Today’s lead · TheHackerNews
ChatGPT shared-link bug let attacker code read private chats
Parameter showed a malicious ChatGPT share link could execute code inside a victim’s logged-in session and read private chats. OpenAI reproduced it, rated it P1, and fixed it server-side. The practical lesson: “shareable AI artifacts” are web apps, and their sandbox boundaries deserve real threat modeling.
Top signals
6 moreOpenAI is moving ChatGPT and Codex onto one usage pool
OpenAI’s help page says Plus, Pro, and Business users will get one token-measured allowance across ChatGPT and Codex from December, with Instant chat excluded. Builders running long Codex sessions should treat this as a budgeting change until OpenAI publishes concrete plan allowances.
Musk claims Colossus 2 is headed toward 860,000 GB300s
An X post quoting Elon Musk says Colossus 2 in Memphis has two buildings packed with GB300s and two more coming online soon, targeting roughly 860,000 NVIDIA GB300s. Treat the numbers as a company-side claim, but the scale underlines how frontier AI is becoming an infrastructure race.
L3G-World uses latent 3D Gaussian memory for real-time world generation
KAIST’s L3G-World couples a persistent 3D Gaussian memory with a video generator, rendering VAE latents directly into diffusion latent space. The interesting builder angle is memory scaling with explored scene extent rather than clip length, if the promised code and models make the results reproducible.
oMLX 0.7.3 adds voice Ask AI and faster local inference paths
oMLX 0.7.3 turns Ask AI into a voice interface for local models and reports major throughput and memory gains for DeepSeek and Qwen workloads. The release is especially relevant if you are squeezing long-context, multi-request inference onto Apple hardware rather than renting cloud GPUs.
Chainalysis says an attacker used agentic techniques to access internal tools
Chainalysis disclosed an intrusion into internal tools that exposed non-sensitive customer identity data, while saying investigation content, credentials, and session tokens were not accessed. The company’s phrase “offensive agentic techniques” is notable, but it has not published the attack method, so treat the AI angle cautiously.
Rock Matrix releases EdgeRock-4B with a fixed-size attention cache
Rock Matrix released EdgeRock-4B, a 4B text-and-image reasoning model whose attention KV cache stays fixed by retaining selected history. That is a useful deployment idea for laptops and edge devices, but the evidence itself says licensing and independent reliability testing are still missing.
Tools & repos
4 selected
SKI
SKI is a Mac harness for running multiple coding agents side by side, with voice-first interaction and notifications when an agent needs you. Useful if your bottleneck is supervising agents, not prompting one at a time.
telemetry.dev
telemetry.dev turns each agent run into a trace, with model calls and tool calls as spans carrying duration, tokens, cost, and errors. It also ties prompts, evals, production traces, and alerts into one workflow.
Backenly
Backenly pitches an autonomous backend for coding agents: Postgres, auth, storage, functions, and realtime built over MCP, then maintained by a self-healing loop. The big claim is operational repair, with human approval for risky changes.
milind-soni/OpenMausBot
OpenMausBot is a TypeScript repo described as an open-source Grok Bot alternative with a virtual machine that bots can use. Its trending spike suggests builders are looking for inspectable agent sandboxes.
Blogs worth your time
1 reads
OpenRouter’s sandboxed AI code reviewer is useful, but not cheap magic
OpenRouter shows a 233-line Python reviewer that uploads changed files into a Linux sandbox, runs checks, and returns patches. The valuable bit is confirmed evidence; the tradeoff is code exposure, beta tools, and reviews costing far more than diff-only prompting.
Community discussions
3 threadsMulti-agent coding needs shared state outside the chats
A builder wants Claude, ChatGPT, and Antigravity to act like a small game-dev team. The grounded advice: put truth in Git, issues, PR handoffs, and dated status notes, because the agents cannot reliably share each other’s chat memory.
Is local-model second-guessing quantization, or just the model thinking too much?
The thread starts with Qwen 3.8 27B repeatedly rechecking solved points, worse under a very low quant. Replies split the cause: BF16 reportedly does it too, while practical fixes focus on handoff files, learned-lessons docs, and tighter session rules.
Indie builders are asking whether Google’s anti-slop cleanup hit them too
An HN poster says two personal projects dropped from 500–700 daily impressions to near zero after an apparent Google anti-spam change. The builder concern is familiar: even useful small-site content can get swept into anti-AI-slop filters when trust is thin.
Funding & acquisitions
1 moves
Foundry Robotics raises $100M Series A for AI-powered factories
Foundry Robotics raised $100 million to expand its Emeryville AI-powered assembly factory. The bet is factories-as-a-service, not robot sales: Foundry owns the line, runs modular robotic cells, and pairs them with human manufacturing teams. Throughput and autonomy rates remain undisclosed.
Bengaluru radar
1 events
Symphony brings India’s Voice AI crowd to Bengaluru on Nov. 20
Bolna’s in-person Voice AI summit promises 1,000+ attendees, talks, launches, buildathon demos, and awards, with builder credits bundled into tickets.