Today's links

34 links from the last 24 hours · 5 November 2026

Declarative Dragging

Drag-and-drop makes the digital graspable. Horowitz, Blinn & Heer, UIST 2026 Best Paper.

Introducing Images 2.6

Images 2.6 brings faster image generation, GIF creation, more precise editing, and new API controls across ChatGPT, Codex, and the API.

A thousand fewer paths to root

OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.

What's inside one voice packet - mainLog

Twenty milliseconds of speech becomes an 80-byte Opus frame inside a 120-byte packet. Why each header is there, and why one lost packet costs 20 ms over UDP and 80 or more over TCP.

First mistakes as an engineering manager

Almost by accident, I became a manager of a junior. I happened to be the most senior person on the team after the previous lead left, so I agreed to "help." Now I need to figure out how to help my teammate grow - without becoming an embodiment of every bad man…

Prompting Is Programming

The other day I watched a friend of mine, an Ivy League-educated professor in the liberal arts, work with Claude. The conversation went in circles, and they…

Why You Cannot Trust Your Agent (And How to Isolate It)

The rapid integration of AI code agents tools like Claude, Codex, and various internal LLM deployments into our development workflow promises unparalleled productivity. These agents, capable of reading, analyzing, and modifying complex codebases, are revolutio…

Hermes Is Actually Good

For a long time now, I have been skeptical of tools like Hermes and OpenClaw. There are some good reasons for that, and some dumb reasons.

Hibernate lost my update · Bartosz Osipiuk

ACID? Sure, but at the database level, not in the tools on top. How Hibernate makes a partial commit when Spring Boot shuts down – and how to prevent it.

So my ISP was hijacking my DNS

My ISP was tampering with my DNS queries and handing back bogus IP addresses. Here are the misconceptions about DoH, DoT and DNSSEC that followed, and the setup I actually run.

Release: llm 0.37.1

Access large language models from the command-line