Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Jev-Driven SRE Diagnosis: What Worked and What Failed
The SREGym team builds a Kubernetes incident-diagnosis pipeline with no LLM agent: a programmatic collector gathers cluster evidence and TypeSafe AI's Jev decision model picks root-cause candidates and supporting evidence. It passed 80 of 105 diagnoses (76.2%) across 21 SREGym-Lite faults with a 14.6s median, close to an LLM agent's score at far lower cost, and the post dissects the faults it failed.
7 min · 1,572 words
Methods for Migrating Virtual Machines From VMware ESXi to Linux-Based Hypervisors
LINBIT's Matt Kereczman surveys ways to move VMs off VMware ESXi to Proxmox VE, KVM/libvirt, oVirt/OLVM, OpenShift Virtualization, OpenNebula or XCP-ng: copying VMDKs and converting with qemu-img, virt-v2v, OVF/OVA export, platform-specific import tools and other approaches, plus what to plan for and how to choose.
8 min · 1,760 words
TidesDB now available for MySQL v9, v26
The TidesDB team announces TideSQL-MySQL v2.0.0, which loads the TidesDB LSM-tree storage engine into stock MySQL 9.7 and 26.7 as a plugin rather than a fork. The post covers per-table options via ENGINE_ATTRIBUTE, compression, value separation for large values, durability modes, TTL, encryption, optimistic MVCC, and sysbench comparisons against InnoDB.
7 min · 1,580 words
Building a Job Queue in Postgres with SKIP LOCKED
Michael Guay walks through running background jobs in Postgres instead of Redis: the jobs table, claiming work safely with SKIP LOCKED, leases for crashed workers, retries with backoff, dedup, LISTEN/NOTIFY wakeups, and when not to.
9 min · 2,138 words
We're going to need default hard budget caps on pretty much everythingHard spend limits should be the default for usage-based APIs and agent-driven systems.
Simon Willison argues that pay-by-usage services need default hard budget caps—not soft email warnings—so coding and personal agents cannot rack up surprise bills. He points to AWS spend limits and Google Cloud Spend Caps as early moves in that direction.
2 min · 529 words
FTL: A new operating system for clouds
FTL introduces itself as a new operating system designed for clouds—outlining goals around cloud-native systems software and pointing to the project’s public materials.
1 min · 304 words
How Firestore Matches Realtime Queries
Tyler Rockwood explains how Cloud Firestore matches and fans out realtime listeners efficiently as documents change—covering query indexing, target matching, and fanout tradeoffs.
5 min · 1,243 words
Docker has always used microVMs
Dave Scott revisits Docker’s history and argues containers on Linux have long leaned on microVM-style isolation ideas—context for today’s secure sandbox and unikernel discussions.
2 min · 373 words
All I wanted was a custom domain email
Jacob Goldstein recounts trying to get cheap, verified sending and receiving at his own domain with Apple Mail support, from Cloudflare Email Routing through self-hosted options to the service he settled on, and why sending mail reliably is the hard part.
4 min · 987 words
Self-hosted HTTP tunnels with SSH and nginx
Vincent Bernat shows how to expose a localhost preview to a friend with only a plain SSH client and an nginx server you control: ssh -R with a dynamic port, an nginx server_name regex mapping per-port subdomains, wildcard TLS via ACME DNS-01, and a helper script plus NixOS module.
4 min · 998 words
Quick thoughts on GitHub’s Sept 23 incident
Lorin Hochstein reads GitHub's terse write-up of its Sept 23 Azure Central US database incident and pulls out the multiple contributing factors hiding in it: planned maintenance, replica failover, and an under-capacity primary.
3 min · 696 words
Blink's post-mortem on the Sept 19 admin-tool flaw that drained 6.61 BTC from customer accounts: timeline, remediations, full restoration, and a 50% recovery bounty up to 3.3 BTC.
17 min · 3,979 words
System-level ad-blocking in Android in 2026
Kevin Boone surveys DNS-based system ad-blocking on Android — commercial DNS/VPNs, non-root local-VPN apps like AdAway, and rooted hosts-file approaches via Magisk — plus limitations and side-effects.
2 min · 433 words
Surely you have ultra-wideband radios on your bins too?
Simon Green over-engineers bin-night reminders with UWB ranging tags, a Home Assistant anchor, OTA firmware, and tip-detection — a detailed build log of BinRange from experiment to production.
3 min · 684 words
Streamline: custom video pipelines with Cloudflare Stream and Workers
Cloudflare introduces Streamline, an open-source developer playground showing how to build custom video pipelines on Cloudflare Stream, Workers, Containers and related primitives, such as rendering dynamic annotations on livestreams or burning subtitles into hosted video, and what it learned about media processing limits.
12 min · 2,805 words
Headers Up! What's New in httpd and relayd
Rafael Sadowski details new features in OpenBSD's revived httpd and relayd: httpd header set, add and remove directives for response headers, header-based block and drop rules for filtering scrapers and scanners, and patterns(7) matching in relayd alongside glob, with config examples and a preview of upcoming glob ignorecase support.
7 min · 1,680 words
marimo launches marimohub, a self-hostable open-source platform to store, manage, and run marimo notebooks on your own compute, storage, and SSO—without operating a separate database.
5 min · 1,089 words
I recently watched the talk by Scott Jenson titled "Are we really going to use the same Desktop UX forever?" https://www.youtube.com/watch?v=V7AfAcQwLW0&t=445s. He's a great presenter, really articulate and concise. The kind of speaker that you'd gladly listen to for 3+ hours if given the chance. Which for a talk about window management is quite the compliment.
20 min · 4,654 words
An Update on Orion for Linux and Windows
Kagi is ending development of Orion for Linux and Windows and open-sourcing both so the community can continue them, while the team focuses on Orion for macOS and iOS.
2 min · 558 words
Announcing Cloudflare OHTTP Gateway
Cloudflare announces OHTTP Gateway, expanding access to its privacy-preserving Oblivious HTTP infrastructure so apps and services can route requests without exposing client IPs to origin servers.
9 min · 2,100 words