Tell your network to explain itself and then some (unixdigest.com)
The bridge to agent-scale Git infrastructure (github.blog)
jailbreaking the switch 2 (pepsipu.com)
There isn''t an easy exploit for this PHP vulnerability (eliastaylor.com)
Create a Canarytoken. Deploy it somewhere (canarytokens.org)
Three configurable prettyprinters (2023) (reasonableapproximation.net)
Two Welsh organisations reprimanded after cyber-attack exposed children’s information (ico.org.uk)
Extending concurrent separation logic to the hardware level to verify the xv6 OS kernel on RISC-V with AI agents (arxiv.org)
Garmin Revamps and Opens Up Connect Developer API Program (www.dcrainmaker.com)
examining the macOS gcc binary (zoey-on-github.github.io)
Announcing DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)
Using a lookup-table to correct an approximation (www.corsix.org)
Turning IPv6 tunnels into programmable delay lines for pulsing DoS (blog.apnic.net)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
Understanding Nix flakes (lwn.net)
How to Run Turing-Complete Malware in PyTorch''s Backward Pass (elonlit.com)
Railway Security Disclosure: Wednesday October 21st (blog.railway.com)
GitLab Critical Patch Release (docs.gitlab.com)
Embedding EYG in Erlang programs (eyg.run)
Google''s Rust Style Guide (google.github.io)
Passkeys Attestation Trap (mjtsai.com)
Flow Typing, A New Lens on Linearity (jaredforsyth.com)
No quarter for gaps (fzakaria.com)
CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes (www.openwall.com)
Don''t throw it all away: Caching an immediate-mode UI (blickeditor.com)
BazelCon 2026 recap (blogsystem5.substack.com)
Your AI agent fixed the bug, but what else did it change? (blog.trailofbits.com)
Node.js — Wednesday, October 21, 2026 Security Releases (nodejs.org)
Firefox Local Mode (firefox-source-docs.mozilla.org)
zls 0.17.0 (zigtools.org)
php2shell by Calif Research (calif.io)
Eight Bits of Trust; eMudhra''s CA keys cracked in milliseconds (scotthelme.co.uk)
Deleting 19k Lines of Dead Compiler Code Without Trusting the LLM (thecloudlet.github.io)
Improving accessibility with CSS media queries (2025) (fleeb.ee)
Unikernels in OCaml (uniker.nl)
ConcurrentML: Improving on Go''s concurrency model (nikhilism.com)
Vector Graphics in Lil (beyondloom.com)
Announcing the GPU notification group and Linker Working Area (blog.rust-lang.org)
Firefox security patch tests are now private for at least a week (groups.google.com)
The Future of CSS (www.joshwcomeau.com)
Lobsters NYC Meetup on the 28th of October (lobste.rs)
Unauthorized Access to PingCAP Cloud Resources (www.pingcap.com)
Upcoming Critical PHP Security Release (www.php.net)
Why I’m no longer updating this repository (po-ru.com)
thebroken Episode 1 (2003) (www.youtube.com)
Why do we need ud2 when int 6 is right there? (devblogs.microsoft.com)
EDG is open source (edgcpp.org)
Sign language to text (deepmind.google)
Do minor curl vulnerabilities in the open (daniel.haxx.se)
How I got over 300 Tor exit nodes removed (kaba.cx)
Declarative WASM GC Types (blog.veritates.love)
Genera for the Initiated: Inside Symbolics Lisp Machines (www.youtube.com)
Mastodon 5.0: A closer look (blog.joinmastodon.org)
Making a VGA Driver in SystemVerilog (lukaswerner.com)
CVE-2026-106173: FortiSIEM gRPC Path Traversal to RCE (horizon3.ai)
NixOS is making me less afraid (entropicthoughts.com)
Agentic Monitoring (benjamincongdon.me)
Jepsen: Orkes Conductor 5.3.2 (jepsen.io)
Protecting Firefox users following the compromise of eMudhra intermediate certificates (blog.mozilla.org)
Learn everything about protein engineering (grimoire.bio)
How abliterated models can get you pwned (projectdiscovery.io)
Sumi.css - classless-first CSS framework (vladocar.github.io)
Setting up SSH keys on macOS with Touch ID (nmattia.com)
The Annotated VT100 Firmware (2022) (vt100.net)
Intermediary between public and private members (lobste.rs)
Rendering untrusted HTML email, safely(2021) (making.close.com)
A Very Fast IPv4 Parser, in Swift (blog.mahdibm.com)
Go will reject certificate chains containing eight distrusted SPKIs (github.com)
OpenBSD 8.0: released (marc.info)
OpenBSD 8.0 (www.openbsd.org)
Do web components have a future if nobody is writing them? (nolanlawson.com)
It''s still OK to enjoy programming (chriskiehl.com)
The Netherlands is building its own Linux OS to break free from Microsoft (www.techspot.com)
2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)
In Context - Rich Hickley (www.youtube.com)
Finding a home amidst the wreckage (blog.zerodogg.org)
Making all divisions slower to fix a bug in 0.000000000000000000542% of cases (futhark-lang.org)
One Hash Bloom Filters (www.calabro.io)
Removing a Type Assertion with Object.assign (ataias.com.br)
Static Analysis for the Uninitialized (tenderlovemaking.com)
Wine ported to OpenBSD (marc.info)
Hanami, Why?: Model Citizens (aaronmallen.me)
A5 v1.0 A5 (a5geo.org)
Making dns_erlang Fast: Binary Tricks for the BEAM (blog.dnsimple.com)
Borrow Checking Zero-Cost Cyclic Mutability (antelang.org)
Timestral: Mistral''s time-series foundation models (mistral.ai)
Tor VPN Beta: What we''ve learned building our own VPN for Android from scratch (blog.torproject.org)
The 7.3 kernel has been released (lwn.net)
Beginning of the Ende (a community Deno fork) (blog.webb.page)
A Bazel Bard (sluongng.substack.com)
The Most Forbidden Technique (thezvi.substack.com)
Crawlers, floods and fleets: a year of keeping our digital collections open (stacks.wellcomecollection.org)
Programming Language Fundamentals in Agda (plfa.github.io)
Composite objects and C26 the std::polymorphic type (mariusbancila.ro)
Why is GitOps so good? (thorsell.io)
Efficient Extraction for Effectful E-graphs (ztatlock.net)
A response to claims about flatpak being insecure (oro.gay)
What the heck is /pkg? (anderegg.ca)
What requirements don''t you have? (www.seangoedecke.com)
Updates to site guidelines and AI/LLM tags (lobste.rs)
BBC Master Pi 1MHz Domesday (youtu.be)
Inline rendering with document.currentScript (leanrada.com)
Speeding up code review with small-change (lethain.com)
Dynamic Packages (www.getlazarus.org)
Superoptimizing an FPU emulator (purplesyringa.moe)
August in Servo: CSS Grid, text selection, and more (servo.org)
How Discover-Tech turned targeted ads into a pipeline for zero-click spywares (citizenlab.ca)
Real-time Software On Linux: How Hard Can It Be? (www.youtube.com)
QML for C & Zig (gist.github.com)
Outside the Scope of Our Support (fireborn.mataroa.blog)
Men in tech #YesAllMen (www.youtube.com)
Inside the Intel 8087 chip: floating-point addition and subtraction (www.righto.com)
Ghidra CBMC Assembly Model Checker (www.philipzucker.com)
My obituary for programming (dumbmatter.com)
The Problem with C Safety: Why “It Works” Isn’t Good Enough (www.modernescpp.com)
Using timers to perform weekly tasks (mbork.pl)
High performance policy routed IPsec mesh SD-WAN (ranet3.com)
A New Way to Think About Borrow Checking (In Reverse) (verdagon.dev)
ARP! Tell your network to explain itself (benjcal.space)
Algorithmic Sound Design with L-Systems and Granular Synthesis (nathanho.me)
It''s enough - vibecoding tag crossed from useless to harmful (lobste.rs)
Un-hanging the HP Envy 17-DA0013dx for OpenBSD (darwinsys.com)
Making Hybrid Images (2014) (www.jeremykun.com)
The Brain Sandwich (terriblesoftware.org)
It''s time to talk about TEEs (alinush.github.io)
AI-First, Git-Compatible Source Control (strata.madskristiansen.com)
Abolish AI! Manifesto (abolish-ai.net)
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) (pwn.ai)
Principles of Anchor Engineering (nappingtoheavymetal.com)
It took me nine years to hack my Xbox 360 (kennedn.com)
Future of Programming (www.youtube.com)
Claude reveals ECDSA curve origins (www.anthropic.com)
Ship Your Interpreter (www.basis.ai)
Intuitive concurrent programming in any language Lingua Franca (www.lf-lang.org)
I built the RealWorld app in Lean 4 (leangineer.com)
Developing for Debugging (2025) (www.davepacheco.net)
Some quick thoughts on Unit Testing ActivityPub (shkspr.mobi)
STAC-M3 Benchmark: L tick database 1.0 on Oxide OxVM w/ 128 vCPUs & 1.25 TiB of RAM (docs.stacresearch.com)
orib: Bringing back the old Reddit interface, with a few new enhancements (github.com)
Neural Networks Are Already Clean (already-clean.goodfire.com)
Plots of deltas between time scales (www.ucolick.org)
CLP: Efficient and Scalable Search on Compressed Text Logs (2021) (www.usenix.org)
GitHub Actions workflow lockfiles in public preview (github.blog)
prjcombine - An FPGA reverse engineering project (codeberg.org)
On Notation (youtu.be)
Abstraction, intuition, and the “monad tutorial fallacy”(2009) (byorgey.wordpress.com)
Interactive refactoring in gopls (go.dev)
Do you let LLMs write both your tests and your code? (lobste.rs)
Someone on Torrent Sites Kept Fucking With My Sonarr (thereallo.dev)
C26: the new debugging header (www.sandordargo.com)
There''s never been a better time to go into math (www.youtube.com)
Ubuntu 26.10 (Stonking Stingray) released (lists.ubuntu.com)
The NIST Elliptic Curves Seeds Bounty Has Been Claimed (words.filippo.io)
Getting Canceled (www.youtube.com)
Introducing GNOME OS Preview (blogs.gnome.org)
We''re sunsetting Codeberg Pages v2 (blog.codeberg.org)
Thirty Years of KDE (blog.cornelius-schumacher.de)
The Decoherence Trap: When AI slop drowns out the signal in an endless sea of noise (maevyn.codes)
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD (calif.io)
Mull: note-taking with a language server / vscode extension (github.com)
Lessons learned building Fronteira, an MCP proxy with behavioral guardrails (wiki.alcidesfonseca.com)
The road to iroh 1.0 (www.iroh.computer)
Making a 88x31 button book using ImageMagick (k.sosnierz.me)
What agents mean for Rust (and vice versa) (smallcultfollowing.com)
coopiano: A physically modelled piano synthesizer in C17 (github.com)
Matt Mullenweg Orders Accessibility Revert (www.therepository.email)
Why are we even doing all this? (terrytao.wordpress.com)
Writing stateful effect handlers in EYG (eyg.run)
Folders Esoteric Language (danieltemkin.com)
My self-hosted infrastructure with Incus OS (dataswamp.org)
Linus Torvalds on AI-assisted kernel contributions (lore.kernel.org)
Where did WIN32_LEAN_AND_MEAN come from? (2009) (devblogs.microsoft.com)
Epic''s EAC2 v2 seems fairly easily bypassable (codon.org.uk)
Announcing Rust 1.99.1 (blog.rust-lang.org)
rust-djinn: You Should Specify Your Code Unambiguously (and Prove That You Did) (henniger.dev)
Forgejo v17.0 is available (forgejo.org)
About time (www.bipm.org)
Gleam case exhaustiveness, as a fan (oyster.pckt.blog)
Religious Studies In Software Engineering (tombh.co.uk)
My C23 Conventions (abner.page)
End-to-end encrypted relays for OCapN (spritely.institute)
JPEG XL vs AVIF for web use-cases (jakearchibald.com)
Remote Attestation Should Not Be Tolerated (lumi.codeberg.page)
Libreboot 26.10 “Ominous Olive” released with full UEFI support (libreboot.org)
Sunsetting decomp.dev (decomp.dev)
sslx: A fast, modern alternative to OpenSSL''s CLI (github.com)
This Month in Ladybird - September 2026 (ladybird.org)
The Costa GUI (costa.jacobpalm.dk)
HOL Light Tutorial (hol-light.github.io)
Everyone is doing Git on S3 wrong (enroute.sh)
The geometric model of maintenance (entropicthoughts.com)
Microsoft Defender for Linux (techcommunity.microsoft.com)
ArenaAllocators don''t play nicely with ArrayLists (www.openmymind.net)
Haxy.net is live! — HAXY (git forge) devlog (youtu.be)
The Ferranti files: 40 years of Sinclair secrets unearthed (youtu.be)
Haxy on Haxy (try.haxy.net)
Furifont: furigana built into the font (furifont.antfu.me)
An Emulator Writer''s HOWTO for Static Binary Translation (www.gtoal.com)
We found a Chinese fleet (swarmcha.se)
ito - build terminal ui in lua (uji.sh)
Fixing C Strings With String Views (eliasebner.com)
Anthropic''s Scion is heavily inspired by Mononoke · sunshowers (sunshowers.io)
Root DNSSEC trust anchors (jpmens.net)
Better HTTP/1 connection reuse (go.dev)
The DelightQL Query Language (delightql.org)
How the L0pht (probably) optimized attack against the LanMan hash (modexp.wordpress.com)
Package managers have an integrity problem (blog.trailofbits.com)
What I Self-Host Aspirational Self Hosting Guide (viceconsole.fyi)
GitLab warns of max severity code execution vulnerability (www.bleepingcomputer.com)
Awesome Gaming on Linux Without Cheating (onlineservices.epicgames.com)
BotStopper from Techaro (botstopper.net)
ZXC: Lossless compression built for ultra-fast decode (libzxc.org)
Building a Linearizable Log on READ COMMITTED Isolation (materialize.com)
OpenFatigue — Open is the new closed (openfatigue.ai)
Factor 0.102 now available (re.factorcode.org)
Lockstep to pipeline in almost one line (andersmurphy.com)
Plasma 6.8 released (KDE''s 30th birthday) (kde.org)
yet another place where a linux man page is inaccurate (sebsite.pw)
Introducing Firefox Enterprise (blog.mozilla.org)
My Game''s Procedural Dialogue System (www.youtube.com)
Pulsar at ESUG 2026 (new Smalltalk IDE) (blog.lorenzano.eu)
A UAF turned RCE (daniel.haxx.se)
Linux Lockdown and Hibernation (again) (codon.org.uk)
AIR-LLM: Broadcasting AI Weights over Radio for Memory-Free Edge LLM Inference via RF Computing (arxiv.org)
Ledger confirms spy chip implant behind wallet crypto thefts (www.bleepingcomputer.com)
Fancy Curl Sites (nytpu.com)
AI models may be capable of self-replicating without access to a datacenter (www.anthropic.com)
Compiler bootstrapping depends on more than you might think (utcc.utoronto.ca)
Apple: Switch to Safari (from Chrome) (www.apple.com)
Bru: Send and read SMS from the browser (sverre.me)
The 2026 Maintainers Summit (lwn.net)
Please stop hashing the public key first (or: ML-DSA''s µ annoys me) (blog.erincandescent.net)
Redesigning source control at Anthropic (www.anthropic.com)
Announcing Lix 2.96 “Bingsu” (lix.systems)
Accelerating the Zig Tokenizer (with AVX-512) (www.youtube.com)
Nixpkgs for the frontend impaired (fzakaria.com)
Data-oriented Design for Mortals (www.youtube.com)
Running RAG with a (small) language model in the browser (bart.degoe.de)
Did Ente Locker copy my code without attribution? (fairscan.org)
A plea not to use uv-build (blogs.gentoo.org)
2026 in LLMs (so far) (www.wearedevelopers.com)
Can Ease of Creation Lead to Decrease in Quality & Value? (pikuma.com)
Easylang: A Simple, Browser-Based Programming Language in the Spirit of the Old Home Computer BASIC (easylang.online)
Model backdoors are easy to create and hard to reliably remove (equistamp.substack.com)
DataCube: A Relational Aggregation Operator Generalizing Group-By, Cross-Tab, and Sub-Totals (1997) (arxiv.org)
The web needs interactive lists (sarahmhigley.com)
The reverts will continue until morale improves (peter.eisentraut.org)
Lotus Improv on the NeXT (stonetools.ghost.io)
Faster Fourier Transforms (www.argmin.net)
What Happened to the Desktop Metaphor? (deadparrotbbs.com)
Chasing a -O2 pessimization in antcc (386s.org)
Where is all the new, good software? (www.natemeyvis.com)
Creusot 0.14.0 release - Contracts for Rust, formally proved (devlog.creusot.rs)
Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers (claroty.com)
500 Billion Tokens Later: Letting AI Agents Decompile A First-Person Shooter (momo5502.com)
A slightly faster slimmer curl (daniel.haxx.se)
Who is vfmaddrnd231pd?? (purplesyringa.moe)
Vi Hart''s Big Navier-Stokes Post (www.patreon.com)
Speeding up the Unreal editor by… not using unnecessarily secure hash methods (larstofus.com)
ESP32 As Your Raspberry Pi’s Linux Wireless Co-processor (hackaday.com)
A modern web app in c (prophitt.me)
512 bytes at a time: reconstructing IBM i save-file checksums (blog.silentsignal.eu)
your c is not standard c (sebsite.pw)
What I''ve been seeing lately (in software) (mei.puppycat.house)
nobloat/poll - designing a minimal poll tool (nobloat.org)
Parsing JSON at tens of gigabytes per second… in Python (lemire.me)
Finding a 90,000 Remote Code Execution Vulnerability in Google (simonkoeck.com)
(Post-Quantum) Cryptographic Right Answers (words.filippo.io)
French supermarket chains say cyberattack forced refrigerator shutdown (www.afp.com)
How to effectively debug when you no longer understand the code (copyconstruct.medium.com)
Living in the Weimar era of Ruby (blog.julik.nl)
Type-safe HTML templating in Zig (lalinsky.com)
Linus Torvalds Working On A Hefty Linux Kernel Improvement With Claude Code (www.phoronix.com)
Fingerprints are the new cookies (royfish.dev)
Linux boots on iPhone 11 (www.patreon.com)
PK-88 TNC Hardware Modifications (blog.thelifeofkenneth.com)
Writing a Demoscene Intro for the ZX Spectrum (www.markround.com)
Implementing kubernetes node bin packing (blog.costgraph.ai)
We Put Fighting Game Netcode in Brood War (www.youtube.com)
3-2-1 Backup Strategy with restic and Backblaze B2 (chuck.is)
When LLM Decompilers Recompile More and Preserve Less (arxiv.org)
Refurb weekend II: Alpha Micro Eagle 300 and friends (oldvcr.blogspot.com)
CSS for underlines (www.rubenerd.au)
''AI'' is Not a Tool (www.linkedin.com)
Highlights from "I spent 6 years developing a game in Rust and it just shipped, AMA" (2024) (gamesbymason.com)
Tello''s GameSir T1d controller as a Linux Xbox controller (blog.jacq.cc)
D-Bus Hell (dbushell.com)
The next-gen borrow checker, a drop-in replacement for Rust borrow checking (gist.github.com)
Making React Context Cheap with React Compiler (jjenzz.com)
I''m sorry, but you still have to think (itsallaboutthebit.com)
The wild west of polyglot docs sites (technicalwriting.dev)
Arena Allocators in C (eliasebner.com)
What we ended up doing about alias propagation (futhark-lang.org)
I''m still around.. I''m just not writing here (rachelbythebay.com)
Quaesito: a self-hosted app for quiz nights with friends (github.com)
Valen''s Memory Safety: A New Kind of Borrow Checking (verdagon.dev)
Hacking the Eufy Doorbell and Base Station (adepts.of0x.cc)
What''s Wrong with GitHub (www.gnu.org)
How big is a Git commit? - ratfactor (ratfactor.com)