33 links from the last 24 hours · 24 October 2026
I decided to make my own container runtime for fun, and even though I’m still early on, I’ve learned that Docker is weird. Here’s some weird things I learned about Docker.
Despite massive investments and widespread hype around artificial intelligence, the technology has delivered zero financial payoff to corporate America outside of tech. Subscribe for daily updates.
Indian government sites are serving revoked eMudhra certificates
On 17th October, eight eMudhra intermediate CAs chaining to emSign ECC Root CA - G3 were found to have trivially recoverable private keys. They were revoked the next day, and Mozilla and Chrome are now distrusting the G3 root. Separately, on 19th October eMudh…
A PHP security challenge. Find the hidden bitcoin key. First person to get the wallet wins.
Steve Blank Elon Musk Just Gave Europe a Reason to Replace American Technology
I’ve been in London for the last month and have heard policymakers react to the wake up call Elon Musk just delivered. The decision of the U.S. to shut off intelligence and throttle the military v…
In September 2014 I published a short post announcing rqlite. The idea was simple: take SQLite, put a Raft log in front of it, and replicate every write to a cluster so that the loss of a node did not mean the loss of the data. The source went on GitHub that s…
GrapheneOS (@GrapheneOS@grapheneos.social)
@maya@gs.lexinova.eu @OmegaPolice@hachyderm.io @britter@chaos.social Most banking apps work on GrapheneOS but many have memory corruption bugs and incorrect anti-tampering code requiring our per-app exploit protection compatibility mode toggle. Around 10% of …
A mobile web RTS
Release OBS Studio 33.0.0 · obsproject/obs-studio
33.0 New Features Updated CEF from 127/6533 to 150/7871 [WizardCM] (#13900) This is a massive update to the underlying framework used for browser sources and docks from the July 2024 release to S...
The glorious @xkcdRandom Zig builtin
One of my favorite xkcd comics of all time is Random Number. The image depicts a C function that supposedly returns a random integer, but in reality always returns 4. I was reminded of this wonderful comic a few days ago, due to a security incident where peopl…
The other day I wanted to think about love, confronting some authors (Clarissa Pinkola Estes - short story The Skeleton Woman, Alain de Botton, Eckhart Tolle, Alan Watts, various books on oxytocin ...
My vision-model judge passed and failed the same code. On a newer model it was steadier, so I planted defects in five components and scored them with it and with Cloudflare Clef. The 0.85 pass gate let about half of the defect runs through.
Why Forward-Deployed Engineers Are the Future
Forward-deployed engineers are how businesses will adopt AI. Why SaaS, consultancies and dev shops can't close the gap, and why embedded builders connect business demand with people reskilling for AI.
After my post on undefined behavior in C some people insisted that it’s demonstrably fine, we know what the code will do, and at worst we’ll get a segfault.
We deserve a better agent-human interaction
Agents learned to do the work. The moment where a person decides whether that work is right is still a text box and a yes.
This is a work of fiction. Contemporary and historical descriptions may be inaccurate. Cadence can make mistakes; check important info.
Trusted Everywhere, Impact Everywhere
WebPKI certificate concentration, reliance, sovereign trust, historical CA incidents, and the quantum transition.
Abstract
The Codebase Decides How Small a Change Can Be — Matthew Boston
When dozens of agents merge into one codebase, clean code means fewer shared files, hard boundaries, and explicit contracts.
Write all the code you'll ever need from your phone for $20 per month A Yeti water bottle + a Nike T-shirt + Irish Spring 5 in 1: Body, Face, Shampoo, Conditioner, and 24 Hour Deodorant, or an AeroPress Go Portable Coffee Maker + a three-pack of the Field Not…
Reverse engineering a Beyblade launch tracker
How I spiraled into a new summer hobby
Browser Use for LLMs with a Chrome Extension
I created a chrome extension where any LLM with image input capabilities can browse the web like a human.
The fastest camera feed is no video at all · xydac
Putting the driveway camera on a screen turned into a lesson in why live video is always late. Tuning the player got it from 12 seconds to 5. Swapping video for JPEG snapshots got it to none.
The rise and fall of Jev hype
What can we learn about the hype engine that declared war on rational and critical thinking?
Or, why we’re not seeing mass-exploitation of php2shell yet.
Distributed data, centralized fixes - Miren
Thoughts on structural solutions after a wild week in security.
Your code calls JSON.parse all the time. This tutorial shows what happens inside it, and how to build a JSON parser yourself.
A Farewell To Hubs
Those of you who have read the final sections to the article on Arcan: 10 Years of Online Obscurity know that I am anything but happy with the current state of computing affairs and its trajectory.…
Sharing my experience to get a faster CI: caching, test parallelism, and path filtering took one project's GitHub Actions build from 27 minutes to 4
Dessa - the Conversation Model trained only on speech
You learned to talk by listening. So did Dessa. A research preview of a full-duplex speech model.
26 of 29 CA bundles in critical packages contain roots Mozilla has removed.
Unit tests are not the enemy
An over-reliance on agents writing all tests has led to a backlash on the unit test