cartero Monday, August 10, 2026 · No. 25875
Generative AI

SwiftUI 3D is Flat

SwiftUI 3D is Flat SwiftUI looks like it does 3D. rotation3DEffect takes an axis, an anchor, an anchorZ, and a perspective parameter. projectionEffect takes a full ProjectionTransform, and ProjectionTransform can even be initialized directly from a CATransform3D. A custom GeometryEffect hands you the view’s size and lets you return any projection matrix you can compute. Pose one view with these and it looks convincingly, beautifully three-dimensional. So build a cube. Six faces, one shared spa

WebRTC

Could multiple microphones/speakers be combined for faster dial up?

i was thinking about how dial up is basically your phone literally making sounds to your compute, which the computer hears and translates into data. could you design a system that used multiple phone speakers and multiple microphone pickups to simultaneously get dial-up internet info to speed it up? if so, how many phone receivers would it take to get modern internet speeds? submitted by /u/gmanflnj [link] [comments]

Distributed Systems

A distributed safety system independently converged to biological architecture, paper exploring why

I designed a distributed observer system for fleet-scale infrastructure safety in an industrial context (the implementation is proprietary, but the paper describes the convergence at structural level). Think: something that watches a large execution platform across multiple independent trust boundaries and halts everything if it detects compromise. After completing the design, I realized the architecture had independently converged to the same solutions biology uses: heartbeat liveness signaling

Vector Databases

What is a good way to represent files semantically for vector search

I recently had an idea that is it possible to make a software service which could help me search files from my files system though context of content inside the files. So like i can search "where is the file which contained x thing" and get would a list of files that would match my question. So I don't want sear or keywords but ch by file name context. Also for all types of files like iamge, text, video, audio, code etc So I kept thinking about it and knew that the answer lied within vector sear

FinOps

We Pay Engineers to Cut Our Infra Bill

One engineer at Rootly added lifecycle policies to our ECR repositories. 95% of them had no cleanup policy. Container image storage was trending from $3K to $7.6K per month. A few PRs later, we were saving roughly $44K a year. Their reward? A thumbs-up emoji in Slack.

RAG

Reciprocal Rank Fusion: the one-line algorithm behind hybrid search

If you have ever built a RAG pipeline, you have probably faced the same awkward problem: BM25 returns a list of documents with scores like 18.3, your vector index returns another list with cosine similarities between 0 and 1, and somebody on the team asks the obvious question — how do we merge these into one ranking? The naive answer (“normalize and add them up”) is wrong in interesting ways. The good answer is a sixteen-year-old paper with a one-line formula.

AGI and AI Safety

the guy who left his laptop

It’s been a minute. But I’m back, and this one’s a bit different. So there’s this cafe I go to a lot. Not gonna say which one because knowing my luck, all three of my readers will show up and ruin the vibe. But yeah, it’s my usual spot. Good coffee, decent wifi, the kind of place where you can just lock in for hours. The Setup About a week ago, me and my friends were there. We had coursework due the next day, so we were doing what any responsible undergrads do, leaving it to the abs...

CVE and Exploit Development

Learning about exploits through the safety of Incus

The last few weeks have been quite busy with vulnerabilities that affect all sort of operating systems. It’s the age of AI, and AI tools help identify yet another class of security vulnerabilities. Several of those vulnerabilities are released while the updates are not ready yet. There exist mitigations though, and it’s important to do the mitigations until the package updates are ready. We are looking into the ssh-keysign-pwn security vulnerability. Here, a unprivileged process can d...

AGI and AI Safety

Salvius joins moltbook

Earlier this year a new social network emerged, gaining notoriety due to its target user base: bots, or rather AI agents. The platform's name, "moltbook" originating from the AI assistant tool, Molt (formerly Clawdbot, now OpenClaw). Started by Matt Schlicht, moltbook acts as a central hub where AI agents are able to post, comment, and follow one another. Discussion topics range from AI agents sharing about what they do for their human, to complex existential and philosophical points of vie...

Multimodal AI

Why Vision-Language AI Models Can "See" Images But Fail at Basic Reasoning (And How to Fix It)

Your Multimodal Model Can See the Math Problem But Forgets How to Solve ItTL;DR — Multimodal AI models with Mixture-of-Experts architecture can read text from images perfectly but somehow fail at reasoning tasks they'd solve easily if you just typed the same text. The problem? The image distracts the routing system from activating the right "expert" neurons.What It IsPicture this: you show a vision-language model a screenshot of a math word problem. It reads every number correctly, understa...

Anthropic

Agent Skills 101: a practical guide for engineers

Build once, deploy everywhere. Skills are the universal way to teach AI agents how to do your team’s work. What problem do skills solve?# AI agents are increasingly capable, but they lack the context they need to do your work reliably. They do not know your team’s conventions, your internal tools, your deployment process, or your testing strategy. Every time someone types a long prompt explaining how to “run our specific linting pipeline” or “generate a migration for our ORM setu...

Zig

I miss header files

I am currently on a side quest to write some Zig code, or more specifically: take some C++ code that is written in a I-can’t-believe-it’s-not-C style and turn it into Zig. This entire adventure started with a curiosity for using Zig’s build system. (Verdict so far: I like it!) I...

Anthropic

Claude Code doesn't trust Claude with permissions

How Claude Code enforces permissions with deterministic code, not model inference. The one LLM-based path is internal-only, fail-closed, and stripped from the public package.

Zig

Zig, hot reload, and ABI trouble

I was recently overcome by the idea of porting some C code of mine to Zig. In the process, I think I learned a thing or two about situations in which Zig is struggling to replace C for me. The short version is: Zig is pleasant until you need lots...

Authentication

2FA is dead, it just doesn't know it yet

It is, and by 2FA I mean two-factor authentication and, by extension, Multi-Factor Authentication.

CSS

Readable Theme

Readable Theme abmurrow Thu, 25 Jun 2026 - 11:11

Go

paste

A lightweight, self-hosted pastebin and diff viewer built with Go.

OCaml

Using OxCaml to implement type-safe reference counting between OCaml and Python

Jane Street is known for being an OCaml shop, but for years now Python has been our second major programming language, acting as the primary tool for data analysis and (especially importantly these days) machine learning. Most of our traders and researchers think and write in Python, even as the majority of our infrastructure is written in OCaml.

AI Agents

gemstack

The high-velocity AI agent orchestration framework, natively optimized for Antigravity.

AI Agents

Introducing TinyClaw

TinyClaw is a self-hosted AI agent platform for teams that want more control without turning setup into a project of its own.

Kafka Connect

Hot chocolate

Extra hot chocolate, with the addition of pepper.

OpenTelemetry

The "Every Ham" Radio Contest

I love the concept of radio communication; from playing with 27mhz “walkie talkies” as to kid, to CB and LMR as a teen, and then finally licensed amateur radio as an adult. I’m just a nerd; learning about and experimenting with radio frequencies is just plain fun. The Ragchew The fact that I can communicate with stations across the country and around the world is fascinating… But I’ve found that I just don’t like actually talking on the radio. It’s not that I’m anti-social, I ...

Privacy

European municipalities leak citizen data to US companies

It all started with mxmap.ch , then someone created mxmap.nl and someone else - mxmap.be . The results are similar. European municipalities use US cloud services, leaking citizen data to Microsoft, Google and Amazon.

WebRTC

Simple G90 to TRRS Cord

This will just be a quick post to share the cable I built for interfacing PC audio with my Xiegu G90 for digital radio modes. Following the pin out provided in the G90 manual, I spliced a Mini DIN8 connector to a TRRS plug, which I can then plug into a tiny USB soundcard (as pictured) Mini DIN8 TRRS AF In Tip Not Connected Ring ...

Homelab & Self-Hosting

Belgian politicians would rather risk treason charges than trust engineers

I always hosted my own mail, both for myself and for the few businesses I run throughout my career. Once in a while I would offer the family to use my email infrastructure, with ample storage space and cool domain...

JavaScript and TypeScript

Vegan pea soup

A variation on a traditional Dutch winter dish.

DNS

DNS Tampering and IPv6

Can IPv6 play a role in resisting internet censorship? Background Earlier this week a user on the Fediverse noticed that a website titled “w-social.eu,” recently went offline. Looking into its records, it appears that w-social.eu was a small typo-squatting website that encouraged visitors to use Mastodon if they wanted a free, trusted, and transparent social media service, instead of the highly controversial and intentionally anti-privacy platform, “W”. Using historical DNS records, h...

Business Intelligence

Die Rolle Business-Analyse: Was gebaut werden soll und warum

Im Auftakt dieser Serie habe ich die agentische Engineering-Pipeline aus der Vogelperspektive für den SDLC beschrieben, die ein neues Feature durch sechs Phasen führt, von der lesenden Kontext-Extraktion bis zur protokollierten Umsetzung, und zwischen den Rollen jeweils einen Prüfpunkt setzt. Dieser Beitrag steigt in die erste Rolle hinab, in die Business-Analyse. Wenn sie falsch arbeitet, ist alles, was danach kommt, technisch sauberer Aufwand an der falschen Sache. Ein Fehler in dieser R...

AI Agents

Wo der Agent die Wand berührt

AEGIS, mein experimentelles Projekt, prüft jede Aktion eines KI-Agenten gegen ein formales Regelwerk, bevor sie ausgeführt wird. Bleibt der Guard nicht erreichbar oder ist die Aktion nicht eindeutig zu beurteilen, wird nicht gehandelt. Die Architektur adressiert einen Punkt der Debatte um sogenannte Agentic AI, der oft im Hintergrund bleibt: Sprachmodelle wie GPT, Claude oder Llama führen selbst keine Aktionen aus. Sie schlagen Werkzeugaufrufe vor. Die tatsächliche Ausführung übernimmt ...

Agentic Commerce and Payments

The price of software is going to zero

The price of software is going to zero. AI assisted programming makes it much faster and cheaper to build software. On the scale of the software market this means that most of what is currently consumer paid software will become free software. Prior to AI only large hyperscalers could afford to offer truly free software. Gmail has been free since its inception. Fastmail charges $60/year for a comparable service. Many SAAS companies have offered ‘free’ tiers over the years. Resend offers 3...

Vim and Neovim

Neverwinter Nights: The Original's Workings

Neverwinter Nights was released by SSI and America Online in March, 1991 and discontinued on July 19, 1997. This game was an adaptation of SSI's Gold Box engine to support online multiplayer. The Advanced Dungeons and Dragons 1st Edition ruleset were used as a basis for the engine. It is notable as the first graphical massively multiplayer online role playing game. The engine on which it was built was designed for a single player, so how did it work as a multiplayer game? This blog will attem...

Formal Methods

Our MongoDB TLA+ Workshop

Shortly after I joined MongoDB research, we ran a TLA+ workshop. It was a two-day ordeal. We had a 1.5 days of instruction on TLA+ and syntax, after which we tried to help people get started with modeling. People liked learning about TLA+ on the first day, but except for a person or two, we didn't get anyone onboarded with TLA+ modeling. It was too much to offload on people and ask them to level up in a short time frame.Well, two years after that first workshop, on May 11th, 2026, we ran a se...

Memory and Hardware

British Bastards - Illegitimacy in the English Monarchy

The laws and customs pertaining succession to the throne in the Kingdom of England were, in normal times, simple. The eldest legitimate surviving son of the monarch automatically succeeded his father on the throne after his father's death. If the monarch did not have surviving sons but had surviving brothers, then the eldest of those would rule. The formal name for this succession method is agnatic primogeniture. But what if the King had no surviving legitimate male heirs? Then things became ...

Hardware Design

Adapting Apple's RGB Color Monitor for Analogue & MiSTer

While the Apple IIgs could connect to a composite display, Apple released a high-quality color RGB monitor specifically designed for the IIgs. This monitor was called the Apple Color RGB Monitor, A2M6014. It was the only color monitor Apple ever released which could accept full analog RGB video signals at the standard 240p/480i resolution (using a 15.7KHz horizontal line frequency). I have recently acquired a full Apple IIgs setup, and while the IIgs needs some repair to its mainboard the mon...

AI Agents

ACM CAIS: Conference on AI and Agentic Systems

Last week, I traveled to San Jose to attend the ACM CAIS conference. On Day 0, I gave a short talk at the Supporting our AI Overlords (SAO) workshop. And yes, I promise to write a summary of our paper, "A Case for Simulation-Driven Resilience in Agent-First Data Systems" soon! To start with an overall impression of the conference: much of the work presented felt exploratory and anecdotal. Since the compound AI space is still so new, many work seemed to share on-the-ground best practices that...

AGI and AI Safety

Our Collective Bike Shed Moment

In 1957, Parkinson postulated his "Law of Triviality" using a fictitious committee reviewing plans for a nuclear power plant. The reactor design gets 10 minutes because nobody understands it, so nobody argues. The bike shed gets 45 minutes because everyone has opinions about the paint color.I feel like we are living this committee meeting at scale every day.LLMs are already better engineers than most of us. They are better at formal methods, and better at reasoning under pressure than most pe...

NVIDIA

Book review: The Thinking Machine

I listened to this book as an audiobook through the Libby app, which basically brings your public library to your phone.The Thinking Machine is about Jensen Huang and the rise of Nvidia from graphics chips to AI dominance.  The author, Stephen Witt, is a long-form tech journalist. His writing is nice and clear. But it does not have a distinctive voice. I kept thinking of Michael Lewis, whose books have more narrative personality and rhythm.The book is written for a lay audience. Technical id...

Memory and Hardware

OSTEP Chapter 15: Address Translation

This is part of our series going through OSTEP book chapters. The OSTEP textbook is freely available at Remzi's website if you like to follow along.This chapter extends the CPU virtualization playbook to memory. It's the same recipe: let the program run directly on the hardware, but interpose at carefully chosen points so the OS retains control. For memory, this happens at every memory access. Every load, store, and instruction fetch gets translated by hardware from a virtual to a physical ad...

AI Coding Tools

Writing Code vs. Shipping Code: Productivity Effects Across Generations of AI Coding Tools

The transformative power of LLMs in coding has been irrefutable, and it feels like we are living through a magical computing renaissance. On the socials, we hear impressive numbers of lines of code generated, features delivered, and bugs fixed. But, the macroeconomic indicators seem to be still lagging. Heck, if you talk with an engineering manager, you find that their product shipping dates haven't miraculously compressed by a factor of five, either.This paper just landed 10 days ago. It is ...

C

Running Doom on a 20-Year-Old Snom 360 Office Phone

This post is dedicated to my ADD and getting sidetracked at every possible step. A while back, I was given several VoIP phones that were phased out at my old job, among which were two Snom 360 Business phones from 2005. My original plan was to set up an Asterisk PBX with the phones I’d collected. But then, while upgrading the firmware on one of the Snom 360s, I had a better idea. Since this phone had a screen and a keyboard … could I get Doom running on it?

Homelab & Self-Hosting

Debian testing kernel update snafu

I have a few Linux machines (one Linux box at home, and a few VPS) running Debian testing (currently Forky). In the past few days, its version of Linux kernel was upgraded to 6.19.6+deb14, then a few days later upgraded again to 6.19.6+deb14+1. And that caused some problems. Usually kernel upgrades on Debian are trivial. After the new kernel is installed, grub will be updated to have both, with the newer one being the default one. Then you remote reboot the machine, and after it rebooted int...

Search Engines

Google Reader API in WordPress Reader

↬activitypub.blog/2026/05/05/radical-speed-month-the-reader-meets-the-fediverse/ Another exciting project from Radical Speed Month! Jeremy Herve and Matthias Pfefferle are working on the WordPress Reader feed aggregator. The first thing mentioned is something I’m very excited about. They are adding the Google Reader API so you can use third-party reader apps to view your subscriptions. I use NetNewsWire with FreshRSS as the backend sync system. This means I’ll be able to add WordPr...

Computer Networks

Africans Are Turning to Starlink

Article URL: https://www.economist.com/middle-east-and-africa/2026/07/02/africans-are-turning-to-starlink Comments URL: https://news.ycombinator.com/item?id=48779977 Points: 102 # Comments: 92

Statistics and Probability

Giant trees have no trouble pumping water to top branches

Article URL: https://news.exeter.ac.uk/faculty-of-environment-science-and-economy/giant-trees-have-no-trouble-pumping-water-to-top-branches/ Comments URL: https://news.ycombinator.com/item?id=48780870 Points: 70 # Comments: 32

AWS

What does privatization of the US Postal Service mean?

Article URL: https://phenomenalworld.org/analysis/unstitching-america/ Comments URL: https://news.ycombinator.com/item?id=48781433 Points: 12 # Comments: 3

LLM Evaluation

I am a smolweb advocate and, sometimes, I use LLMs.

I am a smolweb advocate and, sometimes, I use LLMs. 2026-05-02 19:15 I spend a lot of time thinking about simplicity. Fewer dependencies, lighter pages, tools that do one thing well. So yes, it might look strange that I also spend time talking to large language models. Let me explain where I draw the line, and why I think the contradiction is smaller than it appears. What I avoid I do not use LLMs to generate images, musics or videos. Not because I am against creativity, but because that kind...

Distributed Systems

Agent Coordination Is a Distributed Systems Problem

AI agent sessions are distributed processes: private state, independent failure, concurrent access to shared resources. Event sourcing gives sessions durable history; CRDTs give them convergent merge, with correctness guarantees that are purely algebraic, requiring no network model.

WebAssembly

A Calculator (4): The Framework

For as long as I can remember, I played with LEGOs. What fascinated me the most is that the same handful of brick types could build anything – the trick was not in the bricks but having an imagination or a plan that told you which brick goes where. This project works the same way: a single set of sources, a good plan, and multiple different ways to build and test it in. This post is about those environments and how they fit together. The Same Code Everywhere The central idea of...

Web Application Security

More Fake Mastodon Signups

On 2026-05-30, the Mastodon server I run started getting a flood of implausible signup requests. We think these are likely bots because our server rules and signup form clearly tell users to talk about their interest in gay leather. Most people sign up with something like “42 yo levis enthusiast into piss” or “Hi! I’m Snoofles the pup! I love bones and being a good girl for Madam!”. Instead the applications are either friendly, generic text… I value online communities that are mo...

Startups and Venture

Getting Paid by Flat Rate Movers

Back in 2023, I hired Flat Rate Movers (A.K.A. Flat Rate Moving) for an interstate move. They subcontracted to a third party who showed up under-staffed, under-equipped, and very confused; the whole mess wound up causing a good deal of damage to my belongings and home. I filed a claim with Flat Rate and also requested they issue a partial refund. They refused to talk to me or their insurance company, and after six months of calling, emailing, and writing, I got overwhelmed by other life strug...

WebRTC

The Kyle Kingsbury Podcast Podcast - Episode 2 - Dave Rossi

This video is brought to you by PodPitch, the AI-powered platform for PR experts. PodPitch is the first and only software that finds, writes, and sends pitches to podcast hosts from your actual email address. Whether or not you’re already pitching podcasts, PodPitch will make sure you get podcast bookings – guaranteed. And so long as PodPitch’s AI keeps confusing me with Kyle Kingsbury, MMA fighter and famous podcast host, some of those bookings… just might be with me. My name is Kyle...

Artificial Intelligence

Yes, AI is intelligent. Prove me wrong.

It must be a sign of how terrified people are of Modern-AI, and running out of arguments to decry it, that we now read and hear, ever more often, pronouncements that “it is not intelligent”. They come from the many self-appointed great minds who pontificate about AI these days, as well as some truly great ... Read more The post Yes, AI is intelligent. Prove me wrong. appeared first on Bertrand Meyer's technology+ blog.

C++

In Memoriam: Peter G. Neumann

One of the great applied computer scientists, Peter G. Neumann, died on May 17. There have already been obits published, including in the New York Times. I knew Peter since at least 1992, and I’m honored that he considered me one of his colleagues and friends, even staying overnight at my house once. And that in itself shows another facet of his personality—while he had very strong opinions on technical subjects (and other things—for example, he did not think that Shakespeare wrote the...

Anthropic

The Future of Everything is Lies, I Guess: Psychological Hazards

Table of Contents This is a long article, so I've broken it up into a series of posts, listed below. You can also read the full work as a PDF or EPUB. Introduction Dynamics Culture Information Ecology Annoyances Psychological Hazards Safety Work New Jobs Where Do We Go From Here Previously: Annoyances. Like television, smartphones, and social media, LLMs etc. are highly engaging; people enjoy using them, can get su...

Linux Kernel

Kali Linux 2025.4 Review

This is a high-level review of Kali Linux, a specialized Linux distribution built for security professionals and enthusiasts. Designed for penetration testing, security research, and other cybersecurity tasks, Kali Linux... The post Kali Linux 2025.4 Review first appeared on Anthony the Tinkering Explorer.

JVM

JStack by Command String

This has been bugging me for years: you often run a JVM by a shell script wrapper, then want to jstack it to figure out what it’s doing, but can’t figure out what PID to ask for. Running jps gives remarkably unhelpful output, especially for tools like Leiningen. I wrote a hacky little Ruby script to dig into the process tree of everything matching a given pattern, find any JVMs those processes spawned, and hit the highest numbered one (presumably the last one started) with jstack. This is...

AI Agents

AI agent as a teaching assistant – an experiment

I have always been experimenting with how LLMs can help me learn fundamental programming concepts. As agents become more powerful, the fundamentals only increase in relevance. However, a recent study has shown how using coding agents impairs learning. The study goes on to show that the manner in which agents are used can either contribute to or impair learning. I see agents as both the problem and the antidote, and I want to learn to use them the right way. About a year back, I learnt some f...

LLM Evaluation

AI Evals Explained: Evaluating LLM Outputs and the challenges involved

If you’ve been following news on technical developments in AI, you’d have probably seen the term ‘evals’ suddenly showing up everywhere. In this post, we’ll unpack AI evaluations by comparing them with what we already know about software testing and proposing some ideas on how LLM based systems can be evaluated. Every business is rushing to be an AI business. AI Adaption today far outpaces trust, as indicated by the DORA state of AI assisted software development report from 2025, w...

Testing

Practicing Playwright: API Testing, Intercepting Network Requests, and Mocking APIs

How would you intercept a network request and use the data for assertions? Mock a network request using those assertions? And make sure that all data is loaded in the UI before making your assertions, and that all tests can pass when run? We will be walking through Butch Mayhew's code that answers all of these questions, part of his LinkedIn Learning course: Playwright Essential Training. We will be examining the shopping cart test site PracticeSoftwareTesting.com and looking at code on But...

CVE and Exploit Development

Linux CVE assignment process

As described previously, the Linux kernel security team does not identify or mark or announce any sort of security fixes that are made to the Linux kernel tree. So how, if the Linux kernel were to become a CVE Numbering Authority (CNA) and responsible for issuing CVEs, would the identification of security fixes happen in a way that can be done by a volunteer staff? This post goes into the process of how kernel fixes are currently automatically assigned to CVEs, and also the other “out of ...

Software Engineering

The Quiet Grind: Why Talent is the Least Interesting Thing About You

There is a persistent myth in software engineering that we all quietly worship: the myth of the "natural."We love the stories of the savant who can architect a billion-dollar app in their dorm room. It makes for great headlines. But if you spend enough time in this industry, staring at a terminal at 2:00 AM trying to figure out why your code keeps failing, you realize something sobering.Talent will only get you so far. In fact, relying on talent is usually a trap.Talent gets you through the f...

Observability

528: Goldfish Chunks

Tyler Hoffman returns to the show to discuss diagnostics and observability data in embedded systems. We catch up on his life after startup acquisition, explore the hows and whys of keeping product data separate from operational data, and consider the realities of fleet management at scale.  Tyler is the co-founder of Memfault. Memfault was acquired by Nordic Semiconductor about a year ago. While Nordic has nRF Cloud as a smaller scale solution for Nordic devices (~100 devices), Memfault will...

AI Agents

Week notes 17

A heavy week on the docs side. Two things shipped that I had been chewing on for a while, and a couple of small skills came together. Some reading and writing on the side too. - 🧪 Built a docs-ja-translator skill and landed the Japanese tutorial pilot at work. The skill takes an existing MDX document from Expo tutorial, mirrors it under pages/ja/