The day's tech, sifted: Aug 21, 2026

What matters today: GitHub's post-mortem on the August 17 outage named the cause: a critical infrastructure component in a Central US data center failed to scale when traffic hit a new peak, the company's second major incident this month, with monthly commits more than doubling since April to 2.9 billion and Azure now carrying 58% of platform load. AI infrastructure money kept moving on two fronts: Poolside struck a non-exclusive $6B licensing deal with Nvidia plus a $1B raise at a $12B pre-money valuation, with 109 of its staffers getting Nvidia job offers in the process, and Broadcom is reportedly lining up $60B+ in lender debt to finance AI chip purchases benefiting Anthropic and others. Separately, Australia's eSafety regulator said Roblox is still failing to stop adults from contacting kids despite changes made last fall.

AI / LLMs

• Poolside struck a non-exclusive $6B licensing deal with Nvidia, plus a $1B investment at a $12B pre-money valuation, and 109 of its staffers are getting Nvidia job offers as part of the arrangement: the AI model-building startup becomes both a customer and a talent pipeline for its biggest chip supplier.
• Broadcom is in talks with a group of lenders to raise more than $60B in debt for an AI chip financing deal that benefits Anthropic and other companies, funding the same compute buildout Poolside's deal touches, just from the debt side of the ledger instead of equity.
• Google is rolling out an AI chatbot interface for customizing the Discover feed by describing what you want to see, alongside an embeddable "Preferred Sources" button and custom audio briefings in the Google News Android app; the chatbot remembers stated preferences and retunes the feed without more manual tuning.
• Matt Pocock's new /wayfinder skill helps an AI coding agent plan projects whose end state isn't fully decided yet, splitting planning into a shared "map" document plus per-task "tickets" so an orchestrator session can hand off scoped planning work to child sessions instead of one person managing the whole context window by hand.

Devtools & Infra

• GitHub's outage post-mortem named a Central US data center capacity failure as the cause of the August 17 outage, 7 hours 47 minutes long and the second major incident this month after an August 6 Actions failure; neither was a code or config change, both were capacity that didn't scale with demand, and GitHub says Azure now carries 58% of platform load, up from 12% in May.
• Cloudflare added optional OAuth scopes so users can narrow what a third-party app or MCP server actually gets, replacing an all-or-nothing consent screen: developers mark specific scopes optional, and users can deselect them at authorization time instead of approving everything or nothing.
• Vercel built a request proxy so v0's AI-generated apps can query a user's Snowflake warehouse without the real OAuth token ever entering the sandbox: the sandbox only ever sees a fixed placeholder string, and the proxy injects the real credential only into protocol-defined authentication fields, closing the leak path where a prompt-injected app could otherwise echo a swapped-in token back out as query output.
• Next.js is preparing a scheduled security release for August 26.
• Framework is addressing a BIOS update that bricked some older Laptop 13 units with AMD Ryzen 7040 chips on both Windows and Linux; owners still under warranty are getting replacement mainboards, but some out-of-warranty owners say they were told to buy new ones.

Security & Privacy

• OpenAI presented a detailed timeline of its AI model's cyberattack on Hugging Face at Black Hat last week, which Bruce Schneier called genuinely impressive offensive security work worth reading end to end.

Startups & Industry

• Australia's eSafety regulator found Roblox still lets adult strangers send connection requests to kids despite safeguards added last fall: kids' profiles, connection lists and interests stay visible to anyone, those requests don't trigger parental alerts, and Roblox is promising further changes in response.
• Charter closed its $34.5B acquisition of Cox, announced in May 2025, uniting two of the largest US cable and broadband providers and completing Liberty's exit from its decade-old Charter investment.
• Meta's experimental vibe-coding app Pocket, which lets users prompt their way to small shareable games, is now rolling out across the US after launching quietly in Brazil last month.
• Super Micro says an independent board-led investigation found no evidence its CEO or senior management knew of an alleged scheme to smuggle $2.5B worth of Nvidia chips to China.
• The FCC killed the long-term gigabit broadband speed goal set under the Biden administration, following through on chairman Brendan Carr's 2025 threat to scrap it.

Hacker News

AI tooling and research kept the front page busy: Vomit runs Claude 5's raw output through a second model just to clean it up, and Huzzah pitches a different approach to coding with AI, both pulling heavy comment counts. The DiffusionGemma technical report also surfaced, an EU ruling found that copyright doesn't protect AI-generated content, and a piece argued that anti-AI fonts are useless and harmful.

Security and infrastructure filled out the rest: a writeup on compromising a system via a fake job interview drew steady attention, and a post arguing Aaron Swartz was prosecuted for scraping while Meta does it without consequence pulled well over a thousand points, the day's biggest draw. On the plumbing side, Linux 7.2 shipped, a study claiming TikTok and Instagram deactivate the brain's cognitive control network reignited attention-economy worries, and the crowd-sourced Consumer Rights Wiki picked up broad interest despite light discussion.

Threads

• Two OAuth-scoping stories landed the same day from opposite corners of the stack: Cloudflare's task-based consent screen and Vercel's proxy that keeps v0's real Snowflake token out of generated code entirely are both about narrowing what a delegated app or agent can do with access it's handed, not just gating whether it gets any.
• AI compute money moved through two channels at once: Poolside's Nvidia licensing deal (plus fresh equity) and Broadcom's reported debt raise for Anthropic's chip needs are funding the same buildout from opposite sides of the balance sheet, licensing and equity on one end, lender debt on the other.
• Infrastructure had a rough stretch at two different layers: GitHub's post-mortem blamed a Central US capacity failure for its second major outage this month, while Framework's own BIOS update bricked older Ryzen laptops, both routine operations (traffic growth, a firmware update) taking down hardware or service that was supposed to just keep working.</content>