OpenAI adds API credits to ChatGPT Pro and Business — but grants expire and Codex is excluded
OpenAI's new API credit grants can lower the cost of prototyping apps and agents, but eligibility, expiration, API limits and excluded Codex usage matter.
Search
Search results for “Reddit logged in only”
Find published research by company, product, platform or technology.
Showing 461–480 of 558 dossiers
Rust 1.98.1 and 1.99.1 fix separate compiler miscompilations — rebuild affected binaries
The October 15 Rust 1.99.1 release fixes a separate FFI bool miscompilation after September's 1.98.1 vtable bug. Check toolchain pins and rebuild artifacts produced by either affected compiler.
Ahrefs tracks 37,500 AI citations: half vanish overnight, but most return
Ahrefs tracked roughly 37,500 cited websites for 20 days and found high daily citation churn, frequent recoveries and major differences between AI tools.
Cloudflare's Q3 DDoS report: short attacks surge as giant floods fall 69%
Q3 Cloudflare telemetry: 18.2 million network-layer attacks, 96% under ten minutes, but far fewer terabit-scale floods.
GitLab's CVSS 10 CI regex flaw targeted Alpine Linux — custom Ruby images can remain vulnerable after GitLab upgrades
Alpine rebuilt its GitLab after attempted exploitation and warns that upgrading GitLab alone may not patch custom containers using unpatched Ruby.
Tailscale 1.104.4 fixes Tailworm SSH root-escalation path — headscale needs separate review
Tailscale 1.104.4 is now tagged as a stable release after Tailworm's SSH and Serve findings. Audit SSH forwarding, update clients and assess headscale separately.
Chrome 155 stops firing unload by default after a years-long rollout — sites must use page lifecycle alternatives
Chrome 155 no longer fires unload handlers by default. Sites relying on unload for saves, analytics or cleanup should migrate to visibilitychange, pagehide and resilient delivery paths.
Safari 27 blocks email-based identity resolvers at the network layer — first-party personalisation remains
Safari 27 blocks third-party email-to-ID resolvers by domain. First-party personalisation remains allowed; the affected vendor list and measured advertising impact remain unverified.
Artificial IntelligenceWeb DevelopmentCloud & InfrastructureCompute & AI InfrastructureOpen ModelsDeveloper ToolsActive dossier
PyTorch 2.15 release candidate brings FP8 and major Metal fixes to local AI on Macs
The PyTorch 2.15 RC changes what Apple-silicon developers can run locally: FP8, faster MPS decoding, new GPU operators and a video VAE memory fix. The reported 5–6.5x gain is not universal.
Umami 3.4.1 urges self-hosters to patch Next.js RCE and MCP OAuth leakage
Umami v3.4.1 fixes a critical Next.js next/og RCE, image-optimisation SSRF, cache poisoning, an MCP OAuth credential leak and other dependency flaws. Self-hosted users should upgrade and rebuild or pull fresh Docker images; no migration is required.
OpenAI frontier models reach Google Cloud — with Marketplace billing against cloud commitments
Google Cloud customers gain a new route to OpenAI models with unified governance and cloud-commitment billing, but broad availability and some privacy features are still forthcoming.
DuckDB 2.0 LTS ships Quack client/server, async I/O and a breaking storage format
DuckDB 2.0 is now stable, but older versions cannot read databases newly created in 2.0. Test a shadow deployment before upgrading and check extension/client compatibility.
GitHub can now require authentication for public Git clones during traffic protection
GitHub's October 19 traffic protection can make previously reliable anonymous public-repo fetches fail; the change is selective, not a blanket private-repo requirement.
Tailscale MagicRoute beta changes how private networks select routers and service backends
Tailscale's new MagicRoute beta lets eligible organisations choose priority-based routes per client rather than regional grouping. It affects multi-region subnet access, service hosts and exit-node recommendations.
YouTube Music starts labelling AI-made tracks — disclosure without a recommendation ban
The new AI-music labels change metadata and listener-facing disclosure for labels, distributors and creators, but do not by themselves establish lost monetisation, algorithmic suppression or reliable automated detection.
Apple extends App Store moderation to AI-generated content and tightens hidden-feature rules
AI image and social-app developers face clearer moderation and review obligations; hiding features can threaten an entire developer account.
H3 v2 rewrites the Nuxt/Nitro HTTP layer around Web APIs — and changes route matching
A small but foundational JavaScript HTTP framework has reached v2 with a web-standards rewrite. Builders must test route wildcards, forwarded-header trust and explicit response returns before migrating.
Codeberg Pages v2 shuts down December 31 — static sites need a git-pages migration
A hard shutdown date makes this more than a hosting refresh: unmigrated Codeberg Pages sites will go offline, and the replacement changes deployment and URL behaviour.
Docker Hub's GhostPat flaw let one account mint registry access as another for two years
CVE-2026-105445 moved personal access tokens across Docker Hub identities without rotating their secrets. Affected users were notified and tokens deactivated after the September 30 fix, but the two-year exposure illustrates a container supply-chain trust boundary.
Apple’s EU payment rules are live — RevenueCat automates alternative checkout reporting
Apple’s EU payment rules are operational, not future-tense. RevenueCat reduces transaction reporting work for eligible alternative checkouts; the fees, App Review, 12-month commitment and uncertain in-app-sheet rollout remain.