29 links from the last 24 hours · 13 October 2026
How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck
A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.
vfmaddrnd231pd is a unique instruction from the FMA instruction set. Most instructions in that set have mnemonics like vfmadd231pd, but here rnd means something very specific. The Intel Software Development Manual documents it as: VFMADDRND231PD – Fused Multi…
Our next era of frontier intelligence
Firefox Enterprise
The browser is where work, data, identity, and AI converge. That makes it a critical layer for governance and compliance — and one many enterprise technology stacks still don’t fully cover.
If the agent isn't using my diagnostics library, I could introspect and update AGENTS.md, but there's still a delta, and it'll drift. Instead, I write a pre-commit hook that checks …
C++ futures part 2: The mental model for std::promise, std::packaged_task - The Old New Thing
Building things out of the state.
Vi Hart's Big Navier-Stokes Post | Vi Hart
The first 5 parts get increasingly intense and then part 6 is for fun, as a treat. But feel free to skip around. 1: "Lean? That sounds famil
The Last Answer
Read the non-interactive version.
Much has been said about the DHH keynote that he gave at RailsWorld. To me, it was the voice of a person in an existential crisis, but also a very jaded one. “Look how I don’t care anymore, and you should not care either” is not a great message when you are th…
C++ futures part 1: The mental model - The Old New Thing
Managing a value that is produced later.
Linux creator Linus Torvalds has been known to use AI to help with kernel debugging and outside of the kernel tree has also done some vibe coding with Google's Antigravity
In the tradition started by Colin Percival and Thomas Ptacek, a set of “Cryptographic Right Answers” updated for the accelerated post-quantum transition timeline.
Web app for editing files in a folder
A response to Rich Hickey's "'AI' is Not a Tool": automation and tool use can coexist, and wielding an LLM well requires skill, feedback, and judgment.
There are many like it, but this one is mine.
“Software Factories” have become all the rage recently. I saw one HN comment compare them to the Cambrian explosion of JS frameworks back in simpler times and that’s pretty accurate. Before we go …
A modern web app written in c and served the old way: CGI, SQLite and a single binary. No frameworks, no containers and no regrets.
Now you can ship software you don't understand
Shipping used to require learning how a system works, including the parts nobody wrote down. With agents, it doesn’t.
I built a HOCON conformance suite. It found bugs in the reference implementation.
I have used HOCON in production for years. I like the format because it is readable and it allows config file composition, so it allows simple multi-environment config shared config files overrides minimizing config differences. As a Python developer, my ultim…
I continue to hear this claim made regularly that “nobody knows how large language models work,” and I want to put this claim to rest finally.
Your IP has been reset
Back to square one
On Intelligence and Sentience
I have a conjecture which I’m almost certain is true. Intelligence — as defined as ability to solve open-ended, novel problems — 1Yes it’s my em-dash if at all necessary, is not strictly the same as sentience, which — without defining it — consists of more tha…
Tests and lints tell you the code works. They don't tell you it's written the way your team writes code. Here's how we use a decision model to close that gap at Filed.
Immigration
A border is where the control of one sovereign ends and another’s begins. In the ideal case where individuals are sovereign, borders are in the simplest case just the boundaries of your home.…
AI coding agents generate more code, but not more software
Study finds coding efficiency gains get "absorbed" by human review "bottleneck."
Page not found
Muse Wonder
A frontier model that leads on personal and professional agents
Find all currently running Datasette instances and list their ports
Why aren't AI companies being charged for hacking? - Musing Mortoray
AI companies claim their hacks were unpredictable accidents — but they follow foreseeably from deliberate design choices, and that establishes criminal intent.