylish sunglasses. Nobody noticed me in the Bose rear then, either. What makes this brace notable is that it’s 2026, they’re made by Meta, and, well, there’s been vigorous conversation concerning whether astute glasses are a form of spyware.

Let’s get privacy out of the way. During setup, all the privacy and data opt-out disclosures were much additional notable than whenever I’ve earlier tested Meta glasses. A display explained how ocular data from AI experiences is handled. (You can opt out of Meta using that data to enhance AI; sound data, however, is motionless used.) There’s no ocular data from these glasses — this is merely the new messaging for any brace of Meta glasses. You can additionally opt out of sharing “additional data” alongside Meta as well, which is enumerated in a distinct document online. This is a fine thing, although it doesn’t location what makes group uncomfortable concerning astute glasses: the uneasy emotion that person alternatively is record you.

You cognize what kind of does, though? Removing the camera. The Bose Frames never triggered the identical flat of distrust since they were “just” sunglasses-shaped headphones. That applies current too. Frankly, I felt much lighter wearing these out into the earth exactly since I couldn’t document footage of anyone. (Even if I awareness lame saying “Hey Meta” in public.)

You can see the small, customizable act clasp on the right-hand temple arm. I programmed it to bring up Meta AI so I don’t have to say “Hey Meta” in public.

I can ideate group motionless distrusting these Ray-Bans since they have always-listening capabilities for waking up the AI assistant. However, you can disable the awaken term in settings and use a customizable clasp on the correct temple arm instead. (This automatically feels 10 percent small silly if you “must” conversation to AI assistants exterior the home.) There’s no native way to document a conversation immediately from the glasses. Any another audio-based feature, akin live translation, have to be manually started.

I’m not saying these can’t be modded or used for evil out of the box. Where there’s a perverse intellect and ill will, there’s a way. I’m saying it’d obtain additional attempt since these glasses merely don’t do extremely much.

At least, not yet.

Meta’s Muse AI is eventually coming to the glasses, but it’s not accessible correct now. Right now, the glasses container alongside the small mighty Muse Spark model. It’s improved than what was on the Ray-Bans in 2023, but it’s motionless meh unless you’re using it for accessibility reasons. In which case, these glasses may not be the finest use of $350. A camera-equipped example is additional helpful for low-vision and blind users. For hard-of-hearing users, the FDA-cleared hearing aid characteristic isn’t accessible yet, and for deaf users, the Meta Ray-Ban Display may be additional helpful since they assistance live captioning.

Without a camera, the temple arms are much thinner, too.

For everyone else, Muse Spark is nerfed without the camera but can motionless arrive in handy. For example, granting admission to your messaging apps, Google Calendar, and email lets it do several ray scheduling and correspondence on your behalf. If you allow location sharing, you can dispatch anywhere you are to the collection chat. It’s fine for these tasks, but not great. It’s adept at abbreviated queries akin “What’s my next calendar event?” or “Set a reminder to update my editors at 12PM.” With additional complex asks, I’ve established Muse Spark gets confused, and it’s faster to whip out my phone. I ended up mostly asking it to set reminders for to-dos I remembered during in the center of item else.

Muse Spark can additionally provision you local recommendations and turn-by-turn audio directions during walking. As I’ve written before, that’s awesome if you’re traveling. Less so if you’re acquainted alongside your local haunts. In my neighborhood, I already cognize which coffee shops have the finest Wi-Fi and snacks — and it wasn’t the one Muse Spark suggested. As for strolling directions, they’re not item I need that often. When I did, I established using Google Maps on my phone additional helpful for getting my bearings.

I’m certain Muse volition open up additional possibilities whenever it arrives afterward this year. Then again, I’ve seen demos, and I’m motionless skeptical that agentic AI volition be the item that convinces group to buy astute glasses.

So what do I akin concerning these? They’re merely a fine brace of open-ear headphones.

I stated good, not great. Sound norm is decent, but you’re motionless dealing alongside all the tradeoffs that arrive alongside this form factor. They battle at louder volumes. The trebles commencement to get tinny, and bass can audio distorted. There’s inevitably audio leakage. My partner frequently reminded me that they could comprehend everything I was listening to, all of the AI’s responses, and my phone calls. Conversely, equal at top volume, ambient noise can motionless drown out your content. These won’t cut it on a noisy subway, for instance.

Still, it’s nice to hear to audiobooks about the home without jumping out of my skin anytime my partner or cats desire my attention. On my regular walks, I’m small fearful of my maniac neighbors mowing me downward in their murder mobiles. (New Jersey drivers, man.) It’s not mind-blowing, but it’s a meaningful betterment to my day-to-day routine. And I don’t have to think too difficult concerning it.

You can’t really inform that these are astute glasses unless you appearance really closely at the transparent part of the arms.

At 43 to 47g, these are additionally much comfier than every other pair of Meta glasses I’ve tried. So far, I’ve worn them for two complete days, including a 30-minute run and multiple walks, alongside zero issues. My Clubmaster assessment component additionally has nose pads — huzzah for anyone alongside a low nose bridge. That additionally made for a huge betterment in call norm since the mic for calls wasn’t smushed up against my schnoz. The temple tips can additionally be adjusted for a improved fit.

I normally ding astute glasses for not supporting my -10 medication and serious astigmatism. These assistance a range of -12 to +6 — I’m motionless waiting on a medication pair, but at smallest my refuse eyeballs don’t preclude me from wearing these as my regular glasses. All in all, these glasses volition fit a much broader range of faces and imagination needs.

Battery existence is additionally phenomenal. I was capable to eke out two complete workdays without sticking the glasses rear into the case.

Okay, I lied — one additional gripe. These awareness costly for headphone glasses that don’t do much yet. The Meta Glasses, for example, now commencement at $250 and technically do more. These are $100 additional for what, exactly? The Ray-Ban branding? The privilege of not worrying concerning freaking out another people? If these were $150 or $200, I’d say these would be a no-brainer. Starting at $350 without medication lenses, without the hearing aid features, without Muse? That feels off.

But pricing complaints aside, I didn’t young female the camera. (I lone always use it to obtain cat videos anyway.) Muse Spark isn’t what I’d call the most compelling AI model, but it’s helpful now and then. For the informal user, the headphones are the most helpful part of astute glasses.

This is me wondering how my attack went from tracking steps to discussing wearable surveillance and expecting bystanders won’t punch me.

I desire I could fair drive these into the air and province that nixing the camera solves the privacy problem. I can’t. Yes, I’m relieved that I don’t have to concern concerning group punching me in the visage if I deteriorate these out and about. I don’t think most group desire additional than this correct now. Still, I’d be lying if I stated I didn’t personally cognize multiple group who would young female the camera. Not since they’re perverts, but since they discover them to be genuinely helpful tools for candid residence videos, satisfied creation, accessibility, or multimodal AI. For those people, this category of astute glasses isn’t a genuine option.

Besides, who’s to say Meta won’t add additional ambient listening features downward the line? Then what? The deficiency of a camera is lone a comfort for now. It doesn’t negate the need for continued, thoughtful conversation concerning AI wearables, the definition of recording, and what function these gadgets ought to perform in our lives.

Photography by Victoria Song / The Verge

Agree to Continue: Ray-Ban Meta Audio

Every astute equipment now requires you to concur to a sequence of conditions and conditions before you can use it — contracts that no one really reads. It’s unattainable for us to peruse and analyze all sole one of these agreements. But we started counting exactly how many times you have to hit “agree” to use devices whenever we assessment them since these are agreements most group don’t peruse and certainly can’t negotiate.

To use the Ray-Ban Meta Audio astute glasses, you’ll need a Meta document and the Meta AI app downloaded onto your phone. A Meta document plant throughout platforms akin Meta, Instagram, and Quest and comes alongside its own terms of service and privacy policy. Should you decide to merge alongside services akin WhatsApp, Messenger, Instagram, Apple Music, Apple Health, Garmin, Strava, Amazon Music, and Spotify, you additionally concur to those conditions and privacy policies. You may additionally be asked to provision permissions connected to Bluetooth, Wi-Fi, location services, and sound data. If you choose to get a brace of medication lenses, you may additionally be asked to portion that data alongside Ray-Ban and/or LensCrafters.

If you are concerned concerning privacy, you can admission the Glasses Privacy list in the glasses’ settings. There you can perspective the sound action log as fine as the “Share additional data” toggle. To admission the ocular data opt-out toggle, go to the glasses’ settings and navigate to the Meta AI menu.

The astute glasses additionally arrive alongside supplemental conditions of assistance and privacy policies / notices, including:

Final tally: Two mandatory agreements, eight supplemental agreements and notices, and multiple optional agreements.

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Victoria Song

How AI Is Helping Companies Catch Performance Issues Before They Turn Into Major Incidents

support@mycoding.id (Mudit Singh) — Tue, 13 Oct 2026 19:00:00 +0700

Opinions expressed by Entrepreneur contributors are their own.

Key Takeaways

AI is shifting achievement evaluation from reactive to predictive. Instead of waiting for failures, AI can detect anomalies, capture regressions and modify tests to changing real-world use patterns.
AI achievement evaluation requires a rethink of your infrastructure. You need unified data architectures. Your AI needs admission to achievement metrics, person behavior, logs and endeavor context, all in one place.
AI augments fairly than replaces engineers. The genuine ROI comes from automating repetitive inspection and evaluation so engineers can concentration on judgment-heavy work.

AI in achievement evaluation has moved former the aviator phase for most engineering organizations. The IBM Institute for Business Value’s 2025 CEO Study, which surveyed 2,000 CEOs throughout 33 countries, established that 61% say their organizations are actively adopting AI agents and preparing to execute them at scale. Leaders have accepted that publish cycles measured in days have outgrown evaluation practices built for quarterly launches.

Adoption has not translated into results at the identical pace. The identical study reports that lone 25% of AI initiatives have delivered expected ROI complete the final few years, and fair 16% have scaled enterprise-wide. Performance evaluation sits inner that gap for many teams, and decision it depends additional on how you alter the way you test than on which tools you buy.

Why are we motionless evaluation akin it’s 2015?

Too many organizations motionless treat achievement testing as a checkpoint near the end of a release. You validate that the scheme plant under expected load, and afterward you container it. But this assumes former behavior predicts forthcoming performance, and that assumption breaks downward the instant your measure changes or use patterns shift.

You see, person behavior is no longer predictable. Traffic spikes happen without warning. Features get used in combinations your architects never imagined. Infrastructure behaves alternatively under genuine burden than it does in a controlled environment.

The achievement issues that damage your reputation are normally the ones you didn’t think to test for. That reactive method expenses genuine money. You end up alongside abandoned transactions and disappointed users during your squad scrambles to discover the base cause.

What happens whenever AI predicts problems?

The move is concerning going from reactive validation to predictive intelligence. Let me explain.

Machine learning models analyze historic data to discover patterns that indication difficulty lengthy before traditional monitoring catches them. Anomaly finding systems scan millions of data points instantly. They emblem deviations that would obtain a individual expert days to spot.

Catching a degradation 30 seconds following it starts versus 30 minutes afterward is the difference between a insignificant blip and a important incident.

Netflix built this into its publish procedure years ago. Its automated canary inspection system, which it open-sourced alongside Google as Kayenta, compares a small canary deployment against a stable baseline and determines whether a publish should proceed. With additional than 1,000 pipelines operating in production, Netflix established that relying on humans to assessment all canary would have blocked uninterrupted delivery, and its engineers credit the scheme alongside expanding betterment speed by detecting anomalies faster.

Meta has pushed the precision further. Its FBDetect system monitors about 800,000 period sequence covering throughput, latency, CPU and recollection usage, and catches regressions as small as 0.005% in noisy manufacturing environments. At Meta’s scale, equal a regression that small wastes meaningful server capacity.

Here, prediction is lone fractional the battle. Adaptation is the another half.

AI-powered frameworks can automatically modify parameters according to manufacturing behavior. They shield new use patterns without waiting for manual updates. Self-healing automation fixes issues whenever systems change, eliminating the care activity that currently bogs downward QA teams.

Can your infrastructure grip this?

Reed Hastings built Netflix on a uncomplicated principle: value group complete process, and innovation complete efficiency. Rigid processes rotate into bottlenecks whenever speed is the priority. AI achievement evaluation requires a rethink of your infrastructure. You need unified data architectures. Your AI needs admission to achievement metrics, person behavior, logs and endeavor context, all in one place.

The IBM study established that 68% of CEOs acknowledge unified data architecture as critical. Yet, 50% acknowledge their latest investments have remaining them alongside detached systems. This disconnect is why AI initiatives neglect to scale. If the AI can’t admission the data or merge alongside your pipeline, it becomes an costly discipline project. The scheme matters additional than the tech.

LinkedIn shows what integration makes possible. Its ThirdEye platform combines high-dimensional period sequence alongside event data from throughout the business to correlate anomalies alongside their apt causes, and LinkedIn established that root-cause inferences improved dramatically as additional teams connected their systems. A example that cannot see manufacturing telemetry or trigger a test from the pipeline ends up as an costly test nobody trusts.

Where individual judgement motionless matters

There is a hazardous assumption that AI volition eventually create QA teams obsolete. That is backwards. AI amplifies what skilled engineers can do. Brian Glass from Transcend put it well: “If they capture equal one out of all 10 issues, and that reduces a human’s need to assessment something, I regard that a success.”

The goal isn’t ideal automation. The goal is to liberated your squad from repetitive form matching. You need them to concentration on problems that necessitate judgment.

Does a achievement matter really matter to users, or does it fair appearance bad on a chart? Should you optimize for throughput or latency? Do reply period spikes indication a profound architectural flaw or fair an border case? AI surfaces the data. Humans create the strategic decisions.

The genuine ROI

I’m not going to inform you AI makes achievement evaluation liberated or effortless. It doesn’t. You motionless need group who comprehend your system. You motionless need to think concerning what you’re evaluation and why.

But AI makes those group additional productive. Your elder engineers halt penning test scripts and commencement solving harder problems. Your younger engineers can contribute meaningfully without months of training. Your tests capture additional bugs since they’re according to realistic scenarios.

We’re operating 3x additional achievement tests alongside the identical squad size. We’re finding problems earlier. We’re spending small on infrastructure. And whenever item goes incorrect in production, we fig out why faster.

That’s what AI does for achievement testing. It doesn’t substitute the work. It removes the parts that discarded your period and prosperity so you can concentration on construction things that matter.

Key Takeaways

AI is shifting achievement evaluation from reactive to predictive. Instead of waiting for failures, AI can detect anomalies, capture regressions and modify tests to changing real-world use patterns.
AI achievement evaluation requires a rethink of your infrastructure. You need unified data architectures. Your AI needs admission to achievement metrics, person behavior, logs and endeavor context, all in one place.
AI augments fairly than replaces engineers. The genuine ROI comes from automating repetitive inspection and evaluation so engineers can concentration on judgment-heavy work.

Why are we motionless evaluation akin it’s 2015?

Ukraine isn't focused only on making drones and missiles — it's also prioritizing the jet engines inside

support@mycoding.id (Jake Epstein) — Tue, 13 Oct 2026 18:59:10 +0700

Ukraine relies heavily on jet engines for drones and missiles. Ukrainian President Volodymyr Zelenskyy/Screengrab via X

Mini-turbojet engines have rotate into a expanding precedence for Ukraine's defence industry as the nation relies on them to power the next generation of high-speed interceptor drones and long-range attack weapons.

Ukraine has lengthy originated weapons and components from partner nations. But as the nation builds additional of its own drones and missiles, reducing that dependency and expanding its self-sufficiency has rotate into additional important.

Yevhenii Khmara, Ukraine's defence minister, told reporters complete the weekend that Kyiv views jet motor manufacturing as a "critical area" for its local defence industry. For one particular motor model, he said, projected monthly petition could attain 10,000 units.

Khmara stated that the petition would be dispersed throughout fair 20 Ukrainian manufacturers.

Brave1, Ukraine's state-backed innovation platform, stated that supporting family jet motor manufacturing has been a precedence for the former twelvemonth and a half. The 20 energetic projects contain a mix of authorities and personal initiatives.

Large-scale mini-turbojet motor manufacturing is "crucial for efficiently protecting our skies, and we are operating hand-in-hand alongside the Defense Forces to provision it at pace," Brave1 told Business Insider in a declaration on Tuesday.

Ukraine puts jet engines in medium-range drones, which it has used to hit Russian logistics and provision routes throughout occupied regions of southernmost Ukraine, and deep-strike weapons, including its cruise missiles that can attain armed forces and energy targets hundreds of miles throughout the border.

Jet engines are additionally essential for Ukraine as it builds a next generation of interceptors to oppose a increase in Russian jet-powered assault drones.

Earlier Ukrainian interceptor models were designed to oppose Russian drones powered by piston engines, which could attain speeds of up to 115 mph. But Moscow is increasingly using jet-powered drones that journey much faster; several variants can attain up to 375 mph and are much harder to intercept.

Ukrainian defence firms are now developing faster interceptors, several of which are powered by turbojet engines. The next generation of interceptors has already downed multiple of Russia's fastest drones.

Following a gathering alongside armed forces guidance in delayed September on the Russian drone threat, Ukrainian President Volodymyr Zelenskyy revealed that "new decisions" had been made concerning family jet motor production, according to a declaration from his agency at the time. He did not detailed further.

Show HN: Deslop – Oxlint rules for AI-generated TypeScript

support@mycoding.id (Putri Silvia) — Tue, 13 Oct 2026 18:52:57 +0700

Opinionated Oxlint rules that refuse low-evidence, low-signal, AI-slop code patterns.

Rules are vendored from dmmulroy/anti-slop (generic rules) alongside additional deslop rules, all renamed under the deslop/* namespace. The vendored origin is MIT licensed; see Credits below.

npm instal --save-dev ai-deslop # @oxlint/plugins comes alongside as a runtime dependency — keep it in sync alongside your oxlint version

Ships compiled JavaScript — plant alongside any oxlint JS-plugin runtime (Bun, Deno, or Node.js).

import { defineConfig } from "oxlint"; import { configs as deslopConfigs } from "ai-deslop"; export default defineConfig({ jsPlugins: ["ai-deslop"], options: deslopConfigs.recommended.options, rules: deslopConfigs.recommended.rules });

Rule	Status	Description
no-chained-type-assertions	Recommended	Rejects nested as / angle-bracket assertions that fabricate evidence.
no-conditional-empty-object-spread	Recommended	Reports entity spreads using a conditional {} branch to omit fields.
no-known-value-widening	Recommended	Rejects known expressions flowing into definitive unknown, object, or open dictionaries.
no-object-parameters	Recommended	Rejects entity on function inputs.
no-runtime-typeof	Recommended	Requires border parsing alternatively of ad hoc typeof narrowing.
no-unknown-parameters	Recommended	Rejects unidentified on function inputs.
no-unknown-returns	Recommended	Rejects come back contracts resolving to unknown.
no-unknown-type-aliases	Recommended	Rejects pseudonyms whose resolved category is unknown.
no-unsafe-dictionary-type	Recommended	Rejects dictionary values according to unsafe escape hatches.
no-widen-then-assert	Recommended	Rejects widening known evidence before narrowing assertions.
require-safety-comment-for-type-assertion	Recommended	Requires an invariant justification for non-const assertions.
no-pass-through-type-alias	Recommended	Disallows pseudonyms that lone rename another type.

Rule	Status	Description
no-array-filter-map	Recommended	Rejects neighboring enthusiastic gathering filter/map passes; allows lazy iterator pipelines.
no-reduce-accumulator-copy	Recommended	Rejects non-spread accumulator copies inner reducers. Enable native oxc/no-accumulating-spread alongside it.
no-reflect-apply	Recommended	Rejects earth Reflect.apply.
no-reflect-get	Recommended	Rejects earth Reflect.get.
no-shape-in-symbol-names	Recommended	Rejects form in locally owned sign names.

Rule	Status	Description
no-call-only-assertions	Recommended	Flags tests whose assertions lone inspect imitate calls.
no-module-mocking	Recommended	Rejects Vitest and Jest component mocks.
no-poor-substring-tests	Recommended	Rejects evaluation that a changeless cord contains substrings.
no-repeated-expect-call	Recommended	Flags neighboring assertions that reiterate the identical call in test files. Reuse the outcome instead. No fixer.

Rule	Status	Description
no-duplicate-consts	Opt-in	Reports all-caps constants alongside the identical fixed value in distinct files.
no-duplicate-types	Opt-in	Reports exact copy entity contracts. No fixer.
no-renamed-imports	Opt-in	Fixes unnecessary named-import pseudonyms whenever the first name has no module-level conflict.
canonical-class-names	Opt-in	Fixes non-canonical Tailwind CSS v4 category spellings.

Standard rules enabled by the recommended config

Standard rule	Status	Description
typescript/no-deprecated	Recommended	Disallows using code marked @deprecated. Requires type-aware linting.
typescript/no-require-imports	Recommended	Disallows CommonJS require() imports.
typescript/no-floating-promises	Recommended	Disallows floating promises. Requires type-aware linting.
typescript/no-unnecessary-condition	Recommended	Disallows continually truthy/falsy/nullish conditions. Requires type-aware linting.
no-unreachable	Recommended	Disallows unreachable code.

Generic rules vendored verbatim from dmmulroy/anti-slop (MIT, © Dillon Mulroy), including src/shared/*.

MIT

The White House is in its Trump-fueled SI era

support@mycoding.id (Brent D. Griffiths) — Tue, 13 Oct 2026 18:52:35 +0700

President Donald Trump has stated that those who continue to use the term synthetic intellect volition be considered an "enemy" of his White House. Roberto Schmidt/Getty Images

The White House has eventually addressed a remnant of the AI era.

On Tuesday, the Trump administration rolled out si.gov, giving a new URL to the location that was archetypal launched during the Biden administration. The new location describes President Donald Trump's synthetic intellect policies, although much of the content itself was changed before Tuesday.

"The Super Intelligence era is here. 🇺🇸," Michael Kratsios, the director of the White House Office of Science and Technology Policy, wrote on X.

The new location falls in row alongside Trump's wishes that synthetic intelligence, or AI, now be called excellent intelligence, or SI. The chairman formalized his penchant in a September 29 administrator order.

Last week, Trump declared that if others did not go alongside alongside his rebrand, they would be considered an "enemy" of his White House. The chairman has stated that using the term "artificial intelligence" makes the innovation audio fake.

AI and tech leaders have divided complete how to grip Trump's request.

Over the weekend, SpaceXAI followed through on SpaceX CEO Elon Musk's commitment to rebrand the company's AI division as SpaceXSI.

On Saturday, days following Trump bestowed an regard on him, Microsoft CEO Satya Nadella published a lengthy declaration titled: "Models as Insider Risks in the Super Intelligence Era." AI and synthetic intellect were not among the 805 words Nadella wrote.

As for OpenAI, whose name contains the extremely abbreviation Trump wants gone, its CEO, Sam Altman, earlier ruled out a rebrand.

"No plans to do that," Altman told the Politico Decoded podcast. "But we have been talking concerning excellent intellect a lot, and we volition continue to conversation concerning it."

This Major Red Flag Could Mean That the Role You’re Applying for Is a ‘Ghost Job’

support@mycoding.id (Sherin Shibu) — Tue, 13 Oct 2026 18:48:08 +0700

Key Takeaways

“Ghost jobs” are advertised positions that companies never average to fill.
In the U.S., additional than a third of job listings, or 36%, had been sitting online for at smallest 30 days.
Companies can article “ghost jobs” for many reasons, including collecting résumés for forthcoming openings or promotion openings to appear to be expanding to power investors.

You dispatch off your résumé, delay for a answer and get nothing. Weeks later, the business is motionless promotion for the identical job.

It’s uncomplicated to amazement what went incorrect alongside your application, but the business power not have been hiring at all. That job you applied for might not exist.

“Ghost jobs” appearance akin genuine opportunities, but the companies posting them have no aim of hiring for the roles. AI occupation tool Kickresume lately conducted an analysis of 96,902 job postings on Indeed in hunt of shade jobs.

Kickresume looked for three red flags: listings that had been live for additional than 30 days, identical ads posted again and calls for “urgent hiring” alongside no use deadline. The inspection covered six fields: technology, finance, recruitment, marketing, healthcare and business.

In the U.S., additional than a third of job listings, or 36%, had been sitting online for at smallest 30 days. The portion was equal higher in tech, anywhere 43% of postings had passed the one-month mark. That doesn’t necessarily average those jobs were fake, but it does signify that applicants should do additional digging before applying for the role.

The another two red flags barely showed up. Exact copies of earlier posted listings accounted for fair 0.1% of ads, as did postings that promised “urgent hiring” without giving applicants a deadline. Of the three signals the study examined, older listings were by far the most common.

“It was a nice astonishment to see that exact reposts and adverts that don’t have a decision date but define “urgent hiring” were the two rare,” Peter Duris, CEO and Co-founder of Kickresume, stated in a statement. “These are two key alert signs that a job may not be genuine.”

Why shade jobs exist

Why advertise a job that isn’t available? Sometimes, employers collect résumés for forthcoming openings or use listings to see how low of a pay they can recommendation during motionless attracting applicants, Kickresume noted.

Other companies desire to appear to be growing their headcount to power investors and competitors. A posting can additionally be a formality. The business has to advertise for a function equal although they average to create an inner hire.

However, not every misleading listing is intentional. Hiring plans can autumn distinct whenever budgets change, and filled positions sometimes remain online merely since no one remembered to obtain the promotion down.

What to do concerning older listings

Kickresume notes that an older listing that has been online for weeks isn’t necessarily automatically a shade job.

Still, the company urges applicants to obtain a appearance at the employer’s careers leaf for the job before sending in their résumés. If they can’t discover the beginning there, that’s another logic to inquiry if the business is actively hiring for the position.

“You can additionally contact the hiring manager to province your involvement and ask if they’re motionless looking,” Duris said. “Don’t discarded your period applying for a function that’s already been filled, or worse, was never genuine in the archetypal place!”

Key Takeaways

“Ghost jobs” are advertised positions that companies never average to fill.
In the U.S., additional than a third of job listings, or 36%, had been sitting online for at smallest 30 days.
Companies can article “ghost jobs” for many reasons, including collecting résumés for forthcoming openings or promotion openings to appear to be expanding to power investors.

You dispatch off your résumé, delay for a answer and get nothing. Weeks later, the business is motionless promotion for the identical job.

It’s uncomplicated to amazement what went incorrect alongside your application, but the business power not have been hiring at all. That job you applied for might not exist.

Show HN: XY Music Notation

support@mycoding.id (Putri Silvia) — Tue, 13 Oct 2026 18:43:05 +0700

Playback position

Measure —0:00 / 0:00

Speed Volume MIDI

Follow playback

Loading score…Internal keyboard · Optional external MIDI · FreePats CC0

Loading score…

After traveling to all 50 states, I think these 6 state parks are some of the country's most incredible hidden gems

support@mycoding.id (Emily Hart) — Tue, 13 Oct 2026 18:31:19 +0700

In my opinion, Devil's Lake State Park in Wisconsin is among the finest lesser-known US province parks. Emily Hart

The US national parks are incredible, and I comprehend why so many group flock to these iconic landscapes to see several of the most breathtaking scenery in the country.

However, following traveling solo to all 63 US national parks and all 50 states, I've discovered that several of the most stunning and underrated places aren't part of the national park scheme — they're province parks.

These hidden gems recommendation the identical beauty, adventure, and solitude, frequently without the crowds, reservations, or authorize hassles that arrive alongside national park visits. Here are several of my favorites.

Devil's Lake State Park in Wisconsin has item for everyone.

Devil's Lake is my favorite Wisconsin province park. Emily Hart

Despite being Wisconsin's most-visited province park, I discover that many group I conversation to don't cognize concerning Devil's Lake in Baraboo. However, it's my favorite of Wisconsin's 50 province parks.

In my opinion, the park's East and West Bluff trails recommendation several of the finest panoramic views in the Midwest. Additionally, the enormous rock formations — akin Balanced Rock and Devil's Doorway — create it a favorite for hikers and rock climbers alike.

Beyond the cliffs, the park offers kayaking, swimming, and peaceful lakeside outing areas, making it a ideal year-round destination.

Coopers Rock State Forest in West Virginia is the ideal location to observe the sunset.

Coopers Rock State Forest offers gorgeous views. Emily Hart

West Virginia is another one of my favorite states for outdoor recreation. Its province park scheme is complete of gems, but I continually propose visiting Coopers Rock State Forest.

I affection hiking in this park or merely enjoying a sunset at Coopers Rock Overlook, which offers a panoramic perspective of the Cheat River Gorge.

The park additionally has many distinctive rock formations scattered throughout the timber alongside the miles of scenic trails.

Letchworth State Park in New York is residence to stunning waterfalls.

Letchworth State Park is frequently referred to as the "Grand Canyon of the East." Jim Vallee/Shutterstock

Often nicknamed the "Grand Canyon of the East," Letchworth State Park is a natural amazement anywhere the Genesee River carves through a profound gorge, creating three stunning waterfalls framed by towering cliffs.

With 66 miles of hiking trails, scenic overlooks, and endless opportunities for outdoor recreation, Letchworth is a paradise for nature lovers.

The park is particularly magical in the fall, alongside its vibrant autumn foliage, making it among the most spectacular leaf-peeping destinations in the Northeast.

Visiting Utah's Kodachrome Basin State Park feels akin strolling into another world.

Kodachrome Basin State Park is known for its tall, lean rock formations. Emily Hart

When visiting Utah, many travelers aim to see one (or all) of the state's "Mighty Five" national parks. However, Utah is additionally residence to 46 province parks — my favorite being Kodachrome Basin.

Just complete 20 miles from Bryce Canyon National Park, Kodachrome Basin feels akin strolling into another earth entirely.

The less-crowded landscape is a stunning mix of red, orange, and yellow hues, and striking "sand pipes" — tall, lean spires of rock that the park is known for.

Hike, camp, or run through the rock formations of this hidden gem park for a peaceful adventure.

Matthiessen State Park in Illinois feels magical.

Matthiessen State Park has gorgeous cascading waterfalls. Joseph Hendrickson/Shutterstock

Matthiessen State Park is a hidden gem known for its theatrical canyons, cascading waterfalls, and towering forests, creating a stunning, nearly magical landscape.

With peaceful trails and small crowds than nearby Starved Rock State Park, Matthiessen is a must-visit for nature lovers in the Midwest. I particularly affection visiting in the autumn to bask the changing foliage.

Eldorado Canyon is one of my favorite province parks in Colorado.

Eldorado Canyon is among the top rock climbing destinations in the country. Emily Hart

With four important national parks and complete 40 province parks, Colorado is known for outdoor recreation. However, I've established that, exterior of the locals, many group don't cognize concerning one of my favorite places to sojourn — Eldorado Canyon State Park.

Just 9 miles exterior Boulder, the park is known for its theatrical canyon views, rock climbing, and scenic hiking trails. Its towering aureate sandstone cliffs create it among the top climbing destinations in the US, alongside complete 500 routes.

Visitors can additionally choose to cross-country ski or snowshoe in the winter months.

This narrative was initially published on May 5, 2025, and most lately updated on October 13, 2026.

Only 13 albums have spent at least 10 weeks at No. 1 on the Billboard 200 this century — here they all are

support@mycoding.id (Callie Ahlgrim) — Tue, 13 Oct 2026 18:28:07 +0700

Adele, Taylor Swift, and Morgan Wallen. Kevin Mazur/Kate Green/Matt Winkelmeyer/Getty Images

Since 2000, lone 13 albums have spent double-digit weeks at No. 1 on the Billboard 200 chart, extensively considered the conclusive weekly ranking of best-selling albums in the US.

Taylor Swift is the lone female to have four albums expend at smallest 10 weeks atop the Billboard 200, joining The Beatles and Elvis as the lone artists in former to accomplish this feat.

Keep study to see a complete catalog of the chart's longest leaders in chronological order.

1. "Fearless" by Taylor Swift

"Fearless" was released in 2008. Taylor Swift

Taylor Swift's sophomore gathering spent 11 weeks at No. 1 and was certified gem by the RIAA. It's motionless known as the most-awarded nation album of all time.

Prior to "Fearless," the top-charting gathering of the millennium was Usher's "Confessions," which spent nine weeks at No. 1.

2. "21" by Adele

"21" was released in 2011. Columbia Records

Adele's sophomore LP spent a whopping 24 weeks at No. 1, the biggest nonconsecutive sum for any gathering by a woman.

"21" won gathering of the twelvemonth at the Grammys and was afterward crowned the top-performing album in the former of the Billboard 200.

3. "Frozen (Original Motion Picture Soundtrack)" by Various Artists

"Frozen" was released in 2013. Walt Disney

"Frozen" spent 13 weeks at No. 1, the most for any movie soundtrack since "Titanic" in 1998.

4. "1989" by Taylor Swift

"1989" was released in 2014. Taylor Swift

Swift's fifth studio gathering spent 11 weeks at No. 1 and went on to win album of the year at the Grammys, becoming Swift's second win following "Fearless." (She has since won four times, additional than anyone alternatively in history.)

5. "25" by Adele

"25" was released in 2015. Columbia

Adele's third gathering spent 10 weeks at No. 1. It additionally won gathering of the twelvemonth at the Grammys, beating Beyoncé's "Lemonade."

6. "Views" by Drake

"Views" was released in 2016. Young Money

Drake's fourth studio album, "Views," spent 13 weeks at No. 1, besting Adele's "25" for the top-charting gathering of 2016.

7. "Dangerous: The Double Album" by Morgan Wallen

"Dangerous: The Double Album" was released in 2021. Big Loud/Republic

Morgan Wallen's second studio gathering spent 10 successive weeks at No. 1, becoming fair the third gathering in former to expend its archetypal 10 weeks atop the chart, joining Whitney Houston's "Whitney" (1987) and Stevie Wonder's "Songs in the Key of Life" (1976).

8. "Un Verano Sin Ti" by Bad Bunny

"Un Verano Sin Ti" was released in 2022. Rimas Entertainment

Bad Bunny's fourth studio gathering spent 13 weeks at No. 1.

"Un Verano Sin Ti" was classified among Business Insider's best albums of 2022 and nominated for gathering of the twelvemonth at the Grammys, but misplaced to "Harry's House" by Harry Styles.

9. "SOS" by SZA

"SOS" was released in 2022. Daniel Sannwald/RCA

SZA's sophomore album, "SOS," was the archetypal R&B gathering by a female to expend 10 weeks at No. 1 since Mariah Carey's self-titled debut in 1991.

It afterward returned to the top for a total of 13 weeks.

10. "One Thing at a Time" by Morgan Wallen

"One Thing at a Time" was released in 2023. Big Loud/Republic

Morgan Wallen's third studio gathering spent 19 nonconsecutive weeks at No. 1, surpassing "Un Verano Sin Ti" for the most weeks atop the diagram this decade.

It's additionally the biggest nation gathering in the former of the Billboard 200; Garth Brooks earlier held the document alongside "Ropin' the Wind," which reigned for 18 weeks in the first '90s.

Wallen's business achievement has arrive notwithstanding a string of controversies, including canceling concerts at the final minute, using a ethnic slur, and partying without a disguise during the pandemic.

11. "The Tortured Poets Department" by Taylor Swift

"The Tortured Poets Department" was released in 2024. Taylor Swift

Swift's 11th studio gathering spent its first 12 weeks at No. 1, the longest post-release run by a female creator since Houston's "Whitney."

"The Tortured Poets Department" joined Wallen's "One Thing at a Time" and Wonder's "Songs in the Key of Life" as the lone three albums to expend their archetypal 12 weeks in the chart's top position. (Wonder holds the document alongside a 13-week streak.)

"Poets" afterward returned for five additional weeks atop the Billboard 200 for a expansive total of 17, the longest reign of Swift's career.

12. "I'm the Problem" by Morgan Wallen

"I'm the Problem" was released in 2025. Big Loud

Wallen's "I'm the Problem," his fourth studio album, spent 14 weeks at No. 1 on the Billboard 200.

13. "The Life of a Showgirl" by Taylor Swift

"The Life of a Showgirl" was released in 2025. TAS Rights Management

Swift's 12th studio album, "The Life of a Showgirl," has spent 14 weeks at No. 1 on the Billboard 200.

Taylor Swift's 'The Life of a Showgirl' is one of her biggest albums on the Billboard 200. Here's how her others rank.

support@mycoding.id (Callie Ahlgrim) — Tue, 13 Oct 2026 18:27:44 +0700

Taylor Swift performs during The Eras Tour in Dublin. Charles McQuillan/TAS24/Getty Images for TAS Rights Management

Taylor Swift gave us fair alert in her newest album: "I'm wed to the hustle."

Swift's 12th studio album, "The Life of a Showgirl," not lone bankrupt the document for the biggest debut revenue week ever, but it continued to amass revenue and streams in the US for a twelvemonth following its release.

With 14 nonconsecutive weeks at No. 1 on the Billboard 200, "Showgirl" has surpassed "Fearless" and "1989" as Swift's second-longest reign on the all-genre gathering chart.

The notable count comes shortly following Swift set a personal-best diagram document alongside "The Tortured Poets Department." Keep study for a ranking of her 16 studio albums (including the two originals and rerecords) according to their Billboard 200 performances.

10. "Taylor Swift"

"Taylor Swift" was released in 2006. Taylor Swift

Billboard 200 peak: No. 5

Swift's self-titled debut is the lone studio gathering in her catalog that hasn't reached No. 1 on the Billboard 200.

"Taylor Swift" debuted at No. 19 and scaled the diagram for additional than a year, peaking at No. 5 in 2008.

9 (tie). "Lover"

"Lover" was released in 2019. Taylor Swift

Billboard 200 peak: No. 1 for one week

Swift's seventh studio gathering was the archetypal one that she owned outright, gratitude to her new tag agreement alongside UMG.

"Lover" was promoted by multiple singles, including "You Need to Calm Down," "The Archer," and "The Man."

Four years later, following Swift kicked off the Eras Tour alongside "Cruel Summer" near the top of the set list, the fan-favorite opus climbed to No. 1 on the Billboard Hot 100 and remained there for four weeks, becoming the album's biggest hit.

9 (tie). "Red (Taylor's Version)"

"Red (Taylor's Version)" was released in 2021. Taylor Swift/UMG

Billboard 200 peak: No. 1 for one week

The extended tracklist for "Red (Taylor's Version)" included the storied extended cut of "All Too Well," a longtime fan-favorite opus in Swift's catalog.

"All Too Well (10 Minute Version)" was released alongside a short movie directed by Swift and promoted by a convention-breaking performance on "Saturday Night Live." It became the longest opus to attain No. 1 in the former of the Hot 100.

8 (tie). "Fearless (Taylor's Version)"

"Fearless (Taylor's Version)" was released in 2021. Taylor Swift/UMG

Billboard 200 peak: No. 1 for two weeks

"Fearless" was the archetypal rerecorded gathering that Swift always released.

The "Taylor's Version" sequence was inspired by the transaction of Swift's masters to Scooter Braun in 2019, which she described as her "worst case scenario" in a passionate open letter. Swift decided to remake and rerelease her archetypal six albums in a bid to reclaim ownership of her life's work. Braun afterward sold Swift's masters to a personal equity firm.

In supplement to faithfully recreating all tracklist, Swift decided to add never-before-heard songs "from the vault" that were written during the album's first imaginative procedure but cut from the final product.

"I've spoken a lot concerning why I'm remaking my archetypal six albums, but the way I've chosen to do this volition hopefully assistance illuminate anywhere I'm coming from," Swift explained. "Artists should own their own activity for so many reasons, but the most screamingly apparent one is that the creator is the lone one who really knows that build of work."

"For example, lone I cognize which songs I wrote that nearly made the 'Fearless' album," she continued. "Songs I entirely adored, but were held rear for distinct reasons."

Many were skeptical that the "Taylor's Version" project would be embraced by fans, let solitary accomplish business success.

Those skeptics were forced to eat their words whenever "Fearless (Taylor's Version)" began to outpace the first on streaming platforms. According to Billboard, "Fearless (Taylor's Version)" earned additional equal gathering revenue in its archetypal week of publish than "Fearless" earned complete the complete next year.

Four years later, in May 2025, Swift announced that she bought rear her masters from Shamrock Capital, giving her complete authority complete her musical catalog and rendering her "Taylor's Version" project moot.

8 (tie). "Speak Now (Taylor's Version)"

"Speak Now (Taylor's Version)" was released in 2023. Taylor Swift/UMG

Billboard 200 peak: No. 1 for two weeks

The rerecorded type of Swift's third gathering featured six songs from the vault, including two duets alongside Fall Out Boy and Hayley Williams.

7 (tie). "Reputation"

"Reputation" was released in 2017. Taylor Swift

Billboard 200 peak: No. 1 for four weeks

"Reputation" arrived following an extended duration of silence. Swift's longtime feud alongside Kim Kardashian and Ye (then known as Kanye West) had reached a fever pitch; in reply to a enormous social media dislike campaign, Swift decamped to London and withdrew from the community eye.

She returned alongside a new snake-infested imaginative and "Look What You Made Me Do," a cheeky guide sole that poked fun at her own persona — and quickly rosy to No. 1 on the Hot 100.

Swift additionally declined to act in interviews or media appearances during promoting her sixth album. Instead, she relied on a uncomplicated tagline: "There volition be no additional explanation. There volition fair be reputation."

7 (tie). "Evermore"

"Evermore" was released in 2020. Taylor Swift

Billboard 200 peak: No. 1 for four weeks

"Evermore" was surprise-released fair five months following Swift's former album, "Folklore." The two were billed as "sister albums," created under near-identical conditions alongside the identical squad of collaborators.

"To put it plainly, we fair couldn't halt penning songs," Swift explained on social media.

"Evermore" was nominated for gathering of the twelvemonth at the 2022 Grammys, but misplaced to Jon Batiste's "We Are."

6 (tie). "Speak Now"

"Speak Now" was released in 2010. Taylor Swift

Billboard 200 peak: No. 1 for six weeks

Swift's third gathering had a lot to live up to, following the blockbuster achievement of "Fearless."

In reply to skeptics — who questioned whether the adolescent phenom was relying too heavily on her collaborators — she decided to compose "Speak Now" entirely by herself. Swift is the lone songwriter credited on the norm tracklist.

6 (tie). "Midnights"

"Midnights" was released in 2022. Taylor Swift

Billboard 200 peak: No. 1 for six weeks

Swift's 10th studio gathering sold complete 1 myriad copies in its debut week, the archetypal to cross that seven-figure threshold since Swift's own "Reputation." (She has now achieved the feat on eight distinct occasions.)

"Midnights" additionally won gathering of the year at the Grammys, joining "Fearless," "1989," and "Folklore" in the distinguished collection of victors. Swift is the lone creator in former to win gathering of the twelvemonth four times.

6 (tie). "1989 (Taylor's Version)"

"1989 (Taylor's Version)" was released in 2023. Taylor Swift

Billboard 200 peak: No. 1 for six weeks

The rerecorded type of "1989" was released nine years following the first album. Swift added five vault tracks, including the fan-favorite song "Is It Over Now?"

5. "Red"

"Red" was released in 2012. Taylor Swift

Billboard 200 peak: No. 1 for seven weeks

"Red" is Swift's fourth studio album. It featured a mishmash of Max Martin-produced pop bangers, including "We Are Never Ever Getting Back Together" and "I Knew You Were Trouble," as fine as country-rock breakup anthems specified as "State of Grace" and "Holy Ground."

4. "Folklore"

"Folklore" was released in 2020. Taylor Swift/Republic Records

Billboard 200 peak: No. 1 for eight weeks

"Folklore" marked a sonic departure for Swift, stripping downward her preferred synth-pop manufacturing to disclose introspective reflections and intricate narratives.

The pandemic-era gathering was co-produced by Swift, Jack Antonoff, and Aaron Dessner of The National. It received rave reviews from critics and is extensively considered Swift's finest activity to date.

3 (tie). "Fearless"

"Fearless" was released in 2008. Taylor Swift

Billboard 200 peak: No. 1 for 11 weeks

Swift's sophomore attempt had the longest run at No. 1 of any gathering in the 2000s. "Fearless" has since been certified diamond by the RIAA.

3 (tie). "1989"

"1989" was released in 2014. Taylor Swift

Billboard 200 peak: No. 1 for 11 weeks

Swift's fifth gathering marked her authoritative pivot from nation to pop music, a move that Swift stated she had to "really combat — and I average aggressively combat — to have happen."

In supplement to its double-digit streak atop the Billboard 200, "1989" yielded three No. 1 songs on the Hot 100: "Shake It Off," "Blank Space," and "Bad Blood" featuring Kendrick Lamar.

2. "The Life of a Showgirl"

"The Life of a Showgirl" was released in 2025. TAS Rights Management

Billboard 200 peak: No. 1 for 14 weeks

Cowritten and co-produced alongside Max Martin and Shellback, "The Life of a Showgirl" was described by Swift as a snapshot of "everything that was going on rearward the curtain" during the Eras Tour.

After its first three-month run atop the Billboard 200, "The Life of a Showgirl" returned to No. 1 in October 2026 whenever Swift released the deluxe edition, dubbed "The Encore."

The album's reign at No. 1 on the Billboard 200 brought Swift's total sum atop the diagram to 100 weeks, extending her document among solo artists.

Since the Billboard 200 was launched in 1956, lone The Beatles have logged more weeks at No. 1 than Swift. The collection holds the all-time document alongside 132 weeks.

1. "The Tortured Poets Department"

"The Tortured Poets Department" was released in 2024. Taylor Swift

Billboard 200 peak: No. 1 for 17 weeks

Swift's 11th studio album, "The Tortured Poets Department," did not depart the No. 1 slot for 12 direct weeks following its debut in April 2024, fending off new releases from stars akin Dua Lipa, Billie Eilish, and Zach Bryan.

The uninterrupted reign of "Poets" was rare for a streaming-era release. It became the archetypal gathering always by a female creator to expend its archetypal 12 weeks atop the chart, surpassing a document earlier held by Whitney Houston's 1987 blockbuster "Whitney." (The all-time document for a successive streak among women is held by Carole King's "Tapestry," which spent 15 weeks at No. 1 in 1971.)

Swift briefly yielded the top place to Eminem and Stray Kids before "Poets" notched 13th, 14th, and 15th successive weeks atop the chart.

The gathering eventually cut to lesser positions, but afterward in December of that identical year, it returned for two additional weeks at No. 1 following Swift released bodily versions of the album's deluxe version, "The Anthology," for Black Friday.

Cyberhackers Just Took Down the Freezers at 400 French Supermarkets, Forcing Grocers to Throw Away Food

support@mycoding.id (Jon Small) — Tue, 13 Oct 2026 18:21:00 +0700

Nobody has claimed responsibility, and many of the targeted systems were operating outdated software.

By Jon Small | edited by Dan Bova | Oct 13, 2026

Hackers normally go following your data. In France, they went following the icy peas. A cyberattack on refrigeration systems hit additional than 400 supermarkets in France, forcing several stores to throw out food, according to The New York Times. About 300 Intermarché and Netto stores were affected, alongside alongside 80 Coopérative U and 30 Monoprix locations. The assault targeted systems from three companies that remotely authority refrigerators, according to France’s National Cybersecurity Agency.

So far, no one has claimed duty for the hack, and Paris prosecutors have yet to acknowledge the culprits. Dominique Schelcher, caput of French market sequence Coopérative U, called the assault “unprecedented” and “extremely serious.” “They’re attacking the French people’s food supply,” he stated in an discussion alongside RTL radio.

Schelcher hasn’t estimated losses, but says a refrigeration nonaccomplishment can disbursal a small supermarket tens of thousands of dollars. “In my complete expert career, I’ve never seen item akin this,” he said.

The Xteink X4 Pro is a great, tiny e-reader, and it’s cheaper than ever

support@mycoding.id (Sheena Vasani) — Tue, 13 Oct 2026 18:19:31 +0700

Sheena Vasani

writes concerning tech news, reviews gadgets, and helps readers preserve prosperity by highlighting deals and merchandise recommendations for The Verge.

If you’re looking for an e-reader that can effortlessly fit in your pocket (or break onto your magnet-equipped phone), the small Xteink X4 Pro power be value a look. It features a 4.26-inch, 800 x 480 E Ink display, making it considerably smaller and thinner than Amazon’s smallest six-inch Kindle. It’s additionally fairly a bit cheaper. Right now, you can choice it up for $84.15 ($25 off) at Amazon, which is its finest cost to date.

The X4 Pro brings multiple greeted upgrades complete its predecessors, including a touchscreen that gives readers another way to engage alongside it. It motionless has bodily page-turning buttons, though. There’s additionally a new touch-sensitive clasp below the display for quickly returning to the residence screen, alongside alongside a built-in ray alongside adjustable brightness and color temperature, so you can peruse in the dark. It ships alongside the outstanding CrossPoint Reader software, which makes navigating your archive and study books a much improved cognition than on former Xteink models we’ve tested, although it’s motionless not fairly as polished as Amazon’s software.

Understandably, not everyone is a fan of Xteink’s decision to toggle the X4 Pro’s USB-C harbor for a proprietary charging connector. If you can appearance former that, the X4 Pro is a great, small e-reader that features magnets that let you nexus it to compatible smartphones, fair akin former models. The magnetic association is stronger this period around, although we motionless desire it were a small additional secure. All the same, my coworker Andrew Liszewski motionless considers the X4 Pro the best small e-reader you can buy, calling it a equipment he “won’t depart the home without.”

Verge Shopping

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Sheena Vasani

Google Adds Gemini 4 Argon To AI Mode For Pro & Ultra Subscribers

support@mycoding.id (Matt G. Southern) — Tue, 13 Oct 2026 18:18:44 +0700

Google has added Gemini 4 Argon to the AI Mode example list for Google AI Pro and Ultra subscribers. The rollout comes on the identical day the example became accessible to developers, enterprises, and Gemini app users.

Robby Stein, VP of Product for Google Search, announced the rollout on X, saying Argon “is now rolling out globally in Search” and that subscribers can toggle to it using the “+” icon.

Google’s first Argon announcement, 13 days ago, didn’t citation Pro subscribers. Today’s launch post lists them alongside Ultra subscribers, but nothing announced today changes the default for free-tier AI Mode users.

What Changed

You can choice Argon from the “+” icon in AI Mode’s “Ask anything” bar, the identical list that added 3.7 Flash in August and 3.8 Flash in September.

Stein says Argon “brings big improvements to tackling nuanced, multi-step tasks in AI Mode” and is “better at understanding your intent and following your instructions in rear and onward conversations.” The initiate article makes a akin assertion for the example as a whole, saying it “follows manner instructions improved than any of our former Gemini models.”

Neither article states a language. The 3.7 Flash rollout was English only.

Since it’s rolling out, it may not be accessible to everyone fair yet. As of 12:17 pm ET, Argon hadn’t appeared in the list on my own Pro account.

From Fairwind To Pro Subscribers

Google introduced Argon on Sept. 30 as a frontier example for coding, endeavor cognition work, and cyber defense, and released it to “a set of trusted cyber defenders” through its Fairwind Program. That article stated the publish to developers, enterprises, and consumers would arrive “as shortly as possible” and would commencement “with paid API customers and Google AI Ultra subscribers.”

Today’s article brings all the groups together at once. Developers can admission it through the Gemini API’s paid tier, Ultra subscribers can use it in Google Antigravity, Google’s coding tool, and Pro and Ultra subscribers can discover it in the Gemini app and AI Mode.

Background

Gemini 3 Pro became accessible as an option in AI Mode in November. Since then, all supplement to the list I covered has been a Flash model. Gemini 3 Flash became the default in December, Gemini 3.5 Flash took over as the earth default at I/O in May, Gemini 3.7 Flash joined the menu on Aug. 14, and 3.8 Flash followed on Sept. 2.

In February, I covered Google’s reasoning for operating AI Mode on Flash models, which disbursal small and react faster, so they can run at Search scale.

Google’s support page for AI Mode’s example menu, peruse today, motionless names lone “Pro” and “Fast” as options and describes the Pro choice as Gemini 3 Pro. It peruse the identical way on Aug. 14 and Sept. 2.

Why This Matters

Argon is accessible by subscription only, fair akin the two Flash models that joined the list before it.

The improvements Google describes affect multi-step tasks and back-and-forth conversations, so a multi-step project alongside follow-up questions is the finest way to test the claim. Once Argon appears in your menu, and if 3.8 Flash is motionless listed alongside it, try the identical sequence alongside the two models and note which one answers all time.

Looking Ahead

The next inquiry is whether Argon volition remain a subscriber choice or rotate into the default in AI Mode. Gemini 3 Flash and 3.5 Flash the two launched as the default, during Gemini 3 Pro launched as an choice and has remained one. Neither Google’s initiate article nor Stein’s X article clarifies which direction Argon volition take.

The initiate article wraps up by saying it’s looking onward to “bringing you the remainder of the Gemini 4 family,” but it doesn’t define which of those models volition be accessible in AI Mode.

Category News AI Search

Facebook will let you customize your feed algorithm using AI

support@mycoding.id (Stevie Bonifield) — Tue, 13 Oct 2026 18:01:31 +0700

Stevie Bonifield

is a news author covering all things person tech. Stevie started out at Laptop Mag penning news and reviews on hardware, gaming, and AI.

Facebook’s new “Your Algorithm” feature volition let you immediately add and oversee topics you desire to see in your nourish and Facebook Reels. Meta says your recommendations “respond correct away” following you create updates using the new characteristic by hitting “interested” or “not interested” for distinct topics. Your Algorithm earlier launched on Instagram before this year, and Meta additionally launched a akin “Dear Algo” characteristic on Threads.

Facebook users volition be capable to admission Your Algorithm or choose “interested” or “not interested” from the three dots list on idiosyncratic posts. The “interested” and “not interested” buttons may additionally appear under posts, and Meta says it “may ask prosecute up questions for additional item on what you liked or disliked. You can effortlessly inform us, in your own words, what you desire to see additional or small of, and your recommendations volition update in genuine time.”

The new characteristic is part of a set of “AI-powered” tools Meta says it’s using to customize what users see on Facebook. It additionally says it’s using LLMs additional in its ranking systems: “LLMs can merge the interests, context, and intent rearward natural language, unlocking an algorithm you can really conversation to. Tell it what you desire additional or small of, and your recommendations react in genuine time, adapting inside the identical meeting to indicate what matters to you correct now.”

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Stevie Bonifield

Coris (YC S22) Is Hiring Back End Engineer

support@mycoding.id (Riki Setiawan) — Tue, 13 Oct 2026 18:00:39 +0700

🧠 About Coris

Coris is the AI phase for hazard and financial operations. Platforms, marketplaces, fee providers, and banks - GoFundMe, Clio, Cherry, and a expanding catalog - use Coris to onboard merchants faster, detect them continuously, and act on fraud without adding headcount. One client described us as "Cursor + Lovable for hazard teams."

We're backed by Y Combinator, Lux Capital, and Pathlight, founded by payments-domain experts, and expanding quickly on client pull. We're a small team; this employ owns a ample portion of the backend.

👥 Who you'll activity with

Coris was started by Vinodh (CEO) and Shyam (CTO). We've all spent 20+ years in fraud and hazard management, operating hazard engineering, operations and merchandise teams at Google, eBay, PayPal and WePay. You'll activity immediately alongside the two of us in Palo Alto.

🚀 Why this function matters

Every Coris decision runs on data we drag from fee processors and platforms: Stripe, Adyen, Fiserv, TSYS, Repay, and more, complete APIs, webhooks, and SFTP document feeds - hundreds of millions of events a month, billions of rows in Postgres. On top of that sits a signals and rules engine, an document graph, and the partner-facing API our customers build on.

Here's the honest type of the work. Files attain out of command complete SFTP. One processor sends dates in UTC, another in the merchant's local time, and neither says which. A processor's decrease code lives in a distinct pillar than the spec says. A webhook ships malformed JSON at 2am. A backfill employee runs out of recollection on a 40B-row table. A customer's hazard guide says "our numbers appearance off" and needs an answer today.

We're hiring the engineer who volition own all of that end-to-end, and who thinks it's the engaging part - since all integration we create reliably is one a competitor hasn't, and that's the moat. Getting the boring activity correct all period is how enduring companies are built!

🥷 What you'll do

Own processor and phase integrations. Build and run ingestion from Stripe, Adyen, Fiserv, TSYS, Repay, and new processors as we sign them: APIs, webhooks, and lot document feeds. Make them correct, idempotent, observable, and PCI-safe.
Own the partner API and customer-specific work. Extend the v2 API, build per-customer configuration and signals, and activity immediately alongside customers' hazard and ops teams to rotate a vague study into a fix, fast.
Build the hazard engine. Add signals and rules to the DAG motor that scores merchants and transactions; scheme Postgres schemas, indexes, partitions, and aggregations that remain accelerated at billions of rows.
Run it in prod. Celery workers, backfills, deadlocks, circuit breakers, latency, Sentry monitoring. You container it, you own it.
Use AI everyplace it earns its place. Coding agents for archetypal drafts and refactors, AI assessment on all PR, and LLMs inner the merchandise (dispute agents, document parsing, organized extraction). You'll additionally assistance set the team's standards for how we use these tools.
~10–20% product-facing TypeScript/Next.js whenever a characteristic needs it.

📅 Your archetypal 90 days

Week 1: your archetypal PR is merged and operating in production.
30 days: you're picking up significant features and shipping them.
60 days: you're taking on harder problems and construction genuine degree in one or additional parts of the system, akin processor integrations, the hazard motor or the partner API.
90 days: you're the go-to individual for a important part of the platform.

✅ You may be a fit if

Nobody matches all row below. If most of it appears akin you and the activity complete is the benevolent you desire to do, we'd akin to comprehend from you.

A few years shipping manufacturing Python backends (Django/Postgres or close; 3+ years is a guide, not a cutoff). Ideally you've owned a scheme in manufacturing through growth: schema changes on ample tables, concurrency and locking bugs, backfills, on-call. You're at residence in SQL and can peruse a query plan, or desire to get extremely fine at it.
An AI-native way of working. You attain for coding agents (Claude Code, Codex, Cursor or similar) by default, and you've built item alongside LLMs that group use, at activity or on your own. If you're before on this curve but moving fast, inform us what you've built.
Judgment concerning what AI produces. You have a awareness for which changes to let an delegate run alongside (test scaffolding, a well-specified refactor, a immigration you can diff) and which to peruse row by row (anything touching money, cardstock data or PII, a schema alter on a huge table, locking and concurrency). You desire to comprehend all row of a diff before it ships, and you treat AI assessment comments as input, not instruction.
You akin the schlep. Integrations, escalations, backfills, document formats from 1995. You see the form in the disorder and don't scorch out on it, since you comprehend why it's the product.
Comfortable alongside customers. You'd be at ease, or eager to get there, on a call alongside a customer's hazard team, saying "give me an hour," and coming rear alongside the answer.
Committed to the startup outcome. You desire equity that matters and you activity akin an owner: comfortable alongside ambiguity, alongside lengthy weeks whenever it counts, and alongside being in the area 5 days a week.

🙏 Nice to have

Payments, merchant risk, underwriting, or fintech backdrop (Stripe, Adyen, Plaid, Ramp, a PayFac or ISO).
Prior early-stage startup experience.
Built a rules engine, indication pipeline, entity-linking / chart system, or characteristic store.
SFTP and batch-file integrations, fixed-width or bequest formats, PCI-scoped data handling.
Shipped LLM features in manufacturing - organized extraction, agents alongside tools, evals.

🤝 How we work

Bias toward act and measurable impact; we container fast, measure, and iterate alongside genuine client feedback.
Everyone owns their code in prod.
AI-first development: agents write, humans own. Every PR gets an AI assessment and a individual one if necessary.
In-person, 5 days a week in Palo Alto. Like any high-growth startup, we go fine beyond the customary 40–50 hours a week.

Coris is construction the AI tier for payments hazard and operations. We activity alongside the most aspiring platforms, marketplaces, and fee providers about the globe specified as GoFundMe, Kajabi, Clio and Cherry to automate and accelerate merchant onboarding, monitoring, and decision-making. What hazard teams lone imagined two years ago, Coris is delivering today alongside our hazard phase and AI agents.

We’re backed by Y Combinator, Lux Capital, Pathlight Ventures, and another world-class investors.

A redesigned Play Store is coming to cars with Google built-in

support@mycoding.id (Emma Roth) — Tue, 13 Oct 2026 18:00:00 +0700

Emma Roth

is a news author who covers the streaming wars, person tech, crypto, social media, and much more. Previously, she was a author and publishing company at MUO.

The Google Play Store is getting a big update for cars alongside Google built-in. On Tuesday, the company announced that the Play Store’s layout volition now automatically modify to the size and layout of your car’s display during making it easier to discover and download new apps.

The update, which is rolling out in the coming weeks, volition put featured apps on the Play Store’s homepage and authorize you to download them alongside a sole tap. It additionally comes alongside what Google says is a “streamlined navigation” list that puts “Apps,” “Games,” “Search,” and “More” options on the remaining flank of your display (or on the top if your car’s display has a vertical orientation).

Cars alongside Google built-in differ from the company’s infotainment functioning system, Android Automotive, in that it allows conveyance manufacturers to merge Google’s services and assistance for native Android apps immediately into their vehicles. The business brought an early type of its application integration to the Polestar 2, before rolling it out to the Honda Accord Touring in 2023.

Along alongside an overhauled Play Store, Google is additionally adding new apps, akin Starz, Firefox, Ludo King, and JioHotstar, that you can use during parked. Google volition additionally authorize you to observe YouTube videos on your dashboard whenever parked and continue listening to audio during driving, although this characteristic is lone accessible to YouTube Premium subscribers.

Google has been gradually adding additional apps and features to cars alongside Google built-in and recently replaced Google Assistant alongside Gemini AI throughout a range of supported vehicles from Ford, GM, Honda, Nissan, Volvo, and others.

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Emma Roth

Google makes it easier to launch your vibe-coded apps

support@mycoding.id (Emma Roth) — Tue, 13 Oct 2026 18:00:00 +0700

Emma Roth

is a news author who covers the streaming wars, person tech, crypto, social media, and much more. Previously, she was a author and publishing company at MUO.

The next period you vibe-code a tradition app alongside Google’s AI Studio, you won’t have to nexus your phone to a device to instal it. On Tuesday, Google announced a new feature in the US that volition authorize you to initiate individual apps immediately through the Play Store.

Google first launched the capability to vibe-code individual Android apps in May. Even although you can now initiate your tradition apps in Google Play, the business notes it volition continue to keep them “secure, private, and distinct from the community shop catalog.” You can additionally initiate them using a norm Google account, and the business volition shortly add the capability to portion your app alongside a choose collection of people, too.

Though this power create it easier to perform about alongside experimental apps, Google is positioning it as an on-ramp of sorts for fledgling developers. “If you desire to portion your app alongside the world, Google Play helps you alumnus to a expert developer document alongside the identical Trust & Safety reviews and high-quality standards as expert developers,” Sam Bright, Google’s vice chairman and broad director of Google Play, writes in the announcement.

Follow topics and authors from this narrative to see additional akin this in your personalized homepage nourish and to obtain email updates.

Emma Roth

Why Slowing Down Was the Boldest Move I Made as a New Leader

support@mycoding.id (Jonathan Leaf) — Tue, 13 Oct 2026 18:00:00 +0700

Opinions expressed by Entrepreneur contributors are their own.

Key Takeaways

Your playbook got you here, but it was written for a distinct business in a distinct year.
The fastest way to acquire rely in a new function is to acknowledge what you don’t cognize and display how you scheme to study it.
Slow downward at the commencement so you can sprint afterward — speed for its own purpose isn’t a strategy.u003cbru003e

The archetypal inquiry group ask whenever you obtain on a new guidance role is normally several type of “What’s your plan?”

It is a fair question. When you are new, there is a natural enticement to demonstrate your value by showing up alongside quick answers, or a catalog of things you scheme to fix. I have established that there is a improved location to start.

I’m first on in my function at BILL. The questions I keep coming rear to in these first three months are how do I desire my archetypal days, weeks and months to look. Where should I expend my period and why? How do I band distant noise and “get to signal” quickly? How do I create proximity to the customers and to teams without slowing downward the organization’s work? These are things an entrepreneur is faced alongside all day, whether they are strolling into a new role, expanding a squad or navigating a changing market.

Every chief is tempted to bring their playbook. In my opinion, playbooks are a point-in-time depiction of how things were done — perchance in a distinct company, at a distinct time. 2026 is wildly distinct from equal 2025, let solitary 2020. We have to leverage the lessons from our former during building for the future, backed by contemporary technologies and client expectations.

In a new role, credibility comes from being apparent concerning what you desire to accomplish and getting in the trenches. It comes from learning the business, understanding people’s day-to-day, and the client pains that assistance communicate a go-forward plan. Your job is to hear to the group closest to the client and the work, acknowledge the obstacles preventing them from moving faster, and empower them.

I accept it’s crucial to reconsider the possible, but alter for the purpose of change isn’t helpful. With AI evolving as quickly as it is, there’s additional at stake. AI is reshaping what teams can accomplish, and markets and client expectations can alter quickly. The way I think concerning it is: How do we prioritize, sequence and bring the institution alongside on the journey?

Here are five principles I am using to study before I lead:

1. Question old assumptions, and test your own.

Past decisions should communicate but not decide current choices. The decisions that were correct a twelvemonth ago, or equal six months ago, may not be correct now. The mindset should be: What is operating fine today? Where are customers encountering friction? Where do teams copy work? Which assumptions concerning the way we run are according to current actuality and which ones are merely holdovers?

That doesn’t average all decision made before you arrived is wrong, fair don’t depend on the former to create go-forward decisions.

2. Diagnose before you decide.

As a applicable functioning discipline, study before act is essential. Finding what’s value keeping is fair as crucial as finding out what’s missing or needs to evolve. A new procedure or organizational alter may ultimately be necessary, but measure the need first. Ask: What issue are we trying to solve? What does the institution and the client really need? And could innovation assistance us location it additional effectively? This is one location anywhere cognition really can count. I lately instituted a forecasting procedure that didn’t be before. Its deficiency puzzled me, and cognition told me it was crucial to the company’s forthcoming success.

3. Let experts be experts

Your function is to build, align and empower a team, not be the domain expert in all area. In the past, I have had jobs anywhere I needed domain expertise, but the bigger and additional complex a guidance function becomes, the additional you have to let that go. A new chief earns trust by recognizing the ability already inner the institution and making it apparent that functional leaders have genuine ownership.

4. Be candid concerning what you don’t yet know.

Credibility does not necessitate projecting total certainty. It requires being honest concerning anywhere you need to study and showing that you have a disciplined way to do so. In a function this broad, that method construction and aligning the team during empowering the group closest to all domain to guide alongside their expertise.

My duty is to bring those perspectives together, assistance the squad activity toward its finest and create the conditions for us to win collectively.

I use AI as a second brain. As I was starting at BILL, I received hundreds of documents, including commission decks and inner materials. Leveraging them, I used our primary AI tool to build role-specific resources to assistance me operate. It wasn’t difficult, and I now use AI as a second sound that helps me sift through and recall ample volumes of information. It’s item that you can use to strategize and validate alongside. There’s a lot to remember, and AI can really be a companion in that regard. I can use it to quickly revisit the former of an initiative, explain an acronym or prompt myself of the strategic rationale rearward a decision.

Key takeaway

The archetypal weeks in a new function are not concerning proving that you have all answer. They are concerning creating the conditions for improved answers: getting near to the customer, learning from the group who cognize the activity best, challenging assumptions and being deliberate concerning anywhere to act.

You cannot delay everlastingly to create decisions, but speed for speed’s purpose is not prudent, so dilatory downward a bit at the commencement before you commencement to sprint. In a market moving as quickly as this one, the leaders who volition be most productive are the ones who study fast, ask difficult questions and provision their teams the clarity and confidence to move onward together.

Show HN: How Random Are You?

support@mycoding.id (Riki Setiawan) — Tue, 13 Oct 2026 17:57:57 +0700

Loading the page…

MC Project

Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain

Background: V8 and Renderer Sandboxes

Stage 1: Mutating the Immutable

For extremely ample values of “2”

The fix

Stage 2: Two WebPs Diverged in a V8 Cage

Getting One WebP to TOCTOU Another

From a heap overflow to one chosen native write

The fix

The WASM/WCP Handoff

Stage 3: The Renderer Refuses to Chill Out

Defeating the freeze

Rewiring a live Crashpad writer

The fix

Swapping Out the Middle

Conclusions

Russian bot farms are still trolling, even after Ukraine’s drone strikes on Yandex

Rivian spinoff Mind Robotics hires Doug Field as president

Better Messaging Only Gets You So Far. Before You Change Your Marketing, Learn From Your Customers’ Complaints.

Key Takeaways

Customers don’t distinct the brand from the experience

Complaints can disclose two distinct problems

Good promotion can create a bad issue worse

Complaints inform you what customers really experience

Marketing should bring the exterior earth inside

A plea not to use uv-build

Being chronically online is part of the job description for this top influencer marketer

Poppi's actuality TV affection affair

How Poppi plant alongside pop civilization icons

Big Soda, bigger opportunities

Read next

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

I don’t miss the camera on the Ray-Ban Meta Audio glasses

The Good

The Bad

Agree to Continue: Ray-Ban Meta Audio

How AI Is Helping Companies Catch Performance Issues Before They Turn Into Major Incidents

Key Takeaways

Why are we motionless evaluation akin it’s 2015?

What happens whenever AI predicts problems?

Can your infrastructure grip this?

Where individual judgement motionless matters

The genuine ROI

Key Takeaways

Why are we motionless evaluation akin it’s 2015?

Ukraine isn't focused only on making drones and missiles — it's also prioritizing the jet engines inside

Read next

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Show HN: Deslop – Oxlint rules for AI-generated TypeScript

Standard rules enabled by the recommended config

The White House is in its Trump-fueled SI era

Read next

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

This Major Red Flag Could Mean That the Role You’re Applying for Is a ‘Ghost Job’

Key Takeaways

Why shade jobs exist

What to do concerning older listings

Key Takeaways

Show HN: XY Music Notation

After traveling to all 50 states, I think these 6 state parks are some of the country's most incredible hidden gems

Devil's Lake State Park in Wisconsin has item for everyone.

Coopers Rock State Forest in West Virginia is the ideal location to observe the sunset.

Letchworth State Park in New York is residence to stunning waterfalls.

Visiting Utah's Kodachrome Basin State Park feels akin strolling into another world.

Matthiessen State Park in Illinois feels magical.

Eldorado Canyon is one of my favorite province parks in Colorado.

Read next

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know

Business Insider tells the innovative stories you desire to know