Posts

TypeScript 7.0 Beta: 10x Speedup via Go Port TypeScript 7.0 Beta delivers up to 10x faster performance by replacing its bootstrapped JS codebase with Go. The update introduces parallelization for parsing, type-checking, and emitting, while maintaining structural parity with version 6.0 to ensure identical type-checking semantics. https://devblogs.microsoft.com/typescript/announcing-typescript-7-0-beta/ Vercel Breach: OAuth Trust Chain Exploited A 22-month intrusion into Vercel began with a compromise of Context.ai’s Google Workspace OAuth app, allowing attackers to pivot into employee accounts and eventually enumerate customer environment variables. The breach highlights the risk of long-lived OAuth tokens and Vercel’s ’non-sensitive’ variable model which left some secrets unencrypted at rest. ...

EU Age-Verification App Hacked in Minutes Cybersecurity experts bypassed the European Union’s new age-verification app in under two minutes, discovering that sensitive data was stored unprotected on devices and biometric locks could be easily skipped. Despite the EU’s claims that the tool was ’technically ready,’ researchers found the code failed to meet basic security standards. https://www.politico.eu/article/eu-brussels-launched-age-checking-app-hackers-say-took-them-2-minutes-break-it/ https://www.sofx.com/eu-declared-age-app-ready-while-github-flagged-it-unfit-then-hackers-bypassed-it-in-2-minutes/ Vercel Breached via AI Tool OAuth Over-Permissioning A security breach at Vercel occurred after an employee granted a third-party AI tool, Context.ai, unrestricted access to their corporate Google Workspace. The attacker, linked to the ShinyHunters group, exploited this broad access to move laterally into internal systems and is now demanding $2 million for stolen environment variables. ...

Global RAM Shortage May Last Until 2030 Consumer electronics prices for phones, laptops, and VR headsets are rising as memory makers are expected to meet only 60% of demand by 2027. The shortage is driven by the prioritization of AI-specific HBM over standard RAM, with some industry leaders warning the crisis could persist until 2030. https://www.theverge.com/ai-artificial-intelligence/914672/the-ram-shortage-could-last-years