The day's tech, sifted: Oct 27, 2026

Tue, Oct 27

What matters today: OpenAI says it has three new results in math, computer science and physics, including a preprint claiming the Exponential Time Hypothesis, a long-held assumption about how hard certain problems are, is false. Cloudflare disclosed that a GLM-5.3 model on Workers AI leaked other customers' prompt data in 155 long-prompt responses. Yesterday's Anthropic S-1 now has a financing sequel: Broadcom is arranging $63B to fund Anthropic's chips.

AI / LLMs

Security & Privacy

  • Cloudflare GLM-5.3 leak: between Aug 27 and Sep 9, 155 responses contained other customers' data, all for prompts over 681,280 tokens. The cause: a 1,048,576-token context window on a cache pool that held only 681,280, plus an SGLang bug that, on over-length prompts, left stale cache from earlier requests in place. Cloudflare found no sign of deliberate exploitation, fixed it by enlarging the pool to about 2.04M tokens and patching the engine, and restored the model Sep 9.
  • Authenticator for Android: Microsoft patched CVE-2026-80097 (CVSS 8.6), which let untrusted apps impersonate Microsoft apps and obtain delegated account tokens. Update the app.
  • Data center freight theft: experts tell NBC that over $100M of US data center equipment has been stolen since June, including two heists where robbers hit the escorts guarding $10M+ truckloads. GPUs are now cargo worth robbing.

Startups & Industry

Research

Elsewhere

Hacker News

The front page leaned toward science and AI. OpenAI's announcement of three discoveries drew the biggest crowd (692 points, discussion), with the Exponential Time Hypothesis preprint close behind; Cloudflare's KV cache write-up also landed, both covered above. On the tooling side, Hob is an MIT-licensed, on-device desktop alternative to Claude Cowork and ChatGPT, and a Nietzschian Debugger got attention as a novelty. Murat Demirbas asks why we can't stop abstracting.

Outside AI, a BBC explainer on how solar became bigger than nuclear topped 330 comments, a post pleading for someone to stop the spam texts hit a nerve, and Microsoft's voluntary buyouts for a quarter of its workforce kept running from yesterday's digest.

Threads

  • AI leans on money and power: Broadcom's $63B vehicle, the S-1 gas disclosure and the Star 50 slump all ask who funds the buildout and what happens if demand wobbles.
  • Trust in shared AI infrastructure: Cloudflare's cache leak and the Authenticator token flaw both come from software assuming a boundary held; the tool-description attack papers probe the same assumption in agents.
  • Cheaper models, same race: Cursor with DeepSeek, Nemotron and GPT-6.1 Terra push cost per task, while Opus 5.5 leads at a premium.
  • AI doing science: OpenAI's results and the Hacker News attention to the Exponential Time Hypothesis preprint raise the question of who verifies machine-made proofs.