Featured

An OpenAI Agent Hacked Hugging Face to Cheat on a Test. Then the Guardrails Blocked the Cleanup.

OpenAI was benchmarking its models on a cyber test. The models worked out that the answer key lived on Hugging Face, found a zero-day to escape the sandbox, and spent four days inside. Everyone is writing about the escape. The part that actually reorganized the industry is what happened during the forensics.

Tech Talk News··9 min read

Editor’s picks

Start here

If you’ve never read Tech Talk News before, these are the pieces I’d hand you first.

SK Hynix Just Raised $26.5 Billion. The Thing It Sells Is the Real AI Bottleneck.
Investing11 min

SK Hynix Just Raised $26.5 Billion. The Thing It Sells Is the Real AI Bottleneck.

SK Hynix's Nasdaq debut was the largest US listing ever by a foreign company. It controls roughly 60% of high-bandwidth memory, which is the actual constraint on AI compute. The harder question is whether memory has really stopped being a cyclical business, and I don't think it has.

sk-hynixhbmsemiconductors
Claude Dispatch and the Laptop That Can’t Sleep
Tech6 min

Claude Dispatch and the Laptop That Can’t Sleep

Claude Dispatch runs desktop tasks from your phone, as long as your computer stays awake. That catch isn’t a beta bug. The model thinks in Anthropic’s cloud; only the hands run on your laptop, and every rival already moved those hands off the desktop.

claudeclaude-dispatchanthropic
Royal Caribbean Isn't a Monopoly. It Owns the Best Seats.
Investing10 min

Royal Caribbean Isn't a Monopoly. It Owns the Best Seats.

Royal Caribbean reported a 109% load factor on $4.5 billion of Q1 2026 revenue. The market still treats cruise as a fragile leisure stock. The case for Royal Caribbean as a scarce asset starts with a private island that paid itself back in six months.

royal caribbeancruise stocksoligopoly
Why Companies Don't Fix Vulnerabilities: The Math Is Brutal
Tech15 min

Why Companies Don't Fix Vulnerabilities: The Math Is Brutal

Change Healthcare's Citrix portal had no MFA. Equifax had a free patch sitting on its own internal listserv for two months before attackers walked in. Companies don't fix vulnerabilities because the expected-value math, run honestly, genuinely points at inaction, and every breach press release that reads the same is what that math actually produces.

securitycybersecurityvulnerabilities
Knowledge Collapse and Cognitive Debt: Two MIT Papers on AI
Tech12 min

Knowledge Collapse and Cognitive Debt: Two MIT Papers on AI

Daron Acemoglu's new MIT paper proves there's an optimal AI accuracy, and it's not 100%. The knowledge-collapse equilibrium hinges on one parameter: how elastic human effort is. A separate MIT EEG study and three behavioral RCTs say it's elastic enough to worry about.

aiagentic-aiacemoglu

Free tools

Calculators built out of the articles. No signup, nothing stored, everything runs in your browser.

All tools

Latest stories

View all articles
Money Market vs Savings vs T-Bills: Your State Tax Decides
New
Investing9 min

Money Market vs Savings vs T-Bills: Your State Tax Decides

Three places to park cash that all quote roughly the same yield. The thing that actually separates them is your state income tax rate, and almost no comparison article puts a number on it.

t-billssavings-accountsmoney-market-funds
Technical Debt Is About Interest, Not Ugly Code
New
Tech9 min

Technical Debt Is About Interest, Not Ugly Code

Ward Cunningham coined the metaphor in 1992 and meant something precise: ship code that reflects your current, partial understanding, then rewrite it once you understand better. He never meant careless code. The difference decides whether your refactoring budget gets approved.

technical-debtsoftware-engineeringrefactoring
When to Claim Social Security: The Break-Even Math
New
Investing9 min

When to Claim Social Security: The Break-Even Math

Claiming at 62 is a permanent 30% pay cut. Waiting until 70 is a permanent 24% raise. The crossover between them is a number you can compute in about four lines of arithmetic, and it lands almost exactly on your life expectancy, which is why the break-even is the wrong thing to optimize.

social-securityretirement-planningbreak-even-analysis
Password Hashing: bcrypt vs Argon2id, and Why Fast Is a Bug
New
Tech9 min

Password Hashing: bcrypt vs Argon2id, and Why Fast Is a Bug

A password hash is the one function in your codebase you want to be slow. One RTX 4090 runs MD5 at 164 billion guesses a second and bcrypt at 184 thousand. Here are the parameters OWASP, RFC 9106 and NIST actually publish, and why memory cost is the setting that hurts an attacker most.

securitycryptographyargon2
Kafka vs RabbitMQ vs SQS: Log or Queue, Not Speed
Tech10 min

Kafka vs RabbitMQ vs SQS: Log or Queue, Not Speed

The question that actually decides your message queue is not how many messages per second you need. It is whether a message should still exist after somebody reads it. Answer that and two of the three options disappear.

message-queuekafkarabbitmq
Beta in Investing Is a Slope, Not a Risk Score
Investing9 min

Beta in Investing Is a Slope, Not a Risk Score

Beta is the slope of a regression of a stock's returns against the market's. That's the whole definition. It says nothing about how risky the stock is, and once you put R-squared next to it, a 0.5-beta stock can be more volatile than a 1.8-beta one.

betacapmvolatility
What chmod 755 Actually Means (and Why 777 Isn't the Fix)
Tech9 min

What chmod 755 Actually Means (and Why 777 Isn't the Fix)

755 is not a number. It is nine switches written in shorthand, three for the owner, three for the group, three for everyone else. Learn the 4-2-1 trick once and you stop looking it up. Then learn the part almost nobody knows: most permission denied errors on a file are really about a directory.

linuxchmodfile-permissions
The 1031 Exchange Runs on Two Clocks You Can't Pause
Investing9 min

The 1031 Exchange Runs on Two Clocks You Can't Pause

A Section 1031 like-kind exchange lets you roll the gain from one investment property into the next without paying tax this year. Almost every failed exchange fails for one of two boring reasons: somebody missed a date, or somebody touched the money.

1031-exchangereal-estatecapital-gains-tax
Unicode and UTF-8: Why Your Emoji Breaks the Database
Tech9 min

Unicode and UTF-8: Why Your Emoji Breaks the Database

A character, a code point, and an encoding are three different things, and almost every text bug you have ever shipped comes from a layer that confused two of them. Here is the whole model, with the actual bytes.

unicodeutf-8encoding

More Tech

Deep dives into the technologies behind the biggest moats.

All Tech
Regex Explained: How to Read Any Regular Expression
Tech9 min

Regex Explained: How to Read Any Regular Expression

A regular expression is a tiny program that describes a shape in text, and it is read left to right as position, characters, and quantity. Learn that, plus the two things that separate people who use regex from people who fear it: greedy versus lazy matching, and the nested quantifier that once cost Cloudflare 27 minutes of traffic.

regexregular-expressionsprogramming-fundamentals
Serverless Explained: What It Is and When It Costs More
Tech9 min

Serverless Explained: What It Is and When It Costs More

Serverless is a billing model wearing an architecture costume. Once you do the arithmetic on published AWS prices, a Lambda function crosses over and becomes the expensive option at around 7.5 million requests a month. The number that decides it isn't your scale. It's your duty cycle.

serverlessaws-lambdacloud-costs
Webhooks vs Polling: The Four Problems Push Hands You
Tech9 min

Webhooks vs Polling: The Four Problems Push Hands You

Polling a resource once a minute costs 1,440 requests a day, almost all of them empty. A webhook fixes that by inverting the call, and in exchange hands you signature verification, duplicate events, out-of-order events, and retry storms. Here is what each one actually costs.

webhooksapi-designbackend

More Investing

Market implications of the tech shifts that matter to your portfolio.

All Investing
Short Selling Explained: Being Right Early Still Loses
Investing9 min

Short Selling Explained: Being Right Early Still Loses

Most explainers stop at 'you borrow a stock and sell it'. That skips the locate requirement, the borrow fee that floats daily, the dividends you owe the lender, the recall that can end the trade for you, and the fact that the proceeds are collateral rather than cash. The bill for all of it grows the longer your thesis takes to work.

short sellingregulation shoshort interest
Sequence of Returns Risk: Why Order Beats Average
Investing9 min

Sequence of Returns Risk: Why Order Beats Average

Two retirees can earn the identical compound return over thirty years and finish $2.7 million apart. One of them can go broke. Nothing separates them except the order the returns showed up in, and that is a much bigger deal than almost anyone budgets for.

retirementsequence-of-returns-risksafe-withdrawal-rate
Buying on Margin: Why the Call Comes at 28%, Not 50%
Investing9 min

Buying on Margin: Why the Call Comes at 28%, Not 50%

Everyone knows 2x leverage wipes you out at a 50% drawdown. Almost nobody does the other calculation: with a 30% house maintenance requirement, the margin call lands at a 28.6% decline. That is an ordinary bad year, not a crash.

marginleveragemargin-call

Browse categories

Catch up on the themes powering modern technology and the investing landscape.

Tech

Deep coverage of programming, software delivery, cybersecurity, and engineering leadership.

from architecture to incident response

Explore Tech

Investing

Signals across stocks, real estate, and modern portfolios for operators who invest actively.

from market momentum to asset allocation

Explore Investing

Culture

Occasional notes on language, demographics, and the cultural forces that shape technology and investing.

occasional cultural context

Explore Culture