Tech Ai Wire

Ubuntu 24.04's fix for the 9.8-rated Linux TCP flaw CVE-2026-98432 is kernel 6.8.0-149.149. On November 9 it sat in noble-updates only. noble-security still served 6.8.0-147.147, and default unattended-upgrades skips -updates. techaiwire.com/articles/cve-… #Linux

libghostty-vt went stable on November 6, and its version number went down: Ghostty 1.4.0's build called it 1.4.0, the stable release says 1.0.0. A pkg-config check for 1.4 or later now rejects it. KDE's Kwi already lowered its check to 1.0. techaiwire.com/articles/libg… #Ghostty

A Tech AI Wire Git test: deleting a Conductor workspace folder keeps committed work and loses anything uncommitted. Conductor is joining Meta. Its cloud shuts down November 20 and the Mac app winds down in early 2027. Push your agent branches. techaiwire.com/articles/cond… #DevTools

Tools This Week: patch OpenSSH 10.6p2 (an Alpine-style password bypass) and Better Auth 1.7.16 (12 advisories, one critical). Also: Fedora 45, KDE's Kwi terminal, Gemini Omni 1.2 Flash at $0.07 per second of 720p, Inkling 2 Small and ERNIE 5.5. techaiwire.com/articles/tool…

On Alpine, musl's crypt() returns "*" as an error for passwords over 256 bytes. Accounts with no password store "*" too, so a 257-1,024 byte password matched them over SSH. OpenSSH 10.6p2 and Alpine fixed it Nov 5. Update, then restart sshd. techaiwire.com/articles/open… #OpenSSH

rpm -i on Fedora 45: "package taw-hello-1.0-1.noarch does not verify: no signature". dnf install of the same unsigned file: installed, with a warning. RPM 6.1 now demands signatures, so scripts that call rpm directly are what break. techaiwire.com/articles/fedo… #Fedora

Claude Code's game rule, read out of four builds: absent in 2.1.312, in 2.1.314 (Oct 30), widened in 2.1.317 (Nov 2) to a game's name, characters, art, music, levels or look. The tengu_heron_brook flag is in all four. No setting turns it off. techaiwire.com/articles/clau… #ClaudeCode

In Claude Code 2.1.317, claude plugin validate --profile directory refuses a plugin with no README of 40+ words or no license. A deleted name field fails with exit code 1. Our plugin guide, from /plugin install to scopes: techaiwire.com/articles/clau… #ClaudeCode

ChatGPT Plus gets an estimated 5-45 local GPT-6 Astra messages per 5 hours in Codex, or 350-3,000 on GPT-6 Luna. From December, ChatGPT chats draw on that same allowance on Plus, Pro and Business. Only Instant is exempt. techaiwire.com/articles/chat… #OpenAI

Claude Opus 5.5 tops SemiAnalysis's new GDPx agent benchmark at 12.0%, but at $51.41 a task it costs roughly three times Gemini 4 Carbon, which scored 10.9%. Finance and legal tasks stumped every model. techaiwire.com/articles/semi… #AI

Binance reopened withdrawals in phases on Nov 1 after the $6.3B hot-wallet theft. The FBI blames North Korea's TraderTraitor. Binance says 95% of the stolen assets are covered from SAFU and company funds; about $3B sits frozen in USDT and USDC. techaiwire.com/articles/bina… #Binance

Kwi is a new KDE terminal from Eike Hein, built on Ghostty's libghostty-vt and rendered on the GPU with Qt Quick. His benchmarks: 3x-35x faster than Konsole, 870 fps vs 23 in DOOM-fire-zig. Nightly Flatpak builds are out; no tagged release yet. techaiwire.com/articles/kwi-… #KDE

Drupal Commerce Core access bypass CVE-2026-118539 is being exploited: fake orders, some at $0.01. Fix: Commerce Core 3.3.13 or 8.x-2.41 plus the Stripe, Shipping, License and API modules, then audit orders. The hole may date to May 2020. techaiwire.com/articles/drup… #Drupal