From 52 items, 5 important content pieces were selected
Technology News
- Locking GitHub Actions with Workflow Lockfiles âď¸ 8.0/10
- Voltageâglitch hack unlocks hidden memory on NVIDIA A100 mining cards âď¸ 7.0/10
- Operatic AI launches openâsource explorer for 2,100+ CoRL robotics papers âď¸ 7.0/10
- AMD AI-driven memory tiering claims up to 83% server cost reduction âď¸ 7.0/10
Financial News
- Alibaba to spin off AI chip unit TâHead in Hong Kong âď¸ 7.0/10
Technology News
Locking GitHub Actions with Workflow Lockfiles âď¸ 8.0/10
The article explains how to use workflow lockfiles to pin GitHub Actions to specific commit hashes, thereby preventing unauthorized changes to action code in CI/CD pipelines. It provides stepâbyâstep instructions for creating a lockfile, updating workflows to reference the lockfile, and verifying that only the intended versions run. The guide notes that the mechanism currently locks only standard action calls, while reusable workflows and composite actions require additional manual pinning.
hackernews ¡ gslin ¡ Nov 11, 22:16 ¡ Discussion
ăPrerequisite: GitHub Actions workflow lockfilesă GitHub Actions executes code from external repositories, and developers have traditionally mitigated supplyâchain risk by pinning actions to a specific commit SHA because tags are mutable. In OctoberâŻ2026 GitHub introduced workflow lockfilesâfirst in public preview on OctâŻ14 and then generally available on OctâŻ28âwhich generate a lockfile that records the exact versions of each action and its transitive dependencies. The lockfile can be committed to the repo and enforced with the ghâactionsâlock extension.
ăImpactă Adopting workflow lockfiles lets developers and DevOps teams harden their pipelines against supplyâchain attacks by ensuring actions cannot be silently altered, but they must also audit reusable workflows and composite actions separately to maintain full coverage.
ăCommunity Discussionă Commenter woodruffw points out two limitations: the lockfile does not automatically lock reusable workflows, and composite actions are only locked indirectly through the workflows that call them, requiring extra manual pinning.
References
Tags: #GitHub Actions, #CI/CD, #Security, #DevOps
Voltageâglitch hack unlocks hidden memory on NVIDIA A100 mining cards âď¸ 7.0/10
A voltageâglitching hardware hack can blow the fuses on NVIDIA A100 mining cards (8âŻGB model) to enable up to 80âŻGB of hidden HBM memory, effectively turning a lowâcapacity card into a highâmemory GPU for AI workloads. The method is experimental, requires physical modification, and is not supported by NVIDIA.
hackernews ¡ lae ¡ Nov 11, 10:48 ¡ Discussion
ăBackgroundă NVIDIAâs A100 GPUs sold for cryptocurrency mining are shipped with many of their streaming multiprocessors (SMs) and portions of HBM memory disabled by laserâblown fuses to improve yield and lower cost. Voltageâglitching is a faultâinjection technique that briefly drops the supply voltage to cause the fuseâprogramming logic to misâinterpret the intended state, allowing hidden hardware to be reâenabled. This method has been demonstrated to recover up to the full 80âŻGB of HBM and enable all functional SMs, yielding about a 1.2Ă performance boost over the stock miningâgrade part.
ăImpactă If successfully applied, the hack expands usable GPU memory by tenfold, allowing cheaper access to largeâmemory compute for AI/ML tasks, but it carries a high risk of permanently damaging the card and is limited to users comfortable with hardware modifications.
ăCommunity Discussionă Commenters expressed amazement at the hidden memory, warned about the risk of blowing fuses, and debated whether the fuses were set due to manufacturing defects; some suggested alternative approaches like external PCIe risers to speed the process.
References
Tags: #GPU, #Hardware Hacking, #AI Compute, #NVIDIA, #Memory Unlock
Operatic AI launches openâsource explorer for 2,100+ CoRL robotics papers âď¸ 7.0/10
A webâbased explorer now indexes more than 2,100 papers from the Conference on Robot Learning (CoRL) covering 2017â2026, and presents each with a TLDR, links to code, project pages, arXiv entries, and task tags. The tool is hosted at https://corl.operatic.ai/explore and the source code is available on GitHub (operaticâai/corlâexplorer). It is intended for robotics researchers and developers who need quick access to prior work and trend statistics across a decade of robot learning research.
reddit ¡ r/MachineLearning ¡ /u/promptdom ¡ Nov 11, 21:42
ăConference on Robot Learning (CoRL)ă The Conference on Robot Learning (CoRL) is an annual international conference that focuses on research at the intersection of robotics and machine learning. Since its inception in 2017, CoRL has produced thousands of papers covering topics such as robot perception, control, and learning algorithms. The new explorer aggregates these papers, which were previously scattered across conference proceedings and repositories.
ăImpactă Researchers can browse or clone the explorer to locate relevant papers, implementations, and datasets far faster than manual searching, streamlining literature reviews and reproducibility efforts.
References
Tags: #robotics, #research-tools, #open-source
AMD AI-driven memory tiering claims up to 83% server cost reduction âď¸ 7.0/10
AMD says its AIâbased Mext software can swap cold memory pages between DRAM and cheaper NVMe flash before the OS or applications notice, allowing roughly half of the DRAM to be replaced. The company claims this retains up to 99% of performance while potentially lowering enterprise server costs by as much as 83%. The feature is sold as a license that must be purchased with EPYC servers. These figures are AMDâs own estimates and have not been independently verified.
telegram ¡ zaihuapd ¡ Nov 11, 11:15
ăPredictive memory tiering with flashă AMDâs MEXT (Memory Extension) software builds on its earlier acquisition of a memoryâtiering technology that uses AI to predict which memory pages are âcoldâ and can be moved from DRAM to lowerâcost NVMe flash before the operating system or application notices. The approach follows a broader industry trend of using flashâbased tiered memory to reduce reliance on expensive DRAM, a concept AMD has previously described as making flash behave like DRAMâspeed memory.
ăImpactă If the performance and cost claims hold, dataâcenter operators could reduce DRAM purchases and overall server spend by buying the Mext license, but they will need to evaluate the licensing cost and any workloadâspecific performance tradeâoffs before adopting the technology.
References
Tags: #hardware, #systems, #AI, #cloudâinfrastructure
Financial News
Alibaba to spin off AI chip unit TâHead in Hong Kong âď¸ 7.0/10
Alibaba announced it will seek approval to list its semiconductor subsidiary TâHead on the Hong Kong Stock Exchange via a public offering, with no date or size disclosed.
rss ¡ CNBC Finance ¡ Nov 11, 07:47
ăBackgroundă The company filed a confidential listing request on Sept.âŻ11; TâHead develops AI chips such as the Zhenwu V900 to reduce reliance on U.S. technology amid tightening restrictions.
ăImpactă Alibabaâs shares slipped about 1% after the announcement, affecting shareholders of the eâcommerce giant.
Tags: #Alibaba, #Semiconductor IPO, #AI chips, #Hong Kong market, #Chinese tech sector