*sshole · sshhole.com
openssh on musl linux has been letting people into password-less accounts since 2016.
34 links from the last 24 hours · 5 November 2026
When your database CPU is at 100%, what is it actually doing? Memory stalls, CPU caches, and how radix partitioning makes GROUP BY faster.
openssh on musl linux has been letting people into password-less accounts since 2016.
Drag-and-drop makes the digital graspable. Horowitz, Blinn & Heer, UIST 2026 Best Paper.
Images 2.6 brings faster image generation, GIF creation, more precise editing, and new API controls across ChatGPT, Codex, and the API.
← Back to News page
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.
Twenty milliseconds of speech becomes an 80-byte Opus frame inside a 120-byte packet. Why each header is there, and why one lost packet costs 20 ms over UDP and 80 or more over TCP.
My agents work in dev containers on a host at home. Each container now runs its own T3 Code server, and I pair my devices with it directly, with no account and no relay.
Go 1.27 introduces new encoding/json/v2 and encoding/json/jsontext packages.
Your Cryptography Conspiracy Theory Is Wrong - Dhole Moments
This conversation plays out hundreds of times a day, but (thankfully) only a handful of those involve me: Person: “I have [problem].” Cryptography nerd: “Oh, you probably want to …
Almost by accident, I became a manager of a junior. I happened to be the most senior person on the team after the previous lead left, so I agreed to "help." Now I need to figure out how to help my teammate grow - without becoming an embodiment of every bad man…
A short note on the .xyz TLD’s 1.111B Class domains
The other day I watched a friend of mine, an Ivy League-educated professor in the liberal arts, work with Claude. The conversation went in circles, and they…
The rapid integration of AI code agents tools like Claude, Codex, and various internal LLM deployments into our development workflow promises unparalleled productivity. These agents, capable of reading, analyzing, and modifying complex codebases, are revolutio…
For a long time now, I have been skeptical of tools like Hermes and OpenClaw. There are some good reasons for that, and some dumb reasons.
ACID? Sure, but at the database level, not in the tools on top. How Hibernate makes a partial commit when Spring Boot shuts down – and how to prevent it.
Nov 3, 2026
Agents on a self-hosted 27B model review every PR in our main project. How we made them fit into the team, and what engineers do now that they no longer read most of the code.
An opinionated piece on how AI changes the way developers think, build and verify their work.
What we learned caching a busy Django API in Redis: cache shared data once, pair long TTLs with invalidation you can trust, and fail open when Redis fails.
Why I put a landline back in my house: fewer smartphones, but still reachable, with a vintage T65.
The problem with documentation written by people who know the feature too well.
Our new Residential Proxy Observatory shows residential proxy traffic exiting the White House network: 236 times in 30 days, through 28 public proxy services.
Patterns reappear. Rust, sqlite, and Zig
Have you ever needed to share internet access from Ubuntu to a Raspberry Pi? Here's is how to do it.
My ISP was tampering with my DNS queries and handing back bogus IP addresses. Here are the misconceptions about DoH, DoT and DNSSEC that followed, and the setup I actually run.
The current state of my Robotron AI playing the game at high speed.
An LLM-powered agent for Datasette
Apps that live inside Datasette
Access large language models from the command-line
LLM integration plugin for other plugins to depend on
'It was not a single isolated breach or a simple phishing incident,' exchange says