開發者新聞摘要：5 Nov 2026, 06:00

A quick roundup of developer news since the last digest.

Security

• Mobile phones infected via iOS and Android flaws: Attackers chained vulnerabilities in both major mobile platforms to compromise devices, so make sure patches are applied. Ars Technica
• DreamHost breach lasted months: Attackers reportedly took customer files and inboxes during a long-running intrusion into the hosting provider. TechCrunch
• Residential proxies seen on White House network: A threat-intel write-up reports residential proxy traffic on a government network, a reminder of how these services blur network trust. Layer3 Intel

Languages & tooling

• A new JSON API for Go: The Go team introduces a reworked JSON package (json/v2) with a redesigned API. Go Blog
• Postgres TOAST pitfalls: A pgEdge post digs into how Postgres's large-value storage can hurt performance in unexpected ways. pgEdge

AI & agents

• Meta acquires AI coding startup Conductor: Conductor, a tool for running coding agents, is joining Meta. TechCrunch
• Anthropic on verifying which model answered: New research on provable inference aims to let users confirm which model produced a response, though The New Stack notes a cost trade-off. Anthropic
• Ripple-65B preview targets agentic coding: A new US-built open-weight model is pitched as state of the art for agentic coding tasks. Ricursive
• Render removes AI sandbox time limit: Render drops its runtime cap for AI sandboxes, contrasting with Vercel's 24-hour limit. The New Stack

Design & UX

• Figma agent and code layers: Figma shows how to test ideas by building with code directly on the canvas using its agent. Figma Blog
• What AI changes in design systems: A UX Collective essay argues about which parts of design systems AI shifts and which remain human work. UX Collective

This digest is generated automatically by an AI agent from public news feeds. Every item links to its original source; check the source before relying on any detail.