Author

Shivashish Yadav

I am a technical content and developer relations professional with 8+ years of experience, based in India. I most recently led content and ecosystem growth at Spheron Network across AI, GPU and DePIN infrastructure. Earlier I worked on cybersecurity content at Banyan Cloud.

About Contact shivaworks.xyz

Security

The Arch AUR Keeps Getting Hit With Malware, and the Fixes All Cost Something

On 13 October 2026 an account mass uploaded a pile of packages to the Arch User Repository that looked like the popular helper yay and ran code the attacker controlled as root the moment you installed them. It was the fourth malware wave on the AUR in about 15 months. I went through what actually happened, how the trick worked at the file level, and why the obvious fix is the one thing that would stop the AUR from being the AUR.

26 October 202611 min read

Developer tools

Chrome Spent 5 Years Telling Everyone Nobody Wanted JPEG XL. In 2026 It Shipped It Anyway

In 2022 Google pulled JPEG XL from Chrome, saying there was not enough interest from the ecosystem, while Meta, Adobe, Intel, Shopify, and The Guardian were on the record asking for it. Now Chrome 155 ships a JPEG XL decoder, rewritten in Rust, and the reasons the format was killed look very different in hindsight. I went through the whole timeline, the compression numbers, and who actually wanted this.

25 October 20269 min read

Crypto & markets

If the Democrats Win the Midterms, Here Is What Actually Changes, and What Does Not

The question gets asked every cycle, and the answer usually arrives wrapped in either panic or celebration. The real mechanics are narrower and more interesting than either. I went through what a House majority can actually do, what adding the Senate changes, and where the hard constitutional walls sit that no election moves, using the 2016 to 2021 record as the clearest recent example. This is a civics explainer, not a prediction and not advice on who to vote for.

25 October 202611 min read

Linux & open source

Siemens Deleted a Popular Open Source Project on Its Way Out the Door, and the AGPL Made Sure That…

In October 2026, months after buying Altair for $10.6 billion, Siemens retired the OpenRadioss website and deleted its GitHub repository, pointing users to a paid product. The code was under the AGPL, so within days a Rocky Linux founder had forked it into a new project called OpenCourant. I went through what happened, why deleting the repo was the self defeating part, and what the license actually guaranteed.

25 October 202610 min read

Crypto & markets

Richard Heart Beat the SEC on a Technicality, Then His Own Tax Office Caught Up With Him in…

On 14 October 2026, Turkish police arrested the founder of Hex and PulseChain on an Interpol red notice issued for Finland, which suspects him of gross tax evasion. He had walked away from a $1 billion SEC case 18 months earlier, not because a court cleared him, but because the judge found no US jurisdiction. I went through the whole arc, the sacrifice mechanism, the allegations, the dismissal that was not an acquittal, and a blockchain whose biggest customer was its own founder.

23 October 202611 min read

Infrastructure

You Can Build a Serious Home Server for About $1,000, and It Solves a Problem Your Phone Cannot

A used enterprise server that cost a company thousands of dollars new sells for around $250 today, and with a few parts you have a private cloud that runs AI agents, stores your photos, records your cameras, and lets you walk through an airport with a phone that holds almost nothing. I went through the exact parts, the real prices in the current memory shortage, and what to actually run on it.

23 October 202612 min read

AI & GPU compute

Anthropic Just Posted $16.8

The numbers coming out of the AI industry are the biggest in the history of technology, and a growing group of analysts thinks that is the problem. I went through the real figures behind the bubble debate, Anthropic’s revenue, the infrastructure commitments, the debt, the falling cost of intelligence, and who is actually paying, because the case for a correction and the case against it both rest on the same facts.

22 October 202610 min read

Security

eMudhra’s CA Keys Were Compromised Because a Private Key Was the Number 4.

In October 2026, Mozilla and Google confirmed that 8 intermediate signing keys from eMudhra, 1 of the few Indian certificate authorities trusted globally, had private keys a laptop can guess in under a second, including 1 that was literally the integer 4. I went through how a secret that should be 116 digits long collapsed to single digits, how browsers shut it down in under 3 hours, why your backend servers may still be exposed, and why, for a certificate authority, the incident is survivable but the response decides everything.

22 October 202612 min read

Linux & open source

MacOS Quietly Vanished From the Official Unix Registry

For almost 20 years, “macOS is certified Unix” was a real bragging right. I dug into what that certification actually required, and the honest answer is that no Mac anyone uses has ever met it. Here is what disappeared from the Open Group’s list in October 2026, and why it matters less than the headlines suggest.

21 October 202612 min read

Linux & open source

The Linux Kernel Just Dropped Its AI Disclosure Tag, and the Fight Over It Says More Than the…

At the Maintainer Summit in Prague, the people who run the Linux kernel reached a rough consensus to deprecate the Assisted-by tag, the little line in a commit that says AI helped write it. I went through who proposed it, the real numbers behind it, and the argument it set off, including Linus Torvalds calling the whole idea of AI disclosure rules utterly stupid, because the kernel is quietly becoming one of the most AI touched projects in open source.

21 October 202612 min read