Saturday, 17 October 2026
Claude cracks NIST elliptic curve mystery; Postgres 19 delayed as AI reviewers outpace human fixers; autonomous agents develop Bitcoin inequality unprompted
Today's Lead
EngineeringFilippo Valsorda
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
The NIST elliptic curve seeds came from a random number generator in 1997 or 1998. An Anthropic team solved the seed riddle and claimed the bounty on October 15, 2026. The team gave the prize to the Internet Security Research Group (ISRG), the nonprofit behind Let's Encrypt. The team also found the method that made the B-curve seeds. The findings rule out a 2017 attack proposal by Bernstein and Lange. The author now recommends these curves over Curve25519.
Engineering
Claude Code
How the Claude Code Team Does Code Review
The Claude Code team uses automated review for most pull requests (PRs). Claude writes about 90% of the code for Claude Code. Monorepo changes rose from 2,500 per day in May to over 30,000 in September. Most PRs need at most one human approval. Layers include AI review, security review, required CI, and a merge queue. Feature flags and fast rollback reduce the risk of merged code.
Mercor
A Benchmark Map of the US Economy
Mercor released the Benchmark Map, a tool that checks AI benchmark coverage of US jobs. The map uses the O*NET taxonomy of 923 occupations and 18,797 tasks. Benchmarks from 29 sources cover 208 occupations and 924 tasks. Mercor estimates that 90% of American working hours have little or no benchmark coverage. Coverage is highest for AI-exposed tasks, such as software engineering and financial analysis. Mercor calls the results provisional.
The Register
Postgres 19 Delayed After AI Reviewers Find More Bugs Than Humans Can Fix
PostgreSQL 19 is now due around November 19, 2026. Developers removed eight to ten features from the release. Artificial intelligence (AI) review tools found many small edge-case bugs. The team did not have time to fix all the bugs before launch. SQL Property Graph Queries (SQL/PGQ) was removed and will likely move to PostgreSQL 20.
Cloudflare
Continuous Accountability for Verified Bots
Identity alone does not make a bot safe. Bots can still ignore site rules, overload servers, or evade controls. Verified bots must identify themselves, do only what they state, and avoid abuse. Cloudflare checks if crawlers follow robots.txt rules over time. Results appear as a trust band, and Cloudflare plans to publish scores on Cloudflare Radar.
Humanities
JSTOR Daily
The Women Breaking the Rules of Balinese Dance
The article profiles the Luh Luwih troupe, a Balinese dance group. Most of its thirty members are middle-aged women. The troupe performs kecak, a genre once off-limits to women. Scholar Catherine Diamond says these women change gender norms in Balinese arts. Some performers give classic stories more assertive female characters. Tourism also opens more roles for women.