PixelsTech

Google AI Plus ($4.99/month) loses Gemini Pro on November 13. In the Gemini app and AI Mode in Search, Plus subscribers can then pick only Flash and Flash-Lite; Pro needs AI Pro ($19.99) or higher. Existing Pro chats continue on another model.

GitHub's Skyline site is gone, but its CLI extension still works: gh extension install github/gh-skyline, then gh skyline --year 2024 --output my-skyline.stl gives you a 3D-printable model of a year of contributions. pixelstech.net/article/17378…

testing.AllocsPerRun reported 0 for a Go function that allocated 20 times. Go Weekly, 2026-11-02 ~ 2026-11-09: 8 posts. 4 worth your time: 1. Go 1.27 adds stable encoding/json/v2 and jsontext, fixing v1 flaws with options, streaming, better performance, and compatibility. 2. Go accepted a generic Set for golang.org/x/exp, defined as map[E]struct{}. A nil Set panics on Insert, so the zero value is not safe. 3. Go accepted maps.Grow to pre-size an existing map. On Go 1.27.3 a pre-sized merge ran up to 59% faster, but slower when sized for keys already present. 4. A Go developer shows how one generic MustCreate test helper replaces repetitive per-type helpers, with MustCreate2 for multi-parameter constructors. All 8 links, grouped by topic: substack.com/home/post/p-224…

WebCodecs audio encoders add priming silence but still stamp the first packet at 0, so encoded audio lags the video. Apple's AAC encoder adds 2112 samples, 44 ms at 48 kHz. Mediabunny 1.63.0 now measures each encoder's delay at runtime and writes negative timestamps instead.

A failed CREATE INDEX CONCURRENTLY leaves an INVALID index. If it died in the second scan or final wait, every write still maintains it and a unique one still enforces uniqueness, though no query uses it. Find them with NOT indisvalid in pg_index, then DROP INDEX CONCURRENTLY.

Every Mac since macOS 13 runs knowledgeconstructiond and intelligenceplatformd, building a graph of who you know from Contacts, Photos, Calendar and Family Sharing, per Eighth Rank. On 26.6.2 it's 51 SQLite databases in ~/Library/IntelligencePlatform, behind Full Disk Access.

CPython’s experimental JIT is leaving main. Its authors withdrew PEP 836 on Oct 19, and removal is expected early in the 3.16 cycle. Speedups had been small and only for some programs, such as long-running tight loops. pixelstech.net/feed/link/857…

Trying NVIDIA’s NVKE preview, its open-source Kubernetes engine for GPU operators? After install the API serves plain HTTP on port 30080 with authentication off, and NVKE does no authorization. There is no backup/restore or management-plane upgrade yet either.

Go's accepted generic Set (golang.org/x/exp/collection/…) is type Set[E comparable] map[E]struct{}. So a zero-value Set panics on Insert, == doesn't compile, and JSON encodes it as an object of {} values, not an array. Initialise every Set field. #golang

Run SourceHut with registration closed? Since 2021, POST /register/step2 still created accounts if SMTP was set up: the handler only checked the setting on error paths. A CSRF token from /login works. Fixed Nov 3 (CVE-2026-121728). Check meta's /users for unknown accounts.

Installed or updated the Claude Code extension in Cursor on Oct 29? Look for an SSH key labelled svc-telemetry. A trojanized 2.1.313 was on Cursor's marketplace for about 11 hours. It adds an attacker SSH key plus a LaunchAgent or scheduled task that retries a reverse tunnel.

Chrome's Save as PDF leaves blank boxes where images should be when a page lazy-loads them. Scroll to the bottom before you press Ctrl+P. Pages that scroll inside a box, like long chats, only print what fits in it. pixelstech.net/article/17938…

Building SQLite with zig cc? Zig's rewritten strspn measures the whole remaining string on every call, so a tokenizer stepping through a large input goes quadratic. One developer's JSON inserts took minutes; tokenizing a 1.2MB file was about 12,000x slower.

SET COMPRESSION lz4 on a Postgres column only affects new writes. In a test on 18.6, VACUUM FULL, UPDATE doc = doc and INSERT ... SELECT into an lz4 column all left 20,000 rows on pglz. Only a new value (doc || '[]') recompressed. pg_column_compression() tells you which.

Upgraded to Next.js 15.5.28 for the October RCE fixes? Check sharp in your lockfile. 15.5.28 still allows sharp 0.34.x, and the image RCE needs 0.35.5 or later. Two of the three advisories also have no CVE ID, so scanners keyed on CVEs miss them. pixelstech.net/article/17937…

OpenAI pointed an unreleased model at the Linux kernel's master branch and got 948 distinct privilege-escalation bugs with working exploits, for $1.2M in API credits. Its advice to admins: a low-privileged account on a box that is behind on patches should be treated as root.

encoding/json/v2 is stable in Go 1.27. encoding/json now runs on top of it with v1 options, so old code keeps working. v2's defaults differ: case-sensitive field matching, errors on duplicate keys and invalid UTF-8, nil slices as []. Unmarshal is up to 10x faster. #golang

Researchers broke the built-in browsers of five AI coding tools. In Codex and VS Code, a local HTML file could read files outside the project, SSH keys and tokens included, and neither was patched at disclosure. Cursor and Copilot have fixes. pixelstech.net/feed/link/855…

PostgreSQL 19 now ships November 19 instead of October 29, with an extra RC2 on November 12. About 8 to 10 features were pulled after beta, SQL/PGQ graph queries among them. Many are expected back in PostgreSQL 20.

319 Chrome extensions hijacked searches for 13.4M users with a manifest entry, not code. chrome_settings_overrides made the operator's proxy the default search engine; it logged queries and added Bing or Yahoo referral IDs. Most were unlisted, spread via PDF converter ads.