a software engineering interview question I like: computing the median (krisshamloo.com)
OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root (CVE-2026-57589) (nvd.nist.gov)
Notes on software quality (anthonyhobday.com)
A Final Return for OpenBSD Anti-Return-Oriented Programming Mitigations (papers.ssrn.com)
A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System (arxiv.org)
New Research: A "Verified" GitHub Commit Is NOT Unique (www.internationalcyberdigest.com)
CCL: Categorical Configuration Language (github.com)
Your Rust Service Isn''t Leaking — It Could Be the Allocator (pranitha.dev)
Why we built yet another Postgres connection pooler (pgdog.dev)
Getting Started with Anchor Positioning (www.joshwcomeau.com)
Finding a needle in a 4 GB haystack: from 0.75 GB/s to 49 GB/s in Go (segflow.github.io)
Friction is a Feature (philip.mallegolhansen.com)
GitHub Has Restricted Access to Star Data (www.star-history.com)
I was wrong about game development (mijndertstuij.nl)
Mechanized type inference for record concatenation (haskellforall.com)
You shouldn''t trust Trusted Publishing (blog.yossarian.net)
The Popup That Says the Quiet Part Out Loud (blog.ppb1701.com)
Put NetHack on my community app and this 38-year-old game keeps outsmarting me (lobste.rs)
How I''m using CSS View Transitions on this blog (blog.omgmog.net)
Reporting a 19 Years Hidden Linux Kernel Zero-Day for Google kernelCTF: CVE-2026-43456 (gmo-cybersecurity.com)
Signed Integers By Default (www.gingerbill.org)
Waterfall CAD Playground - A Haskell powered programmable-CAD environment, in the browser with WASM (doscienceto.it)
Together for a healthier Clippy (blog.rust-lang.org)
Google’s exponential path to climate-wrecking digital bloat (ketanjoshi.co)
Why false sharing alignment should be 128 bytes on x64 (monoid.github.io)
Eliminating Go bound checks with unsafe (blog.andr2i.com)
Turning a Chinese IoT camera into an owl livestream (blog.alexbeals.com)
Odin 1.0 Announcement (www.youtube.com)
Compiling a Go program into a native binary for Nintendo Switch (ebitengine.org)
A Rust-to-Lean verification pipeline with AI provers: An experience report (arxiv.org)
Radicle: P2P Git Replication with Git Native Issues and Patches (radicle.dev)
OpenSSH 10.4 (www.openssh.org)
AT&T''s very rare Security-Plus Telephone (www.electrospaces.net)
Securing agentic identity (codon.org.uk)
Orasort - Common prefix skipping, adaptive sort (smalldatum.blogspot.com)
GLM 5.2 and the coming AI margin collapse (martinalderson.com)
ReactOS "Open-Source Windows" Project Now Capable Of Running Half-Life 2 (www.phoronix.com)
Hacking the Kyocera KY-42C (shomy.is-a.dev)
Januscape: Guest-to-Host Escape in KVM/x86 (github.com)
Connections in Math: the two kinds of random (stillthinking.net)
Backstage access: an unauthenticated SQL injection in Front Gate Tickets (ian.sh)
Postgres Is Enough (postgresisenough.dev)
Seventy Years of Parsing: Theoretical and Practical Consequences (langsec.org)
The (Petty) Reason We Didn''t End Up Using jj (blog.gradle.org)
Caught a .git/config crawler (bruceediger.com)
Can you run every line of code in Super Mario Bros.? (www.youtube.com)
PREEMPT_NONE Is Dead; Your Postgres Probably Doesn’t Care (thebuild.com)
sneakerweb (sneakerweb.org)
Faster Builds with Elm 0.19.2 (elm-lang.org)
fin: a Jellyfin & Subsonic client for the terminal (tangled.org)
Jam Programming Language (rapha.land)
Konform Browser 140.12.0-103 (codeberg.org)
How One Pull Request Took App::HTTPThis to Version 1.0 (perlhacks.com)
Trajan: The Typeface That Took Over Movie Posters (letterboxd.com)
Mr. Baby Paint & accidentally discovering a new cellular automata (tekstien-marginaalien-keskus.aalto.fi)
Web Security docs on MDN (openwebdocs.org)
How a Skiing Accident Put Our Development Practices to the test (blog.enioka.com)
Dragonfruit: A 68k/Dragonball Palm device emulator for ESP32 devices (github.com)
Forlorn Hope of Fortran Modernisation (amenzwa.github.io)
The XMPP Newsletter June 2026 (xmpp.org)
Is Starlink A Secret Radar Constellation? (www.youtube.com)
A Speed Limit for Computers (caolan.uk)
Metastability in Recovery: Cascading Recovery with a Loop (charap.co)
A Novel Look at Error Handling in Rust (jtjlehi.github.io)
Composite video on the NES: why''s it so wobbly? (nicole.express)
Dependencies should be fetched directly from VCS (www.arp242.net)
Time-based background colour transitions with Temporal and CSS color-mix (localghost.dev)
Embedding information in disorder (thoughts.hmmz.org)
Version-controlled databases using Prolly trees (lwn.net)
Installing A/UX 1.1 like it’s the 90s (thomasw.dev)
Bench Press: Leaking Text Nodes with CSS (blog.pspaul.de)
Rayfish - P2P VPN built on top of Iroh (rayfish.xyz)
Work In Progress Rust (blog.dureuill.net)
Run Windows 2000 on a DEC Alpha with a new es40 fork (raymii.org)
ABI vs. API (2004) (lists.debian.org)
How is Zig working out after 3 years and 100k lines of game code? (www.youtube.com)
Why Fakes Beat Mocks and Testcontainers (pierrezemb.fr)
If you’re a button, you have one job (unsung.aresluna.org)
FAQ: What is a TPM and how can I use it on Linux? (debugging.works)
Knowledge Should Not Be Gated (www.formaly.io)
small details in my mastodon client that i wanted more people to notice (w.on-t.work)
PEP 814: Add frozendict built-in type (vstinner.github.io)
ps5-linux-loader: Linux payload implementing HV exploits to run a custom bootloader (github.com)
Dark mode with web standards (olliewilliams.xyz)
Scheme is a Hoot (gracefulliberty.com)
How to call Linux code from a Wine process (arcanenibble.com)
The Lion, The Witch, and the audacity of recruiters (hauleth.dev)
Better Models: Worse Tools (lucumr.pocoo.org)
Returning to Zig (gracefulliberty.com)
Non-hybrid PQ-only TLS and the MIKEY-IBAKE intervention (libroot.org)
Bad Epoll (CVE-2026-46242) (github.com)
wince-dc: Windows CE Dreamcast Community Edition (github.com)
Thoughts on coding agents · rakyll.org (rakyll.org)
DIY RISC-V ultracluster (youtube.com)
Immich v3.0.0 Released (immich.app)
thundersnap v0.01: an undo button for everything (github.com)
Game Boy Advance Dev: Logging to the console (www.mattgreer.dev)
A Counterexample to Wegner''s Conjecture for Axis-Parallel Rectangles (arxiv.org)
The GNU Emacs Architecture (www.diva-portal.org)
SecretSpec 0.13: SDKs for Python, Node.js, Go, Ruby, and Haskell (secretspec.dev)
EndBASIC 0.14: Are we multimedia yet? (www.endbasic.dev)
Do Wavy Walls Really Use Fewer Bricks? I Tested It in Blender (blog.tymscar.com)
On intent of Code (why.degree)
Who''s Hiring? - Support Edition - Q3 2026 (lobste.rs)
FreeBSD ate my ram (crocidb.com)
Developer Verification – LineageOS (lineageos.org)
Reducing Assumptions, Exploding Your Code (ryelang.org)
Dunya Kirkali - Your organization as a Graph (www.wearedevelopers.com)
What should a personal website be? (ratfactor.com)
Synthesis is harder than analysis (surfingcomplexity.blog)
OpenClaw just launched an official app for iPhone (9to5mac.com)
Why don''t people use git properly? (deadsimpletech.com)
Agentic coding notes from Galapogos Island (danluu.com)
Very Average Prototypes (goodnameforablog.com)
The pandemic of incomplete OpenSSL error handling (blog.jak-linux.org)
Lemmy Development Update June 2026 and 1.0.0-beta.1 (lemmy.ml)
Suffix BWT vs cyclic shift BWT, and fast computation (purplesyringa.moe)
Rust - Handling Results In A Map Closure (reemus.dev)
I Don''t Maintain My Homelab (cleberg.net)
Magit 4.6 released (emacsair.me)
Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus (citizenlab.ca)
A Windows Kernel in a Browser Tab, Part I: Cold Boot, Fast Boot, and Four Megabytes (www.msuiche.com)
sem: A new code understanding primitive tool at a semantic granularity (ataraxy-labs.github.io)
My favorite keyboards (fabiensanglard.net)
PieFed v1.7 is released: Following Users, Faster Browsing & Smarter Moderation (join.piefed.social)
Keep track of the side projects if they are still alive (stillup.to)
Goodbye, forever, probably (whitep4nth3r.com)
Markets are competitive if and only if P ! NP (arxiv.org)
Fixing full-bleed CSS (dbushell.com)
Gossamer (gossamer-lang.org)
Self-Hosted AI news aggregator using Cloudflare Workers, Vectorize, and Nostr (github.com)
Extralite 3.0.0 Released (noteflakes.com)
A [non-hybrid tls-mlkem] standard by any other name: How IETF evades responsibility for its actions (blog.cr.yp.to)
Dogesh is a Python-based interpreted programming language where every keyword speaks dog (github.com)
Fourteener Lobsters (lobste.rs)
Why implementing ActivityPub is hard, and why it doesn''t have to be (hackers.pub)
Automating the Rubber Stamp: What If an Agent Ran Your Deployment Gate? (mattvanbird.co.uk)
The mask that compiles to nothing: how HotSpot''s JIT learned to reason about bits (questdb.com)
The Short Leash AI Coding Method For Beating Fable (blog.okturtles.org)
More Money For Better Open-Source Software (2015) (marijnhaverbeke.nl)
Diving into the depths of Widevine L3 (neodyme.io)
Call to act to reject draft-ietf-tls-mlkem-08 (Ends 2026-07-08) (nsa.2026.action.cr.yp.to)
‘guix substitute‘ and ‘guix pull‘ vulnerabilities (guix.gnu.org)
Until_Heat_Death_Do_Us_Part: Counting until the heat death of the universe, broadcasting counter every second over 100Mbps ethernet (github.com)
Clickhouse is winning the Observability Wars (matduggan.com)
Arbitrary code execution breaking sandboxes in KDE Plasma (blog.kimiblock.top)
Core dump epidemiology: fixing an 18-year-old bug (openai.com)
proposal-async-context: Async Context for JavaScript (github.com)
Understanding is the new bottleneck (www.geoffreylitt.com)
ds.css: A css framework recreating the DS / DS Lite''s UI (github.com)
no llm code (git-annex.branchable.com)
crustc: Entirety of rustc, translated to C (github.com)
Hanakai, and Hanami 3.0 in Full Bloom (www.bounga.org)
The Private Capture of Public Genius (www.wysr.xyz)
My quest to see all of Tetris (antithesis.com)
Newly discovered PamStealer isn''t your typical macOS malware (arstechnica.com)
Circular Obstacle Pathfinding (redblobgames.github.io)
How ScyllaDB''s Trie-Based Index Delivers Up to 3X More Throughput (www.scylladb.com)
No LLM code in dependencies (joeyh.name)
Since Linux 6.9 (May 2024), the LUKS encryption key remained resident in memory across suspend (mathstodon.xyz)
.gitignore Isn’t the Only Way To Ignore Files in Git (nelson.cloud)
kernel asynchronous reads in PostgreSQL 19 (io_uring) (dev.to)
Investigating idiosyncrasies in AI fiction (arxiv.org)
Opening up ‘Zero-Knowledge Proof’ technology to promote privacy in age assurance (blog.google)
Tools or techniques for conveying mental models? (lobste.rs)
jj v0.43.0 released (github.com)
Preventing token theft (codon.org.uk)
This month in KDE Linux: June 2026 (pointieststick.com)
The modern app (dbushell.com)
Wordgard Release 0.1 (marijnhaverbeke.nl)
Type definitions to retrieve objects from localStorage (taxorubio.com)
On Ditching Vagrant (benjamintoll.com)
The Control Plane Was the Point: Revisiting autofz in the LLM Era (yfu.tw)
The Physics of Memory (aka can Javascript ECS?) (www.dmurph.com)
Improving token efficiency for GitHub Copilot in VS Code (code.visualstudio.com)
OpenFeature - Standardizing Feature Flagging for Everyone (openfeature.dev)
Creating a development sandbox with crosvm (www.erat.org)
Artificial adventures (www.scattered-thoughts.net)
Unprivileged root via an out-of-bounds write in the FUSE readdir cache (CVE-2026-31694) (cyberstan.co.uk)
GraalVM Hello World Program Down To "Just" 6.5MB (www.phoronix.com)
Open Source as Infrastructure: Taking Roads and Bridges literally (nesbitt.io)
Pidgin 3.0 Alpha 2 (2.96.0) has been released (discourse.imfreedom.org)
US Supreme Court just blew up EU-US Data Transfers (noyb.eu)
GameBoy Emulator on ESP32 Eink (www.youtube.com)
Progress Report: Linux 7.1 - Asahi Linux (asahilinux.org)
Announcing Box3D (box2d.org)
All Package Management Functionality Moved from Compiler to Build System (ziglang.org)
Optimizing an Algorithm That’s Quadratic by Design (whatchord.earthmanmuons.com)
Matrix Orthogonalization Improves Memory in Recurrent Models (ayushtambde.com)
The Internet I Grew Up With Doesn’t Exist Anymore (cleberg.net)
How Jujutsu Rethinks Git''s Working Copy and Conflict Model (www.git-tower.com)
Changes to Godot Engine Contribution Policies (godotengine.org)
C26: constexpr virtual inheritance (www.sandordargo.com)
Low-level Haskell: The cursed way to emulate inline assembly in Haskell/GHC (minoki.github.io)
Building a passive Ethernet tap (blog.lvmbdv.dev)
EmacsWiki Blog Carnival "Programming" (plaindrops.de)
Which GitHub features are needed in a code forge before you can migrate? (lobste.rs)
Who''s hiring? Q3 2026 (lobste.rs)
Uruky - The Paid European Search Engine (robheghan.prose.sh)
Structurally fixing injection bugs (2012) (www.more-magic.net)
Hanami 3.0: In full bloom (hanakai.org)
Redeploying Claude Fable 5 (www.anthropic.com)
Why Does the Cloud Stop Computing?: Lessons from Hundreds of Service Outages (2016) (dl.acm.org)
pkgbump: from a dumb tool to an irreplaceable helper (blogs.gentoo.org)
Trump administration lifts restrictions on Anthropic''s Fable 5 (www.axios.com)
It''s not me, it''s the compiler (parsa.wtf)
Stop Killing the Internet (www.stopkillingtheinternet.com)
Gone but not forgotten: Recovering the Dead Web (blog.archive.org)
What happened to the fight for the internet? (dustycloud.org)
ZLUDA 6 release (run CUDA on non-Nvidia GPUs) (vosen.github.io)
jj jj jj jj jj (caiustheory.com)
I ported Kubernetes to the browser (ngrok.com)
Most MCP servers don''t need to exist. Your case might be an exception (evilmartians.com)
The Threat of Residential Proxies (www.feistyduck.com)
Claude Code Is Steganographically Marking Requests (thereallo.dev)
Generating the P3 Tiling (k-monk.org)
Run any Dockerfile on Vercel (vercel.com)
Serving Local AI on my Jetson through Durable Streams (s2.dev)
Underappreciated builtin: Grand Unified Debugger (tusharhero.codeberg.page)
Parse, Don''t Validate — In a Language That Doesn''t Want You To (cekrem.github.io)
Soatok’s Informal Guide to Threat Models (soatok.blog)
Slint and the Node.js Event Loop (slint.dev)
stop asking writers about "AI" (benjaminhollon.com)
May in Servo: user scripts, mp4 compat, blackboxing in DevTools, and more (servo.org)
Waiting for SQL:202y: Stockholm (BMA) meeting report (peter.eisentraut.org)
Diagrams for Penrose Tiles (readerunner.wordpress.com)
Proving the Fundamental Theorem of Arithmetic in Agda (byorgey.github.io)
Local Reasoning for Global Properties (tratt.net)
Furality Ultra Club A/V Writeup (value.gay)
Rheo 0.4.0 (rheo.ohrg.org)
jj_tui: terminal user interface to jujutsu focused on speed and clarity (tangled.org)
Platform Support for GNU Extensions to Basic Regular Expressions (www.wezm.net)
Investigating Linux graphics (2025) (roscidus.com)
A native graphical shell for SSH (probablymarcus.com)
Memory Safe Context Switching (fil-c.org)
Revisiting Yliluoma’s ordered dither algorithm (30fps.net)
The end of the AArch64 desktopexperiment (marcin.juszkiewicz.com.pl)
Spindle''s new microVM engine (blog.tangled.org)
What''s wrong with EU age verification? (Nothing) (blog.vrypan.net)
The AT-URI Syntax Mess (bnewbold.leaflet.pub)
Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215) (cyberstan.co.uk)
Solod v0.2: Networking, new targets, friendlier interop (antonz.org)
You Don’t Know Jack About Formal Verification (queue.acm.org)
ipv6_frag_escape: Linux LPE - Reliable Jail/Container Escape (github.com)
Type-checked non-empty strings (exploring-better-ways.bellroy.com)
What is std::pin::Pin in Rust? (vrong.me)
WATaBoy: JIT-ing Game Boy Instructions to Wasm Beats a Native Interpreter (humphri.es)
Pystd standard library, similar-ish functionality with a fraction of the compile time (nibblestew.blogspot.com)
Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 (nebusec.ai)
Evaluation order and nontermination in query languages (www.rntz.net)
Loko Scheme 0.13.0 (weinholt.se)
NUMA Explained: Why Memory Distance Slows Your VMs (edera.dev)
Typst: Designing for Incrementality (youtu.be)
When Impressive Performance Gains Do Not Matter (blog.colinbreck.com)
The Scanline Sweeper: A Glyph Rendering Algorithm (youtu.be)
Obfuscation: building the final boss of cryptography (vitalik.eth.limo)
Autocrypt v2 - Post-Quantum and Reliable Deletion (autocrypt2.org)
Integrity on Embedded Linux Devices under the Cyber Resilience Act (sigma-star.at)
Gleam Gathering 2026 Lighting Talks (www.youtube.com)
Canvas patch: we need testers (monadicsheep.org)
Joys of cancelling a TBB task group · (aras-p.info)
code review - BJonas'' SchemeInterpreter in J (tangentstorm.github.io)
Kivo - A lightweight desktop teleprompter built with PySide6 (github.com)
Optimizing LLVM''s bump allocator (maskray.me)
You might not need… a service worker (www.jayfreestone.com)
Ante: New Way to Blend Borrow Checking and Reference Counting (verdagon.dev)
Tech Morality is Hard (forkingmad.blog)
TOP500 at ISC’26: We have a New Number 1 (chipsandcheese.com)
Convolutional Neural Networks in APL (2019) (dl.acm.org)
Introducing Test That (hovinen.me)
Unfathomable bugs #10: The Broken Windows Build (algassert.com)
Build System Improvements, Centralized Overview, etc (gist.github.com)
Modeling the COVID-19 Outbreak with J (datakinds.github.io)
A Core Calculus for Documents (dl.acm.org)
HyperCard on the Macintosh (stonetools.ghost.io)
“Double Threat” to Private Communications: Undemocratic Chat Control Backroom Deals and Imminent Concessions Spark Relaunch of fightchatcontrol.eu (www.patrick-breyer.de)
A hash proves the bytes, not the source (collider.ee)
Examining circuit boards from the Space Shuttle''s I/O Processor (www.righto.com)
Attention AI Slop Porters (www.reddit.com)
The Curious Case of aa.ns.charter.com (mikehowells.com)
huff12 - a 12-stream Huffman decoder for Apple Silicon (gist.github.com)
Lazy Loading Dynamic Libraries and the Plugin-Architecture on iOS (medium.com)
A Typed, Algebraic Approach to Parsing (www.cl.cam.ac.uk)
Installing SerenityOS on My Old ThinkPad T60 (btxx.org)
We have Mythos at Home: GLM 5.2 beats Claude in our Cyber Benchmarks (semgrep.dev)
Towards Understandable Software (gracefulliberty.com)
Regular expressions that work “everywhere” (www.johndcook.com)
How VictoriaLogs Stores Your Logs in a Columnar Layout (victoriametrics.com)
MAX models can now run on Apple silicon GPUs (forum.modular.com)
Auditable Commercial License (ACL) v1.0 (www.auditablelicense.org)
Nourish - a wayland compositor with infinite zoom and pan (github.com)
Call for participation (emacsconf.org)
Building an Open-Source Robot Vacuum — Meet oomwoo (makerspet.com)
Working around dragons with the Lemote Yeeloong laptop and OpenBSD (oldvcr.blogspot.com)
Dependently typed Clojure DSL with a Lean4 compatible kernel (github.com)
It''s dead, Jim! (UEFI CA expiry) (blog.einval.com)
The Old Computer Challenge (occ.sdf.org)
The feature in OxCaml that more languages should steal - The Consensus (theconsensus.dev)
pomerium: Pomerium is an identity and context-aware access proxy (github.com)
Prism: An Impure Functional Language With Typed Effects (www.stephendiehl.com)