〓〓

[〓〓 @JoolsTurrall]

Ouch, Fable 5 is a bit leaky!
https://t.co/h8gUYkbYP5

[Nav Toor @heynavtoor]

A GUY AT GOOGLE DEEPMIND MADE AN ISOMETRIC PIXEL-ART MAP OF NEW YORK CITY AND PUT IT ON THE OPEN WEB FOR FREE

it's called https://t.co/8fAASvEmXT

you open the tab and the city is just sitting there in classic SimCity 2000 isometric pixel art. you scroll. and it keeps going. and going.

i zoomed in on midtown and i could read the H&M signage in times square. in red. as actual pixel-art letters on the side of a building.

i could see the crystalline spire of the Bank of America Tower poking out of a clump of skyscrapers. individual rooftop HVAC units. tiny green roof gardens. the little driveway loops in front of the hotels.

he estimates the map needs roughly 40,000 tiles. nothing is a placeholder.

the guy who made it is Andy Coenen, a senior staff engineer at Google DeepMind. he is not a pixel artist. by his own admission he is "a former electronic musician."

what he actually did is kind of insane:

> pulled NYC's geometry from the Google Maps 3D tiles API

> fine-tuned an open-source image model (Qwen-Image-Edit) on ~40 hand-paired examples of "satellite tile → pixel art tile"

> spun up 50 parallel instances on rented GPUs and generated tens of thousands of tiles in a few hours

> the fine-tune cost him 12 bucks

his own stated mission for the project, verbatim, is one sentence: "what's possible now that was impossible before?"

apparently the answer is "one engineer can pixel-art most of a metropolis for the price of a sandwich."

and the wildest part to me is he didn't sell it. no signup. no paywall. no NFT. you open the URL and the city is yours to wander.

the post landed at 1,325 points on Hacker News and topped bestofshowhn's 2026 list.

we live in a timeline where a senior engineer at one of the largest AI labs on earth spent his nights pixel-arting Manhattan for fun and then gave it away.

the internet is healing.

[〓〓 @JoolsTurrall]

@LucanonLizard ah no, it's 'leven!

[〓〓 @JoolsTurrall]

@LucanonLizard Portreath?

[Calif @calif_io]

Introducing HTTP/2 Bomb: a remote DoS in nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora. A single client pins 32GB of server memory in 10s. Found by Codex.

Blog post: https://t.co/WO9MeExoun

PoCs: https://t.co/NpVgEHBHPl

[〓〓 @JoolsTurrall]

I know times are hard but...
@phatpastyco your box says one thing, the reality is something else 😞 mostly crimp! #pasty

[Michael Bailey Photography @jollybeggars]

Hi @NewcastleCC. Kittiwakes are getting stuck in this mesh tower on the Tyne Bridge. Can someone let them out, please?

[〓〓 @JoolsTurrall]

Which would you rather have?

[Hoopsfix @Hoopsfix]

Who’s pulling up for Year XII tomorrow?

🎟️: https://t.co/fHTiriPxuv

[Alexandra @Alexandr4Denman]

Please keep the pressure on about the Dartmoor pony cull these have been apart of our country since the ice age ! They are going to get rid of them no doubt to put more houses in their place for foreigners stop this !

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another supply chain attack. 700+ GitHub repositories flagged, including PHP and Node.js projects. The malicious script was planted across all of them. When a developer installs the package, the script silently downloads a Linux file from GitHub, hides it under the name /tmp/.sshd (so it looks like a normal system file), and runs it in the background. It also skips security checks on the download and hides any error messages.

8 PHP packages on Packagist (the main PHP code library) were confirmed infected. The attacker hid the script inside a JavaScript config file (package.json) instead of the PHP one (composer.json), so PHP developers reviewing their code would not notice it. The biggest risk is to devdojo/wave (6,400 stars) and devdojo/genesis (9,100 installs), both popular Laravel project templates. Developers who use these templates run the bad script the moment they install dependencies.

The same payload was also dropped into GitHub Actions (automated build pipelines) under a fake step called "Dependency Cache Sync," meaning it could infect company build servers too. Packagist removed the bad packages, but the auto-updating versions (dev-main, dev-master, 3.x-dev) can quietly come back if the original repos stay infected.

IOCs:
GitHub account parikhpreyash4
repo systemd-network-helper-aa5c751f
drop path /tmp/.sshd
command fragments curl -skL and chmod +x /tmp/.sshd.

[Bernie @Artemisfornow]

Listen when they tell you. “Everyone in the country will have a digital ID”

Even if you don’t want one! “This isn’t a heavy handed approach but we will make sure everyone has one”

Oh 🤡

[NO CONTEXT HUMANS @HumansNoContext]

That’s how men become friends so easily

[〓〓 @JoolsTurrall]

Wow, a get out of jail free card, now and forever for Trump https://t.co/zuU61olZ4t

[〓〓 @JoolsTurrall]

@DevilMayne @ProtonMail I was just using another provider for hosting and mail. Just simple catch all with identies. I don't need too much for mail, certainly don't need to be tied into provider own domains and password manager for identity control. Stalwart looks good though.

[Programmer Humor @PR0GRAMMERHUM0R]

didYouAskClaude

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: GitHub has been compromised by TeamPCP. GitHub has confirmed the internal breach. A poisoned VS Code extension on an employee device exfiltrated ~3,800 internal repositories.

TeamPCP is already selling the data on a cybercrime forum.

[Parody Nigel Farage @Parody_PM]

Actually, this photo is PROOF that gullible dimwits will believe a Shakira concert in Rio is London and it will be wildly shared and liked because Musk's X is designed to encourage and reward such lies and misinformation.

[CCTV_IDIOTS @cctv_idiots]

Nom nom 🦈 😂