Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
We are thrilled to announce the latest release of Gitea v28.0.0. Gitea drops the historical 1. prefix from its version numbers, so this release is 28.0.0 rather than 1.28.0. Highlights include audit logging, bot accounts, HTTPS deploy tokens, user impersonation for administrators, codeowner approval rules, diff file filters, and an Actions queue view. See the changelog for everything else.
18 min · 4,204 words
Browserbase’s Harsehaj Dhami explains Web Bot Auth: cryptographic HTTP message signatures that let AI agents prove identity, while leaving access and reputation decisions to site owners and registries.
5 min · 1,123 words
Deser: Rethinking Rust Serialization
Armin Ronacher revisits Deser, an experimental Rust serialization library that inverts Serde’s visitor recursion into heap-backed sinks/emitters—trading some performance for lossless buffering, composable adapters, XML namespaces, and no stack overflow on deep nests.
2 min · 492 words
OpenClaw Enterprise - The Open Agent Platform
The OpenClaw Foundation announces OpenClaw Enterprise (OCE): an open-source, vendor-neutral control plane for persistent agents with multi-tenancy, hard security boundaries, and governance—developed with Red Hat and NVIDIA after originating at OpenAI.
3 min · 592 words
Yet Another AI Security OSS Externality
Holden Karau recounts working AI-lab vulnerability reports during Apache Spark releases, and why AI security often externalizes cost onto open-source maintainers who lack resources to verify opaque claims.
9 min · 2,135 words
Hugging Face’s Tarek Ziadé explains Serge, a CI agent that finds Transformers failures, reproduces them on GPUs, writes patches, verifies them, and opens PRs—29 merges in ~80 days.
9 min · 2,070 words
Floppy Emu Hardware Failure Analysis Results
Steve digs through years of Floppy Emu QA failures and returns: clock crystals dominate the failure table, with CPLDs, programming misses, and soldering filling out a detailed hardware autopsy.
5 min · 1,165 words
You Said No MCP!Why Pi (pi.dev) brought MCP into the core after years of saying no
Earendil explains why Pi now ships MCP in core: MCP matured, Codemode/JavaScript sandbox composition made it useful, and embracing modern MCP helps shape better tool patterns for small harnesses.
5 min · 1,048 words
Building a certificate authority for the whole Internet
Cloudflare announces intent to become a public CA: root-program applications, a GlobalSign root acquisition for device reach, ACME-first free issuance, fail-small design, and plans for Merkle Tree Certificates in 2027.
8 min · 1,814 words
Backblaze Drive Stats for Q2 2026
Backblaze’s Q2 2026 Drive Stats: 354,415 drives at 1.73% quarterly AFR, lifetime AFR 1.41%, plus a clear CMR vs SMR primer as 20TB+ drives become a larger share of the fleet.
11 min · 2,548 words
Using any C++ library in Godot
Using any C++ library in Godot Godot has become one of the most popular game engines of the last few years. It is free, open source under the MIT license, and small enough to download and start using in minutes.
10 min · 2,353 words
How we found 24 Android vulnerabilities using our open source AI security agent
GitHub Security Lab explains the targeted AI taskflows behind 24 Android findings, the bugs they uncovered, and how to run the same open-source Taskflow Agent on your own app.
10 min · 2,349 words
The open source Git project just released Git 2.56. Here is GitHub's look at some of the most interesting features and changes introduced since last time.
9 min · 2,081 words
An update on Angular’s TypeScript 7-powered Compiler
The Angular team explains ngp, a hybrid preprocessor that rewrites parts of the Angular compiler in Rust with Oxc, decoupling transforms from TypeScript to prepare for TypeScript 7 and native tooling.
6 min · 1,431 words
Introducing cf: the agentic CLI for the entire Cloudflare API
Cloudflare releases cf, a new open-source agentic CLI that mirrors the entire Cloudflare API with TypeScript configuration, alongside Forge, their internal SDK generator—aimed at agent-heavy Wrangler usage.
9 min · 1,989 words
Phyllotaxis: An audio-reactive LED display
A build write-up of an audio-reactive LED sculpture that maps Fibonacci phyllotaxis onto a physical light array—math, fabrication, and real-time reactive firmware.
7 min · 1,644 words
EmDash 1.0: the stable CMS with a secure plugin registry
Cloudflare releases EmDash 1.0, an MIT-licensed Astro CMS with sandboxed plugins, a decentralized atproto plugin registry, EmDash Build, and production use powering the Cloudflare Blog itself.
2 min · 479 words
Pirating the PiratesNotes from the underground of film preservation.
Devan Scott on how fan restorers, remuxers, and boutique labels like Arrow and Kino fight studio revisionism—reconstructing historically accurate cuts of films such as The Good, the Bad and the Ugly when official releases fail.
3 min · 760 words
Reducing undefined behavior in the C language
LWN's Jonathan Corbet reports on Martin Uecker's Kernel Recipes 2026 talk about undefined behavior in C: why it exists, how compilers exploit it, how the C committee's study groups and the C2y draft are removing cases, and how tooling is moving C toward better memory safety.
7 min · 1,508 words
Eddie Aftandilian ships SafeRE 1.0, a linear-time Java regex library built with agents: differential testing vs the JDK, ReDoS resistance by construction, and performance that now beats JDK and RE2/J on Rebar workloads.
5 min · 1,062 words