Privacy
Privacy
Privacy
Web Application Security
submitted by /u/digital_n01se_ [link] [comments]
Generative AI
SwiftUI 3D is Flat SwiftUI looks like it does 3D. rotation3DEffect takes an axis, an anchor, an anchorZ, and a perspective parameter. projectionEffect takes a full ProjectionTransform, and ProjectionTransform can even be initialized directly from a CATransform3D. A custom GeometryEffect hands you the view’s size and lets you return any projection matrix you can compute. Pose one view with these and it looks convincingly, beautifully three-dimensional. So build a cube. Six faces, one shared spa
i was thinking about how dial up is basically your phone literally making sounds to your compute, which the computer hears and translates into data. could you design a system that used multiple phone speakers and multiple microphone pickups to simultaneously get dial-up internet info to speed it up? if so, how many phone receivers would it take to get modern internet speeds? submitted by /u/gmanflnj [link] [comments]
I designed a distributed observer system for fleet-scale infrastructure safety in an industrial context (the implementation is proprietary, but the paper describes the convergence at structural level). Think: something that watches a large execution platform across multiple independent trust boundaries and halts everything if it detects compromise. After completing the design, I realized the architecture had independently converged to the same solutions biology uses: heartbeat liveness signaling
I recently had an idea that is it possible to make a software service which could help me search files from my files system though context of content inside the files. So like i can search "where is the file which contained x thing" and get would a list of files that would match my question. So I don't want sear or keywords but ch by file name context. Also for all types of files like iamge, text, video, audio, code etc So I kept thinking about it and knew that the answer lied within vector sear
submitted by /u/aibellvega [link] [comments]
Agentic Commerce and Payments
xAI
Git
Comments
FinOps
One engineer at Rootly added lifecycle policies to our ECR repositories. 95% of them had no cleanup policy. Container image storage was trending from $3K to $7.6K per month. A few PRs later, we were saving roughly $44K a year. Their reward? A thumbs-up emoji in Slack.
If you have ever built a RAG pipeline, you have probably faced the same awkward problem: BM25 returns a list of documents with scores like 18.3, your vector index returns another list with cosine similarities between 0 and 1, and somebody on the team asks the obvious question — how do we merge these into one ranking? The naive answer (“normalize and add them up”) is wrong in interesting ways. The good answer is a sixteen-year-old paper with a one-line formula.
It’s been a minute. But I’m back, and this one’s a bit different. So there’s this cafe I go to a lot. Not gonna say which one because knowing my luck, all three of my readers will show up and ruin the vibe. But yeah, it’s my usual spot. Good coffee, decent wifi, the kind of place where you can just lock in for hours. The Setup About a week ago, me and my friends were there. We had coursework due the next day, so we were doing what any responsible undergrads do, leaving it to the abs...
CVE and Exploit Development
The last few weeks have been quite busy with vulnerabilities that affect all sort of operating systems. It’s the age of AI, and AI tools help identify yet another class of security vulnerabilities. Several of those vulnerabilities are released while the updates are not ready yet. There exist mitigations though, and it’s important to do the mitigations until the package updates are ready. We are looking into the ssh-keysign-pwn security vulnerability. Here, a unprivileged process can d...
AGI and AI Safety
Earlier this year a new social network emerged, gaining notoriety due to its target user base: bots, or rather AI agents. The platform's name, "moltbook" originating from the AI assistant tool, Molt (formerly Clawdbot, now OpenClaw). Started by Matt Schlicht, moltbook acts as a central hub where AI agents are able to post, comment, and follow one another. Discussion topics range from AI agents sharing about what they do for their human, to complex existential and philosophical points of vie...
Multimodal AI
Your Multimodal Model Can See the Math Problem But Forgets How to Solve ItTL;DR — Multimodal AI models with Mixture-of-Experts architecture can read text from images perfectly but somehow fail at reasoning tasks they'd solve easily if you just typed the same text. The problem? The image distracts the routing system from activating the right "expert" neurons.What It IsPicture this: you show a vision-language model a screenshot of a math word problem. It reads every number correctly, understa...
Build once, deploy everywhere. Skills are the universal way to teach AI agents how to do your team’s work. What problem do skills solve?# AI agents are increasingly capable, but they lack the context they need to do your work reliably. They do not know your team’s conventions, your internal tools, your deployment process, or your testing strategy. Every time someone types a long prompt explaining how to “run our specific linting pipeline” or “generate a migration for our ORM setu...
Zig
I am currently on a side quest to write some Zig code, or more specifically: take some C++ code that is written in a I-can’t-believe-it’s-not-C style and turn it into Zig. This entire adventure started with a curiosity for using Zig’s build system. (Verdict so far: I like it!) I...
Anthropic
How Claude Code enforces permissions with deterministic code, not model inference. The one LLM-based path is internal-only, fail-closed, and stripped from the public package.
Zig
I was recently overcome by the idea of porting some C code of mine to Zig. In the process, I think I learned a thing or two about situations in which Zig is struggling to replace C for me. The short version is: Zig is pleasant until you need lots...
It is, and by 2FA I mean two-factor authentication and, by extension, Multi-Factor Authentication.
Readable Theme abmurrow Thu, 25 Jun 2026 - 11:11
A lightweight, self-hosted pastebin and diff viewer built with Go.
Drupal As A Service: A Year In Open Source abmurrow Sat, 11 Apr 2026 - 10:02
Article URL: https://chenliu-1996.github.io/projects/LM-Dispersion/ Comments URL: https://news.ycombinator.com/item?id=48780826 Points: 22 # Comments: 5
AI Hardware
OCaml
Jane Street is known for being an OCaml shop, but for years now Python has been our second major programming language, acting as the primary tool for data analysis and (especially importantly these days) machine learning. Most of our traders and researchers think and write in Python, even as the majority of our infrastructure is written in OCaml.
The high-velocity AI agent orchestration framework, natively optimized for Antigravity.
AI Agents
TinyClaw is a self-hosted AI agent platform for teams that want more control without turning setup into a project of its own.
Extra hot chocolate, with the addition of pepper.
I love the concept of radio communication; from playing with 27mhz “walkie talkies” as to kid, to CB and LMR as a teen, and then finally licensed amateur radio as an adult. I’m just a nerd; learning about and experimenting with radio frequencies is just plain fun. The Ragchew The fact that I can communicate with stations across the country and around the world is fascinating… But I’ve found that I just don’t like actually talking on the radio. It’s not that I’m anti-social, I ...
It all started with mxmap.ch , then someone created mxmap.nl and someone else - mxmap.be . The results are similar. European municipalities use US cloud services, leaking citizen data to Microsoft, Google and Amazon.
Writing my own text editor, and daily-driving it
This will just be a quick post to share the cable I built for interfacing PC audio with my Xiegu G90 for digital radio modes. Following the pin out provided in the G90 manual, I spliced a Mini DIN8 connector to a TRRS plug, which I can then plug into a tiny USB soundcard (as pictured) Mini DIN8 TRRS AF In Tip Not Connected Ring ...
I always hosted my own mail, both for myself and for the few businesses I run throughout my career. Once in a while I would offer the family to use my email infrastructure, with ample storage space and cool domain...
A variation on a traditional Dutch winter dish.
Can IPv6 play a role in resisting internet censorship? Background Earlier this week a user on the Fediverse noticed that a website titled “w-social.eu,” recently went offline. Looking into its records, it appears that w-social.eu was a small typo-squatting website that encouraged visitors to use Mastodon if they wanted a free, trusted, and transparent social media service, instead of the highly controversial and intentionally anti-privacy platform, “W”. Using historical DNS records, h...
Im Auftakt dieser Serie habe ich die agentische Engineering-Pipeline aus der Vogelperspektive für den SDLC beschrieben, die ein neues Feature durch sechs Phasen führt, von der lesenden Kontext-Extraktion bis zur protokollierten Umsetzung, und zwischen den Rollen jeweils einen Prüfpunkt setzt. Dieser Beitrag steigt in die erste Rolle hinab, in die Business-Analyse. Wenn sie falsch arbeitet, ist alles, was danach kommt, technisch sauberer Aufwand an der falschen Sache. Ein Fehler in dieser R...
AEGIS, mein experimentelles Projekt, prüft jede Aktion eines KI-Agenten gegen ein formales Regelwerk, bevor sie ausgeführt wird. Bleibt der Guard nicht erreichbar oder ist die Aktion nicht eindeutig zu beurteilen, wird nicht gehandelt. Die Architektur adressiert einen Punkt der Debatte um sogenannte Agentic AI, der oft im Hintergrund bleibt: Sprachmodelle wie GPT, Claude oder Llama führen selbst keine Aktionen aus. Sie schlagen Werkzeugaufrufe vor. Die tatsächliche Ausführung übernimmt ...
The price of software is going to zero. AI assisted programming makes it much faster and cheaper to build software. On the scale of the software market this means that most of what is currently consumer paid software will become free software. Prior to AI only large hyperscalers could afford to offer truly free software. Gmail has been free since its inception. Fastmail charges $60/year for a comparable service. Many SAAS companies have offered ‘free’ tiers over the years. Resend offers 3...
Vim and Neovim
Neverwinter Nights was released by SSI and America Online in March, 1991 and discontinued on July 19, 1997. This game was an adaptation of SSI's Gold Box engine to support online multiplayer. The Advanced Dungeons and Dragons 1st Edition ruleset were used as a basis for the engine. It is notable as the first graphical massively multiplayer online role playing game. The engine on which it was built was designed for a single player, so how did it work as a multiplayer game? This blog will attem...
Shortly after I joined MongoDB research, we ran a TLA+ workshop. It was a two-day ordeal. We had a 1.5 days of instruction on TLA+ and syntax, after which we tried to help people get started with modeling. People liked learning about TLA+ on the first day, but except for a person or two, we didn't get anyone onboarded with TLA+ modeling. It was too much to offload on people and ask them to level up in a short time frame.Well, two years after that first workshop, on May 11th, 2026, we ran a se...
Memory and Hardware
The laws and customs pertaining succession to the throne in the Kingdom of England were, in normal times, simple. The eldest legitimate surviving son of the monarch automatically succeeded his father on the throne after his father's death. If the monarch did not have surviving sons but had surviving brothers, then the eldest of those would rule. The formal name for this succession method is agnatic primogeniture. But what if the King had no surviving legitimate male heirs? Then things became ...
Hardware Design
While the Apple IIgs could connect to a composite display, Apple released a high-quality color RGB monitor specifically designed for the IIgs. This monitor was called the Apple Color RGB Monitor, A2M6014. It was the only color monitor Apple ever released which could accept full analog RGB video signals at the standard 240p/480i resolution (using a 15.7KHz horizontal line frequency). I have recently acquired a full Apple IIgs setup, and while the IIgs needs some repair to its mainboard the mon...
Last week, I traveled to San Jose to attend the ACM CAIS conference. On Day 0, I gave a short talk at the Supporting our AI Overlords (SAO) workshop. And yes, I promise to write a summary of our paper, "A Case for Simulation-Driven Resilience in Agent-First Data Systems" soon! To start with an overall impression of the conference: much of the work presented felt exploratory and anecdotal. Since the compound AI space is still so new, many work seemed to share on-the-ground best practices that...
In 1957, Parkinson postulated his "Law of Triviality" using a fictitious committee reviewing plans for a nuclear power plant. The reactor design gets 10 minutes because nobody understands it, so nobody argues. The bike shed gets 45 minutes because everyone has opinions about the paint color.I feel like we are living this committee meeting at scale every day.LLMs are already better engineers than most of us. They are better at formal methods, and better at reasoning under pressure than most pe...
I listened to this book as an audiobook through the Libby app, which basically brings your public library to your phone.The Thinking Machine is about Jensen Huang and the rise of Nvidia from graphics chips to AI dominance. The author, Stephen Witt, is a long-form tech journalist. His writing is nice and clear. But it does not have a distinctive voice. I kept thinking of Michael Lewis, whose books have more narrative personality and rhythm.The book is written for a lay audience. Technical id...
This is part of our series going through OSTEP book chapters. The OSTEP textbook is freely available at Remzi's website if you like to follow along.This chapter extends the CPU virtualization playbook to memory. It's the same recipe: let the program run directly on the hardware, but interpose at carefully chosen points so the OS retains control. For memory, this happens at every memory access. Every load, store, and instruction fetch gets translated by hardware from a virtual to a physical ad...
The transformative power of LLMs in coding has been irrefutable, and it feels like we are living through a magical computing renaissance. On the socials, we hear impressive numbers of lines of code generated, features delivered, and bugs fixed. But, the macroeconomic indicators seem to be still lagging. Heck, if you talk with an engineering manager, you find that their product shipping dates haven't miraculously compressed by a factor of five, either.This paper just landed 10 days ago. It is ...
This post is dedicated to my ADD and getting sidetracked at every possible step. A while back, I was given several VoIP phones that were phased out at my old job, among which were two Snom 360 Business phones from 2005. My original plan was to set up an Asterisk PBX with the phones I’d collected. But then, while upgrading the firmware on one of the Snom 360s, I had a better idea. Since this phone had a screen and a keyboard … could I get Doom running on it?
Homelab & Self-Hosting
I have a few Linux machines (one Linux box at home, and a few VPS) running Debian testing (currently Forky). In the past few days, its version of Linux kernel was upgraded to 6.19.6+deb14, then a few days later upgraded again to 6.19.6+deb14+1. And that caused some problems. Usually kernel upgrades on Debian are trivial. After the new kernel is installed, grub will be updated to have both, with the newer one being the default one. Then you remote reboot the machine, and after it rebooted int...
Search Engines
↬activitypub.blog/2026/05/05/radical-speed-month-the-reader-meets-the-fediverse/ Another exciting project from Radical Speed Month! Jeremy Herve and Matthias Pfefferle are working on the WordPress Reader feed aggregator. The first thing mentioned is something I’m very excited about. They are adding the Google Reader API so you can use third-party reader apps to view your subscriptions. I use NetNewsWire with FreshRSS as the backend sync system. This means I’ll be able to add WordPr...
Computer Networks
Article URL: https://www.economist.com/middle-east-and-africa/2026/07/02/africans-are-turning-to-starlink Comments URL: https://news.ycombinator.com/item?id=48779977 Points: 102 # Comments: 92
Statistics and Probability
Article URL: https://news.exeter.ac.uk/faculty-of-environment-science-and-economy/giant-trees-have-no-trouble-pumping-water-to-top-branches/ Comments URL: https://news.ycombinator.com/item?id=48780870 Points: 70 # Comments: 32
AWS
Article URL: https://phenomenalworld.org/analysis/unstitching-america/ Comments URL: https://news.ycombinator.com/item?id=48781433 Points: 12 # Comments: 3
PostgreSQL
Parallel Append spreads workers across partitions or UNION branches simultaneously, not sequentially.
I am a smolweb advocate and, sometimes, I use LLMs. 2026-05-02 19:15 I spend a lot of time thinking about simplicity. Fewer dependencies, lighter pages, tools that do one thing well. So yes, it might look strange that I also spend time talking to large language models. Let me explain where I draw the line, and why I think the contradiction is smaller than it appears. What I avoid I do not use LLMs to generate images, musics or videos. Not because I am against creativity, but because that kind...
AI agent sessions are distributed processes: private state, independent failure, concurrent access to shared resources. Event sourcing gives sessions durable history; CRDTs give them convergent merge, with correctness guarantees that are purely algebraic, requiring no network model.
WebAssembly
For as long as I can remember, I played with LEGOs. What fascinated me the most is that the same handful of brick types could build anything – the trick was not in the bricks but having an imagination or a plan that told you which brick goes where. This project works the same way: a single set of sources, a good plan, and multiple different ways to build and test it in. This post is about those environments and how they fit together. The Same Code Everywhere The central idea of...
On 2026-05-30, the Mastodon server I run started getting a flood of implausible signup requests. We think these are likely bots because our server rules and signup form clearly tell users to talk about their interest in gay leather. Most people sign up with something like “42 yo levis enthusiast into piss” or “Hi! I’m Snoofles the pup! I love bones and being a good girl for Madam!”. Instead the applications are either friendly, generic text… I value online communities that are mo...
Back in 2023, I hired Flat Rate Movers (A.K.A. Flat Rate Moving) for an interstate move. They subcontracted to a third party who showed up under-staffed, under-equipped, and very confused; the whole mess wound up causing a good deal of damage to my belongings and home. I filed a claim with Flat Rate and also requested they issue a partial refund. They refused to talk to me or their insurance company, and after six months of calling, emailing, and writing, I got overwhelmed by other life strug...
This video is brought to you by PodPitch, the AI-powered platform for PR experts. PodPitch is the first and only software that finds, writes, and sends pitches to podcast hosts from your actual email address. Whether or not you’re already pitching podcasts, PodPitch will make sure you get podcast bookings – guaranteed. And so long as PodPitch’s AI keeps confusing me with Kyle Kingsbury, MMA fighter and famous podcast host, some of those bookings… just might be with me. My name is Kyle...
It must be a sign of how terrified people are of Modern-AI, and running out of arguments to decry it, that we now read and hear, ever more often, pronouncements that “it is not intelligent”. They come from the many self-appointed great minds who pontificate about AI these days, as well as some truly great ... Read more The post Yes, AI is intelligent. Prove me wrong. appeared first on Bertrand Meyer's technology+ blog.
One of the great applied computer scientists, Peter G. Neumann, died on May 17. There have already been obits published, including in the New York Times. I knew Peter since at least 1992, and I’m honored that he considered me one of his colleagues and friends, even staying overnight at my house once. And that in itself shows another facet of his personality—while he had very strong opinions on technical subjects (and other things—for example, he did not think that Shakespeare wrote the...
Table of Contents This is a long article, so I've broken it up into a series of posts, listed below. You can also read the full work as a PDF or EPUB. Introduction Dynamics Culture Information Ecology Annoyances Psychological Hazards Safety Work New Jobs Where Do We Go From Here Previously: Annoyances. Like television, smartphones, and social media, LLMs etc. are highly engaging; people enjoy using them, can get su...
Linux Kernel
This is a high-level review of Kali Linux, a specialized Linux distribution built for security professionals and enthusiasts. Designed for penetration testing, security research, and other cybersecurity tasks, Kali Linux... The post Kali Linux 2025.4 Review first appeared on Anthony the Tinkering Explorer.
This has been bugging me for years: you often run a JVM by a shell script wrapper, then want to jstack it to figure out what it’s doing, but can’t figure out what PID to ask for. Running jps gives remarkably unhelpful output, especially for tools like Leiningen. I wrote a hacky little Ruby script to dig into the process tree of everything matching a given pattern, find any JVMs those processes spawned, and hit the highest numbered one (presumably the last one started) with jstack. This is...
I have always been experimenting with how LLMs can help me learn fundamental programming concepts. As agents become more powerful, the fundamentals only increase in relevance. However, a recent study has shown how using coding agents impairs learning. The study goes on to show that the manner in which agents are used can either contribute to or impair learning. I see agents as both the problem and the antidote, and I want to learn to use them the right way. About a year back, I learnt some f...
If you’ve been following news on technical developments in AI, you’d have probably seen the term ‘evals’ suddenly showing up everywhere. In this post, we’ll unpack AI evaluations by comparing them with what we already know about software testing and proposing some ideas on how LLM based systems can be evaluated. Every business is rushing to be an AI business. AI Adaption today far outpaces trust, as indicated by the DORA state of AI assisted software development report from 2025, w...
How would you intercept a network request and use the data for assertions? Mock a network request using those assertions? And make sure that all data is loaded in the UI before making your assertions, and that all tests can pass when run? We will be walking through Butch Mayhew's code that answers all of these questions, part of his LinkedIn Learning course: Playwright Essential Training. We will be examining the shopping cart test site PracticeSoftwareTesting.com and looking at code on But...
CVE and Exploit Development
As described previously, the Linux kernel security team does not identify or mark or announce any sort of security fixes that are made to the Linux kernel tree. So how, if the Linux kernel were to become a CVE Numbering Authority (CNA) and responsible for issuing CVEs, would the identification of security fixes happen in a way that can be done by a volunteer staff? This post goes into the process of how kernel fixes are currently automatically assigned to CVEs, and also the other “out of ...
There is a persistent myth in software engineering that we all quietly worship: the myth of the "natural."We love the stories of the savant who can architect a billion-dollar app in their dorm room. It makes for great headlines. But if you spend enough time in this industry, staring at a terminal at 2:00 AM trying to figure out why your code keeps failing, you realize something sobering.Talent will only get you so far. In fact, relying on talent is usually a trap.Talent gets you through the f...
Observability
Tyler Hoffman returns to the show to discuss diagnostics and observability data in embedded systems. We catch up on his life after startup acquisition, explore the hows and whys of keeping product data separate from operational data, and consider the realities of fleet management at scale. Tyler is the co-founder of Memfault. Memfault was acquired by Nordic Semiconductor about a year ago. While Nordic has nRF Cloud as a smaller scale solution for Nordic devices (~100 devices), Memfault will...
AI Agents
A heavy week on the docs side. Two things shipped that I had been chewing on for a while, and a couple of small skills came together. Some reading and writing on the side too. - 🧪 Built a docs-ja-translator skill and landed the Japanese tutorial pilot at work. The skill takes an existing MDX document from Expo tutorial, mirrors it under pages/ja/