Code News

Only the dev news that matters for your stack
⚡ 40-second daily brief, Mon–Fri
🎬 Real hacks & bugs in 60s
🧠 TL;DR on every story
❤️ 50K+ devs inst

[Code News @CodeNewsApp]

You scan the QR code on a parking meter and pay. The city never gets the money

The code was a sticker over the real one. A QR code is just a web address in a picture

Before you pay, read the address your phone shows you

[Code News @CodeNewsApp]

A 300-letter password opened accounts that had no password 🔓

On Alpine Linux the password check gave up past 256 characters and returned a star, the same star stored for accounts with no password. Star equals star. Door open

Fixed in OpenSSH 10.6p2. Running Alpine? Update

[Code News @CodeNewsApp]

A website asks you to prove you're not a robot. Then one more "check": Windows + R, Ctrl + V, Enter

Three keys and you installed the malware yourself. Microsoft calls it ClickFix

A real website never asks you to paste something into your computer. If one does, close the tab

[Code News @CodeNewsApp]

AlphaProof Code formally verifies Signal

Google DeepMind introduced AlphaProof Code, a multi-LLM agentic framework that uses the Lean theorem prover for formal software verification

[Code News @CodeNewsApp]

AI verified Signal's code in four weeks

What each one means for you, below

[Code News @CodeNewsApp]

Hundreds of supermarkets in France watched their freezers heat up to 50°C. Food spoiled, some stores caught fire

The hackers didn't need to be geniuses. Many freezers still had the password they came with from the factory

Go change your router's password

[Code News @CodeNewsApp]

PHP Patches Critical PHP2Shell RCE Flaws

PHP released updates in versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to address CVE-2026-109618 and CVE-2026-109619, which are unauthenticated remote code execution flaws

[Code News @CodeNewsApp]

Your PHP server lets strangers run code

What each one means for you, below

[Code News @CodeNewsApp]

Outlook rejects email without DMARC

Messages fail with a 571 bounce error, and the fix requires publishing a single DNS TXT record

This change matters for developers, system administrators, and businesses sending email to consumer Microsoft addresses

[Code News @CodeNewsApp]

Outlook is quietly rejecting your emails

What each one means for you, below

[Code News @CodeNewsApp]

The thread: https://t.co/N2Cxh2c43y

[Code News @CodeNewsApp]

A backend dev on r/webdev touches React once a month, and every time there's a new build tool to learn

Top complaint we saw from developers this week: working code rewritten because the ecosystem moved on

Do you upgrade right away or pin everything and wait?

[Code News @CodeNewsApp]

Claude Code leaked emails in web requests

Claude Code versions 2.1.317 and later include a built-in privacy mod enabled by default to block email leakage

Matters for developers using Claude Code who want to prevent unintended personal data exposure during web browsing tasks

[Code News @CodeNewsApp]

Anyone can bypass your OpenSSH login

What each one means for you, below

[Code News @CodeNewsApp]

Discord ditches Electron for Rust

Discord is replacing Electron and React Native with Rust to power its desktop and mobile application architecture

The upcoming native client reduces memory consumption significantly, dropping RAM usage down to around 290MB

[Code News @CodeNewsApp]

GitHub Copilot Integrates into Xcode

GitHub Copilot is now integrated directly into Xcode's built-in coding assistant in public preview

The feature requires Xcode 27.3 beta and macOS Tahoe 26.6 or later, supporting all Copilot plans

[Code News @CodeNewsApp]

Anyone can tamper with your Rails uploads

What each one means for you, below

[Code News @CodeNewsApp]

Residential Proxies Found in White House

Researchers detected residential proxy exit activity originating from the White House network between October 5 and November 3, 2026