From 38 items, 11 important content pieces were selected
- Stripe and Advent Offer $53B to Acquire PayPal ⭐️ 9.0/10
- Many old shim versions still accepted by Secure Boot ⭐️ 9.0/10
- DeepSeek’s annualized revenue nears $500M, V4 API margins top 50% ⭐️ 9.0/10
- Inkling: A New Open-Weights Multimodal Model with Audio Support ⭐️ 8.0/10
- Claude web_fetch exploit leaks user memories ⭐️ 8.0/10
- Lockless MPSC FIFO queues for io_uring in Linux 7.2 ⭐️ 8.0/10
- Disentangling Convolutional Neurons via Hadamard Product Analysis ⭐️ 8.0/10
- 7 Major Smartphone On-Device AI Models Registered in China ⭐️ 8.0/10
- Chinese retail vertical segmentation ends as players converge ⭐️ 8.0/10
- Google and Epic Drop Motion, Third-Party App Stores Coming to Google Play ⭐️ 8.0/10
- Telegram Launches Serverless Platform for Bots and Mini Apps ⭐️ 8.0/10
Stripe and Advent Offer $53B to Acquire PayPal ⭐️ 9.0/10
Stripe and private equity firm Advent International made a joint offer to acquire PayPal for over $53 billion, according to sources. This acquisition would combine two major payment platforms, potentially reducing competition and raising antitrust concerns in the fintech industry. The offer is over $53 billion, and if completed, would bring together Stripe, PayPal, Venmo, Braintree, and Xoom under one umbrella.
hackernews · rvz · Jul 15, 03:32 · Discussion
Background: Stripe is a major online payment processor, while PayPal is a leading digital wallet. Both companies compete in the online checkout space. Antitrust regulators may scrutinize the deal due to potential market concentration.
Discussion: Commenters expressed strong opposition, citing concerns about fee increases, reduced competition, and Stripe's restrictive policies on certain merchants. Some noted potential antitrust issues due to high market share.
Tags: #fintech, #acquisition, #payments, #antitrust, #Stripe
Many old shim versions still accepted by Secure Boot ⭐️ 9.0/10
CMU CERT Coordination Center has disclosed that many exploitable versions of the shim bootloader were never added to the Secure Boot revocation list, allowing attackers to bypass Secure Boot protections and execute arbitrary code during early boot. This oversight undermines a fundamental security mechanism in Linux systems, potentially allowing persistent compromise that survives reboots and OS reinstalls. The advisory includes a list of vulnerable shims, but many were missed from the revocation list (DBX), which is used to block untrusted UEFI modules from loading.
rss · LWN.net · Jul 15, 12:49
Background: Secure Boot is a UEFI security feature that ensures only signed and trusted bootloaders can run. The shim bootloader acts as a bridge between UEFI firmware and the Linux bootloader, and a revocation list (DBX) is used to blacklist known vulnerable versions. Failure to add compromised shim versions to this list leaves systems exposed.
References
Tags: #security, #secure boot, #linux, #bootloader, #vulnerability
DeepSeek’s annualized revenue nears $500M, V4 API margins top 50% ⭐️ 9.0/10
DeepSeek has achieved an annualized revenue of $400-500 million, primarily from enterprise and developer API calls, and its V4 API gross margin exceeds 50%. The company also plans to raise $7.4 billion at a $74 billion valuation. This milestone demonstrates strong commercial adoption and profitability for DeepSeek, validating the viability of its API business model against competitors like OpenAI and Anthropic. The massive valuation and fundraising indicate high investor confidence and potential for further growth in the competitive AI landscape. The annualized revenue is based on recent monthly run rates, not actual full-year realized revenue. DeepSeek achieved high margins despite charging significantly less than OpenAI and Anthropic, by optimizing infrastructure to reduce the number of chips needed to run its models.
telegram · zaihuapd · Jul 15, 07:04
Background: DeepSeek is a Chinese AI company known for developing large language models. The DeepSeek V4 API, launched in April 2026, is compatible with OpenAI and Anthropic API formats and is designed to offer cost-effective frontier AI capabilities. The company has also attracted investment from Tencent, CATL, and other major firms in its first funding round.
References
Tags: #DeepSeek, #AI, #Revenue, #API, #Fundraising
Inkling: A New Open-Weights Multimodal Model with Audio Support ⭐️ 8.0/10
Thinking Machines AI released Inkling, a large open-weights multimodal model that supports audio input and enables fine-tuning on the Tinker platform. As one of the largest open-weights models supporting audio, Inkling provides enterprises and developers a customizable, locally deployable alternative to closed-source models, potentially reducing costs and fostering innovation in multimodal AI applications. Inkling is not the strongest overall model but combines multimodal capabilities, efficient thinking, and availability on Tinker for fine-tuning, making it a practical base for customization. Community resources for local deployment include llama.cpp branch, Unsloth, and Hugging Face GGUF/NVFP4 versions.
hackernews · vimarsh6739 · Jul 15, 18:12 · Discussion
Background: Open-weights models are AI models whose trained parameters (weights) are publicly released, allowing anyone to download and modify them. This contrasts with closed models like GPT-4, where only API access is given. Inkling supports audio as well as text and images, making it multimodal, though it does not support video. The Tinker platform allows users to fine-tune the model for specific tasks without deep expertise.
References
Discussion: Community comments express enthusiasm for Inkling's audio capabilities and local deployment potential, with one user noting it might be a leading open-weight model from US-based Thinking Machines. Another comment praises the business model of offering open base models for fine-tuning on Tinker, enabling enterprises to own customized models at lower cost. Overall sentiment is positive, focusing on practical applications.
Tags: #AI, #open-weights, #multimodal, #fine-tuning, #HN
Claude web_fetch exploit leaks user memories ⭐️ 8.0/10
Security researcher Ayush Paul discovered a prompt injection attack that bypasses Claude's web_fetch tool protections, allowing attackers to extract private user memories such as name, location, and employer by tricking the AI into following malicious links embedded in fetched pages. This attack demonstrates a practical bypass of Anthropic's carefully designed defenses, underscoring that even sophisticated protections against the 'lethal trifecta' can be circumvented by creative exploits. It affects all Claude users who have enabled memories and web_fetch, and highlights the ongoing challenge of securing AI agents against data exfiltration. The attack relied on a honeypot webpage that presented a fake authentication system requiring the agent to navigate alphabetically through user profile URLs. Anthropic declined a bug bounty claim, stating they had already internally identified the vulnerability, and subsequently fixed the issue by preventing web_fetch from following additional links retrieved within fetched content.
rss · Simon Willison · Jul 15, 14:21
Background: Prompt injection attacks exploit the ability of large language models to follow instructions embedded in untrusted content. When an AI agent has the 'lethal trifecta'—access to private data, ability to process untrusted input, and a tool that can communicate externally—attackers can trick it into revealing sensitive information. Claude's web_fetch tool was designed with restrictions that only allow fetching URLs that were either directly entered by the user or returned from its web_search tool, to prevent this. However, the loophole allowed following links within fetched pages, enabling the data exfiltration attack.
References
Tags: #AI safety, #prompt injection, #security vulnerability, #Claude, #exfiltration
Lockless MPSC FIFO queues for io_uring in Linux 7.2 ⭐️ 8.0/10
Linux kernel 7.2's io_uring subsystem will replace its current lockless linked-list (llist) task tracking with a lockless multi-producer, single-consumer (MPSC) FIFO queue, resulting in notable performance gains. This change improves fairness and reduces cache contention for high-performance I/O workloads, directly benefiting applications using io_uring for asynchronous I/O. The new queue uses a tail pointer and a stub sentinel node to maintain FIFO order without the need for list reversal, and avoids the retry loop and cache-line bouncing inherent in the old head-based llist approach.
rss · LWN.net · Jul 15, 13:35
Background: io_uring is a Linux kernel interface for asynchronous I/O, using shared ring buffers between userspace and kernel. It currently tracks work items using a lockless singly linked list (llist), which acts as a stack and requires reordering before processing, leading to inefficiencies.
Tags: #linux kernel, #io\_uring, #lockless data structures, #performance, #MPSC queue
Disentangling Convolutional Neurons via Hadamard Product Analysis ⭐️ 8.0/10
The author proposes a novel technique to interpret neurons in Inceptionv1 by computing the Hadamard product of the receptive field and weights, then clustering to reveal monosemantic feature clusters like cars, cats, and dogs. This work is an important contribution to mechanistic interpretability, providing a new method to analyze convolutional neurons at a fine-grained level. It could help researchers better understand and verify the internal representations of vision models, advancing AI safety. The analysis revealed that low-valued clusters (e.g., letters) had all their dependent neurons firing on the same concept, with positive and negative weights evenly distributed to reduce the sum, suggesting deliberate gradient descent behavior. The method was applied to the mixed4e layer of Inceptionv1.
reddit · r/MachineLearning · /u/narang_27 · Jul 15, 06:59
Background: Mechanistic interpretability aims to reverse-engineer neural networks by understanding their internal algorithms and circuits. Inceptionv1 is a convolutional neural network architecture that uses 1x1 convolutions to reduce dimensionality. The Hadamard product is an element-wise multiplication operation used here to combine receptive field and weight information.
References
Tags: #mechanistic interpretability, #convolutional neural networks, #interpretability, #AI safety, #deep learning
7 Major Smartphone On-Device AI Models Registered in China ⭐️ 8.0/10
Seven on-device language models from Apple, Huawei, OPPO, vivo, Xiaomi, Samsung, and ZTE were officially registered with China's Cyberspace Administration on July 8, 2024, covering their respective AI assistants. This regulatory milestone signals that major smartphone AI features can be deployed compliantly in China, accelerating on-device AI adoption and potentially setting a precedent for AI governance. The registered models include Apple Intelligence, Huawei Xiaoyi AI Large Model, OPPO AndesGPT, vivo BlueMind Intelligent Large Model, Xiaomi Hyper AI, and Samsung Galaxy AI, all designed for on-device use.
telegram · zaihuapd · Jul 15, 08:06
Background: On-device AI models run directly on smartphones rather than in the cloud, offering faster response and better privacy. Chinese regulators require registration for AI products to ensure safety and compliance with laws.
References
Tags: #AI regulation, #on-device AI, #mobile AI, #China
Chinese retail vertical segmentation ends as players converge ⭐️ 8.0/10
A research report based on 257 interviews and 5,224 surveys reveals that vertical segmentation in Chinese retail has ended, with Sam's Club, snack discount stores, instant retail platforms, and Pinduoduo now directly competing for the same household spending. Sam's Club's annual revenue in China is estimated at 180–200 billion yuan, snack store chains have nearly 40,000 outlets, and Pinduoduo's Duoduo Maicai has around 300 billion yuan in sales, potentially reaching 400 billion yuan this year. This convergence signals a fundamental shift in China's retail landscape, where traditional format boundaries dissolve and trust and physical proximity become decisive factors. For consumers and businesses alike, understanding this new competitive dynamic is essential for strategic decision-making. The research found that 48% of respondents plan to control spending, and when shopping offline, distance is more important than price—for food and other ingestible products, excessively low prices actually trigger safety concerns, making trust the primary competitive factor.
telegram · zaihuapd · Jul 15, 09:01
Background: Chinese retail has historically been segmented by format and price range, with different players serving distinct consumer segments. However, with economic slowdown and shifting consumer behavior, boundaries have blurred: premium warehouse clubs like Sam's Club, ultra-low-cost e-commerce platforms like Pinduoduo, convenience-focused instant retail, and price-aggressive snack discount stores now all target the same household budget. Instant retail enables delivery within 30–60 minutes, and Duoduo Maicai (Pinduoduo's community group-buying arm) has expanded rapidly across hundreds of cities.
References
Tags: #retail, #China, #e-commerce, #consumer behavior, #market research
Google and Epic Drop Motion, Third-Party App Stores Coming to Google Play ⭐️ 8.0/10
Google and Epic Games have jointly withdrawn a motion to modify a permanent U.S. court injunction, forcing Google to allow third-party app stores on Google Play starting July 22, 2025. This marks a major shift in Android's app distribution landscape, potentially increasing competition and lowering barriers for alternative app stores, which could impact Google's dominant position and revenue from the Play Store. Third-party stores must pay an annual $5,000 security and policy review fee, cannot distribute outside the U.S., and must be open to developers with clear trust and safety policies. Outside the U.S., Google plans to use its upcoming 'Registered App Store' sideloading program later this year.
telegram · zaihuapd · Jul 15, 11:15
Background: Sideloading on Android refers to installing apps without using the Google Play Store, typically via APK files. In the ongoing antitrust battle, Epic Games sued Google over its app store policies. The new 'Registered App Store' program by Google will offer a simplified installation UI for certified stores outside the U.S., with no transaction fees.
References
Tags: #Android, #Google Play, #Epic Games, #反垄断, #应用商店
Telegram Launches Serverless Platform for Bots and Mini Apps ⭐️ 8.0/10
Telegram has officially launched a serverless platform that allows developers to run backend code for bots and Mini Apps directly on Telegram's infrastructure, eliminating the need to manage servers. Deployments are done via a single command: npx tgcloud push. This significantly lowers the barrier for bot development, as developers no longer need to set up and scale their own servers. It also integrates tightly with Telegram's Bot API, potentially improving performance and reliability for millions of bots. The code runs in an isolated V8 sandbox close to the Bot API and includes a built-in SQLite database. Developers write standard JavaScript modules and deploy with a single command.
telegram · zaihuapd · Jul 15, 16:00
Background: Serverless computing allows developers to run code without provisioning or managing servers. Telegram's platform specifically uses V8 sandbox isolation to securely execute untrusted JavaScript code, similar to how Cloudflare Workers or AWS Lambda operate. This launch extends Telegram's bot ecosystem by offering a managed runtime environment.
References
Tags: #serverless, #telegram, #bots, #platform, #deployment