Friday, 21 August 2026

Rust supply chain attack hits arrayref crate; GitHub's eight-hour outage post-mortem; Aaron Swartz's prosecution echoes as Meta faces little consequence for AI data scraping

Today's Lead

Engineering

Rust Blog

Supply Chain Attack on arrayref

On August 20, 2026, the Rust Security Response Team found a supply chain attack in the Rust package ecosystem. Attackers compromised accounts for popular crates like arrayref, internment, and append-only-vec. The malicious versions lasted less than two hours before the team removed them. Users must check their dependencies to identify and remove any cached malicious packages.

Read →

Engineering

GitHub Blog

The August 17 Outage and the Work Ahead

A critical infrastructure component in GitHub's Central US data center failed to scale with unprecedented traffic on August 17. The 7 hour 47 minute outage disrupted authentication, Actions, APIs, and Copilot globally. GitHub added 3 million CPU cores and 120 petabytes of storage to improve reliability.

Read →

Bun Blog

Bun v1.4

Bun 1.4 marks the first release of Bun's complete rewrite from Zig to Rust. The release adds fifteen built-in standard library tools and improves performance across memory, startup speed, and CPU usage. New developer tools support parallel script execution, concurrent testing, and dependency management.

Read →

arXiv

DiffusionGemma Technical Report

DiffusionGemma uses discrete diffusion to generate text in parallel blocks instead of one token at a time. The researchers fine-tuned Gemma 4 with two training stages that use less than 10% of the original token budget. The model produces 1,500 output tokens per second on a single NVIDIA H100 GPU, which is much faster than autoregressive methods.

Read →

Cloudflare Blog

From all-or-nothing to task-based OAuth consent

Cloudflare releases optional OAuth scopes. Users can now deselect optional permissions during consent instead of approving all permissions or none. Applications must work with the scopes that users approve.

Read →
Humanities

Aeon

Why the Andoque of the Amazon Fear the Seductive Dolphin

The Andoque people of the Amazon hold mythology that warns of seductive dangers. River dolphins in their folklore represent forbidden desires and the pull of external culture. These myths help the Andoque resist assimilation and keep their cultural identity strong.

Read →

JSTOR Daily

The Culture Wars of The Phantom of the Opera

Andrew Lloyd Webber's The Phantom of the Opera sparked political and cultural debates during the 1980s. Critics disagreed about whether commercial success and popularity damaged artistic merit. The musical reflected broader anxieties about free-market capitalism, British cultural influence, and class divisions in taste.

Read →