Monday, 2 November 2026
China issues first frontier AI export controls; Trail of Bits patches 149 Linux CVEs with Codex; Calegari: mathematics has changed
Today's Lead
EngineeringCloud Security Alliance
China's First Frontier AI Export Controls: MOFCOM Announcement No. 48
China's Ministry of Commerce (MOFCOM) proposed 40 technologies for its export restriction list, 23 of them artificial intelligence (AI) items. The draft restricts frontier model weights that meet any of three tests. Tests include 10^26 floating point operations (FLOPs) of training compute, 2 trillion parameters, or a global top-10 ranking. The Cloud Security Alliance (CSA) note warns that enterprises should review Chinese-origin AI models before the public comment period closes on November 15, 2026.
Engineering
Trail of Bits
Backporting security fixes at scale with Codex
Trail of Bits uses Codex to find, adapt, and test security fixes for older software. Many fixes reach only the newest releases, so users of long term stable (LTS) versions stay exposed. As of September 2026, the Linux 5.10 stable branch had 2,006 unfixed Common Vulnerabilities and Exposures (CVEs). By October 29, the Codex workflow had helped deliver 149 CVE fixes to stable Linux kernels, cutting work from days to hours. The article warns that unpatched flaws grow easier to exploit as artificial intelligence (AI) tools find bugs.
Terence Tao (blog)
Mathematics has changed. Let's act like it
Mathematician Frank Calegari argues, in a guest post on Terence Tao's blog, that artificial intelligence (AI) has changed mathematics. On October 6, OpenAI released over 700 research papers, which Calegari calls a major turning point. He notes that some of these papers are poorly written, break attribution norms, or are wrong. He asks mathematicians to change how they judge work, hire staff, review journals, and train students. He argues that incentives shape behavior more than rhetoric does, so the field should reward problem choice, understanding, and clear explanation, not only proofs.
Trigger.dev
Security Disclosure: Sunday November 1st
Trigger.dev disclosed a security incident that occurred on November 1, 2026. An attacker gained unauthorized access to environment variables for a subset of organizations. The page does not state how many organizations were affected or what caused the incident. The exploit used in the attack is now blocked. Impacted account owners received an email with steps to mitigate the exposure.
Cloudflare Blog
How we halved DNS build delay and cut memory use by 85%
Cloudflare rebuilt its Domain Name System (DNS) zone builder so it rebuilds only the records that a change affects. Previously, each zone setting change rebuilt the entire zone, which failed for zones with over 20 million records. A planner now chooses the smallest build it can prove is safe, and a scheduler merges queued work for the same zone. Equivalence tests confirmed that targeted builds match full builds byte for byte, and a mirror system compared production output before rollout. Average memory use fell 86 percent, from 49 to 7 gibibytes (GiB), and the largest build delay spike fell from 14.6 to 1.21 minutes.
Humanities
Aeon
The self-making world of Jean-Baptiste Lamarck
Jessica Riskin writes about Jean-Baptiste Lamarck, a French scientist of the early 1800s. Lamarck argued that organisms change their own bodily form through their behaviour and way of life. Mainstream biology rejected this view, and the giraffe example became a caricature of his theory. Recent studies of epigenetic inheritance, animal behaviour, and niche construction now support parts of his view. The author argues that organisms are active agents in evolution, not passive objects.
JSTOR Daily
The Disappearing History of America's Nuclear Weapons
The article draws on a 2020 study by Jason Krupar in Technology and Culture. The Cold War arsenal peaked at about 63,600 warheads in 1985. Rocky Flats, near Denver, Colorado, made plutonium pits, the triggers of warheads. A 1989 raid by the Federal Bureau of Investigation (FBI) and the Environmental Protection Agency (EPA) found plutonium losses. Today, the site is a restricted cleanup zone, but its production history is rarely remembered.