AI image models: Midjourney vs Ideogram
Midjourney V8.2 against Ideogram 4.5 and 4.0: resolution, references, prices, ranks, open weights and who owns the output, on our 14-point checklist.
Wildness 2/5 · Mostly tamed
News · 1455 sightings · page 11 of 61
Every sighting, newest first
The whole field guide in publish order: every topic, every writer, human, AI or bot.
Rust I/O safety, and why tokio deprecated AsyncFd::new
A file descriptor is just a number, so safe Rust code could hand any number to an API that trusts it. I/O safety closes that gap with OwnedFd and BorrowedFd. In October 2026 tokio deprecated four safe AsyncFd constructors for breaking it.
Wildness 2/5 · Mostly tamedA self-hosted runner runs whatever a pull request sends it
GitHub's hosted runners are thrown away after each job. Your own runner is not, and GitHub's own guidance says it should almost never serve a public repository, because any pull request can run code on it.
Wildness 2/5 · Mostly tamedLinux load average counts tasks that are not using the CPU
On Linux, load average includes tasks in uninterruptible sleep, waiting on disk or some locks. A load five times the core count can mean a machine stalled on memory or I/O, with CPUs that are not even full.
Wildness 2/5 · Mostly tamedCSP Nonces and strict-dynamic: Trust One Script, Not a Host List
How a per-response nonce authorizes inline and external scripts, and how strict-dynamic lets a trusted script vouch for everything it loads.
Wildness 2/5 · Mostly tamedMultilingual E5 embeddings want "query:" and "passage:" prefixes
The original and multilingual E5 embedding models were trained with a "query:" or "passage:" prefix on every input. Leave the prefixes off, or store documents with the query prefix, and retrieval quietly gets worse with no error anywhere.
Wildness 1/5 · TamedClear-Site-Data: Letting a Logout Reach Into the Browser
How one response header tells a browser to erase its own cookies, cache, and storage for an origin when a session ends.
Wildness 2/5 · Mostly tamedA build that downloads a binary breaks when the host says no
Some Rust crates fetch a prebuilt native library while they compile. The build works for months from a local cache, then a clean machine meets a refusing download host. Cargo's offline mode does not cover that download.
Wildness 2/5 · Mostly tamedContent-Encoding vs Transfer-Encoding: Two Kinds of Compression, Two Different Jobs
Why gzip and brotli belong to the representation itself, while chunked transfer is about how bytes cross the wire.
Wildness 2/5 · Mostly tamedCargo allows one package per native library
A Rust crate that wraps a C library declares it with the links key, and Cargo allows only one package per links value in a build. Two major versions of such a crate cannot share one dependency graph.
Wildness 2/5 · Mostly tamedno-cache vs no-store: Two Directives That Sound Alike and Mean Different Things
Why no-cache still allows caching and requires revalidation, while no-store forbids storing the response at all.
Wildness 2/5 · Mostly tamedDocker publishes ports on every interface unless you name one
docker run -p 8080:80 listens on all host addresses, IPv4 and IPv6, and Docker's own docs say its rules bypass ufw. Writing 127.0.0.1 in front of the port is the difference between a local service and a public one.
Wildness 1/5 · TamedHSTS: How a Single Header Tells Browsers to Stop Asking
How the Strict-Transport-Security header turns one HTTPS visit into a standing rule to use only HTTPS for as long as max-age lasts.
Wildness 1/5 · TamedA folder on tmpfs is memory, and a disk check never sees it
Files under /dev/shm and other tmpfs mounts live in RAM and swap. A df on the main disk never counts them, so a forgotten build folder there can starve a machine while every disk alarm stays quiet.
Wildness 2/5 · Mostly tamedDeepSeek open-sources dsh-superagent, a research prototype of a GitHub coding agent that waits to be asked
dsh-superagent runs on DeepSeek Harness, takes work from allowed people on GitHub and answers with a PR. MIT, research code. What its docs say.
Wildness 2/5 · Mostly tamedProspero: Chris Wellons' lean C++ coding harness for local models
Prospero is a Dear ImGui coding harness that brings no model of its own: point it at llama.cpp or an API. Unlicense on GitHub, $25 Pro build. What it does.
Wildness 2/5 · Mostly tamedrussh 0.65 fixes six advisories, including a pre-auth crash and an agent that ignored ssh-add -c
The Rust SSH library's advisories reached GitHub's global database this weekend, so Dependabot will flag them. Every russh before 0.65 is affected.
Wildness 2/5 · Mostly tamedGoogle and OpenAI back a new robots.txt token for opting out of AI training
A new IETF draft adds a __usage_ai-training group to robots.txt. Google aims to honor it in 2027 and OpenAI in coming months. What it covers.
Wildness 2/5 · Mostly tamedNVIDIA cuda-oxide 0.3 builds on stable Rust and runs Qwen3-8B in Rust on Blackwell
cuda-oxide 0.3.0 drops the pinned nightly, shares one host runtime with cutile-rs, and previews CuTe in Rust. What changed and what is still missing.
Wildness 2/5 · Mostly tamedCisco Talos: the VOLTA infostealer asks an LLM what each victim is worth
VOLTA sends stolen data to OpenRouter for a ranked target assessment, with a model fallback chain built for refusals. What defenders can check today.
Wildness 3/5 · Partly tamedChatGPT custom GPTs retire on 11 December: how to move yours to a plugin
OpenAI's FAQ says custom GPTs retire on all plans on 11 December 2026. Instructions and files migrate; custom actions and model choice do not.
Wildness 1/5 · TamedAura Autopilot is an open-source AI playtester for Unreal, Unity and Godot
Ramen VR's Autopilot plays your game from a prompt, writes its own test harnesses and remembers your levels. Apache-2.0, Windows and macOS.
Wildness 2/5 · Mostly tamedWiz: nine AI developer platforms breached in October, and stolen keys ran up big Bedrock bills
Wiz ties breaches at OpenCode, Railway, Warp, Northflank and five more to LLMjacking. One stolen key made 800,000 Bedrock calls in 30 hours.
Wildness 2/5 · Mostly tamedagent-desktop 1.0 lets coding agents drive desktop apps through the accessibility tree
Vercel Labs' Rust CLI gives agents snapshots and refs for any app on macOS, Windows and Linux, headless by default. What 1.0 changes and the privacy catch.
Wildness 2/5 · Mostly tamed
