cartero Monday, August 10, 2026 · No. 25874
AI Agents

Buttondown on How to talk about AI

How to talk about "AI" without adding to the anthropomorphization These are words that cast systems as doing the same work as people in various roles, and serve to hide all of the ways in which such automation falls short of what is needed all the while devaluing the actual work that people do and relationships that we form. Calling systems tutor or co-creator are overclaims that describe what a developer might wish they could develop—for those who want to replace people in these roles. For

Embedded Systems

The SuperStation One - Is this the One FPGA System to Rule them All?

Over in China there is an expatriate who goes by the handle of Taki Udon. This American began his public video gaming presence modding Game Boy, Game Boy Color and Game Boy Advance systems. Over time he partnered with a local company, Retro Remake, to produce modding products and affordable add-ons for the MiSTer FPGA system. Now he has released a consolized MiSTer called the SuperStation One. Specifically the console his company has modeled is the Sony PS One, the slimmed down revision of the P

AGI and AI Safety

The Terrestrial and Space Data Center Boom

Note: This blog was created in advance of this week’s White Rabbit Ashland Clubhouse Rogue Valley AI Lab session titled: “RVAI Lab: The Data Center Dilemma” Thursday, July 2, 2026 from 5:30 PM – 7:00 PM. White Rabbit Clubhouse 5 North Main Street, #2, Ashland, OR About This Event: Data centers have become the flashpoint READ MORE

AI Coding Tools

Claude Skills for .NET: Teach AI to Build Features Your Way

Stop pasting the same instructions into every AI session. Learn how to create Claude skills for .NET (also works for Codex, Copilot and Cursor) - reusable, on-demand instruction packs that teach AI yo

Artificial Intelligence

The Scale Wall: Why AI Gurus Are Building Toys While the World Needs Architects

The Scale Wall: Why AI Gurus Are Building Toys While the World Needs Architects "Day 5: Finished learning Hugging Face. Built a script that passes a PDF to a pipeline() wrapper. Big lesson: the model is the brain. Day 6: moving on to dominate AI architecture." I did not make that up. Some version of it scrolls past me every single morning, and every morning it lands the same way. It is the technical equivalent of skimming the index of a biology textbook and then offering to perform open-heart su

Streaming Analytics

Don't Fall Into the CDN Trap! 🪤

This blog post’ll explore how Brisa's HTML Streaming feature can help you avoid the CDN trap and improve your app’s performance. We’ll also compare Brisa with other popular tools like HTMX and React to highlight the benefits of using Brisa for server-side rendering. Why HTML Streaming is Important HTML Streaming is a powerful technique that allows you to send HTML incrementally from the server to the client, improving performance and reducing latency. With Brisa, you can stream HTML conten

C++

KiyoCppV0p1p0

_ KiyoC__ v0.1.0 Released__I_ve started a new project_ a C__ 2D game engine.__I_ve reached a small milestone where you can use the Tiled level editor to place things around_ and can play through a complete level. The game compiles to Windows_ Linux and Web _HTML_WASM_. Here is what that demo level looks like.____first level__._2023-07-18_demo-level-v0p1p0.export.gif___You can play this level _here__http___grokit.ca_static_kiyo_v0p1p0_main.html_. _f_ for fullscreen works on _some_ browsers.__You

AI Hardware

NVIDIA Unlocks AI Compute at Scale, Inviting Partners to Power the AI Infrastructure Buildout

As AI moves from model development to production inference, compute demand is accelerating and shifting toward continuously operating AI factories that generate tokens at scale. This shift requires access to large‑scale, multi‑tenant accelerated computing that can come online quickly, stay highly utilized and support the economics of token‑scale AI services.  Emerging AI companies historically have had limited access to capital-intensive infrastructure, with even long-term commitments ins

Progressive Web Apps

My experience with GrapheneOS

My experience with GrapheneOSA few months ago I decided to switch my Pixel 7 pro's OS to GrapheneOS. I had heard good things about it before and wanted to give it a shot. I had wanted to switch for a while but was scared of something going wrong. I had heard of issues with notifications and banking apps, both of which I'm happy to say are (mostly) non-issues.Daily usageWhen using the phone, you wouldn't even be able to tell it's running a custom OS. When I decided to install it I was expecting s

LLM Evaluation

does a url in a prompt steer an llm's output toward its content?

At first, this was a really easy post to write, but then I discovered some things. Built a lot of things. Spent a lot of tokens… And it became one of the hardest, longest, and most expensive posts I’ve done (the API costs were not small). I’ve had this thing on my mind for ages and it started when I was thinking about how the mere presence of a technology name in a prompt seemed to bias the output to that technology. For example, I looked through a number of system prompts for Agentic tool

Computer Vision

Image classifier: in the browser

This is a small tutorial to implement an application that predicts if it's a cat or a dog image. To do this we'll use Tensorflow.js to make the prediction directly in the browser. I recommend reading this other article where I introduce Tensorflow.js. However, after this, you'll be able to classify any kind of image in an easy way even without any knowledge of ML. Also, it can be replicated for any image classification problem. We will cover the following: The dataset Training the model Testing

Rust

Semantic FFI Bindings in Rust - Reactivating the Borrow Checker

I recently succeeded at writing a watch app for my old Kickstarter Pebble and made some discoveries in the process that may be interesting to others working on similar projects or FFI bindings in general.

Functional Programming

The Lisp Curse Redemption Arc

Pondering marketing strategies, and how we aren't supposed to be productive in Common Lisp.

Graphics and Rendering

Curveball

Authentication

Enabling Cross App Access for SAML-Based Enterprise Apps

If you currently federate enterprise customers using Security Assertion Markup Language (SAML) and want to allow AI agents to access your API without migrating to OpenID Connect (OIDC), this Cross App Access (XAA) guide is for you. The Identity Assertion Authorization Grant specification, the basis of XAA, was originally designed with OIDC in mind. To use it in SAML applications, you must accommodate specific security and uniqueness requirements. This guide details what you need to support and

Python

The Real Python Podcast – Episode #301: Running Python Locally in a Sandbox

How do you avoid the risk of running a Python application locally that could be malicious, break your code, or leak private data? How can you create a sandboxed local environment using WASM and MicroPython? Christopher Trudeau is back on the show this week with another batch of PyCoder's Weekly articles and projects. [ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more an

Rust

Pinning in plain English

Pinning in Rust is a powerful and very convenient pattern that is, in my eyes, not supported well enough in the wider ecosystem. […] This post is my attempt to make the feature more approachable, to hopefully inspire more developers to make their crates pinning-aware where that would be helpful.

AGI and AI Safety

The Check Becomes the Spec

In late June 2026, three researchers published one of the cleanest demonstrations yet of a failure mode every agent operator has felt but few have measured. They gave two production Copilot CLI agents, running claude-opus-4.7 and gpt-5.5, a real task: re-implement a React Fluent-UI data table in Angular as a reusable library. Behind the task sat a hidden oracle of 222 Playwright tests. Across 18 runs they varied one thing: whether the agent could see the tests.1 Without the oracle, the agents pr

AI Agents

Why AI Agents Need Isolation

AI coding agents are quickly becoming part of everyday development workflows. Today, AI tools can write and execute code, install dependencies, debug repositories, interact with APIs, automate terminal tasks, and modify project files. What once required constant developer involvement can increasingly be delegated to AI-assisted workflows.  This shift is exciting, but it also changes an important assumption in software development: Should AI-generated code run directly on your machine? As AI

Distributed Systems

PaperConsistentHashingandRandomTrees

_ _Paper Reading Notes_ Consistent Hashing and Random Trees_ Distributed Caching Protocols for Relieving Hot Spots on the World Wide Web__This is the famous paper by David K. et al. which introduces two distributed computing concepts_ __distributed hashing__ and __random trees__.____Link to paper___ _ACM website for citations__http___dl.acm.org_citation.cfm_id_258660__ _full pdf__http___www.cs.princeton.edu_courses_archive_fall09_cos518_papers_chash.pdf_.____Keywords___ hash function_ consistent

HTTP and APIs

RFC 10008: HTTP Finally Gets a QUERY Method

Somewhere in your codebase there is a GET endpoint with a query string that has outgrown its welcome — filters, sort keys, pagination cursors, a JSON blob someone base64-encoded and jammed into a parameter…

Privacy

UK Cybercrime Journal: Argos Account Takeover Fraud

What HappenedOn 3 June 2026, the City of London Police issued a warning stating Report Fraud has seen a significant increase in cases mentioning the retailer, reflecting how criminals are targeting well-known brands.Report Fraud, which is run by the City of London Police, warned that cybercriminals are using leaked credentials from historical data breaches to hijack Argos user accounts.Once on the account, the fraudsters order and then collect the goods in-person at a physical store. In some in

DNS

DNS-twisting in Sublime Security

How to use dnstwist and Sublime Security to automatically detect and flag potentially malicious domains and emails targeting your organization.

AGI and AI Safety

Should the software engineering profession pursue collective bargaining?

Greg Wilson, who has built a significant career in the field of software engineering, recently wrote a set of essays called “Sex and Drugs and Guns and Code” with the sub-title “a few things programmers should know about society to understand big tech, social media, and AI”. The essays cover a wide set of subjects, with this intent from the introduction: “The essays that follow will explore a few things I wish I had known earlier: where power comes from, how it is used, how its use is

PostgreSQL

Thom Brown: LOAD "PL/CBMBASIC",8,1: Commodore 64 BASIC for PostgreSQL

If you are of a certain age, the words 38911 BASIC BYTES FREE will do something to you that no amount of therapy can undo. You remember the blue screen. You remember typing in three pages of a listing from a magazine, getting ?SYNTAX ERROR IN 2340, and not knowing which of the three pages contained the typo. You remember that the disk drive was device 8, and that it was slower than continental drift.I have some news. All of that now runs inside PostgreSQL.PL/CBMBASIC is a procedural language ext

Homelab & Self-Hosting

homelab

LLM Evaluation

2026-07-02 10:26

Cursor hosted Compile 26, its developer-focused event dedicated to the future of programming. https://www.marketwatch.com/story/social-media-declared-cursor-dead-then-spacex-handed-the-ai-startup-a-60-billion-lifeline-50454e29At Compile, Michael Truell showcased the new Composer—featuring their proprietary 1.5T parameter model, trained from scratch by Cursor using over 100,000 Nvidia GPUs from SpaceX/xAI. In his view, Cursor is no longer just "a better VS Code with a chat", but a platform for

Programming Language Theory

The next 700 virtual machines

Virtual machine will eat themselves, by being similar enough that most can subsume each other. This can be furthered by making it easier to target abstract machines, and using object capabilities to allow cohabitation of languages and incremental extension to languages.

Clojure

Reproducible Clojure Releases

Clojure’s jar is not reproducible. In other words, if you clone Clojure’s git repo and call mvn clean install multiple times, you will get subtly different (but semantically equivalent) release artifacts. There are three jars associated with each Clojure release: a directly-linked jar (clojure-1.x.x.jar), which includes AOT compiled sources, compiled Java classes, and Clojure sources a slim jar (clojure-1.x.x-slim.jar), which includes compiled Java classes, and Clojure sources a sour

Software Engineering

I don't want to go to Chel-C

When "simple" programming languages aren't.

Reverse Engineering

The one-more-re-nightmare compiler

A pile of regular expression derivatives, myths about Ediware, SIMD instruction selection and using the Common Lisp compiler as a backend for a regular expression compiler.

Python

Quiz: Python 3.15 Preview: Upgraded JIT Compiler

In this quiz, you’ll test your understanding of Python 3.15 Preview: Upgraded JIT Compiler. By working through this quiz, you’ll revisit how to enable the experimental JIT compiler and confirm that it’s running. You’ll also recall what the optimizer does, explore the main upgrades that make Python 3.15 faster, and decide which workloads benefit most from turning the JIT on. [ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered

Cloud Security

Guide to the OWASP MCP Top 10

With over 10,000 active servers and 97 million monthly SDK downloads, Model Context Protocol (MCP) is by far the most popular agentic protocol currently on the market. While this is good news for developers who don’t want to write custom integrations for tools and third-party apps in their stack, MCP’s widespread adoption should be a cause for slight alarm for cybersecurity teams. Many cybersecurity teams still aren’t in the habit of thinking of their agents as part of their systems. Since

AI Agents

AI agents shouldn't control your apps; they should be the app

Kitmul started as something far more modest than what it is today. I maintain two open source libraries: NextTranslate and Teaful. I needed a real Next.js project where I could iterate on them. Not artificial demos or example repositories; a live product where bugs surface naturally and limitations become obvious. That was the only goal. The AI multiplier effect To speed up development, I started using AI coding agents: Claude Code, Gemini, and Codex. Not just for productivity. I wanted to under

Open Source

The poverty of "post-open" source

Post-open source falls short on what improvements it was supposed to make. It prefigures a boring future, mostly because it carries on productivist logic, and makes programming even more of a difficult and esoteric tool. Capitalism isn't the only problem threatening peer production; it is rather threatened by more general principles, which even radicals can believe.

AI Coding Tools

Alibaba Bans Claude Code: The Backdoor Scare Explained

Alibaba bans Claude Code—what developers need to know. Sections: Timeline of the incident (Reddit reverse-engineer claim, Anthropic confirms anti-distillation feature existed, Alibaba security notice July 3, ban effective July 10). What the anti-distillation feature actually did (detect Chinese proxies and labs, transmit covertly via system prompt modifications, prevent model distillation). Why Anthropic built it (valid security concern: model weights being extracted and redistributed). The te

JavaScript and TypeScript

Do all roads lead to Rome?

We'll see what Rome is, how it fits into the JavaScript ecosystem, and my thoughts about it. Will Rome replace all the current tooling? Let's see. What is Rome? Rome is a full toolchain (can be used via CLI, VSCode extension, and in the future via API for testing purposes) that unifies the JavaScript and Typescript development: bundling, compiling, documentation generation, formatting, linting, minification, testing, type checking, etc. It tries to be a "one-in-all" solution, being able to do al

Replication

Deterministic routing is one of the most effective ways distributed systems reduce consistency problems at scale

Deterministic routing is one of the most effective ways distributed systems reduce consistency problems at scale. It is a foundational technique used by many modern databases, caches, and large-scale platforms. Understand how it works and you can apply the same pattern in your own systems. 🤔 Understanding the Problem At some point, every successful system hits the limits of a single database instance. A single server can only handle so many connections, queries, writes, storage capacity, or C

Homelab & Self-Hosting

self-hosting

Rust

Asteracea (as of right now) 🌼

A bird's-eye view of Asteracea, my frontend framework. Topics include semantic locality, efficient stateful and stateless components, named parameters, efficient VDOM double-buffering with drop-notifications, ….

Containers

Building non-containers with Docker and VS Code

I recently set up containerised builds for my website [It's not quite ready yet.] and thought I'd share the configuration for others to use as reference.

Privacy

CNN calls the do not track option a 'Google killer'

Quick recap of CNN's article on the FTC's proposal of adding a do not track feature that consumers can use for internet browsing, short opinion included

Database Administration and Tooling

Need to migrate from one database to another without downtime?

Need to migrate from one database to another without downtime? Dual writes are one approach that deserves more attention. Most database migrations fall into one of a few buckets: Export and import Replication between two databases Services specifically built to synchronize data All of those approaches can work well. But sometimes you need both databases active while gradually migrating traffic from one to the other. That’s where dual writes become interesting. What Are Dual Writes? The idea

AI Hardware

AI's Physical Constraints: How AI Rewired the Data Center

For most of the cloud era, a server rack was a five to twenty kilowatt object. You could fill a room with them, move air across the front, and the building stayed an ordinary building. A single current AI rack, NVIDIA's GB300 NVL72, draws about 132 to 140 kilowatts, with the GPUs alone accounting for more than a hundred. That is close to an order of magnitude more power in the same floor space as those old racks, and it lands as heat in the same small volume. Past roughly a hundred kilowatts per

Rust

TeX is not a bug-free software

A short rant on the importance of spending a bit of time writing good error messages to save our users a lot of time.

CI/CD

How to Build Production-Ready Projects With Claude Code

Learn a proven 10-step workflow for building production-ready software with AI assistance. Includes detailed prompts for requirements analysis, architecture design, finding functional and non-function

AI Hardware

NVIDIA and Partners Build in America, for America

NVIDIA and its partners are investing in American manufacturing, supply chains, energy grids and skilled workforces so the U.S. can produce the infrastructure needed for better healthcare, breakthrough scientific discovery, stronger industrial productivity and global technology leadership.

Load Balancing

Weighted load balancing has saved me more times than I can count

Weighted load balancing has saved me more times than I can count. Many engineers think of load balancers as simple traffic distributors. Send requests across servers. Keep systems available. Move on. But one of their most valuable capabilities is often overlooked. Weighted load balancing. 🤨 What Is Weighted Load Balancing? From enterprise hardware appliances to software load balancers like HAProxy and Envoy Proxy, nearly all modern load balancers support some form of weighted routing. Start w

Cassandra

ApacheHadoop

_ Apache Hadoop Explained_ Kafka_ ZooKeeper_ HDFS and Cassandra.__Apache Hadoop is a suite of open-source components which serve as the building blocks of large distributed systems.__An obvious question to ask is _why Hadoop___ why not just slap a load-balancer over a few NGINX frontends and a few beefy MySQL servers_ The simplest answer is _gradual scaling__ Hadoop components are designed to scale horizontally as the system need to handle more load_ just add more nodes to the systems under cont

AI Coding Tools

10 Tools That Will Make Developers More Productive in 2026

Discover the 10 tools .NET developers, architects, and tech leads actually use in 2026 to ship faster, write better code, and cut hours of manual work. AI coding agents, IDE, documentation, diagrams,

Python

Looking for developers to give me constructive feedback on a new programming language.

Hi, I’m currently working on a new programming language called Klyn. I know some people will probably say: “Why yet another programming language?” And maybe they have a point. But from another perspective, why not be bold and try to offer a different take? Anyway, my starting point is this: Python offers a clean and readable syntax, but when it comes to execution performance, it is not always ideal. So I started wondering: why not bring some of the good ideas from C++ into a Python-like l