Google

Rivian documents a one-click switch that fully severs the vehicle from the internet. LinkedIn is found probing 6,278 browser extensions and shipping an encrypted fingerprint with every request. honker.dev packs durable queues, streams, pub/sub, and cron into a single SQLite file. A Shai-Hulud-themed malicious dependency lands inside PyTorch Lightning — the AI training supply chain just took a direct hit. V2EX has parallel threads on shaky Chinese token plans and engineers paying out of pocket to use Claude at work. Google ships Managed Agent API and Antigravity 2.0 as the post-I/O second wave. SpaceX’s S-1 reveals a $1.25B/month compute deal with Anthropic. Mozilla formally opposes Chrome’s built-in Prompt API. Today’s thread — the defaults for privacy, supply-chain trust, and compute economics are all being rewritten at once.

Simon Willison breaks down what the xAI/Anthropic Colossus deal actually means, HN argues agents need control flow not more prompts, AI slop debate hits the front page again, Anthropic ships a finance-agents stack, Google DeepMind publishes AlphaEvolve impact, and Chrome quietly retracts its on-device AI privacy claim.