vibehacker
News
Tom's Hardware ·

A PS5LM fork runs Qwen3.8-27B on a jailbroken PS5's GPU at about 20 tokens per second

Reddit user u/AdIllustrious7246 turned PS5LM, a llama.cpp port for jailbroken consoles, into a native app that drives the GPU through the PS5_Vulkan RADV port and can use up to 11.4 GiB of memory, up from about 6 GiB as a CPU payload; smaller models like Gemma 4 E4B and Llama 3.2 3B hit 61 and 124 tokens per second. It adds a live stats dashboard and works with llama.cpp's web UI, so other devices on your network can chat with it.

More news

View all

Cohere plans to buy AISLE, the AI bug hunter behind 500+ CVEs, and launch Cohere Cyber

Cohere signed a letter of intent for Prague based AISLE, whose autonomous systems found all 12 CVEs in OpenSSL's January release and 18 of 24 in curl's latest, and says it wants to use those verifiable security problems to evaluate and train future models. The deal hasn't closed and terms weren't disclosed; AISLE CEO Ondrej Vlcek will lead the new Cohere Cyber unit (AISLE's post)…

Cohere Blog

Google AI Studio can now push vibe-coded Android apps to a private Play Store library, no developer account

Rolling out in the US and select markets to users 18+, apps built in AI Studio go straight to a Personal Library in the Play Store with no APK sideloading, $25 fee, or Google review, and sharing with a small group of friends and family is planned. Going public will mean onboarding to a developer profile and normal Play review, an option Google says arrives in the coming months (Google Play blog)…

Ars Technica

MIKE, an open-source kanban harness, runs local-LLM coding agents inside gVisor sandboxes

Each card on MIKE's web kanban board is a task: pressing start runs an agent in a gVisor sandbox on its own Git worktree with a read only repo mount, retries failed tool calls, and parks stuck work in review for you. The author built it entirely with llama.cpp hosted local models and added client side rate limits, an offline friendly UI, and a bearer token REST API for starting tasks from scripts (Show HN)…

VS Code 1.141.1 patches 10 CVEs, including a Copilot agent hook-edit bypass and an MCP sandbox escape

CVE 2026 102232 let prompt injection get the Copilot agent to edit a lifecycle hook file without confirmation, and CVE 2026 102851 let one sandboxed MCP server use another server's approved network and write permissions; the rest are Workspace Trust bypasses and click to run RCEs. Update to 1.141.1 or later (check pinned dev containers too), then re approve each MCP server's permissions, since the fix ignores old shared grants…

Safeguard Blog

Spotted something we missed? Start a thread.