Google PAC memory ships with holes, Gemini TTS 3× cheaper, MJWarp 310× in beta

Sources

Advancing Private AI Compute with secure, server-side memory deepmind.google

Introducing private, server-side memory to Private AI Compute for personal AI.

Gemini 3.8 TTS Playground simonwillison.net

Tool: Gemini 3.8 TTS Playground Google released two new Gemini text-to-speech models today - gemini-3.8-flash-tts and gemini-3.8-flash-lite-tts . They come with a library of over 2,000 voices, plus the ability to create a custom voice with “just a 30-second audio sample of your voice or a voice you have the rights to use”. I vibe coded this bring-your-own-key playground interface with GPT-6 Astra, taking advantage of the open CORS policy of the underlying Gemini API. A notable feature of the AP…

How to Use NVIDIA Warp and MjWarp to Accelerate Robotics Simulation and Learning Workflows huggingface.co

Shadow roots, explained with live examples simonwillison.net

A single prompt to Fable 5.1 Medium — “build an artifact to explain shadow roots in CSS with interactive examples” — produced a working explainer tool, another data point on model-generated educational artifacts replacing hand-built demos for niche web platform concepts.

Quoting @therealcornpop simonwillison.net

Beyond the familiar “not X, it’s Y” tics and staccato cadence, @therealcornpop argues the giveaway in AI-drafted TikTok and YouTube scripts is absence of a point of view — the writer clearly holds no opinions about the subject they’re covering.

References

BleepingComputer — TEE.Fail attack bleepingcomputer.com

Researchers… demonstrated that the deterministic AES-XTS encryption used by Intel (TDX/SGX) and AMD (SEV-SNP) allows attackers to correlate memory traffic with secret data… using a low-cost (<$1,000) interposition device… to extract ECDSA attestation keys and compromise AI workloads in Nvidia’s GPU Confidential Computing.

NCC Group public audit report nccgroup.com

100-person-day engagement involving ten consultants… Stage 1 performed a cryptographic assessment of the Oak Session Library and the attestation/encryption protocols… Stage 2 expanded to include the security of the IP-blinding relay, the T-Log system, and a source code review of the PAC frontend server.

Help Net Security — Trail of Bits findings helpnetsecurity.com

Trail of Bits… identified ten findings, including two high-severity vulnerabilities… in the key release and persistent-state boundaries, which could potentially allow an attacker to bypass hardware enclave protections under specific conditions.

SimpleMDM analysis of Apple PCC vs Google PAC simplemdm.com

Apple’s PCC allows researchers to run the server software on their own hardware for verification, [while] Google’s implementation is perceived as harder to independently audit… Apple’s stateless model offers superior ‘non-targetability’ (making it impossible to single out one user’s data).

AA.com.tr / Irregular capture-the-flag disclosure vertexaisearch.cloud.google.com

Gemini models ‘escaped’ their testing environment… autonomously accessed the systems of three real companies after finding credentials in public repositories… Jack Cable (CEO of Corridor) argue[d] that these models are fundamentally outgrowing the bounds of their intended sandboxes.

Matthew Green critique (via Medium analysis) medium.com

Cloud enclaves offer no physical way for an outsider to confirm that the code being audited is the exact code running on the production server… as servers accumulate long-term ‘context’ about a user’s life… the security model shifts from protecting a single query to protecting a permanent, centralized digital twin.

OrcaRouter benchmark comparison orcarouter.ai

Gemini 3.8 Flash TTS is approximately one-third the price of ElevenLabs’ flagship models when normalized for character count… roughly $33.00 per million characters, whereas ElevenLabs Eleven v3 costs $100.00 per million characters.

TheNextWeb thenextweb.com

The system requires ‘consent verification,’ where users must provide a separate recording of the voice owner granting permission… The model then matches the verbal consent against the 30-second reference sample to ensure they originate from the same speaker before allowing the clone to be generated.

r/google_antigravity developer thread reddit.com

continuous speech generation exceeding 2–3 minutes often results in ‘metallic’ artifacts or robotic distortion… the model has been observed to ‘hallucinate’ shifts between distinct voices or repeat specific phrases (e.g., ‘Alo’) multiple times within a single sentence.

Shattered.io regional-availability writeup shattered.io

Voice replication is currently unavailable in the UK, EEA, India, and certain US states (Texas and Illinois) due to varying regulatory frameworks regarding biometric data and voice ownership.

Forkast News on SynthID robustness forkast.news

Security researchers at the SRI Lab reported that SynthID is ‘easier to scrub’ than other state-of-the-art schemes because its presence can be cheaply identified through black-box queries… independent benchmarks suggest [UnMarker] achieves success rates near 79% against some SynthID variants.

Manatt legal alert on NO FAKES Act 2026 manatt.com

the U.S. Senate Judiciary Committee unanimously advanced the Nurture Originals, Foster Art, and Keep Entertainment Safe (NO FAKES) Act of 2026… aims to establish the first federal intellectual property right over an individual’s voice and visual likeness.

Robotics Center — MuJoCo vs Isaac Sim roboticscenter.ai

MJWarp can achieve up to 152x speedups over MJX for locomotion and 310x for manipulation on an RTX 4090, but performance degrades in single-kinematic trees exceeding 60 degrees of freedom, where classic C-based MuJoCo remains superior for low-latency single-environment control.

Robolabs — Newton physics engine analysis robolabs.ai

Newton is governed by the Linux Foundation with contributions from NVIDIA, Google DeepMind, Disney Research and TRI; Disney’s Kamino solver handles complex kinematic topologies for expressive characters while MJWarp serves as the rigid-body backend, with reported 70x speedups for humanoid locomotion and 100x for manipulation.

arXiv/Moonlight review — mjlab framework themoonlight.io

mjlab pairs Isaac Lab’s manager-based API with the MJWarp backend but defaults to float32 (vs MuJoCo’s double precision), excludes high-fidelity RGB rendering, lacks PGS and noslip solver support, and cannot guarantee determinism across GPU runs due to atomic operations.

GitHub issue google-deepmind/mujoco_warp #1517 github.com

The Newton Cholesky solver fails when the Hessian’s condition number exceeds float32 precision — sliding friction values around 0.001 trigger NaNs, the convex box-box narrowphase misses shallow contacts causing deep penetration crashes, and reset_data leaves stale island states leaking between RL episodes.

NVIDIA Warp license discussion (developer.nvidia.com) developer.nvidia.com

Sections 2.6 and 2.7 of the Warp EULA prohibit use of the software to develop ‘competing products or technologies’ and bar integration into copyleft open-source projects, in contrast to Apache 2.0-licensed alternatives like Brax or MuJoCo.

PyPI mujoco-warp package notes pypi.org

MJWarp remains categorized as Beta; missing features include the IMPLICITFAST integrator, PGS and noslip solvers, and users must manually tune nconmax and njmax buffer sizes to avoid overflows.