惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
L
LINUX DO - 最新话题
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Forbes - Security
Forbes - Security
博客园 - 司徒正美
Hugging Face - Blog
Hugging Face - Blog
W
WeLiveSecurity
Jina AI
Jina AI
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
N
News and Events Feed by Topic
V
V2EX
Stack Overflow Blog
Stack Overflow Blog
Engineering at Meta
Engineering at Meta
PCI Perspectives
PCI Perspectives
Martin Fowler
Martin Fowler
T
The Exploit Database - CXSecurity.com
F
Full Disclosure
WordPress大学
WordPress大学
S
Security Affairs
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
S
SegmentFault 最新的问题
P
Privacy International News Feed
IT之家
IT之家
M
MIT News - Artificial intelligence
G
GRAHAM CLULEY
Hacker News: Ask HN
Hacker News: Ask HN
D
DataBreaches.Net
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Google Online Security Blog
Google Online Security Blog
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
C
Check Point Blog
美团技术团队
Security Latest
Security Latest
Cyberwarzone
Cyberwarzone
N
News and Events Feed by Topic
MyScale Blog
MyScale Blog
H
Help Net Security
宝玉的分享
宝玉的分享
The Hacker News
The Hacker News
The Last Watchdog
The Last Watchdog
The Cloudflare Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
爱范儿
爱范儿
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
I
Intezer
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
AI
AI
I
InfoQ
N
News | PayPal Newsroom
TaoSecurity Blog
TaoSecurity Blog

Hacker News

Introducing Claude Opus 4.7 Qwen Studio The Future of Everything is Lies, I Guess: Where Do We Go From Here? GitHub - SeanFDZ/macmind: Single-layer transformer in HyperTalk for the classic Macintosh Show HN: Agent-cache – Multi-tier LLM/tool/session caching for Valkey and Redis Moving a large-scale metrics pipeline from StatsD to OpenTelemetry / Prometheus GitHub - Nightmare-Eclipse/RedSun: The Red Sun vulnerability repository GitHub - SethPyle376/hiraeth: Local AWS emulator focused on fast integration testing, with SQS support, SQLite-backed state, and a debug-friendly web UI. GitHub - macOS26/Agent: Any AI, replaces Claude Code, Cursor, OpenClaw. Over 18 LLM providers (Claude, OpenAI, Gemini, Ollama, Zai, HF, Qwen) wired into a native Mac app that writes code, builds Xcode projects, bumps versions, manages git, automates Safari, use AppleScript, JS or Accessibility, extend Agent! w/ MCP Servers, run tasks from your iPhone via Messages. YouTube now lets you turn off Shorts I Made a Terminal Pager Burgers | マクドナルド公式 Commands — HackerNews CLI documentation ChatGPT for Excel PiCore - Raspberry Pi Port of Tiny Core Linux Live Nation illegally monopolized ticketing market, jury finds Google Broke Its Promise to Me. Now ICE Has My Data. Founding Engineer at Adaptional | Y Combinator CRISPR takes important step toward silencing Down syndrome’s extra chromosome GitHub - saffron-health/libretto: The AI toolkit for building reliable browser automations US v. Heppner (S.D.N.Y. 2026) no attorney-client privilege for AI chats [pdf] Unexpected €54k billing spike in 13 hours: Firebase browser key without API restrictions used for Gemini requests Retrofitting JIT Compilers into C Interpreters IPv6 – Google The Accursèd Alphabetical Clock Cybersecurity Looks Like Proof of Work Now Fragments: April 14 Cal.com Goes Closed Source: Why AI Security Is Forcing Our Decision | Cal.com - Scheduling Software for Online Bookings Laravel raised money and now injects ads directly into your agent When moving fast, talking is the first thing to break Too much Discussion of the XOR swap trick – Heather Cafe Introduction to Spherical Harmonics for Graphics Programmers The Grand Line Building a Z-Machine in the worst possible language High-Level Rust: Getting 80% of the Benefits with 20% of the Pain GitHub - duguyue100/midnight-captain: Inspired by Midnight Commander, tailored to my taste. How to build a `git diff` driver · Jamie Tanna | Software Engineer Center for Responsible, Decentralized Intelligence at Berkeley The Local Universe’s Expansion Rate Is Clearer Than Ever, but Still Doesn’t Add Up - A new synthesis of astronomical measurements confirms a persistent mismatch that could point to physics beyond current models The air throughout our homes is infused with microplastics. But there are things you can do to breathe less of them The disturbing white paper Red Hat is trying to erase from the internet – OSnews The Future of Everything is Lies, I Guess: Annoyances ‘Abhorrent’: the inside story of the Polymarket gamblers betting millions on war Productive procrastination — Max van IJsselmuiden maps, territory and LMs 447 Terabytes per Square Centimetre at Zero Retention Energy: Non-Volatile Memory at the Atomic Scale on Fluorographane Show HN: Pardonned.com – A searchable database of US Pardons 20 Years on AWS and Never Not My Job The Seasons are Wrong Artemis II crew splashes down near San Diego after historic moon mission We gave an AI a 3 year retail lease in SF and asked it to make a profit | Andon Labs How a dancer with ALS used brainwaves to perform live On filing the corners off my MacBooks Installing every* Firefox extension OpenClaw’s memory is unreliable, and you don’t know when it will break Steve Blank Nowhere Is Safe Chimpanzees in Uganda locked in vicious 'civil war', say researchers watgo - a WebAssembly Toolkit for Go linux/Documentation/process/coding-assistants.rst at master · torvalds/linux GitHub - callumlocke/json-formatter: Makes JSON easy to read. Founding Product Engineer at Bild AI | Y Combinator A compelling title that is cryptic enough to get you to take action on it GitHub - Keychron/Keychron-Keyboards-Hardware-Design: Industrial design files for Keychron keyboards and mice. 100+ models with CAD assets in STEP, DXF, DWG, and PDF. Source-available, with commercial use allowed for original compatible accessories within the license terms. [ANNOUNCE] WireGuardNT v0.11 and WireGuard for Windows v0.6 Released 1D-Chess Helium Is Hard to Replace Cooperative Vectors Introduction | Evolve Keeping a Postgres queue healthy — PlanetScale Our response to the Axios developer tool compromise Do Americans read print books, e-books or audiobooks more? The Zettelkasten Method in Obsidian: A Practical Setup Guide Artemis II Is Competency Porn and We Are Starving For It WeakC4 Flight Viz — Cockpit View A Mexican surveillance giant you’ve never heard of is now watching the U.S. border Surelock: Deadlock-Free Mutexes for Rust RISC-V 101 – what is it and what does it mean for Canonical? | Ubuntu The Problem That Built an Industry How Much Linear Memory Access Is Enough? | Solidean Investigating Split Locks on x86-64 Simplest hash functions Sybilproof reputation mechanisms (2005) [pdf] What is a property? How Complex is my Code? Static code analysis in Kotlin — tools overview Toffoli gates are all you need PGLite evangelism dcmake: a new CMake debugger UI Clojure on Fennel part one: Persistent Data Structures Fragments: April 2 Python Release Python install manager 26.1 The Life and Death of the Book Review - Liberties Introducing Database Traffic Control — PlanetScale Bitcoin miners are losing $19,000 on every BTC produced as difficulty drops 7.8% God sleeps in the minerals Building slogbox Apple Silicon and Virtual Machines: Beating the 2 VM Limit Who was “Not Even Wrong” first? Pokemon Evolution Vs Darwinian Evolution The APL Programming Language Source Code
Audit sparked by Standard investigation finds tax official steered $10M contract to friend
Joe Fitzgerald Rodriguez · 2026-06-24 · via Hacker News

San Francisco’s chief assistant treasurer steered a $10 million contract to manage billions of dollars in business taxes to a technology company led by her friends, according to an audit conducted by the city controller’s office, San Francisco’s fiscal watchdog.

The independent investigation verifies reporting (opens in new tab) by The Standard last year, which led the office of the treasurer and tax collector to place Tajel Shah, the city’s chief assistant treasurer, on paid leave. Shah left city employment in November.

The report describes a staffer who was allowed to put her thumb on the scale to help a family friend benefit from a city contract, buttressed by a lax staffing culture in an obscure office that oversees billions of dollars.

Shah’s actions created the appearance of a “pay-to-play” business tax system, auditors wrote.

Whistleblowers came forward last year alleging Shah had personal relationships with Roque Versace, then chief revenue officer at Mechanical Orchard, which describes itself as an “AI-native technology company.”

Jose Cisneros, head of the city’s treasurer and tax collector’s office, requested the independent audit.

A person walks down a long, dimly lit hallway with ornate wall lamps and a pair of wooden double doors at the far end.
San Francisco City Hall. | Source: Camille Cohen/The Standard

In a summary of the report sent as a letter to the treasurer and tax collector’s office, auditor Mark de la Rosa of the city controller’s office described the process of awarding a contract to Mechanical Orchard as “improper,” saying repeated decisions were made to help the company develop the highest-scoring proposal, even though bidding was supposed to be neutral.

The office of the treasurer and tax collector’s “solicitation process was compromised by an undisclosed friendship between the former chief assistant treasurer, Tajel Shah, and the former chief revenue officer of Mechanical Orchard,” de la Rosa wrote. “Staff managed both procurements in ways that unfairly benefited Mechanical Orchard.”

Mechanical Orchard was in talks to obtain the contract to help manage $2.6 billion in city business taxes for two years, only to abruptly walk away from the process. The city controller’s audit linked Mechanical Orchard’s decision to halt pursuit of the contract to The Standard’s reporting.

“It withdrew after The Standard contacted them for comment,” the auditors wrote.

De la Rosa said Shah allowed Mechanical Orchard to bid on the business tax system without sharing the results of the company’s work with all proposers, a normal course of business done to ensure equal information. She later developed a scope of work for the bid that closely mirrored Mechanical Orchard’s own project recommendations, nearly guaranteeing its success in pursuing the contract.

Shah’s family may have benefited from her actions, the auditor wrote, after a subcontractor for Mechanical Orchard hired her niece. While the report notes that Shah denied any wrongdoing, the auditors found email messages showing she contacted Ratio PBC’s CEO directly to thank him for his firm’s work on the city project before asking if she could connect him with her niece.

Have thoughts on this story?

Seeking a job for a relative from a prospective vendor is “inconsistent with the high standard of conduct” required in public procurement, the auditors wrote.

City controller auditors found that Shah “abused her position’s authority,” and while the treasurer’s office could not have prevented all of her actions, “it could improve controls to prevent or detect such actions earlier.”

In particular, the auditors said, the treasurer and tax collector’s office has an organizational structure without checks and balances, blocking staff from raising concerns.

The office has reorganized its leadership in an effort to prevent further abuses of power.

In response to the audit, Treasurer Jose Cisneros wrote a letter to the city controller auditors saying he accepts the findings of the report.

“The conduct described, directing staff to manipulate a competitive procurement process to benefit a personal associate while concealing that relationship, was wrong,” he said. “It violated the city’s ethics and procurement policies and the values this office holds.”

The treasurer and tax collector’s office declined to comment beyond its response to the city controller’s office.