News
Short notes on technology that affects sites and bots. Rewritten in our own words, with a link to the original at the end.
Figma adds 20 MCP partners, yet Dylan Field calls the protocol unfinished
Figma added 20 new partners to its MCP integration, but its co-founder says the protocol is far from perfect and mostly benefits frontier AI labs.
AIMCPDesign3 min read
Beget opens an AI gateway: different models through one API and one balance
Hosting provider Beget launched an AI gateway: several language models via one OpenAI-compatible API, pay-per-token billing and a monthly cap per key.
AIHostingAPI3 min read
ChatGPT adds PIN-locked chats — but they are not encryption
Locked Chats hide conversations from whoever picks up your phone: PIN, Face ID or Touch ID. What it does, what it doesn’t, and why a PIN reset wipes everything.
AIChatGPTPrivacy3 min read
An exploit for two PHP flaws is out before the patch: what to do before 14:00 UTC
Details of CVE-2026-109618 and CVE-2026-109619 have leaked and attack tools are circulating. The patch is due today at 14:00 UTC. A stopgap and a checklist.
PHPSecurity4 min read
A power failure at Google Cloud’s London site took down banks and websites
On 20 October the europe-west2 region threw errors, disrupting Revolut, Lloyds, HSBC, Royal Mail and Rightmove. What one cloud region outage teaches.
HostingCloud3 min read
Spotify pulled 50 million AI tracks from recommendations and deleted 75 million more
How Spotify separates spam from music: listener reactions, metadata and several AI detectors at once. Plus an AI Persona label and artist profile protection.
AIContent3 min read
A private key of “4”: eight eMudhra certificates could have forged HTTPS
Eight intermediate certificates from India’s eMudhra CA had private keys like 4 and 56. Browsers have blocked them, but servers and containers still need updates.
HTTPSSecurity4 min read
PostgreSQL 19 slips: AI code review found more bugs than people could fix
The release moves to around 19 November and drops 8–10 major features. Where LLM-assisted code review comes in, and what it means for projects on Postgres.
PostgreSQLDatabasesAI3 min read
Cloudflare takes over an agent-written Rust port of TypeScript
tsrs type-checks up to 8x faster than TypeScript 7.0 with 70% less memory. Its author wrote no code himself; agents did all of it.
TypeScriptRustAI4 min read
A VMmanager flaw let attackers read client servers at Russian hosting providers
Between 11 and 17 October a VMmanager 6 flaw let attackers copy keys, passwords and tokens off client VPSes. What to check if your site or bot runs on a VDS.
HostingSecurity4 min read
Yelp now sends a voice agent to call the restaurant for you
Check for Me phones the venue, asks how long the wait is, and texts back the answer. What that means for any business that takes calls.
BotsVoice agents3 min read
PHP is closing two critical flaws with an out-of-band patch
On 21 October 2026 at 14:00 UTC, PHP patches two flaws scored 9.2. Details stay sealed until then — what a site owner should check.
PHPSecurity4 min read