GitHub vs Qt

Anthropic's Claude Code Leaks User Emails in User-Agent

Anthropic's AI coding agent Claude Code has been found to transmit users' account email addresses in the User-Agent header during web requests, potentially exposing them to third-party websites. A GitHub bug report titled 'Privacy violation in User-Agent header' triggered the disclosure, with one affected developer attributing dozens of daily scam emails to this leak. The issue gained traction on Hacker News, topping the charts with over 1,000 points and 300 comments. Anthropic acknowledged the flaw, apologized, and announced a fix: removing the email from the model context in the next release. A built-in extension, 'cc-plugin-privacy', is set to block this behavior by default from version 2.1.317, though the current stable channel is behind and a user reported the protection failed their test. The incident raises GDPR concerns for European companies and comes at a sensitive time as Anthropic prepares for an IPO, facing competition from OpenAI's Codex and other coding tools, though it also notes that the actual link to the spam wave is not confirmed.

• Claude Code sent user account email addresses in the User-Agent header during web requests.
• A GitHub bug report with the title 'Privacy violation in User-Agent header' was filed and gained traction.
• Anthropic apologized and announced a fix to remove the email from model context in the next release.

Scaling Slack and GitHub: Maude Lemaire's Lessons

In this episode of The Pragmatic Engineer podcast, Maude Lemaire, a principal engineer with experience at Slack, GitHub, and Cursor, discusses the challenges of scaling large software products. She shares insights on load testing at Slack, including the development of the Koi Pond tool to simulate millions of WebSocket connections, and the thundering herd problem that led to a limit on custom emojis. At GitHub, she discusses the downsides of Active Record, including database load and sharding limitations. Lemaire also emphasizes the importance of human judgment when using AI, particularly for foundational work, and suggests rotation between platform and product engineers to improve alignment.

• Maude Lemaire worked for nearly 8 years at Slack leading the backend performance infrastructure team.
• Slack limits custom emojis to 23 to prevent thundering herds.
• Maude built the Koi Pond tool to load test 500,000 WebSocket connections cost-effectively.

Meta planned 60% team cuts over AI

A Pragmatic Engineer newsletter (The Pulse) cites a Reuters report that Meta's leadership decided to reduce team sizes by 60%, with plans hatched in January to carry out what would become the company's largest-ever layoffs. The piece frames the cuts as a reaction to competition from AI-native startups and also notes other tech items including Ramp's AI infrastructure and GitHub's traffic surge. The newsletter was published Aug 27, 2026.

• Reuters reported that Meta’s leadership decided to cut team sizes by 60%.
• Plans were reportedly hatched in January to execute what would be Meta’s largest-ever layoffs.
• The Pragmatic Engineer newsletter 'The Pulse' published this summary on Aug 27, 2026.

Nuvoton Gerda IC & Qt for MCUs Deliver Premium UIs

Nuvoton Technology Corporation Japan (NTCJ) and Qt Group jointly announced on November 5, 2026, that Nuvoton's Gerda HMI controller platform is now supported as target hardware for Qt for MCUs. This combination enables rich graphics, fluid animations, and responsive touch interaction without external memory, targeting automotive and motorcycle instrument clusters, head-up displays, and home appliance panels. The collaboration leverages Gerda's large built-in RAM and texture compression to reduce memory footprint, lowering component count and system cost for high-volume production. Qt for MCUs' development environment, with QML and agentic AI skills, simplifies workflow and enables over-the-air updates. Executives from both companies highlighted the removal of the trade-off between user experience and system cost, making premium interfaces feasible on cost-efficient hardware.

• Nuvoton's Gerda HMI controller platform now supports Qt for MCUs.
• Enables premium user interfaces without external memory.
• Targets automotive, motorcycle, and home appliance displays.

Security advisory: CVE-2026-103653: Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP

New security advisories published for Qt CoAP and Qt5Compat, along with a webinar series promotion and a link to Qt Bridges.

Security advisories: Multiple CVEs impacting Qt Framework and Qt MQTT

Qt has published security advisories for CVE-2026-111487 (out-of-bounds write in assimp scene import plugin), CVE-2026-107457 (memory corruption in QMqttClient), and CVE-2026-105924 (NULL pointer dereference in QCborValue to JSON conversion).