Tech Ai Wire

Ubuntu 24.04's fix for the 9.8-rated Linux TCP flaw CVE-2026-98432 is kernel 6.8.0-149.149. On November 9 it sat in noble-updates only. noble-security still served 6.8.0-147.147, and default unattended-upgrades skips -updates. techaiwire.com/articles/cve-… #Linux

libghostty-vt went stable on November 6, and its version number went down: Ghostty 1.4.0's build called it 1.4.0, the stable release says 1.0.0. A pkg-config check for 1.4 or later now rejects it. KDE's Kwi already lowered its check to 1.0. techaiwire.com/articles/libg… #Ghostty

A Tech AI Wire Git test: deleting a Conductor workspace folder keeps committed work and loses anything uncommitted. Conductor is joining Meta. Its cloud shuts down November 20 and the Mac app winds down in early 2027. Push your agent branches. techaiwire.com/articles/cond… #DevTools

Tools This Week: patch OpenSSH 10.6p2 (an Alpine-style password bypass) and Better Auth 1.7.16 (12 advisories, one critical). Also: Fedora 45, KDE's Kwi terminal, Gemini Omni 1.2 Flash at $0.07 per second of 720p, Inkling 2 Small and ERNIE 5.5. techaiwire.com/articles/tool…

On Alpine, musl's crypt() returns "*" as an error for passwords over 256 bytes. Accounts with no password store "*" too, so a 257-1,024 byte password matched them over SSH. OpenSSH 10.6p2 and Alpine fixed it Nov 5. Update, then restart sshd. techaiwire.com/articles/open… #OpenSSH

rpm -i on Fedora 45: "package taw-hello-1.0-1.noarch does not verify: no signature". dnf install of the same unsigned file: installed, with a warning. RPM 6.1 now demands signatures, so scripts that call rpm directly are what break. techaiwire.com/articles/fedo… #Fedora

Claude Code's game rule, read out of four builds: absent in 2.1.312, in 2.1.314 (Oct 30), widened in 2.1.317 (Nov 2) to a game's name, characters, art, music, levels or look. The tengu_heron_brook flag is in all four. No setting turns it off. techaiwire.com/articles/clau… #ClaudeCode

In Claude Code 2.1.317, claude plugin validate --profile directory refuses a plugin with no README of 40+ words or no license. A deleted name field fails with exit code 1. Our plugin guide, from /plugin install to scopes: techaiwire.com/articles/clau… #ClaudeCode

ChatGPT Plus gets an estimated 5-45 local GPT-6 Astra messages per 5 hours in Codex, or 350-3,000 on GPT-6 Luna. From December, ChatGPT chats draw on that same allowance on Plus, Pro and Business. Only Instant is exempt. techaiwire.com/articles/chat… #OpenAI

Claude Opus 5.5 tops SemiAnalysis's new GDPx agent benchmark at 12.0%, but at $51.41 a task it costs roughly three times Gemini 4 Carbon, which scored 10.9%. Finance and legal tasks stumped every model. techaiwire.com/articles/semi… #AI

Binance reopened withdrawals in phases on Nov 1 after the $6.3B hot-wallet theft. The FBI blames North Korea's TraderTraitor. Binance says 95% of the stolen assets are covered from SAFU and company funds; about $3B sits frozen in USDT and USDC. techaiwire.com/articles/bina… #Binance

Kwi is a new KDE terminal from Eike Hein, built on Ghostty's libghostty-vt and rendered on the GPU with Qt Quick. His benchmarks: 3x-35x faster than Konsole, 870 fps vs 23 in DOOM-fire-zig. Nightly Flatpak builds are out; no tagged release yet. techaiwire.com/articles/kwi-… #KDE

Drupal Commerce Core access bypass CVE-2026-118539 is being exploited: fake orders, some at $0.01. Fix: Commerce Core 3.3.13 or 8.x-2.41 plus the Stripe, Shipping, License and API modules, then audit orders. The hole may date to May 2020. techaiwire.com/articles/drup… #Drupal

Check ~/.ssh/authorized_keys for a key labeled svc-telemetry. Tampered Claude Code builds 2.1.312 and 2.1.313 sat in Cursor's marketplace for about 11 hours on Oct 29, added that key and a reverse tunnel, and left startup tasks that survive an uninstall. techaiwire.com/articles/clau…

One robots.txt group, User-Agent: __usage_ai-training, lets a site opt out of AI training by OpenAI, Google and Microsoft. Microsoft honors it from Feb 1, 2027, Google aims for 2027, OpenAI "in the coming months." A User-Agent: * group does not count. techaiwire.com/articles/robo…

Mistral Large 4's open weights are on Hugging Face: about 1T parameters, 49B active per token, a 1M-token context and 1,060.6 GB in bf16. Terminal-Bench 4.0 went from 28% in preview to 41%, per The Next Web. techaiwire.com/articles/mist…

macOS turns every tap into a click. That is how Apple's first touchscreen Mac runs existing apps on day one, and why hover-only buttons and tooltips get no touch version. MacBook Pro with PROLED XDR: from $2,899, ships November 6. techaiwire.com/articles/macb…

Android Studio Rabbit 2 is stable and runs Claude Agent, Codex and 40+ other ACP coding agents inside the IDE. Android CLI now installs as a plugin for Claude Code and Codex, so agents can build and test apps without the IDE. techaiwire.com/articles/andr… #AndroidDev

Alphabet's free cash flow came out at minus $9.1 billion after $51.4 billion of capex in one quarter. Microsoft paid for its build-out from cash: $18.63 billion of free cash flow, with Azure up 48%. techaiwire.com/articles/micr…

Upgrading GitLab did not close CVE-2026-97229 on Alpine Linux's server. The fix is a patch to GitLab's bundled Ruby, and Alpine runs system Ruby. Attackers tried the CVSS 10.0 bug on October 20-21. Check where your GitLab gets its Ruby. techaiwire.com/articles/gitl… #GitLab