/Hive Five #290 · Oct 31, 2026
Fear Builds the Future
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
See How Anthropic Rebuilt Source Control
Anthropic went from 2,500 to over 30,000 merged changes a day in 2026. It replaced git with Scion, an in-house version control system, in five months.
Read : See How Anthropic Rebuilt Source Control -
Turn a Google Cookie Into a $90,000 RCE
A Flask session cookie on developers[.]google[.]com carried its own signing secret. Pulling it out allowed forged sessions and code execution across Google's developer sites.
Read : Turn a Google Cookie Into a $90,000 RCE -
Patch Two New PHP Remote Bugs
Calif found CVE-2026-109618 and CVE-2026-109619, fixed in PHP's October 2026 security release. The write-up traces the bug class back to a 2004 exploit.
Read : Patch Two New PHP Remote Bugs -
Talk to an AI Trained Only on Speech
Block's Dessa is a full-duplex voice model trained from scratch on human conversation, with no text at all. It chooses what to say, when to say it, and how.
Read : Talk to an AI Trained Only on Speech -
Replace Cloud Subscriptions With a Personal Intranet
Follow a self-hosted build with remote video editing from Linux, an IRL stream setup and more.
Watch : Replace Cloud Subscriptions With a Personal Intranet