Docker has always used microVMs (well, since 2016) (dave.recoil.org)
Reverse engineering a vintage diode-transistor logic chip (www.righto.com)
Two apps one process (andersmurphy.com)
PyPI's redesigned project pages with clearer security signals are now live (blog.pypi.org)
DeepX claims inference up to 100B parameters at less than 5 W (www.eetimes.com)
Sure mate, buy me a bloody coffee (peateasea.de)
Microsoft are rejecting your mail (www.mythic-beasts.com)
I was wrong about dark mode (dbushell.com)
Terminal2Shell: Critical flaw grants instant shell access on every major OS (terminal2shell.com)
Playing classical music on a classic PC with GentleOS (www.youtube.com)
What is malloc doing, anyway? (benmandrew.com)
A C Quicksort Faster Than std::sort (tiki.li)
Horible public key tricks (maurycyz.com)
Let’s Talk About Why all This OT Stuff is Connected (tisiphone.net)
Slightly better interpolating spline (gasiulis.name)
What's new in Node.js 27 (nodejsdesignpatterns.com)
A Critique of GPUI (blog.zortax.de)
How Much Energy Does Building Distro Packages Use (www.wezm.net)
Microsecond accurate NTP with a Raspberry Pi and PPS GPS(2021) (austinsnerdythings.com)
unlocking any car from X brand in most of the world (shubs.io)
Sem86: a full-system x86 emulator without hardcoded semantics (liblisa.nl)
I Dislike Pull Requests (2020) (medium.com)
When a language’s creator and its owners strongly disagree: C26 post-DIS, historical experience, and paths forward (isocpp.org)
Message Queues (blog.alexewerlof.com)
Optimizing reference deletions in Git (nayak.im)
Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyond (www.redox-os.org)
How to prove equations using diagrams, part 3 (www.epatters.org)
Playing with the STM32MP2 (serd.es)
What can I realistically do with local AI on a Mac mini M5 Pro (48GB)? (lobste.rs)
Unattended reboots with encrypted disks (jmmv.dev)
Who wants to crowdsource LLM scans of articles submitted to Lobste.rs? (lobste.rs)
SFLC.in Statement Regarding the Takedown Requests Against Its X Account and Posts (sflc.in)
Following breadcrumbs in code - What accidentally committed Ad-Hoc logs reveal about developer comprehension (link.springer.com)
systemd loves Rust (amutable.com)
A bit about email (maurycyz.com)
NetBSD 11 desktop on a Raspberry Pi 4 (neongd.com)
Rebuilding some Indieweb Tools with Claude (aaronparecki.com)
Introducing Project Steadfast (noteflakes.com)
Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containers (blog.nspawn.org)
Hacking the T-Mobile Sidekick, 20 Years Too Late (x86.cx)
PHP2Shell — Deep Dive (djad04.github.io)
How to prove equations using diagrams, part 1 (www.epatters.org)
Container Windows in CoW (m.youtube.com)
Dear Open Source Developers: It's OK not to embargo (opensourcesecurity.io)
I’m not a fan of Deno’s security model (2024) (goldstein.lol)
TideCloak Tide Whitepaper Series (tide.org)
*sshole, or when are we finally going to get rid of C? (sunshowers.io)
CHIMERA simulates organic sound with acoustic tubes (chimera-vocal-synth.vercel.app)
Workflow dependency lockfiles (docs.github.com)
Catching prompt injections hidden in PDFs (tomclancy.info)
OpenBSD top(1) adds flag to show chroot, pledge and unveil status (undeadly.org)
GhostMap: The Android flaw that crashes your phone before you open the app (www.bitdefender.com)
Open-source firmwares for the M-VAVE FM-1, from their makers, in one place (thefirmwarehub.com)
Just how far can the FOR UPDATE SKIP LOCKED Postgres queue go? (garbagecollected.io)
Alpine Linux : openssh-server password authentication bypass (www.alpinelinux.org)
Amutable Foundations: A Technical Overview (amutable.com)
How are you dealing with all the negative side effects of AI on the web? (lobste.rs)
Meridian — an experimental web browser built on Servo and GPUI (op.tngl.io)
Firecracker VM Escape: PwnEscape Part 2 (pwn.ai)
Two Dimensional Version Control (www.redblobgames.com)
Scriptable GeoDNS: leaving AWS for Bunny (vincent.bernat.ch)
Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header (www.lkoskela.fi)
Progress Report: Linux 7.3 - Asahi Linux (asahilinux.org)
Exploring Janet and the httpf web framework (nick.gs)
A Maintainer's Advice on Contributing to Open Source in 2026 (wasp.sh)
Inform is a programming language for creating interactive fiction (ganelson.github.io)
How hard could implementing DTLS 1.3 possibly be? (joturk.net)
UploadYourRam.org (uploadyourram.org)
Libghostty 1.0 (mitchellh.com)
The Port That Does Not Exist (acid.vegas)
Hacking the meta ray-ban smartglasses (p0pcycle.com)
Nondeterminism in Futhark (futhark-lang.org)
Kevin Boone: Firststeps in bare-metal programming using UEFI – series index (kevinboone.me)
How we continuously validate formal specifications in production (www.datadoghq.com)
Inside GitHub's new Git storage architecture (github.blog)
From Linux to Wikipedia: How Volunteers Build the Internet (thereader.mitpress.mit.edu)
Bug Finding Considered Harmful? (alperenkeles.com)
The MustCreate Pattern for Go Tests (mtlynch.io)
Upgrading NetBSD from 11.0 to 11.1 (www.dwarmstrong.org)
Pushing the Limits with getaddrinfo (acid.vegas)
Local-first meeting notetaker. On-device transcription, no stored audio, E2E encrypted sync (hellonod.app)
Making musl and proprietary NVIDIA drivers work together (chimera-linux.org)
Project 2027: An RFC for rebuilding the internet, the tech economy, and digital infrastructure (joinproject2027.org)
GitHub Inbox unread count is missing digits (nlopes.dev)
Practical guide on out of tree mitigations on Linux (clehaxze.tw)
Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) (labs.watchtowr.com)
Clojure Distilled (yogthos.net)
MCP Explained: how the Model Context Protocol works (mcp-explained.com)
How Windows Bootloader Starts the Kernel (www.youtube.com)
X-87 - DOS 256 bytes (www.onirom.fr)
I Go to Olympics of 4KB Coding (inv.nadeko.net)
Why working with AI agents is so tiring (and what to do about it) – Tech, work, and what comes next (constantin.glez.de)
A Quick Guide to Go's Assembler (go.dev)
SourceHut disabled registration bypass CVE-2026-121728 (blog.arusekk.pl)
Can 23,000 quantum qubits break RSA-2048? (www.bfswa.blog)
Software Line Specialist (lovro-bikic.github.io)
How Flink's Kafka connector commits offsets to Kafka (dalelane.co.uk)
September in Servo: progress, rounded rectangles, and more (servo.org)
GNU Mes and the 0.28 release (ekaitz.elenq.tech)
sshhole (sshhole.com)
Full-stack verification is the new trend (wiki.alcidesfonseca.com)
A Look at Datastar (noteflakes.com)
The State of Python Profiling in 2026 (p403n1x87.github.io)
Why is there an Anubis gate in front of Search for logged-in users? (lobste.rs)
The ULC Audio Codec is a Perfect Fit for the N64 (phoboslab.org)
86open (en.wikipedia.org)
On vsyscalls and the vDSO (2011) (lwn.net)
Ruffle: Stable Releases, API, Text... and Everything Else (ruffle.rs)
A thousand fewer paths to root (openai.com)
11 nanoseconds per word: Ridiculously Over-Optimizing Anagrams (wiredream.com)
Residential Proxies Detected on White House Network (layer3intel.com)
A history of backdoors (2015) (blog.cryptographyengineering.com)
Declarative Dragging (declarative-dragging.github.io)
Code Matters: Reflections on Rust in the LLM Age (www.youtube.com)
Burnt TOAST (www.pgedge.com)
A new Go API for JSON - The Go Programming Language (go.dev)
Python on my wrist (tildeweb.nl)
Gleam Programming Language Update October 2026 (www.youtube.com)
Arrows to Arrows, Categories to Queries (reasonablypolymorphic.com)
Shlemiel the Painter Is Back: How Zig’s libc Rewrite Made SQLite Slower (dennisforbes.ca)
Your Cryptography Conspiracy Theory Is Wrong (soatok.blog)
Lorem Ipsum Dot Gov Dot UK (shkspr.mobi)
How to speed up the Rust compiler in November 2026 (nnethercote.github.io)
Man-in-the-middle arbitrary code execution in Debian’s apt (lists.debian.org)
How //go:embed Works: From Source Files to Binary (internals-for-interns.com)
So my ISP was hijacking my DNS (karthihegde.dev)
Introducing Adaptive Dark Mode (webkit.org)
Zig 0.17.1 Released (ziglang.org)
Fraction comparison trick revisited (www.johndcook.com)
C26 Disapproved (andreasfertig.com)
Being of use to someone (jmreiche.github.io)
OpenVDDK – Independent Virtual Disk Library (openvddk.com)
Pulling the right strings for RCE on a Puppet (neodyme.io)
The cryptography behind electronic voting (and why paper ballots are still essential) (blog.trailofbits.com)
Mac at any scale (namespace.so)
The valley of webhooks (weli.dev)
Observations from Running stealmybitcoin.com (pavursec.com)
Gist of Go: Concurrency (antonz.org)
Postgres 19 REPACK: Built-In Online Table Bloat Cleanup (www.snowflake.com)
Announcing NetBSD 11.1 (www.netbsd.org)
macOS 27 Golden Gate does not actually support CoreStorage volumes (wadetregaskis.com)
mine (coalton-lang.github.io)
Would you believe it's jank? (www.youtube.com)
Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions (circleid.com)
Your terminal manipulation/navigation setups (lobste.rs)
kitty 0.50.0 (sw.kovidgoyal.net)
Planning with open variable lists in Gecode (zayenz.se)
A Second Futamura Projection (blog.veitheller.de)
AI is destroying my CS degree (lordtoots.bearblog.dev)
Could a modern chess engine on a Pentium have defeated Kasparov in 1996? (nicholas.carlini.com)
The Ubuntu 26.04 Rust sudo is not compatible with standard sudo (utcc.utoronto.ca)
Death comes for XSLT (dbushell.com)
Ideas for social networks (raphaelkabo.com)
Designing a planned switchover for minimum disruption (planetscale.com)
Canonical's CVE Response Times (aria.rip)
openSUSE Leap 16.1 (en.opensuse.org)
git-loom 1.0 (narnaud.github.io)
Firefox Security & Privacy Newsletter 2026 Q3 (attackanddefense.dev)
Why we're moving our warehouse off DuckDB (posthog.com)
Why did you choose the nix you nix? (lobste.rs)
The road to opaque software is paved with good (engineering) intentions (tomasp.net)
Scaling Git at OpenAI (openai.com)
Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights (rikiyat.github.io)
An Introduction to Bε-trees and Write-Optimization (www.usenix.org)
A Decade of Kill Bugs (alangrow.com)
My favourite laptop (blog.jsbarretto.com)
This background sound leaks your exact location (youtu.be)
Stop Hardcoding Your Timeouts (alfy.blog)
There’s a microchip in my toothbrush. But WHY? (youtu.be)
WTF Ubuntu? (chalmovsky.com)
The Gift of It's Your Problem Now (2021) (apenwarr.ca)
Jailbreaking my car's navigation system just so I can change the time (blog.nns.ee)
New Release: Tor Browser 16.0 Tor Project (blog.torproject.org)
Virtual Art Museum built with Three js (dostoynikov.bearblog.dev)
eli venn (elivenn.com)
Securing Internet-Critical Software: How We Could Have Backdoored Bash (www.hacktron.ai)
Polyend releases the Tracker firmware source code (backstage.polyend.com)
Recognizing Keystrokes Using WiFi Devices (ieeexplore.ieee.org)
SuperVote: 15 year retrospective on a social endorsement app (callejas.com)
The advantages of mobile Linux over AOSP (amosbbatto.wordpress.com)
gohawk Resource-focused static analysis for Go (gohawk.dev)
Union Types and Option Types (tibleiz.net)
Building a gemini server in python (www.willmunn.xyz)
My reflex of assuming our servers need ever-growing amounts of RAM (utcc.utoronto.ca)
the lost malloc() (napcakes.nekoweb.org)
Tyrtulia, a headless forum with no passwords, made for the terminal (git.andros.dev)
JPEG XS - Wikipedia (en.wikipedia.org)
Optimizing CPU-side Rendering Code (godotengine.org)
A400000 Winners (oeis.org)
The Beginning of BSD Unix (fosscomics.com)
The Problem with C Safety: Modern C Is a Mindset, Not a Standard – MC BLOG (www.modernescpp.com)
Postgres 19 is late, and it's AI's fault (rhaas.blogspot.com)
Understanding Org's LaTeX previews (karthinks.com)
so i guess everyone uses llms to think now (eva.ac)
An easy way to try local AI with braindead-local-intelligence (dataswamp.org)
Work on GEFS (the Good Enough File System) for OpenBSD progresses (www.undeadly.org)
London Meetup - Nov 2026 (lobste.rs)
Spooky C (www.nablag.com)
Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew? (devops-daily.com)
Introduction to Programming in ATS (ats-lang.sourceforge.net)
Pratt parsing is a black box (vinipsmaker.github.io)
Zig: From Beginner to Slightly Less Beginner (www.youtube.com)
A Specialised Haskell Processor on FPGA (bathtub-01.github.io)
Dead Internet theory (en.wikipedia.org)
An outsider's perspective on Scion and Mononoke (typesanitizer.com)
groff/troff macros: ms, mm, me or mom (www.stephenlindholm.com)
Beating the compiler at signed 32-bit division (lemire.me)
Release 0.6.0 · buzz-language/buzz (buzz-lang.dev)
No AI, 52 min. Build all Linux Files utils in C by Hand (www.youtube.com)
XKCD and Fourier (leancrew.com)
Non-Determinism and Overcount on Modern Hardware Performance Counter Implementations (web.eece.maine.edu)
A brief history of just-in-time (2003) (dl.acm.org)
Introducing Kwi, a new KDE terminal emulator (blogs.kde.org)
The Duty of a Scholar (www.daemonology.net)
Effective Type: Part 1 (uecker.codeberg.page)
Novellas with groff (movq.de)
A game scripting language that runs speech-to-text 5x faster than llama.cpp on CPU (dasllama.io)
Mystery of 60-Second Fluctuations in Power Grids Solved (www.fz-juelich.de)
Avoid Public Functions Calling Other Public Functions (matklad.github.io)
Enlightenment 0.28.0 Release (www.enlightenment.org)
Speeding up GPU copies by permuting iteration spaces, or, optimising the identity function (futhark-lang.org)
Tangled, hire a front-end accessibility expert (dbushell.com)
An LC-3 Disassembler in Haskell (abhinavsarkar.net)
CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile (www.agilehunt.com)
Let’s Build a Brain (aatishb.com)
The Kluever Maneuver (jordi.inversethought.com)
We Won’t “Just Hang Out” (borretti.me)
Jepsen: ParticleDB 1.1.4 (jepsen.io)
Digital minimalism (vitalik.eth.limo)
Marelleo, a story box I built for my kids (zebra.rodeo)
The Secret of Fast Programming: Stop Thinking » (www.codesimplicity.com)
Clojure/Conj 2026 (www.youtube.com)
Tactical-Retreat: a freely available, multi-platform QuakeC-based Counter-Strike v1.5 port (www.frag-net.com)
The top ten reasons embedded projects get into trouble (2002) (www.ganssle.com)
The support case of a customer who said that all they could see was a black screen (devblogs.microsoft.com)
How hard is it to check for whitespace? (serce.me)
Defending the patch gap against automated attackers (blog.mozilla.org)
Why Antithesis? (antithesis.com)
Getting Google Cast on my Soundbar (codon.org.uk)
Switch lowering in GCC (xoranth.net)
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (thehackernews.com)
Protecting against CVE-2026-98432 (groups.google.com)
The federated code forge (tangled.org)
Rationale for filtering LLM usage links as off-topic (lobste.rs)
Building fine-grained version control for agents with Rust and Durable Objects (delta.dev)
Infinite Mac: BeOS (blog.persistent.info)
Go 1.28's HTTP/2 Parking: Measuring Memory Savings (abdolirad.me)
Reviewing vs Doing (youtu.be)
Shrinking NixOS Ram footprint and resource requirements to the bare minimum (lowendspirit.com)
No, npm, “estee” is not a typo of “testem” (smoores.dev)
Update on AO3 Downtime, October 30, 2026 Organization for Transformative Works (www.transformativeworks.org)
Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide (doublepulsar.com)
Smart audio for the smart home (2021) (computer.rip)
Do At-Proto Users Know This Is Public? (melaniekat.com)
Backdoors in Claude Code for VS, Cursor official extensions (cyberplace.social)
VictoriaLogs vs Loki, Elasticsearch, OpenSearch, SigNoz and ClickStack on structured log ingestion (victoriametrics.com)
arm64e pointer authentication: PAC keys, PACIASP, A12 (sigreturn.com)
How curl was accidentally Turing-complete for nine months (seriot.ch)
ztmux the pure Rust tmux superset (github.com)
Pidgin 3.0 Alpha 4 2.98.0 has been released (discourse.imfreedom.org)
gh-inbox: clean up GitHub notifications in bulk from the command line (github.com)
If you love a website, back it up (blog.mistys-internet.website)
Design the interface for functionality not familiarity (lapcatsoftware.com)
XSS in yarr RSS reader (0x67673068.me)
C2PA's eMudhra Moment (www.da.vidbuchanan.co.uk)
Cybersecurity Is About to Be the Biggest Problem in Tech (projectautonomy.substack.com)
noalloc: Tooling and libraries to enforce zero heap allocations in Golang (github.com)
Will Open Firmware Become the Next Big Trend in Electronic Music Gear? (www.synthtopia.com)
My favourite PowerMac is a Nintendo Wii (virtuallyfun.com)
Extremely brief history of PDP computers (entropicthoughts.com)
An open format for writing agent-native software requirements (slcr.dev)
Phorge (www.phorge.it)
Coding Agents, Starter Kits and pgledger (www.pgrs.net)
The Web Can't Afford a JavaScript Runtime Monoculture (redmonk.com)
Azure’s Weakest Link - Five Full Cross-Tenant Compromises (www.binarysecurity.no)
Shared password manager for families? (lobste.rs)
Building NixOS using Nixtamal (nixtamal.toast.al)
"You Already Don't Understand Your Code": What "ten sorts in ten languages" and various JS engines say about the abstraction we're living through now (george.mand.is)
Nim version 2.4.0 released (nim-lang.org)
NetBSD adds a new beginner-friendly text editor called atto (mastodon.sdf.org)
Syrinx: A censorship-resistant communications platform (var0xyz.github.io)
Qwenputer: a fully functioning, deterministic RISC-V CPU inside Qwen3.5 (divagr.com)
Go Empty Interface Explained & The Hidden Heap Allocation (www.youtube.com)
My Terminal Setup in 2026: Ghostty, tmux, and Neovim (nick-liu.com)
A single malformed WAP Push SMS crashes com.android.phone on Android, dropping active calls (including emergency calls) (smsofdeath.com)
What the fox say? (entropicthoughts.com)
Uji - Gentoo of Coding Agents (github.com)
The Future Trait Has A Missing State (blog.yoshuawuyts.com)
ACLs don’t (2009) (shiftleft.com)
The case of the 9 bit AES key (v12.sh)
Redox Ring Buffers Project Summary (www.redox-os.org)
I've never been a fan of these calculators (www.youtube.com)
Precedence levels are dead; long live precedence sets (www.corsix.org)
Cuis Smalltalk (cuis.st)
Why I still teach OpenGL ES 3.0 (eliasfarhan.ch)
Introducing the Accessible Components Library (tetralogical.com)
EMACS turns 50 (www.technologyreview.com)