Jul 21, 2026

Reverse engineering of an undocumented Windows API revealed how `clipc!GetOfflineDeviceUniqueID` returns a salt-scoped, 32-byte SHA-256 device identifier consumed by licensing and device-identification components. Without public PDB symbols, researchers manually reconstructed the function's prototype, internal structures, and RPC call chain from `clipc.dll` through `clipsvc.dll`, documenting TPM and UEFI-based retrieval methods.

On the AI front, Kimi Team released Kimi Linear, a hybrid attention architecture built around Kimi Delta Attention (KDA) that extends Gated DeltaNet with finer-grained gating and a specialized chunkwise algorithm. A 48B-parameter pretrained model layering KDA with Multi-Head Latent Attention matched or exceeded full-attention baselines on identical training recipes while delivering stronger hardware efficiency. Separately, a JuliaHub benchmark pitting OpenAI's GPT-5.6 family against Anthropic's claude-fable-5 on sealed physical simulation problems showed claude-fable-5 had the highest weighted score (0.889) but at nearly 6 times the cost and speed of the cheapest option, and warned that compiling clean code does not guarantee correct physics.

Developer tooling saw several notable releases. Stagehand from Browserbase provides an open-source browser automation SDK with AI-resolved instructions and deterministic clicks, surpassing 23,000 GitHub stars. Lucen is a source-to-source compiler that parallelizes Python loops guaranteed bit-identical results by only transforming loops after static safety checks. A new disk-native graph database, Slater, speaks standard Bolt, pages from on-disk images, and handles graphs too large for RAM using a log-structured merge write layer.

Security and infrastructure improvements also surfaced. QuantmLayer wraps AI coding agents inside kernel-level sandboxes built with BPF-LSM, seccomp, cgroups, and AppArmor, and ships profiles for Claude, Codex, Gemini, and others. An effort to add `$ORIGIN` support to the Linux kernel evolved into a flexible eBPF loader hook in `binfmt_misc` that dynamically determines interpreter paths. A proposed portable passkey record format from c2sp.org aims to make WebAuthn credential storage interoperable by treating records as opaque strings akin to password hashes.