Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
What's Earth's dominant species by mass?
Signore Galilei works through biomass estimates to find which single species weighs the most: humans outweigh ants, cattle top the animals ahead of humans and Antarctic krill, sugar cane leads crops, and boreal trees such as black spruce and Dahurian larch hold billions of tonnes, far more carbon than all animals combined.
4 min · 935 words
EX-ARRR: Sailing the 0-click Seas
**Every serious Apple device compromise of the last decade has boring person at the bottom of it: a parser read a file and trusted it a little too much. Not a phishing link, nor a stolen password, but a daemon you never launched, decoding a file you never opened, one byte past the end of a buffer. This is that story. It starts late one evening with a fuzzer that did not know what an EXR file was, and ends with a heap overflow that fires inside a privileged Apple daemon the instant an iMessage lands evading BlastDoor’s, before the little notification banner even finishes…
19 min · 4,447 words
Eddie Aftandilian ships SafeRE 1.0, a linear-time Java regex library built with agents: differential testing vs the JDK, ReDoS resistance by construction, and performance that now beats JDK and RE2/J on Rebar workloads.
5 min · 1,062 words
Why I Stopped Defaulting to Next.js and Vercel
How AI coding agents made it practical for me to build and own a different stack with TanStack Start and Cloudflare. The first person who introduced me to Next.js was my friend Haythem Lazaar. We were at university, building Collo , a project management tool for remote teams.
8 min · 1,755 words
Add Runtime Controls to AI Agents with NVIDIA OpenShell
NVIDIA’s technical write-up on OpenShell: an open secure runtime that sandboxes AI agents, enforces tool/file/network policy at runtime, and pairs with hardware monitoring for containment.
7 min · 1,593 words
GrapheneOS – When an app is slow
A GrapheneOS user digs into why OsmAnd maps feel slower on a Pixel 8 than on stock Android, and how that search led to CoMaps and broader performance trade-offs on hardened phones.
1 min · 245 words
Pranav Desai catalogs ten visual and copy tells of AI-generated “slop UI”—from rainbow gradients and pulsing badges to glassmorphism and generic hype—and why vibe-coded interfaces often look cheap without a design vision.
4 min · 908 words
What is the date today? what 83 AI models think
We put "What is the date today?" to 83 AI models (GPT, Claude, Gemini, DeepSeek…) at the same time. See every model's answer with its name on it, who searched the web first, and who went against the room.
12 min · 2,726 words
GroovyGate RCE: Root Access Despite a 403
Vulnetic details GroovyGate, an RCE path where a 403 response still left a route to root—showing how automated vulnerability hunting can catch dangerous edge cases in open-source infrastructure.
5 min · 1,078 words
PotemkinOS: an operating system where the model writes the userland
Gabe Ortiz’s joke-with-a-build: a Linux image with no userland—only a kernel, inference engine, C compiler, and eight tools—so the model must invent its own shell, ls, and eventually a Kubernetes facade three villages converge on.
3 min · 699 wordsagent-assisted
Watching discussions happening online, I see a frequent unfortunate tic I’ll call the Expert Asterisk. A beginner is asking for help, and experts are answering. Then in the spirit of completeness, an expert throws in a fact or detail far from the learner’s abilities or needs.
3 min · 580 words
Will India win the Asian Games cricket gold? 80 AI models predict the result
We put "Will India win the Asian Games cricket gold?" to 80 AI models (GPT, Claude, Gemini, DeepSeek…) at the same time. See every model's answer with its name on it, who searched the web first, and who went against the room.
15 min · 3,517 words
Accelerated Out of Core Shuffling
Benjamin Zaitlen explains RapidsMPF’s reusable out-of-core shuffler for distributed analytics—how spilling turns shuffle OOM headaches into a budgetable resource, and what it takes to push shuffle bandwidth toward terabytes per second.
15 min · 3,466 words
Ravens vs Cowboys in Rio de Janeiro: 85 AI models predict the result
We put "Ravens vs Cowboys in Rio de Janeiro" to 85 AI models (GPT, Claude, Gemini, DeepSeek…) at the same time. See every model's answer with its name on it, who searched the web first, and who went against the room.
16 min · 3,627 words
A font compiler that makes every LLM token the same width—why monospace-per-token helps visualize chain-of-thought, plus an interactive preview of fonts built from a font + tokenizer pair.
7 min · 1,527 words
GPT-6 Astra Helped Me Jailbreak My Kindle
Niraj Rajgor describes using coding agents to jailbreak his own 10th-gen Kindle over Wi-Fi and build KindleCTL, a photo-slideshow app: which models failed or were blocked, how GPT-6 Astra got it working, and why closing the feedback loop on the real e-ink display mattered more than passing tests.
5 min · 1,157 words
Notes from AI and Software Engineering in 2026
A year after Claude Opus 4.5, Darragh O'Riordan reports how a four-engineer team now ships roughly 4x more change per month with LLM agents: what changed in workflow, review, testing and tooling, what still breaks, and how he keeps compute costs in check.
14 min · 3,243 words
SB 923 is Law: CCPA deletion rights now reach third-party data
California’s SB 923 expands CCPA deletion to data bought or appended from third parties and requires an online deletion form—what businesses need to change by January 1.
3 min · 620 words
Introducing Casita: A content-addressed store for source code and build artifacts
Domen Kožar introduces Casita, a content-addressed object store for source code and build artifacts—an argument for rethinking Nix-style packaging from the package manager up.
7 min · 1,723 words
Don't couple your Go code to GitHub
Iain Cambridge explains why Go import paths that hard-code github.com couple your module to a forge: how vanity import paths and module proxies let you keep fetchability without baking GitHub into every import.
3 min · 595 words