Code and Cake - Docker is weird
I decided to make my own container runtime for fun, and even though I’m still early on, I’ve learned that Docker is weird. Here’s some weird things I learned about Docker.
25 links from the last 24 hours ยท 23 October 2026
zigtools: We make free and open-source tools for the @ziglang community.
I decided to make my own container runtime for fun, and even though I’m still early on, I’ve learned that Docker is weird. Here’s some weird things I learned about Docker.
Claude formally proved security properties in the compiled code of 123 open-source libraries. Along the way, it found bugs that had eluded detection for years.
What limit the php2shell exploitation in practice
In 2017 I spent days building the air traffic animation for NBC News' Airplane Mode story. This week I rebuilt it with Claude Opus 5.5 in about 10 minutes and 78k tokens. Here is what changed, and what didn't.
How our judgement shows our perception of reality and how to take control
For a brief generation or two, we clicked.
OpenShell is the safe, private runtime for autonomous AI agents. - NVIDIA/OpenShell
Eight eMudhra CA keys were small enough to guess. eMudhra had cryptographic proof in June 2025 that something was wrong, kept the weak keys in service, and no other layer of WebPKI oversight was positioned to catch it.
Today I got a strange email that turned into an unsettling phishing experiences.
Do you feel spoiled by modern hardware? I know I do. Even the cheapest CPUs have at least 4 cores nowadays, running billions of operations per second. The idea that you could run any software on le…
A system design walkthrough of a real-time short-video recommender, built from what we saw Instagram's web app send, ByteDance's Monolith paper and Meta's Wukong paper.
Powered by blists - more mailing lists
Notes on running Codex in JetBrains Air with Azure OpenAI models.
Scheme is fun and pretty! It could be even more perfect, and that’s what I explore in this post.
An essay for the pragmatic engineer competition
Every vector database is built on one of two shortcuts: walk a graph or sort into buckets and compress. How HNSW, IVF-PQ, ScaNN and DiskANN work, and which of pgvector, AlloyDB, Qdrant, Weaviate, OpenSearch and Vespa ships the one you need.
Dynamic Consistency Boundaries instead of aggregates: how skilj checks a rule that spans a student and a course in one decision, and what it costs.
Intelligence is getting cheaper. Managing it is the challenge.
We tested the Opus nerf hypothesis with LiveNerf. The initial results didn't support it, but the details matter.
Mwmbl is continuing to develop its search engine with new features and ways for the community to get involved. One of these features is Seed Search, which helps improve search results while expanding Mwmbl’s own search index. What is Seed Search? Seed Search h…
Many people are saying that AI will make software faster by rewriting it in faster languages, but this isn’t generally true. Most programs cannot be…
OK well this is a first for me... at 00:44 in this new music video by Dutch alternative rock band De Staat: The visual effects are credited to Matties Grooten …
A public and free DNS service for a better security and privacy
if you’ve ever written C(or c++) on a mac, you’ll know that the so-called gcc is just clang in disguise
eMudhra Limited (BSE: 543533 | NSE: EMUDHRA), a global digital trust company, today announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business.