The day's tech, sifted: Aug 4, 2026

What matters today: Texas ordered a halt on new data center grid connections until audits are completed, with 474+ GW of projects already queued, over five times the grid's peak demand, the most concrete brake yet on the AI buildout from a state that has courted it hard. Markets showed no such hesitation: Amazon closed above $3 trillion in market value for the first time, the fifth company ever to cross the mark, the same day Palantir's revenue jumped 93% year over year and Snap beat estimates on both revenue and daily active users, all three stocks jumping after hours.

AI / LLMs

• An AI-supervised remote entrance exam for UNAM, Mexico's largest university, went badly wrong for its nearly 160,000 applicants: where 3.5% of test takers scored 100 or higher between 2021 and 2025, 16.3% did this year under the lockdown-browser, AI-proctored format, and 58,000 students must retake it.
• Meta doubled the training efficiency of GEM, the generative ads recommendation foundation model behind Instagram and Facebook, to 20-25% Model FLOPs Utilization while scaling training compute 4x in 12 months, via custom attention kernels and mixed ultra-low-precision training, evidence recommendation systems, not just chatbots, are now getting LLM-scale infrastructure investment.

Devtools & Infra

• Vercel's v0 API v2 lets developers embed v0's full app-building agent, prompt, preview, iterate, deploy, directly into their own products and pipelines, shipped alongside Next.js 16.3's Instant Navigations for single-page-app responsiveness plus a faster dev server and builds and Vercel WAF for Blob reaching general availability, edge firewall rules that can deny, challenge, or rate-limit requests to stored objects before they generate a bill.

Security & Privacy

• Ukraine's SkyFall and US firm Auterion are fielding AI autonomy kits on $400 Shrike kamikaze drones, letting an operator fly manually into range, designate a target up to half a mile out, then switch to fire-and-forget autonomous terminal guidance; the companies plan to deliver 50,000 of the AI-equipped drones in the coming months.
• Apple briefly pulled Telegram from the App Store on Monday over CSAM content, restoring access about 20 minutes later after Telegram said it removed the content and banned the user.
• The Wall Street Journal reports DHS sent platforms hundreds of subpoenas and asked posters to sign letters saying speech about ICE "may" be a crime, part of a surveillance program the agency says searches for threats to its agents but critics call free-speech infringement.
• Samsung is restricting app registrations and pulling apps whose SDKs can turn smart TVs into residential proxy exit nodes, following a similar ban by LG, after researchers found popular smart TV apps quietly sharing owners' internet connections with strangers.
• The Senate Commerce Committee is again weighing KOSA alongside the SCREEN Act, CHATBOT Act, and Youth AI Privacy Act, and EFF argues KOSA's duty-of-care rules push platforms toward age verification, ID checks, facial analysis, or bank-record checks, that reduces privacy for everyone, not just minors.
• Show HN: Nightcrawler runs a fully autonomous pentesting agent entirely on a rooted Android phone, using a local 1.2B-parameter model for recon, exploitation, and reporting with no cloud connectivity, 27 exploit playbooks, and a 24,956-entry CVE database on board.
• Court documents show an FBI agent has been charged with amassing roughly $1M in cryptocurrency, largely through unauthorized withdrawals from a criminal target's overseas holdings, per the New York Times.

Startups & Industry

• Amazon closed above $3 trillion in market value for the first time Monday, the fifth company ever to reach the mark after Nvidia, Alphabet, Microsoft, and Apple, with its stock up 4.58% on the day.
• Palantir's Q2 revenue rose 93% year over year to $1.94B, beating estimates, with US commercial revenue up 149%; the company raised its full-year guidance and PLTR jumped 14%+ after hours.
• Snap's Q2 revenue rose 19% year over year to $1.6B and daily active users grew 5% to 493M, both ahead of estimates, and the company forecast a strong Q3; shares jumped 10%+ after hours.
• TikTok agreed to settle three more teen social media design-liability lawsuits ahead of trial, with 2,600 similar cases still pending in California federal court.
• Texas ordered its Public Utility Commission and grid operator ERCOT to audit data center connection requests before approving more, with 474+ GW of projects already queued, more than five times the grid's peak demand.

Research

• The first dynamic security assessment of internet-facing MCP servers audited 414 of 640 confirmed production instances and found 68 reportable vulnerabilities, including SQL injection and SSRF against cloud metadata services; 91.8% lacked OAuth authentication and 41.6% of confirmed servers disappeared within three days between measurement runs, pointing to deployment far outrunning security review.
• A new taxonomy of attack vectors for multi-agent web systems includes a "Telephone Loop" attack that exploits cross-agent delegation to trap agents in cyclical tasks, harmless against single-agent setups but compromising Claude Sonnet 4.5, GPT-5.2, and GPT-5.4 at an average 80% rate; only Claude Sonnet 4.6 resisted, catching it 92% of the time.

Hacker News

Two stories topping HN today were old news dressed up as new: OpenAI's Astra solving ten open math problems, a story this digest already covered on August 1, caught HN's front page three days late (discussion), and the $1.65T hidden-AI-debt figure is the same Nikkei analysis this digest covered back on July 21, recirculating via a Fortune writeup (discussion). The genuinely fresh top story: Sean Goedecke's LLMs reward expertise argues model outputs are tuned to sound competent rather than be correct, 617 points and 258 comments split on whether that's an RLHF bug or a feature. Cloudflare wrote up running Kimi and GLM at scale, betting on smaller open models over frontier-only serving for cost and latency.

Renewables logged a real milestone: Germany's wind and solar overtook fossil fuels for the first time, echoed by Utah's own solar record in May. Two anniversaries drew nostalgia: twenty years of Pandoc and 45 years of Kermit, both still shipping releases. A 2020 piece calling the Dunning-Kruger effect a statistical artefact resurfaced to 153 comments of argument, and what DMARC actually protects against got a clean-eyed explainer. A phone-based pentesting agent, Nightcrawler, is covered in Security & Privacy (discussion).

Threads

• Texas's grid halt and Wall Street's enthusiasm pulled in opposite directions: the same day a state ordered a pause on new AI data center hookups, Amazon crossed $3 trillion and Palantir and Snap both beat Q2 estimates, the buildout's power problem and its market reward landing on the same day.
• AI infrastructure investment kept moving even as Texas pumped the brakes on power: Vercel shipped three products in one day (v0 API v2, Next.js 16.3, WAF for Blob) and Meta doubled its ads model's training efficiency, the compute-and-tooling buildout outpacing the grid problem constraining it.
• Autonomous AI security got scrutinized from every angle: the MCP server audit found most production servers running without authentication, the multi-agent attack-surface paper showed frontier models falling for a delegation exploit, and Nightcrawler showed the same autonomy pattern now runs offense, an AI pentester on a rooted phone.
• Platforms answered for what they host from three directions at once: Apple pulled Telegram over CSAM, TikTok kept settling teen-harm suits, and DHS pressured platforms over ICE-critical speech, moderation cutting both toward and against speech on the same day.
• The Senate's youth-safety slate, KOSA, the SCREEN Act, the CHATBOT Act, and the Youth AI Privacy Act, all converge on the same EFF warning: age verification built for minors ends up collecting more data on everyone.