Git for the US Code (lexifina.com)
This is not sustainable (www.netmeister.org)
Reminder: Lobsters NYC Meetup Tomorrow 5:30 at Walker''s (lobste.rs)
Coders’ Rights Project Reverse Engineering FAQ (2017) (www.eff.org)
Tailscale SSH: Investigation and remediation update (tailscale.com)
Ghostty 1.4.0 (ghostty.org)
Fixing KIO copy to USB stick and network filesystems (blogs.kde.org)
The next circle of security hell (blogs.gentoo.org)
An Evening with Berferd: In Which a Cracker is Lured, Endured, and Studied (1992) (www.cheswick.com)
Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines (projectzero.google)
Four Months of Zig (gracefulliberty.com)
1,447 emoji? We''ll do it live (planetpeanut.studio)
Protobuf in Python and TypeScript is actually good now (buf.build)
The Shift of Theseus — Toy Bit Provenance Abstract Domain (www.pypy.org)
A fast and secure tar parser for the Rust ecosystem (astral.sh)
Finding panics with Call Graph Analyzer (tweedegolf.nl)
Filian, Fil-C binaries on Debian (cr.yp.to)
A stackless floodfill automation (2023) (t3x.org)
Compile-Time Dependent Types (thenumb.at)
slughorn — GPU Vector Graphics (slughorn.io)
EnsoJS - native-first microframework for building declarative Web Components (ensojs.dev)
Gforth 1.0 (gforth.org)
A select should tell you something (alfy.blog)
Full Haskell-like Type Class resolution in Java (garciat.com)
TypeScript and Haskell: Unions & Singletons (2024) (garciat.com)
Code.org''s Excellent Beginner Programming Courses Gets Lost in the AI Hype (studio.code.org)
Keyless Entry: Hacking SwitchBot Smart Locks (neodyme.io)
Python''s experimental JIT to be removed (lwn.net)
Our Response To The eMudhra Key Disclosure Incident (go.dev)
The Exponential Time Hypothesis Is False [pdf] (github.com)
(VCF Midwest 2026) Building a Living 90s Internet for Vintage Computers (www.youtube.com)
The passkey is worse (www.kcoleman.me)
Shitty Screenshare (shittyscreenshare.com)
MEU - a M3U file editor (github.com)
The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass (www.sonatype.com)
Oldest GUI application that still runs on Windows 11 (blog.enlyth.com)
A faster way to compute signed 64-bit floor division by constants (www.benjoffe.com)
CSS-Tricks has a new owner (css-tricks.com)
The result of the C26 DIS ballot (train-it.eu)
Pharo 14 Released (pharo.org)
Web Page Crawler Revealed - tracking down requests from Contabo GmbH (bruceediger.com)
Stalwart v1.0: The Fastest Mail Server on the Planet (stalw.art)
Heavenly delights of hashing numbers under EQUALP (turtleware.eu)
Simple Sudoku Solver in Assembly (blog.veitheller.de)
Why is it so expensive to send an email? (evancz.dev)
Shadow: Dummy folders, an obvious overflow, and a ROP chain (chirp.tene7.com)
Aggro is the Foundation (2022) (radimentary.wordpress.com)
From impulse purchase to pocket studio: The M-Vave FM-1 (arstechnica.com)
Websites Should Be Printable (brennenputh.me)
Gram 3.4.0 released (gram-editor.com)
What are you doing this week? (lobste.rs)
The Small Web is Huge (dn711504.ca.archive.org)
Wails v3.0.0 Released (v3.wails.io)
Akku.scm 1.2.0 released (weinholt.se)
MoLE Protocols (datatracker.ietf.org)
About the compromised eMudhra intermediate CAs (support.apple.com)
OpenLDK: Bringing the Java World into Common Lisp (atgreen.github.io)
The State of Context Engineering (www.dbreunig.com)
writing about pratt parsing so I remember it (www.unix.dog)
“AI Skills” are worthless in 2026 (fishbowl.pastiche.org)
Simple NetBSD webserver (bsandro.tech)
Two musings on the design of compiler warnings (2020) (quuxplusone.github.io)
Reverse-Engineering Instruction Encodings (2001) (www.usenix.org)
Building Java ME Apps with Modern Tooling (voxelmanip.se)
Every Clojure Talk Ever (www.youtube.com)
When a glibc update accidentally breaks Chromium''s audio (2021) (refi64.dev)
POSIX wordexp(3) is dangerous (yossarian.net)
Vim Classic (vim-classic.org)
A vision for a next-generation timeline (media.ccc.de)
SIMD-accelerated computer vision on a 2 microcontroller (shraiwi.com)
Partial Order Precedence (ziglang.org)
Reflections on DeepSeek Open-Sourcing Its Inference Engine, DeepInfer (wukong123.substack.com)
The Slurptop: A home-built luggable that runs on power tool batteries (slurpburgers.com)
The Tool Book of a Nuremberg Knight from 1505 (loeffelholz-codex.org)
Steal My Bitcoin (stealmybitcoin.com)
Decompiling Fast Food Tycoon 2 (healeycodes.com)
Michal Wallace on Narrative Programming (alexalejandre.com)
Nim vs Rust: Language is a Matter of ''Coherence'', Not ''Performance'' (wintrover.github.io)
MacOS Extensions pack for the Apple Network Server v1.0 (oldvcr.blogspot.com)
Scrawl: show an agent the problem (scrawl.kitlangton.com)
SIMD and Go (internals-for-interns.com)
We should be more ambitious with the software we build (danluu.com)
Balloting has completed for C26. Unfortunately it was Disapproved/ (www.linkedin.com)
The Polyglot''s Dilemma: Conformance Testing a Dozen Specs in as Many Languages (emptysqua.re)
2026 Ruby on Rails Community Survey Results (railsdeveloper.com)
enzyme: Local-first compile step for knowledge bases. Save 350x cost, 1000x speed vs. frontier models (github.com)
Bringing uv and ty together (astral.sh)
How to run a city builder on 16 MHz (larstofus.com)
Enabling Researchers is a Moral Imperative (yorba.co)
What''s wrong with AI? (homepage.farm)
This week''s "node2shell" Brotli vulnerability (CVE-2026-111497) is exploitable in Python, other consumers of Brotli (www.aikido.dev)
Be Aware of What''s in Your Logs (fireborn.mataroa.blog)
Wild version 0.11.0 released (github.com)
I want my Wednesday back (blog.luitjes.it)
Listening to Nina Simone in 2036 (punkx.org)
Big Runtimes Make Efficient Programs (www.youtube.com)
Twelve years of distributed SQLite (philipotoole.com)
Indian government sites are serving revoked eMudhra certificates (captnemo.in)
An Incremental Approach to JIT Construction (dl.acm.org)
Incremental Computation Graphs (dziban.net)
Memory is slow, Disk is fast (www.bitflux.ai)
Attention people who think UB is fine (blog.habets.se)
Distributed data, centralized fixes (miren.dev)
Railway Preliminary Report: Oct 21st Security Incident (blog.railway.com)
Getting Banned from r/java (sjhannah.com)
Next-Concept Modeling: Fast, Parallel Coarse-to-Fine Text Generation (arxiv.org)
A whirlwind tour of systemd-nspawn containers (2025) (quantum5.ca)
No Source Code? No Problem! What if you have to port a program, but all you have is a binary? (2003) (queue.acm.org)
Profiling Org-HTML formal grammar and optimizing it: orgwebalchemy (jointhefreeworld.org)
How to Make Things, and Why (www.youtube.com)
Release OpenSSL 4.1.0 · openssl/openssl (github.com)
AI-discovered bugs may soon trigger fresh disruptions, cyber experts say (www.reuters.com)
Emacs finally folds to my liking: kirigami, tree-sitter, hide-show, Org, XML (jointhefreeworld.org)
The glorious @xkcdRandom Zig builtin (ochagavia.nl)
a neat trick i found for reusing physical memory (sebsite.pw)
Software is slow because of bad design, not slow languages (www.seangoedecke.com)
How close can pure FP get to C? (rtfeldman.com)
What are you doing this weekend? (lobste.rs)
Debunking "Faster than Rust": Malicious Benchmarks in Tov (blog.fyralabs.com)
The Many Many Missed Opportunities of Sonic 06 (isaacmarovitz.com)
The Hibernate Origin Story (Outsider Edition) (fishbowl.pastiche.org)
UUIDv7 doesn''t have the properties you think it does (alexsci.com)
Please don''t mess with links (maurycyz.com)
Reliable Radio Communications using run-length limited Golaycodes (github.com)
We have Traits at Home (www.axelmagn.com)
a hacky fucked up way to portably access errno from outside of c (sebsite.pw)
Docker is weird (codeandcake.dev)
What is you opinion on submission quality since the vibecoding tag was removed? (lobste.rs)
Quad9 DNS Resolver to exit France (quad9.net)
Mojo v1.2.0 (mojolang.org)
Objects, attributes, maps, oh my (bernsteinbear.com)
Expose only share links of a private service with caddy (dataswamp.org)
Header Accordions: QPACK amplification attacks against HTTP/3 servers (foxio.io)
I built a garbage collector for Rust (2023) (claytonwramsey.com)
eMudhra to Exit global SSL/TLS Certificate Business (emudhra.com)
Script dependencies with Nix (entropicthoughts.com)
Tell your network to explain itself and then some (unixdigest.com)
The bridge to agent-scale Git infrastructure (github.blog)
jailbreaking the switch 2 (pepsipu.com)
There isn''t an easy exploit for this PHP vulnerability (eliastaylor.com)
Create a Canarytoken. Deploy it somewhere (canarytokens.org)
Three configurable prettyprinters (2023) (reasonableapproximation.net)
Two Welsh organisations reprimanded after cyber-attack exposed children’s information (ico.org.uk)
Extending concurrent separation logic to the hardware level to verify the xv6 OS kernel on RISC-V with AI agents (arxiv.org)
Garmin Revamps and Opens Up Connect Developer API Program (www.dcrainmaker.com)
examining the macOS gcc binary (zoey-on-github.github.io)
Announcing DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)
Using a lookup-table to correct an approximation (www.corsix.org)
Turning IPv6 tunnels into programmable delay lines for pulsing DoS (blog.apnic.net)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
Understanding Nix flakes (lwn.net)
How to Run Turing-Complete Malware in PyTorch''s Backward Pass (elonlit.com)
Railway Security Disclosure: Wednesday October 21st (blog.railway.com)
GitLab Critical Patch Release (docs.gitlab.com)
Embedding EYG in Erlang programs (eyg.run)
Google''s Rust Style Guide (google.github.io)
Passkeys Attestation Trap (mjtsai.com)
Flow Typing, A New Lens on Linearity (jaredforsyth.com)
No quarter for gaps (fzakaria.com)
CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes (www.openwall.com)
Don''t throw it all away: Caching an immediate-mode UI (blickeditor.com)
BazelCon 2026 recap (blogsystem5.substack.com)
Your AI agent fixed the bug, but what else did it change? (blog.trailofbits.com)
Node.js — Wednesday, October 21, 2026 Security Releases (nodejs.org)
Firefox Local Mode (firefox-source-docs.mozilla.org)
zls 0.17.0 (zigtools.org)
php2shell by Calif Research (calif.io)
Eight Bits of Trust; eMudhra''s CA keys cracked in milliseconds (scotthelme.co.uk)
Deleting 19k Lines of Dead Compiler Code Without Trusting the LLM (thecloudlet.github.io)
Improving accessibility with CSS media queries (2025) (fleeb.ee)
Unikernels in OCaml (uniker.nl)
ConcurrentML: Improving on Go''s concurrency model (nikhilism.com)
Vector Graphics in Lil (beyondloom.com)
Announcing the GPU notification group and Linker Working Area (blog.rust-lang.org)
Firefox security patch tests are now private for at least a week (groups.google.com)
The Future of CSS (www.joshwcomeau.com)
Lobsters NYC Meetup on the 28th of October (lobste.rs)
Unauthorized Access to PingCAP Cloud Resources (www.pingcap.com)
Upcoming Critical PHP Security Release (www.php.net)
Why I’m no longer updating this repository (po-ru.com)
thebroken Episode 1 (2003) (www.youtube.com)
Why do we need ud2 when int 6 is right there? (devblogs.microsoft.com)
EDG is open source (edgcpp.org)
Sign language to text (deepmind.google)
Do minor curl vulnerabilities in the open (daniel.haxx.se)
How I got over 300 Tor exit nodes removed (kaba.cx)
Declarative WASM GC Types (blog.veritates.love)
Genera for the Initiated: Inside Symbolics Lisp Machines (www.youtube.com)
Mastodon 5.0: A closer look (blog.joinmastodon.org)
Making a VGA Driver in SystemVerilog (lukaswerner.com)
CVE-2026-106173: FortiSIEM gRPC Path Traversal to RCE (horizon3.ai)
NixOS is making me less afraid (entropicthoughts.com)
Agentic Monitoring (benjamincongdon.me)
Jepsen: Orkes Conductor 5.3.2 (jepsen.io)
Protecting Firefox users following the compromise of eMudhra intermediate certificates (blog.mozilla.org)
Learn everything about protein engineering (grimoire.bio)
How abliterated models can get you pwned (projectdiscovery.io)
Sumi.css - classless-first CSS framework (vladocar.github.io)
Setting up SSH keys on macOS with Touch ID (nmattia.com)
The Annotated VT100 Firmware (2022) (vt100.net)
Intermediary between public and private members (lobste.rs)
Rendering untrusted HTML email, safely(2021) (making.close.com)
A Very Fast IPv4 Parser, in Swift (blog.mahdibm.com)
Go will reject certificate chains containing eight distrusted SPKIs (github.com)
OpenBSD 8.0: released (marc.info)
OpenBSD 8.0 (www.openbsd.org)
Do web components have a future if nobody is writing them? (nolanlawson.com)
It''s still OK to enjoy programming (chriskiehl.com)
The Netherlands is building its own Linux OS to break free from Microsoft (www.techspot.com)
2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)
In Context - Rich Hickley (www.youtube.com)
Finding a home amidst the wreckage (blog.zerodogg.org)
Making all divisions slower to fix a bug in 0.000000000000000000542% of cases (futhark-lang.org)
One Hash Bloom Filters (www.calabro.io)
Removing a Type Assertion with Object.assign (ataias.com.br)
Static Analysis for the Uninitialized (tenderlovemaking.com)
Wine ported to OpenBSD (marc.info)
Hanami, Why?: Model Citizens (aaronmallen.me)
A5 v1.0 A5 (a5geo.org)
Making dns_erlang Fast: Binary Tricks for the BEAM (blog.dnsimple.com)
Borrow Checking Zero-Cost Cyclic Mutability (antelang.org)
Timestral: Mistral''s time-series foundation models (mistral.ai)
Tor VPN Beta: What we''ve learned building our own VPN for Android from scratch (blog.torproject.org)
The 7.3 kernel has been released (lwn.net)
Beginning of the Ende (a community Deno fork) (blog.webb.page)
A Bazel Bard (sluongng.substack.com)
The Most Forbidden Technique (thezvi.substack.com)
Crawlers, floods and fleets: a year of keeping our digital collections open (stacks.wellcomecollection.org)
Programming Language Fundamentals in Agda (plfa.github.io)
Composite objects and C26 the std::polymorphic type (mariusbancila.ro)
Why is GitOps so good? (thorsell.io)
Efficient Extraction for Effectful E-graphs (ztatlock.net)
A response to claims about flatpak being insecure (oro.gay)
What the heck is /pkg? (anderegg.ca)
What requirements don''t you have? (www.seangoedecke.com)
Updates to site guidelines and AI/LLM tags (lobste.rs)
BBC Master Pi 1MHz Domesday (youtu.be)
Inline rendering with document.currentScript (leanrada.com)
Speeding up code review with small-change (lethain.com)
Dynamic Packages (www.getlazarus.org)
Superoptimizing an FPU emulator (purplesyringa.moe)
August in Servo: CSS Grid, text selection, and more (servo.org)
How Discover-Tech turned targeted ads into a pipeline for zero-click spywares (citizenlab.ca)
Real-time Software On Linux: How Hard Can It Be? (www.youtube.com)
QML for C & Zig (gist.github.com)
Outside the Scope of Our Support (fireborn.mataroa.blog)
Men in tech #YesAllMen (www.youtube.com)
Inside the Intel 8087 chip: floating-point addition and subtraction (www.righto.com)
Ghidra CBMC Assembly Model Checker (www.philipzucker.com)
My obituary for programming (dumbmatter.com)
The Problem with C Safety: Why “It Works” Isn’t Good Enough (www.modernescpp.com)
Using timers to perform weekly tasks (mbork.pl)
High performance policy routed IPsec mesh SD-WAN (ranet3.com)
A New Way to Think About Borrow Checking (In Reverse) (verdagon.dev)
ARP! Tell your network to explain itself (benjcal.space)
Algorithmic Sound Design with L-Systems and Granular Synthesis (nathanho.me)
It''s enough - vibecoding tag crossed from useless to harmful (lobste.rs)
Un-hanging the HP Envy 17-DA0013dx for OpenBSD (darwinsys.com)
Making Hybrid Images (2014) (www.jeremykun.com)
The Brain Sandwich (terriblesoftware.org)
It''s time to talk about TEEs (alinush.github.io)
AI-First, Git-Compatible Source Control (strata.madskristiansen.com)
Abolish AI! Manifesto (abolish-ai.net)
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) (pwn.ai)
Principles of Anchor Engineering (nappingtoheavymetal.com)
It took me nine years to hack my Xbox 360 (kennedn.com)
Future of Programming (www.youtube.com)
Claude reveals ECDSA curve origins (www.anthropic.com)
Ship Your Interpreter (www.basis.ai)
Intuitive concurrent programming in any language Lingua Franca (www.lf-lang.org)
I built the RealWorld app in Lean 4 (leangineer.com)
Developing for Debugging (2025) (www.davepacheco.net)
Some quick thoughts on Unit Testing ActivityPub (shkspr.mobi)
STAC-M3 Benchmark: L tick database 1.0 on Oxide OxVM w/ 128 vCPUs & 1.25 TiB of RAM (docs.stacresearch.com)
orib: Bringing back the old Reddit interface, with a few new enhancements (github.com)
Neural Networks Are Already Clean (already-clean.goodfire.com)
Plots of deltas between time scales (www.ucolick.org)
CLP: Efficient and Scalable Search on Compressed Text Logs (2021) (www.usenix.org)
GitHub Actions workflow lockfiles in public preview (github.blog)
prjcombine - An FPGA reverse engineering project (codeberg.org)
On Notation (youtu.be)
Abstraction, intuition, and the “monad tutorial fallacy”(2009) (byorgey.wordpress.com)
Interactive refactoring in gopls (go.dev)
Do you let LLMs write both your tests and your code? (lobste.rs)
Someone on Torrent Sites Kept Fucking With My Sonarr (thereallo.dev)
C26: the new debugging header (www.sandordargo.com)
There''s never been a better time to go into math (www.youtube.com)
Ubuntu 26.10 (Stonking Stingray) released (lists.ubuntu.com)
The NIST Elliptic Curves Seeds Bounty Has Been Claimed (words.filippo.io)
Getting Canceled (www.youtube.com)
Introducing GNOME OS Preview (blogs.gnome.org)
We''re sunsetting Codeberg Pages v2 (blog.codeberg.org)
Thirty Years of KDE (blog.cornelius-schumacher.de)
The Decoherence Trap: When AI slop drowns out the signal in an endless sea of noise (maevyn.codes)
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD (calif.io)
Mull: note-taking with a language server / vscode extension (github.com)
Lessons learned building Fronteira, an MCP proxy with behavioral guardrails (wiki.alcidesfonseca.com)
The road to iroh 1.0 (www.iroh.computer)
Making a 88x31 button book using ImageMagick (k.sosnierz.me)
What agents mean for Rust (and vice versa) (smallcultfollowing.com)