Decompiling Fast Food Tycoon 2 (healeycodes.com)
Michal Wallace on Narrative Programming (alexalejandre.com)
Nim vs Rust: Language is a Matter of ''Coherence'', Not ''Performance'' (wintrover.github.io)
MacOS Extensions pack for the Apple Network Server v1.0 (oldvcr.blogspot.com)
Scrawl: show an agent the problem (scrawl.kitlangton.com)
SIMD and Go (internals-for-interns.com)
We should be more ambitious with the software we build (danluu.com)
Balloting has completed for C26. Unfortunately it was Disapproved/ (www.linkedin.com)
The Polyglot''s Dilemma: Conformance Testing a Dozen Specs in as Many Languages (emptysqua.re)
2026 Ruby on Rails Community Survey Results (railsdeveloper.com)
enzyme: Local-first compile step for knowledge bases. Save 350x cost, 1000x speed vs. frontier models (github.com)
Bringing uv and ty together (astral.sh)
How to run a city builder on 16 MHz (larstofus.com)
Enabling Researchers is a Moral Imperative (yorba.co)
What''s wrong with AI? (homepage.farm)
This week''s "node2shell" Brotli vulnerability (CVE-2026-111497) is exploitable in Python, other consumers of Brotli (www.aikido.dev)
Be Aware of What''s in Your Logs (fireborn.mataroa.blog)
Wild version 0.11.0 released (github.com)
I want my Wednesday back (blog.luitjes.it)
Listening to Nina Simone in 2036 (punkx.org)
Big Runtimes Make Efficient Programs (www.youtube.com)
Twelve years of distributed SQLite (philipotoole.com)
Indian government sites are serving revoked eMudhra certificates (captnemo.in)
An Incremental Approach to JIT Construction (dl.acm.org)
Incremental Computation Graphs (dziban.net)
Memory is slow, Disk is fast (www.bitflux.ai)
Attention people who think UB is fine (blog.habets.se)
Distributed data, centralized fixes (miren.dev)
Railway Preliminary Report: Oct 21st Security Incident (blog.railway.com)
Getting Banned from r/java (sjhannah.com)
Next-Concept Modeling: Fast, Parallel Coarse-to-Fine Text Generation (arxiv.org)
A whirlwind tour of systemd-nspawn containers (2025) (quantum5.ca)
No Source Code? No Problem! What if you have to port a program, but all you have is a binary? (2003) (queue.acm.org)
Profiling Org-HTML formal grammar and optimizing it: orgwebalchemy (jointhefreeworld.org)
How to Make Things, and Why (www.youtube.com)
Release OpenSSL 4.1.0 · openssl/openssl (github.com)
AI-discovered bugs may soon trigger fresh disruptions, cyber experts say (www.reuters.com)
Emacs finally folds to my liking: kirigami, tree-sitter, hide-show, Org, XML (jointhefreeworld.org)
The glorious @xkcdRandom Zig builtin (ochagavia.nl)
a neat trick i found for reusing physical memory (sebsite.pw)
Software is slow because of bad design, not slow languages (www.seangoedecke.com)
How close can pure FP get to C? (rtfeldman.com)
What are you doing this weekend? (lobste.rs)
Debunking "Faster than Rust": Malicious Benchmarks in Tov (blog.fyralabs.com)
The Many Many Missed Opportunities of Sonic 06 (isaacmarovitz.com)
The Hibernate Origin Story (Outsider Edition) (fishbowl.pastiche.org)
UUIDv7 doesn''t have the properties you think it does (alexsci.com)
Please don''t mess with links (maurycyz.com)
Reliable Radio Communications using run-length limited Golaycodes (github.com)
We have Traits at Home (www.axelmagn.com)
a hacky fucked up way to portably access errno from outside of c (sebsite.pw)
Docker is weird (codeandcake.dev)
What is you opinion on submission quality since the vibecoding tag was removed? (lobste.rs)
Quad9 DNS Resolver to exit France (quad9.net)
Mojo v1.2.0 (mojolang.org)
Objects, attributes, maps, oh my (bernsteinbear.com)
Expose only share links of a private service with caddy (dataswamp.org)
Header Accordions: QPACK amplification attacks against HTTP/3 servers (foxio.io)
I built a garbage collector for Rust (2023) (claytonwramsey.com)
eMudhra to Exit global SSL/TLS Certificate Business (emudhra.com)
Script dependencies with Nix (entropicthoughts.com)
Tell your network to explain itself and then some (unixdigest.com)
The bridge to agent-scale Git infrastructure (github.blog)
jailbreaking the switch 2 (pepsipu.com)
There isn''t an easy exploit for this PHP vulnerability (eliastaylor.com)
Create a Canarytoken. Deploy it somewhere (canarytokens.org)
Three configurable prettyprinters (2023) (reasonableapproximation.net)
Two Welsh organisations reprimanded after cyber-attack exposed children’s information (ico.org.uk)
Extending concurrent separation logic to the hardware level to verify the xv6 OS kernel on RISC-V with AI agents (arxiv.org)
Garmin Revamps and Opens Up Connect Developer API Program (www.dcrainmaker.com)
examining the macOS gcc binary (zoey-on-github.github.io)
Announcing DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)
Using a lookup-table to correct an approximation (www.corsix.org)
Turning IPv6 tunnels into programmable delay lines for pulsing DoS (blog.apnic.net)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
Understanding Nix flakes (lwn.net)
How to Run Turing-Complete Malware in PyTorch''s Backward Pass (elonlit.com)
Railway Security Disclosure: Wednesday October 21st (blog.railway.com)
GitLab Critical Patch Release (docs.gitlab.com)
Embedding EYG in Erlang programs (eyg.run)
Google''s Rust Style Guide (google.github.io)
Passkeys Attestation Trap (mjtsai.com)
Flow Typing, A New Lens on Linearity (jaredforsyth.com)
No quarter for gaps (fzakaria.com)
CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes (www.openwall.com)
Don''t throw it all away: Caching an immediate-mode UI (blickeditor.com)
BazelCon 2026 recap (blogsystem5.substack.com)
Your AI agent fixed the bug, but what else did it change? (blog.trailofbits.com)
Node.js — Wednesday, October 21, 2026 Security Releases (nodejs.org)
Firefox Local Mode (firefox-source-docs.mozilla.org)
zls 0.17.0 (zigtools.org)
php2shell by Calif Research (calif.io)
Eight Bits of Trust; eMudhra''s CA keys cracked in milliseconds (scotthelme.co.uk)
Deleting 19k Lines of Dead Compiler Code Without Trusting the LLM (thecloudlet.github.io)
Improving accessibility with CSS media queries (2025) (fleeb.ee)
Unikernels in OCaml (uniker.nl)
ConcurrentML: Improving on Go''s concurrency model (nikhilism.com)
Vector Graphics in Lil (beyondloom.com)
Announcing the GPU notification group and Linker Working Area (blog.rust-lang.org)
Firefox security patch tests are now private for at least a week (groups.google.com)
The Future of CSS (www.joshwcomeau.com)
Lobsters NYC Meetup on the 28th of October (lobste.rs)
Unauthorized Access to PingCAP Cloud Resources (www.pingcap.com)
Upcoming Critical PHP Security Release (www.php.net)
Why I’m no longer updating this repository (po-ru.com)
thebroken Episode 1 (2003) (www.youtube.com)
Why do we need ud2 when int 6 is right there? (devblogs.microsoft.com)
EDG is open source (edgcpp.org)
Sign language to text (deepmind.google)
Do minor curl vulnerabilities in the open (daniel.haxx.se)
How I got over 300 Tor exit nodes removed (kaba.cx)
Declarative WASM GC Types (blog.veritates.love)
Genera for the Initiated: Inside Symbolics Lisp Machines (www.youtube.com)
Mastodon 5.0: A closer look (blog.joinmastodon.org)
Making a VGA Driver in SystemVerilog (lukaswerner.com)
CVE-2026-106173: FortiSIEM gRPC Path Traversal to RCE (horizon3.ai)
NixOS is making me less afraid (entropicthoughts.com)
Agentic Monitoring (benjamincongdon.me)
Jepsen: Orkes Conductor 5.3.2 (jepsen.io)
Protecting Firefox users following the compromise of eMudhra intermediate certificates (blog.mozilla.org)
Learn everything about protein engineering (grimoire.bio)
How abliterated models can get you pwned (projectdiscovery.io)
Sumi.css - classless-first CSS framework (vladocar.github.io)
Setting up SSH keys on macOS with Touch ID (nmattia.com)
The Annotated VT100 Firmware (2022) (vt100.net)
Intermediary between public and private members (lobste.rs)
Rendering untrusted HTML email, safely(2021) (making.close.com)
A Very Fast IPv4 Parser, in Swift (blog.mahdibm.com)
Go will reject certificate chains containing eight distrusted SPKIs (github.com)
OpenBSD 8.0: released (marc.info)
OpenBSD 8.0 (www.openbsd.org)
Do web components have a future if nobody is writing them? (nolanlawson.com)
It''s still OK to enjoy programming (chriskiehl.com)
The Netherlands is building its own Linux OS to break free from Microsoft (www.techspot.com)
2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)
In Context - Rich Hickley (www.youtube.com)
Finding a home amidst the wreckage (blog.zerodogg.org)
Making all divisions slower to fix a bug in 0.000000000000000000542% of cases (futhark-lang.org)
One Hash Bloom Filters (www.calabro.io)
Removing a Type Assertion with Object.assign (ataias.com.br)
Static Analysis for the Uninitialized (tenderlovemaking.com)
Wine ported to OpenBSD (marc.info)
Hanami, Why?: Model Citizens (aaronmallen.me)
A5 v1.0 A5 (a5geo.org)
Making dns_erlang Fast: Binary Tricks for the BEAM (blog.dnsimple.com)
Borrow Checking Zero-Cost Cyclic Mutability (antelang.org)
Timestral: Mistral''s time-series foundation models (mistral.ai)
Tor VPN Beta: What we''ve learned building our own VPN for Android from scratch (blog.torproject.org)
The 7.3 kernel has been released (lwn.net)
Beginning of the Ende (a community Deno fork) (blog.webb.page)
A Bazel Bard (sluongng.substack.com)
The Most Forbidden Technique (thezvi.substack.com)
Crawlers, floods and fleets: a year of keeping our digital collections open (stacks.wellcomecollection.org)
Programming Language Fundamentals in Agda (plfa.github.io)
Composite objects and C26 the std::polymorphic type (mariusbancila.ro)
Why is GitOps so good? (thorsell.io)
Efficient Extraction for Effectful E-graphs (ztatlock.net)
A response to claims about flatpak being insecure (oro.gay)
What the heck is /pkg? (anderegg.ca)
What requirements don''t you have? (www.seangoedecke.com)
Updates to site guidelines and AI/LLM tags (lobste.rs)
BBC Master Pi 1MHz Domesday (youtu.be)
Inline rendering with document.currentScript (leanrada.com)
Speeding up code review with small-change (lethain.com)
Dynamic Packages (www.getlazarus.org)
Superoptimizing an FPU emulator (purplesyringa.moe)
August in Servo: CSS Grid, text selection, and more (servo.org)
How Discover-Tech turned targeted ads into a pipeline for zero-click spywares (citizenlab.ca)
Real-time Software On Linux: How Hard Can It Be? (www.youtube.com)
QML for C & Zig (gist.github.com)
Outside the Scope of Our Support (fireborn.mataroa.blog)
Men in tech #YesAllMen (www.youtube.com)
Inside the Intel 8087 chip: floating-point addition and subtraction (www.righto.com)
Ghidra CBMC Assembly Model Checker (www.philipzucker.com)
My obituary for programming (dumbmatter.com)
The Problem with C Safety: Why “It Works” Isn’t Good Enough (www.modernescpp.com)
Using timers to perform weekly tasks (mbork.pl)
High performance policy routed IPsec mesh SD-WAN (ranet3.com)
A New Way to Think About Borrow Checking (In Reverse) (verdagon.dev)
ARP! Tell your network to explain itself (benjcal.space)
Algorithmic Sound Design with L-Systems and Granular Synthesis (nathanho.me)
It''s enough - vibecoding tag crossed from useless to harmful (lobste.rs)
Un-hanging the HP Envy 17-DA0013dx for OpenBSD (darwinsys.com)
Making Hybrid Images (2014) (www.jeremykun.com)
The Brain Sandwich (terriblesoftware.org)
It''s time to talk about TEEs (alinush.github.io)
AI-First, Git-Compatible Source Control (strata.madskristiansen.com)
Abolish AI! Manifesto (abolish-ai.net)
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) (pwn.ai)
Principles of Anchor Engineering (nappingtoheavymetal.com)
It took me nine years to hack my Xbox 360 (kennedn.com)
Future of Programming (www.youtube.com)
Claude reveals ECDSA curve origins (www.anthropic.com)
Ship Your Interpreter (www.basis.ai)
Intuitive concurrent programming in any language Lingua Franca (www.lf-lang.org)
I built the RealWorld app in Lean 4 (leangineer.com)
Developing for Debugging (2025) (www.davepacheco.net)
Some quick thoughts on Unit Testing ActivityPub (shkspr.mobi)
STAC-M3 Benchmark: L tick database 1.0 on Oxide OxVM w/ 128 vCPUs & 1.25 TiB of RAM (docs.stacresearch.com)
orib: Bringing back the old Reddit interface, with a few new enhancements (github.com)
Neural Networks Are Already Clean (already-clean.goodfire.com)
Plots of deltas between time scales (www.ucolick.org)
CLP: Efficient and Scalable Search on Compressed Text Logs (2021) (www.usenix.org)
GitHub Actions workflow lockfiles in public preview (github.blog)
prjcombine - An FPGA reverse engineering project (codeberg.org)
On Notation (youtu.be)
Abstraction, intuition, and the “monad tutorial fallacy”(2009) (byorgey.wordpress.com)
Interactive refactoring in gopls (go.dev)
Do you let LLMs write both your tests and your code? (lobste.rs)
Someone on Torrent Sites Kept Fucking With My Sonarr (thereallo.dev)
C26: the new debugging header (www.sandordargo.com)
There''s never been a better time to go into math (www.youtube.com)
Ubuntu 26.10 (Stonking Stingray) released (lists.ubuntu.com)
The NIST Elliptic Curves Seeds Bounty Has Been Claimed (words.filippo.io)
Getting Canceled (www.youtube.com)
Introducing GNOME OS Preview (blogs.gnome.org)
We''re sunsetting Codeberg Pages v2 (blog.codeberg.org)
Thirty Years of KDE (blog.cornelius-schumacher.de)
The Decoherence Trap: When AI slop drowns out the signal in an endless sea of noise (maevyn.codes)
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD (calif.io)
Mull: note-taking with a language server / vscode extension (github.com)
Lessons learned building Fronteira, an MCP proxy with behavioral guardrails (wiki.alcidesfonseca.com)
The road to iroh 1.0 (www.iroh.computer)
Making a 88x31 button book using ImageMagick (k.sosnierz.me)
What agents mean for Rust (and vice versa) (smallcultfollowing.com)
coopiano: A physically modelled piano synthesizer in C17 (github.com)
Matt Mullenweg Orders Accessibility Revert (www.therepository.email)
Why are we even doing all this? (terrytao.wordpress.com)
Writing stateful effect handlers in EYG (eyg.run)
Folders Esoteric Language (danieltemkin.com)
My self-hosted infrastructure with Incus OS (dataswamp.org)
Linus Torvalds on AI-assisted kernel contributions (lore.kernel.org)
Where did WIN32_LEAN_AND_MEAN come from? (2009) (devblogs.microsoft.com)
Epic''s EAC2 v2 seems fairly easily bypassable (codon.org.uk)
Announcing Rust 1.99.1 (blog.rust-lang.org)
rust-djinn: You Should Specify Your Code Unambiguously (and Prove That You Did) (henniger.dev)
Forgejo v17.0 is available (forgejo.org)
About time (www.bipm.org)
Gleam case exhaustiveness, as a fan (oyster.pckt.blog)
Religious Studies In Software Engineering (tombh.co.uk)
My C23 Conventions (abner.page)
End-to-end encrypted relays for OCapN (spritely.institute)
JPEG XL vs AVIF for web use-cases (jakearchibald.com)
Remote Attestation Should Not Be Tolerated (lumi.codeberg.page)
Libreboot 26.10 “Ominous Olive” released with full UEFI support (libreboot.org)
Sunsetting decomp.dev (decomp.dev)
sslx: A fast, modern alternative to OpenSSL''s CLI (github.com)
This Month in Ladybird - September 2026 (ladybird.org)
The Costa GUI (costa.jacobpalm.dk)
HOL Light Tutorial (hol-light.github.io)
Everyone is doing Git on S3 wrong (enroute.sh)
The geometric model of maintenance (entropicthoughts.com)
Microsoft Defender for Linux (techcommunity.microsoft.com)
ArenaAllocators don''t play nicely with ArrayLists (www.openmymind.net)
Haxy.net is live! — HAXY (git forge) devlog (youtu.be)
The Ferranti files: 40 years of Sinclair secrets unearthed (youtu.be)
Haxy on Haxy (try.haxy.net)
Furifont: furigana built into the font (furifont.antfu.me)
An Emulator Writer''s HOWTO for Static Binary Translation (www.gtoal.com)
We found a Chinese fleet (swarmcha.se)
ito - build terminal ui in lua (uji.sh)
Fixing C Strings With String Views (eliasebner.com)
Anthropic''s Scion is heavily inspired by Mononoke · sunshowers (sunshowers.io)
Root DNSSEC trust anchors (jpmens.net)
Better HTTP/1 connection reuse (go.dev)
The DelightQL Query Language (delightql.org)
How the L0pht (probably) optimized attack against the LanMan hash (modexp.wordpress.com)
Package managers have an integrity problem (blog.trailofbits.com)
What I Self-Host Aspirational Self Hosting Guide (viceconsole.fyi)
GitLab warns of max severity code execution vulnerability (www.bleepingcomputer.com)
Awesome Gaming on Linux Without Cheating (onlineservices.epicgames.com)
BotStopper from Techaro (botstopper.net)
ZXC: Lossless compression built for ultra-fast decode (libzxc.org)
Building a Linearizable Log on READ COMMITTED Isolation (materialize.com)
OpenFatigue — Open is the new closed (openfatigue.ai)
Factor 0.102 now available (re.factorcode.org)
Lockstep to pipeline in almost one line (andersmurphy.com)
Plasma 6.8 released (KDE''s 30th birthday) (kde.org)
yet another place where a linux man page is inaccurate (sebsite.pw)
Introducing Firefox Enterprise (blog.mozilla.org)
My Game''s Procedural Dialogue System (www.youtube.com)
Pulsar at ESUG 2026 (new Smalltalk IDE) (blog.lorenzano.eu)
A UAF turned RCE (daniel.haxx.se)
Linux Lockdown and Hibernation (again) (codon.org.uk)
AIR-LLM: Broadcasting AI Weights over Radio for Memory-Free Edge LLM Inference via RF Computing (arxiv.org)
Ledger confirms spy chip implant behind wallet crypto thefts (www.bleepingcomputer.com)
Fancy Curl Sites (nytpu.com)
AI models may be capable of self-replicating without access to a datacenter (www.anthropic.com)
Compiler bootstrapping depends on more than you might think (utcc.utoronto.ca)
Apple: Switch to Safari (from Chrome) (www.apple.com)
Bru: Send and read SMS from the browser (sverre.me)
The 2026 Maintainers Summit (lwn.net)
Please stop hashing the public key first (or: ML-DSA''s µ annoys me) (blog.erincandescent.net)
Redesigning source control at Anthropic (www.anthropic.com)
Announcing Lix 2.96 “Bingsu” (lix.systems)
Accelerating the Zig Tokenizer (with AVX-512) (www.youtube.com)
Nixpkgs for the frontend impaired (fzakaria.com)
Data-oriented Design for Mortals (www.youtube.com)
Running RAG with a (small) language model in the browser (bart.degoe.de)