Per-Tool Sandboxing for AI Agents: Why One Sandbox Is Not Enough
Enterprise Linux Kernel Solutions for optimal performance and reliability.
Per-Tool Sandboxing for AI Agents: Why One Sandbox Is Not Enough
Enterprise Linux Kernel Solutions for optimal performance and reliability.
the 90 day disclosure policy is dead
TLDR The 90 day responsible disclosure window was built for a world where bug finders were rare and exploit development was slow. That world is gone. LLMs have compressed both timelines to near-zero. I have seen it first hand, and so has everyone else paying a…
Recent advances in general models — ChatGPT and Claude — have started to autonomously solve open mathematical problems. For example, Erdős 1196, Tim Gowers’s PhD student problems, OpenAI’s Ramsey numbers result. There are a lot of caveats — were the problems w…
One of the things we didn't expect when building CNTR was a pattern we kept seeing in CVs. Incredible technical or academic career starts, strong first steps — and then a shift into management roles. Followed by the loss of the technical edge. We saw it again …
On a 2006 email from my dad's colleague, the parser I wrote in response, and what I got paid in.
In this post I'd like to utilize my experience with freediving as an excuse to talk about a bunch of seemingly contrasting qualities and emotions, which together — I feel — illustrate some deeper aspects of experiencing humanity. For me, at least, freediving h…
AI coding agents are amazing, but lean on them too hard and your engineering skills atrophy. Aviation already lived through this. Here's what we can steal from how they fixed it.
A series of unfortunate events.
A tcpdump capture led to a closer look at the Marstek B2500-D cloud endpoint: plain HTTP, AES-128-ECB, and a static key.
The submarine is a surprisingly ancient technology—at least in its early, primitive forms. The idea is quite simple, that a well-enough-sealed boat ought to be able to submerge and resurface. It's the practicalities that make the whole thing difficult. It is g…
OpenAI winding down fine tuning is an interesting development and one to watch.
When I was 18 I started studying physics at University and got my first real taste of “the struggle”.
Simon Ramstedt, 2026-04-09 · last updated 2026-04-24
Looking for a summer coding project? Try making a programming language!
Detecting PostgreSQL optimization issues with deterministic analysis For years, I kept seeing the same PostgreSQL problems in production: missing foreign key indexes stale statistics unused indexes datatype mismatches sequences approaching exhaustion postgres …
It has been a year and a half since I quit my job to start a consultancy. It took me years to build up to quitting, and I had not only a chip on my shoulder, but to quote Seth Sentry, “the guac and the dip and the salsa.” The people that read this blog probabl…
The 12-month engineering plan I built six months ago is now irrelevant. Notes on what changes when leadership has to be fullstack.
User stories, epics, story points, planning poker, velocity, Fibonacci — none of it is in the Scrum Guide. Ten biggest myths and what to do instead.
Local AI models should be the default.
Most teams use agents as glorified autocomplete. A framework for assessing and raising both codebase readiness and team adoption — the two dimensions that have to move together.
Application performance is not something engineers can optimize in isolation. It is a product decision, a requirement and a trade-off that has to be made explicit.
The most widely adopted computer language in history, COBOL is now causing a host of problems. It's also dangerously difficult to remove.
Stephen Brennan's personal website and blog.
Bambu Labs controversy heats up.
Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API are very similar. Apple brought it to the web via Privacy Pass…
Wishlist HomeGrown on Steam: https://store.steampowered.com/app/1894560/HomeGrown/ Play my previous game "Equilinox": https://store.steampowered.com/app/853550/Equilinox/ Support the channel on Patreon and get access to the game & code for Homegrown, the cit…
France's parliament just endorsed the one idea every cryptographer on earth has already debunked and they're calling it a compromise.
In Many anti-AI arguments are conservative arguments I argued that left-wing anti-AI sentiment1 is partly a backlash to two unrelated events around the rise of ChatGPT: the crypto mania of 2022 and the pro-Donald-Trump push many big tech CEOs made in 2024. If …
MacOS Web Server written entirely in ARM64 assembly - imtomt/ymawky
When I finished reading Peter Naur’s Programming as Theory Building my first thought was “How come nobody ever told me to read this?” I ended up reading it multiple times, as I attempted to collect my thoughts on why it makes so much sense.
My blog, where I attempt to collect my thoughts and share the occasional interesting topic with others
🗓️ 2026-05-08 • Tagged /web, /opinions, /meta=only
I like the Internet. I am old enough to remember the pre-Internet era and despite the younger generations pining for those simpler days, I was there. Paper maps were absolutely horrible, just you and a compass in your car on the side of the road in the middle …
GrapheneOS fixes Android VPN leak Google refused to patch
GrapheneOS has released a new update that fixes a recently disclosed Android VPN bypass flaw capable of leaking a user’s real IP address.