Patch Tuesday, April 2026 Edition
Krebs on Security published: Patch Tuesday, April 2026 Edition
Latest News Archive - Page 649
hora Calendar
Google calendar built for the Mac Discussion | Link
UnitPay
Price, bill, and prove value for your AI product Discussion | Link
-
Here is a photo of my family. I love them more than anything. Images have power, I hope. Normally we try to be pretty private, but in this case I am sharing a photo in the hopes that it might dissuade the next person from throwing a Molotov cocktail at our house, no matter what they think about me. The first person did it last night, at 3:45 am in the morning. Thankfully it bounced off the house and no one got hurt. Words have power too. There was an incendiary article about me a few days ago. Someone said to me yesterday they thought it was coming at a time of great anxiety about AI and that it made things more dangerous for me. I brushed it aside. Now I am awake in the middle of the night and pissed, and thinking that I have underestimated the power of words and narratives. This seems like as good of a time as any to address a few things. First , what I believe. *Working towards prosperity for everyone, empowering all people, and advancing science and technology are moral obligations for me. *AI will be the most powerful tool for expanding human capability and potential that anyone has ever seen. Demand for this tool will be essentially uncapped, and people will do incredible things with it. The world deserves huge amounts of AI and we must figure out how to make it happen. *It will not all go well. The fear and anxiety about AI is justified; we are in the process of witnessing the largest change to society in a long time, and perhaps ever. We have to get safety right, which is not just about aligning a model—we urgently need a society-wide response to be resilient to new threats. This includes things like new policy to help navigate through a difficult economic transition in order to get to a much better future. *AI has to be democratized; power cannot be too concentrated. Control of the future belongs to all people and their institutions. AI needs to empower people individually, and we need to make decisions about our future and the new rules collectively. I do not think it is right that a few AI labs would make the most consequential decisions about the shape of our future. *Adaptability is critical. We are all learning about something new very quickly; some of our beliefs will be right and some will be wrong, and sometimes we will need to change our mind quickly as the technology develops and society evolves. No one understands the impacts of superintelligence yet, but they will be immense. Second , some personal reflections. As I reflect on my own work in the first decade of OpenAI, I can point to a lot of things I’m proud of and a bunch of mistakes. I was thinking about our upcoming trial with Elon and remembering how much I held the line on not being willing to agree to the unilateral control he wanted over OpenAI. I’m proud of that, and the narrow path we navigated then to allow the continued existence of OpenAI, and all the achievements that followed. I am not proud of being conflict-averse, which has caused great pain for me and OpenAI. I am not proud of handling myself badly in a conflict with our previous board that led to a huge mess for the company. I have made many other mistakes throughout the insane trajectory of OpenAI; I am a flawed person in the center of an exceptionally complex situation, trying to get a little better each year, always working for the mission. We knew going into this how huge the stakes of AI were, and that the personal disagreements between well-meaning people I cared about would be amplified greatly. But it’s another thing to live through these bitter conflicts and often to have to arbitrate them, and the costs have been serious. I am sorry to people I’ve hurt and wish I had learned more faster. I am also very aware that OpenAI is now a major platform, not a scrappy startup, and we need to operate in a more predictable way now. It has been an extremely intense, chaotic, and high-pressure few years. Mostly though, I am extremely proud that we are delivering on our mission, which seemed incredibly unlikely when we started. Against all odds, we figured out how to build very powerful AI, figured out how to amass enough capital to build the infrastructure to deliver it, figured out how to build a product company and business, figured out how to deliver reasonably safe and robust services at a massive scale, and much more. A lot of companies say they are going to change the world; we actually did. Third , some thoughts about the industry. My personal takeaway from the last several years, and take on why there has been so much Shakespearean drama between the companies in our field, comes down to this: “Once you see AGI you can’t unsee it.” It has a real "ring of power” dynamic to it, and makes people do crazy things. I don’t mean that AGI is the ring itself, but instead the totalizing philosophy of “being the one to control AGI”. The only solution I can come up with is to orient towards sharing the technology with people broadly, and for no one to have the ring. The two obvious ways to do this are individual empowerment and making sure democratic system stays in control. It is important that the democratic process remains more powerful than companies. Laws and norms are going to change, but we have to work within the democratic process, even though it will be messy and slower than we’d like. We want to be a voice and a stakeholder, but not to have all the power. A lot of the criticism of our industry comes from sincere concern about the incredibly high stakes of this technology. This is quite valid, and we welcome good-faith criticism and debate. I empathize with anti-technology sentiments and clearly technology isn’t always good for everyone. But overall, I believe technological progress can make the future unbelievably good, for your family and mine. While we have that debate, we should de-escalate the rhetoric and tactics and try to have fewer explosions in fewer homes, figuratively and literally.
Bulbthings
The AI platform to track and manage your physical assets Discussion | Link
Harshita Arora Joins YC as General Partner
We're thrilled to announce that Harshita Arora is joining Y Combinator as a General Partner. She brings deep fintech and infrastructure experience, a founder's instinct for product, and the perspective of someone who's been building companies since she was a teenager.
v1.59.1
<h3>Bug Fixes</h3> <ul> <li><strong>[Windows]</strong> Reverted hiding console window when spawning browser processes, which caused regressions including broken <code>codegen</code>, <code>--ui</code> and <code>show</code> commands (<a href="https://github.com/microsoft/playwright/issues/39990" data-hovercard-type="issue" data-hovercard-url="/microsoft/playwright/issues/39990/hovercard">#39990</a>)</li> </ul>
Lenz
Independent, multi-model fact-checking API for AI workflows Discussion | Link
Adomate
Turn data into winning ads. At scale. Discussion | Link
discode.ai
100+ AI models, one interface. ECO friendly. Discussion | Link
DocuSmart AI
Turning fragmented knowledge into one simple system Discussion | Link
HAQQ Legal AI on Mobile
Bringing legal understanding to anyone with a phone Discussion | Link
v1.58.2
<h2>Highlights</h2> <p><a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3895198902" data-permission-text="Title is private" data-url="https://github.com/microsoft/playwright/issues/39121" data-hovercard-type="pull_request" data-hovercard-url="/microsoft/playwright/pull/39121/hovercard" href="https://github.com/microsoft/playwright/pull/39121">#39121</a> fix(trace viewer): make paths via stdin work<br> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3896776196" data-permission-text="Title is private" data-url="https://github.com/microsoft/playwright/issues/39129" data-hovercard-type="pull_request" data-hovercard-url="/microsoft/playwright/pull/39129/hovercard" href="https://github.com/microsoft/playwright/pull/39129">#39129</a> fix: do not force swiftshader on chromium mac</p> <h2>Browser Versions</h2> <ul> <li>Chromium 145.0.7632.6</li> <li>Mozilla Firefox 146.0.1</li> <li>WebKit 26.0</li> </ul>
Adding Canada Back to Our List of Accepted Countries of Incorporation
After hearing feedback from Canadian founders in our network, we are adding Canada back to our list of accepted countries of incorporation.
v1.58.1
<h2>Highlights</h2> <p><a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3871972695" data-permission-text="Title is private" data-url="https://github.com/microsoft/playwright/issues/39036" data-hovercard-type="pull_request" data-hovercard-url="/microsoft/playwright/pull/39036/hovercard" href="https://github.com/microsoft/playwright/pull/39036">#39036</a> fix(msedge): fix local network permissions<br> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3872096421" data-permission-text="Title is private" data-url="https://github.com/microsoft/playwright/issues/39037" data-hovercard-type="pull_request" data-hovercard-url="/microsoft/playwright/pull/39037/hovercard" href="https://github.com/microsoft/playwright/pull/39037">#39037</a> chore: update cft download location<br> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3861846840" data-permission-text="Title is private" data-url="https://github.com/microsoft/playwright/issues/38995" data-hovercard-type="pull_request" data-hovercard-url="/microsoft/playwright/pull/38995/hovercard" href="https://github.com/microsoft/playwright/pull/38995">#38995</a> chore(webkit): disable frame sessions on fronzen builds</p> <h2>Browser Versions</h2> <ul> <li>Chromium 145.0.7632.6</li> <li>Mozilla Firefox 146.0.1</li> <li>WebKit 26.0</li> </ul>
Congratulations to EquipmentShare on Going Public
Today, EquipmentShare (YC W15) goes public. From Missouri to 373 locations nationwide, they've built the operating system construction has been missing—built by contractors, for contractors. Congrats to Jabbok, Willy, and the EquipmentShare team on a huge milestone.
Announcing the YC AI Stack
We've partnered with nearly two dozen companies to offer students who attend YC events a suite of over $25,000 in free credits for AI devtools.
TravelMind
AI-powered city discovery built on taste, not reviews Discussion | Link
NINA
Guide users step by step inside your product. Discussion | Link
2026 Demo Day Dates
We’re excited to share the Demo Day dates for 2026 so founders, investors, and our broader community can plan ahead.
Albato AI
Build AI-driven workflows across 1,000+ apps Discussion | Link
September 2025 (version 1.105)
Learn what is new in the Visual Studio Code September 2025 Release (1.105). Read the full article
Sora update #1
We have been learning quickly from how people are using Sora and taking feedback from users, rightsholders, and other interested groups. We of course spent a lot of time discussing this before launch, but now that we have a product out we can do more than just theorize. We are going to make two changes soon (and many more to come). First, we will give rightsholders more granular control over generation of characters, similar to the opt-in model for likeness but with additional controls. We are hearing from a lot of rightsholders who are very excited for this new kind of "interactive fan fiction" and think this new kind of engagement will accrue a lot of value to them, but want the ability to specify how their characters can be used (including not at all). We assume different people will try very different approaches and will figure out what works for them. But we want to apply the same standard towards everyone, and let rightsholders decide how to proceed (our aim of course is to make it so compelling that many people want to). There may be some edge cases of generations that get through that shouldn't, and getting our stack to work well will take some iteration. In particular, we'd like to acknowledge the remarkable creative output of Japan--we are struck by how deep the connection between users and Japanese content is! Second, we are going to have to somehow make money for video generation. People are generating much more than we expected per user, and a lot of videos are being generated for very small audiences. We are going to try sharing some of this revenue with rightsholders who want their characters generated by users. The exact model will take some trial and error to figure out, but we plan to start very soon. Our hope is that the new kind of engagement is even more valuable than the revenue share, but of course we we want both to be valuable. Please expect a very high rate of change from us; it reminds me of the early days of ChatGPT. We will make some good decisions and some missteps, but we will take feedback and try to fix the missteps very quickly. We plan to do our iteration on different approaches in Sora, but then apply it consistently across our products.
Sora 2
We are launching a new app called Sora. This is a combination of a new model called Sora 2, and a new product that makes it easy to create, share, and view videos. This feels to many of us like the “ChatGPT for creativity” moment, and it feels fun and new. There is something great about making it really easy and fast to go from idea to result, and the new social dynamics that emerge. Creativity could be about to go through a Cambrian explosion, and along with it, the quality of art and entertainment can drastically increase. Even in the very early days of playing with Sora, it’s been striking to many of us how open the playing field suddenly feels. In particular, the ability to put yourself and your friends into a video—the team worked very hard on character consistency—with the cameo feature is something we have really enjoyed during testing, and is to many of us a surprisingly compelling new way to connect. We also feel some trepidation. Social media has had some good effects on the world, but it’s also had some bad ones. We are aware of how addictive a service like this could become, and we can imagine many ways it could be used for bullying. It is easy to imagine the degenerate case of AI video generation that ends up with us all being sucked into an RL-optimized slop feed. The team has put great care and thought into trying to figure out how to make a delightful product that doesn’t fall into that trap, and has come up with a number of promising ideas. We will experiment in the early days of the product with different approaches. In addition to the mitigations we have already put in place (which include things like mitigations to prevent someone from misusing someone’s likeness in deepfakes, safeguards for disturbing or illegal content, periodic checks on how Sora is impacting users’ mood and wellbeing, and more) we are sure we will discover new things we need to do if Sora becomes very successful. To help guide us towards more of the good and less of the bad, here are some principles we have for this product: *Optimize for long-term user satisfaction. The majority of users, looking back on the past 6 months, should feel that their life is better for using Sora that it would have been if they hadn’t. If that’s not the case, we will make significant changes (and if we can’t fix it, we would discontinue offering the service). * Encourage users to control their feed. You should be able to tell Sora what you want—do you want to see videos that will make you more relaxed, or more energized? Or only videos that fit a specific interest? Or only for a certain about of time? Eventually as our technology progresses, you will be should to the tell Sora what you want in detail in natural language. (However, parental controls for teens include the ability to opt out of a personalized feed, and other things like turning off DMs.) * Prioritize creation. We want to make it easy and rewarding for everyone to participate in the creation process; we believe people are natural-born creators, and creating is important to our satisfaction. * Help users achieve their long-term goals. We want to understand a user’s true goals, and help them achieve them. If you want to be more connected to your friends, we will try to help you with that. If you want to get fit, we can show you fitness content that will motivate you. If you want to start a business, we want to help teach you the skills you need. And if you truly just want to doom scroll and be angry, then ok, we’ll help you with that (although we want users to spend time using the app if they think it’s time well spent, we don’t want to be paternalistic about what that means to them).