OpenAI Codex CLI, Isar Aerospace’s Orbit First, and Embedding Models – Sep 6

Codex: OpenAI's terminal coding agent CLI

openai/codex

• ★ 121.8k
• ⮂ 18.7k

Codex is OpenAI's open-source coding agent that runs in the terminal, written in Rust and released under the Apache-2.0 license. It installs as a lightweight CLI on Mac or Linux and works directly in the developer's shell. The repository shows significant adoption with 121,817 stars and 18,690 forks, though it also has 15,501 open issues to review before relying on it.

all-MiniLM-L6-v2: compact sentence-embedding model

sentence-transformers/all-MiniLM-L6-v2

• ♥ 5,560
• ⇣ 255M

all-MiniLM-L6-v2 is a sentence-transformers model that maps sentences and paragraphs to a 384-dimensional dense vector space, used for tasks like clustering and semantic search. It is Apache-2.0 licensed and available in multiple formats including PyTorch, ONNX, safetensors, and OpenVINO, easing deployment across runtimes. With 255,006,933 downloads and 5,560 likes, it is one of the most widely adopted embedding models on Hugging Face.

AI Engineering Is Easy. Changing How We Work Is Hard

• ♥ 34
• 💬 23

AI engineering sounds fancy. New terms are everywhere: agentic development, AI-native engineering,… Context: Dev.to – AI/ML.

bge-m3: multilingual multi-function embedding model from BAAI

BAAI/bge-m3

• ♥ 3,468
• ⇣ 38.2M

BGE-M3 is an embedding model from BAAI for sentence similarity, usable via the sentence-transformers library with PyTorch and ONNX exports. Built on XLM-RoBERTa, it supports multi-functionality (dense, sparse, and multi-vector retrieval), multi-linguality, and multi-granularity for inputs up to long documents. It is MIT-licensed and has 38,226,728 downloads and 3,468 likes on Hugging Face.

bert-base-uncased: Google's foundational English fill-mask model

google-bert/bert-base-uncased

• ♥ 2,986
• ⇣ 56.2M

bert-base-uncased is Google's original BERT base model, pretrained on English text with a masked language modeling objective and used for fill-mask tasks and as a base for fine-tuning. It ignores case and ships in the transformers library across PyTorch, TensorFlow, JAX, Rust, CoreML, ONNX, and safetensors formats. It is Apache-2.0 licensed and shows 56,175,564 downloads and 2,986 likes on Hugging Face.

LLMs as a Cognitive Virus

• ▲ 248
• 💬 186

An arXiv preprint in the Physics and Society category, "Large-Language Models as a Cognitive Virus," uses an epidemiology-inspired framing to model how large language models propagate through human populations, and it drew substantial Hacker News attention with a score of 248 and 186 comments. The abstract page itself was the only retrieved context, so the paper's specific claims, methods, and findings could not be verified from the available snippets.

Markov Chain Monte Carlo: the 1953 algorithm hiding under modern AI

• ♥ 15

Hello, I'm Maneshwar, and I'm building LiveReview — a blast-radius aware AI code review built for… Context: Dev.to – Machinelearning.

SGLang: fast serving framework for large language models

sgl-project/sglang

• ★ 35.5k
• ⮂ 8,584

SGLang is an open-source Python framework for serving large language models and multimodal models, designed for high-throughput, low-latency inference and deployment. It is written in Python under an Apache-2.0 license, with topic tags covering attention, CUDA, Blackwell hardware, DeepSeek, diffusion, and GLM. The project has 35,516 stars and 8,584 forks on GitHub, and recent activity includes day-0 support for Kimi K3.

GPT-6 Astra on robot arms

• ▲ 143
• 💬 96

A technical report comparing OpenAI's GPT-6 Astra against Claude Fable 5.1 for controlling a pair of YAM robot arms under the same agent policy. In blinded interleaved trials on a block-into-bowl task, GPT-6 Astra succeeded 19/20 versus 8/20 for Claude Fable 5.1; both scored 2/20 on a puzzle task, and GPT-6 Astra used 80% fewer output tokens. The Hacker News discussion drew 143 points and 96 comments.

I trained my AI agent to burn less money. Here's what actually worked.

• ♥ 5
• 💬 4

A few months ago I became convinced my AI assistant was bleeding money through incompetence. It felt… Context: Dev.to – DevOps.

The scanner read 2581 files and reported zero. The defect was on line 403.

• ♥ 5

On 2026-09-04 I pointed a scanner at langchain-ai/langchain. Shallow clone of the default branch,… Context: Dev.to – Python.

Multiple Browser Agents Need More Than Separate Profiles

• ♥ 3
• 💬 3

A development report on browser workspaces, project bindings, exclusive leases, and controlled handovers between humans and agents. Context: Dev.to – Web Dev.

Reflexio

Reflexio makes AI agents better with every interaction. When users correct an agent, a path fails, or something works particularly well, Reflexio turns that experience into behavior the agent can reuse next time. Instead of leaving valuable lessons buried in logs, your agent continuously learns what to repeat and what… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

BrickForgerAI

Type a prompt, get a buildable brick model. The AI (image + mesh gen) is just the front door. The real work is the brick-placing engine: voxelizing the shape, tiling it with actual LEGO-compatible parts, staggering seams for strength, running structural analysis (gravity load) to catch weak points, then refining with… Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

dif.sh

Open source feature flags. Every flag is a markdown file that lives with the code it controls: what it does, why it exists, and what you decided, reviewed in a PR like any other change. Your coding agent installs Dif in one command, no account, and reads the context file so it knows what's live and what was already tr… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

GitWarren

It’s a local, PR-like code review app that works directly with your working tree. You can review committed, staged, unstaged, and untracked changes, leave inline comments, and organize the work into actual reviews without having to push anything anywhere. You connect whatever AI you're using through MCP and have a coh… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Hyperprobe

HyperProbe is how backend teams debug production issues they can't reproduce locally. Instead of adding a log line and waiting on a deploy, we let Claude Code, Codex, or Cursor drop read-only probes into a running service and capture the variable state that was never recorded. From there your agent debugs like it has… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Experiential Labs

Experiential is the open source, zero markup gateway for BYOK, self-hosted and 1000+ marketplace models. It learns from your traffic to cut costs, recommend better models, and train a specialized model you own. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Ponytail

Ponytail is a plugin that makes coding agents write the least code that works. Before adding anything, it checks whether the change is needed, already exists, or can use the stdlib or a native API. Same behavior, fewer lines to own. Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

Companies Have 6 Months to Prepare for Automated Attacks

This is a community discussion post on Reddit's r/artificial arguing that organizations face roughly a six-month window to prepare for AI-driven automated attacks. The signal is community-sourced and unverified; only the Reddit thread title is available, so the specific claims, threat scenarios, or evidence behind the six-month estimate cannot be confirmed from the provided context. Practitioners should treat it as community sentiment rather than established analysis.

AI companies are dumping $265M into the midterms as data center backlash sweeps through communities

A community-shared article claiming AI companies are pouring $265 million into midterm election campaigns while local opposition to data center construction grows across affected communities. The reported spending is framed as a response to rising political friction over the land, power, and community impact of AI infrastructure buildouts. Practitioners tracking AI policy may find it relevant to how data center expansion becomes politicized.

Trump Says AI Will Create 'Millions and Millions' of Jobs as He Defends Data Centre Boom

A news article shared and discussed on Reddit's r/artificial community, in which US President Trump defends the ongoing data-centre construction boom and argues that AI will generate 'millions and millions' of jobs. The claim runs counter to widespread concern among practitioners about AI-driven job displacement, which is likely why it drew community discussion. Detailed article content beyond the headline was not available in the fetched context.

GPT-6 reportedly jailbroken within 24 hours using an extended Task-in-Prompt (TIP) attack

A community report claims that GPT-6 Astra was jailbroken within 24 hours of release. The described attack combines the Task-in-Prompt (TIP) technique from an ACL 2025 paper with four other unnamed methods; TIP exploits a model's reasoning and instruction-following behaviour by hiding harmful requests inside an extended prompt task. This is an unverified community signal, not confirmed detail.

What will LLMs never do?

A discussion post on r/artificial revisits the question of inherent limits of large language models, arguing the topic received far more attention in earlier years than it does now. The poster notes past claims that LLMs would never reach AGI, suggests progress is steadily closing that gap, and personally expects AGI within roughly 12-18 months. The thread invites counterexamples and skeptical replies.

Am I the only one thinking AI workflows are more of a burden than relief?

A Reddit discussion on r/artificial in which a user argues that AI workflows, despite polished multi-agent demos, often cost more effort than they save in practice. The poster describes spending three hours configuring a local setup for basic daily tasks, only to watch it fail, contrasting advertised automation with hands-on maintenance burden. It reflects a wider practitioner debate about real-world AI productivity claims.

If an AI agent can act on the internet without asking you every time should we actually trust it ?

AI agents are getting scary good. Were moving from AI that simply answers questions to AI that can actually take actions online edit things, use websites and interact with other systems. Recent reports about AI agents making thousands of changes on their own made me wonder: At what point should an….

It matters who teaches you

An essay by Bastian Gruber arguing that replacing human teaching with LLMs is a dead end. Drawing on his own struggles with school structure despite a love of learning, he contends that who teaches you shapes how and whether you learn, and that machine instruction cannot substitute for human teachers. It is aimed at practitioners weighing AI in education.

Is it too much to ask devs to use AI to review their hand-crafted code?

A Lobste.rs discussion thread questioning whether developers should run their hand-written code through AI review tools. The post prompted 102 comments, indicating substantial community engagement. Practitioners are weighing whether machine review is a reasonable expectation in code review workflows, though the specific arguments for and against are contained in the thread itself rather than the available context.

exploitarium: public archive of exploit PoCs and vulnerability research

bikini/exploitarium

• ★ 4,745
• ⮂ 1,255

exploitarium is a GitHub repository collecting proof-of-concept exploits and vulnerability research writeups, presented as unreported findings that visitors may disclose themselves. It is written in Python and has 4,745 stars and 1,255 forks. The README notes the author's fuzzing workflow was automated by AI under a strict workflow, and the repo asks users not to abuse the published material.

Verification: public data.

CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability

A security signal for CVE-2026-85046, a type confusion vulnerability in Google Chromium's V8 JavaScript engine. The item appears in the CISA Known Exploited Vulnerabilities catalog, indicating it is confirmed as listed there and likely requires prompt attention from operators running affected Chromium-based software. No fetched technical detail was available; affected versions, exploitation specifics, and mitigation steps should be verified against the NVD entry and the prim…

CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability

CVE-2026-59822 is an improper authentication vulnerability in BerriAI LiteLLM, the proxy/API gateway for large language models. It is listed in the CISA Known Exploited Vulnerabilities catalog, meaning federal agencies and many enterprises are expected to remediate it promptly. Specifics such as affected versions, exploit mechanics, and patches were not available in the provided context and should be confirmed via the NVD entry.

CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability

This is a disclosed vulnerability in Kludex Starlette, the Python ASGI web framework, involving HTTP request/response smuggling, and it has been added to the CISA Known Exploited Vulnerabilities catalog, indicating active exploitation. The signal lists CISA KEV confirmation, but the fetched NVD page provided no substantive details, so the specific affected versions and fixes should be checked against the primary advisory.

Verification: cisa kev confirmed.

Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility)

An academic paper (arXiv 2607.24888, cs.CR) demonstrating a Thompson-style trusting-trust attack propagated through an entire Linux distribution, using the strip binary utility as the injection vector. The attack embeds malicious logic in the toolchain so that compromised binaries reproduce the compromise when rebuilt, making it hard to detect from source code alone. It matters to practitioners building reproducible or verifiable builds.

Verification: community signal; use the linked source as context, not final confirmation.

I Built a Version Bump Tool in Rust That Is 10,000x Faster Than Its Python Counterparts.

• ♥ 18

Hello, fellow version-bumping enthusiasts, sleep-deprived Rustaceans, and accidental software… Context: Dev.to – Rust.

Visualizing Rust's Vtables: How dyn Trait Works In Memory

• ▲ 160
• 💬 31

A technical article with interactive visualizations explaining how Rust's dynamic dispatch works under the hood. It walks through how a dyn Trait object is laid out in memory as a fat pointer pairing the data pointer with a vtable pointer, and what that vtable contains. The piece drew 160 points and 31 comments on Hacker News, indicating community interest in the topic.

OpenLogi: local-first Rust replacement for Logitech Options+

AprilNEA/OpenLogi

• ★ 19.6k
• ⮂ 595

OpenLogi is an open-source desktop app, written in Rust, that configures Logitech mice and keyboards as a local-first alternative to Logitech Options+. It communicates over HID++ to remap buttons, adjust DPI, and configure SmartShift scrolling, requiring no account and sending no telemetry. The README warns it is under active development and not yet stable. It has 19,583 stars and 595 forks.

skills: open-source TypeScript toolkit from Humanlayer

humanlayer/skills

• ★ 2,821
• ⮂ 80

skills is an open-source repository from Humanlayer, written in TypeScript and MIT-licensed, that has gathered 2,821 stars and 80 forks on GitHub. Per its README, the project narrows React component prop types to match live code paths rather than Storybook, test, or mock-only states, aiming to keep type checks aligned with code that actually ships. It has 7 open issues on the main branch.

zopt: low-ceremony command line parsing for Zig

zopt is a low-ceremony, schemaless command line argument parsing library for the Zig programming language, hosted on Codeberg. It aims to let developers handle CLI arguments without writing argument schemas or boilerplate declarations. The project surfaced via Lobste.rs community signal, indicating practitioner interest in lightweight parsing options within the Zig ecosystem.

M2: Episode 1 (or, Asahi Linux on M3)

A blog post from the Asahi Linux project, the effort to run Linux on Apple Silicon Macs. This installment, framed as the first episode covering the M2 generation work, discusses progress toward supporting newer Apple hardware such as the M3. It sits outside the project's regular progress reports and offers implementation-level detail relevant to anyone following reverse-engineered driver and platform support work.

Pointing at the error: compiler-style diagnostics in uutils coreutils

An engineering blog post from the uutils project, which rewrites the essential Unix command-line utilities in Rust as cross-platform replacements for GNU coreutils. Written by Sylvestre Ledru and dated Aug 31, 2026, it explains how the tools now emit compiler-style diagnostics that point directly at the offending part of the input, like a compiler underline in source code. This matters for practitioners because clearer errors reduce debugging time in shell pipelines.

How To: Federated Stars

An engineering blog post by Domain Driven Architecture explaining how the first star federation feature is being completed in Forgejo, the open-source code hosting platform. The final pull request (codeberg.org/forgejo/forgejo/pulls/1680) adds the ability to define relationships between repositories, such as the origin of mirrors or forks, so stars can federate across instances. It walks through the implementation for practitioners building on Forgejo.

Cloud in a Bottle: making self-hosting accessible to everyone

• ▲ 319
• 💬 134

Cloud in a Bottle is an open-source personal cloud project whose launch post argues self-hosting should feel like using a smartphone that serves webapps rather than a sysadmin side job. It packages containerized applications with unified authentication and a focus on good user experience, aiming to lower the barrier for people running their own services. The launch drew a Hacker News discussion scoring 319 points with 134 comments.

108 TESTS PASSED. VERIFIED?

• ♥ 7

A green test suite is evidence. It is not independent evidence. The current release of badBANANA… Context: Dev.to – DevOps.

at8pm

Every entry you write today locks at the time that you configured — 8pm by default. Once it locks, that's it: no editing, no rewriting history, no quietly polishing what you actually felt in the moment. Just an honest, raw, and unfiltered record of your day. Entries sync across your devices with your own private iClou… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

CommuteBar

Glance at traffic. Leave on time. CommuteBar puts live commute times visibly on your Mac menu bar, no app-switching required. Save multiple destinations like office, school, gym. Schedule automatic switching for recurring commutes and get leave soon / leave now indicators and optional notifications. You also get route… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

PostBox

PostBox turns the MacBook notch into a drag and drop poster for the work you make. Drag an export in, write the caption once, and post to X, Bluesky, Threads, LinkedIn, Dribbble, Instagram, Threads, Pinterest Behance and Cosmos at once. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Private German rocket makes history, reaches orbit from European soil

• ▲ 496
• 💬 257

Isar Aerospace's Spectrum rocket made history today (Sept. 5), becoming the first vehicle ever to reach orbit from European soil.

Dev Opportunity Radar #15: HackerRank Orchestrate, Claude Campus Ambassadors & the Bharat Builds Tour

• ♥ 49
• 💬 8

TL;DR Welcome back to Dev Opportunity Radar. This is a weekly series where I share opportunities,…

The "$60 Gaming PC" – AMD BC-250 (2025)

• ▲ 328
• 💬 98

An article and discussion about building a cheap gaming PC from the AMD BC-250, a board originally used for blockchain mining that sells cheaply on the secondhand market. The author notes the "$60" figure is optimistic: the board alone can occasionally be found for that on eBay, but typically costs around $70-$100 as of November 2025, which remains inexpensive for the hardware. The Hacker News thread (328 points, 98 comments) examines the practical trade-offs of this approac…

Chrome again exempts Google from user site data settings

• ▲ 288
• 💬 42

A blog post documenting that Chrome exempts Google's own sites from the browser's user-configurable site data settings, reviving an issue the author first reported six years ago. The finding matters to practitioners because it means privacy controls for cookies and site data behave differently for Google properties than for other sites. The Hacker News discussion drew 288 points and 42 comments.

The revolt of the reader

• ▲ 276
• 💬 103

An essay by Bryan Cantrill titled "The revolt of the reader," hosted on his personal blog, The Observation Deck. The available snippet indicates only that the piece opens by stating that reading is important to the author, suggesting a reflective essay on reading rather than a technical deep dive. It drew notable Hacker News engagement with a score of 276 and 103 comments. The fetched page content was too thin to detail the essay's full argument.

Learn Programming with OCaml

• ▲ 229
• 💬 86

Learn Programming with OCaml Learn Programming with OCaml by Sylvain Conchon and Jean-Christophe Filliâtre This book on OCaml is an English translation (by Urmila Nair ) of this book in French .

I'm 12. My Code Jam got zero submissions. So I built a platform for it.

• ♥ 14
• 💬 2

Last week I ran the first KODA Code Jam — a tournament where developers build niche single-page apps,… Context: Dev.to – Web Dev.

We Throw Away 1.3 Billion Tons of Food While Millions Starve. I Built FoodBridge with Snowflake to Stop It

• ♥ 6
• 💬 1

This is a submission for Weekend Challenge: Generosity Edition Three years ago, I volunteered at… Context: Dev.to – Web Dev.

[ Removed by Reddit ]

[ Removed by Reddit ] is a technology signal with supporting context: Community Pulse | r/artificial | verification: community_signal.

What filesystem are you running on your NAS/Backups, and why?

A Lobste.rs discussion thread in the Systems section asking practitioners which filesystem they run on their NAS and backup storage, and their reasoning. The thread has drawn 43 comments, indicating an active exchange of real-world operator experience. For engineers planning storage setups, such threads surface practical trade-offs around filesystems like ZFS, Btrfs, and ext4, though the specific arguments appear only in the comment thread itself.

Bespoke: A Programming Language for People Who Say Please

Bespoke is a new statically typed programming language introduced in a blog post, motivated by the author's view that modern languages are full of "violence, vulgar abbreviations, and naked imperatives" in their naming and syntax. It is positioned as an alternative where exceptions and other constructs follow a more courteous, polite style. The post is practitioner-oriented and has drawn discussion on Lobste.rs.

NYC PIT Crew

A practitioner-shared link from Lobste.rs pointing to a New York City government page for the "PIT Crew" program. The item is essentially a bare URL to nyc.gov with no fetched article text or additional context supplied, so the program's specific purpose, eligibility, and technical details cannot be summarized from the available information. Readers would need to visit the page directly for specifics.

There's No Limit to How Bad Code Can Get

An essay on software engineering arguing that common metaphors for declining code quality, such as 'a sinking ship', are misleading. The author's point is that a business will sink long before code quality reaches any hypothetical floor, and that technical debt has no equivalent of bankruptcy or clean reset. Metaphors implying an endpoint therefore give teams a false sense of security about accumulating decay.