Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Garmin Revamps and Opens Up Connect Developer API Program: All the Details
DC Rainmaker's Ray Maker breaks down Garmin's reopened and revamped Connect Developer API program after a seven-month freeze driven by a flood of AI-generated app applications, covering the new access tiers, what data third-party platforms can send and receive, and what it means for developers.
9 min · 2,058 words
Your MCU Likely Escaped the eMudhra Intermediate CA Compromise
Daniel Mangum explains why most microcontroller-based devices likely escaped the eMudhra intermediate CA compromise disclosed on October 20, 2026: embedded firmware usually ships only the specific root CA certificates it needs rather than a broad trust store.
7 min · 1,579 words
Postgres recovery_prefetch Considered Harmful and Causing Outages
Jeremy Schneider describes a field investigation showing that Postgres's recovery_prefetch setting can quietly cause standby replay lag and production outages, tracing it back to a concern raised on the hackers list years ago and explaining what he found.
5 min · 1,253 words
Objects, attributes, maps, oh my!
Max Bernstein walks through how dynamic language VMs move from hash-table objects to hidden classes (shapes or maps) and inline caches, with Python sketches and notes on how ZJIT handles polymorphic shapes in Ruby.
13 min · 3,019 words
Using a lookup-table to correct an approximation
A corsix.org post on compiling enum-to-string functions compactly: instead of a switch or a full offset table, compute a fast but incorrect approximation of each string's offset and fix it with a small table of corrections, a general trick compilers still miss.
4 min · 827 words
Max Bernstein on Rails at Scale shows how Rails enum predicate methods were made dramatically faster by generating static code at runtime instead of dynamic public_send dispatch, with benchmarks and lessons about fixing performance upstream.
3 min · 788 words
John Gruber's week-long review of Apple's folding iPhone Duo: how the cover and inner screens, thickness, weight, hardware buttons and software feel in daily use, and why it feels like an extraordinarily polished prototype rather than a finished product.
38 min · 8,767 words
Don't throw it all away: Caching an immediate-mode UI
How Blick's UI Painter keeps pixels it has already rendered, combines shapes and opacity groups, and saves work behind an immediate-mode UI, with measurements of CPU, GPU, and battery impact.
17 min · 3,914 words
What the PHP2Shell rumors got wrong, from inside the PHP security team
Alexandre Daubois, writing from inside the PHP security team, explains how the PHP2Shell leak got the severity right but most details wrong: CVE-2026-109618 is an out-of-memory error turned into RCE, and the real stopgap went unmentioned.
6 min · 1,331 words
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
Scott Helme explains how eight eMudhra intermediate CA private keys were recoverable from their public certificates in under a second because the keys were trivially small, how Chrome and Mozilla responded with CRLSet/OneCRL blocks and root removal, why the compromise cannot be contained, and what site operators should do now.
7 min · 1,642 words
8am lecture or Friday 5pm lecture: which is worse? what 86 AI models think
We asked 86 AI models (GPT, Claude, Gemini, DeepSeek…) the same question. 49% picked 8am lecture. See every answer and who dissented.
11 min · 2,624 words
Aseem Raj Baranwal derives the colors of a draining soap film from first principles: the reflected spectrum of a thin film is a single cosine in 1/λ, so its color is a fixed white minus the cosine transform of the CIE color-matching functions at the extra optical path 2nd, and the computed colors match the table of thicknesses Newton compiled in Opticks.
12 min · 2,653 words
Vite+ changed how I build applications with AI agents
Jan Michálek reports on three weeks using Vite+ across four projects with AI coding agents: bringing dev server, builds, Vitest, Oxlint, Oxfmt and tsdown under one vp command gave the agent, the developer and CI a single workflow, plus what he measured, where vp migrate needs review and when not to switch.
7 min · 1,598 words
Til Schünemann writes about being laid off during probation, a post-viral autoimmune flare treated with cortisone, the restless energy the medication brought, and how he used the time to rebuild routines and reassess priorities.
4 min · 925 words
Do web components have a future if nobody is writing them?
Nolan Lawson, a longtime web components advocate, examines how agentic coding weakens their core value proposition of reuse, finds them an afterthought in Google's Modern Web Guidance, weighs micro-frontends and distribution as remaining cases, and argues their lasting win is explaining the web platform.
10 min · 2,327 words
Overgrown, when plants invade your abandoned tabs
Charlie Gerard describes Overgrown, a playful Chrome extension in which plants slowly grow over browser tabs the longer they go unread, blocking clicks until you slash the vines away with a machete, chainsaw or flamethrower, and explains how its background worker, popup and overlay code fit together.
2 min · 493 words
Amrut Joshi explains why agent designers should not trust confidence scores or probabilities generated by an LLM, and argues for rules built from your own measured records of whether replies were correct instead.
7 min · 1,673 words
Papers We Love: Flow Typing, A New Lens on Linearity
Jared Forsyth works through a new paper on flow typing that aims to make linear types far less cumbersome, implementing its execution model and explaining how it treats values as pass-by-value with immutable updates, and what that could mean for language design.
6 min · 1,388 words
How I got over 300 Tor exit nodes removed
The author of KABA.CX describes discovering that 333 compromised Tor exit relays, about 10% of all exits, were redirecting SSH connections to interception servers to steal passwords and spread the Ebury backdoor. They explain how an exitmap script and an sshesame honeypot exposed the relays, and how the Tor network health team got them flagged and shut down within days.
4 min · 965 words
NixOS is making me less afraid
kqr of Entropic Thoughts describes how running NixOS servers changed their willingness to try self-hosted software: a working FreshRSS setup with backups took nine lines of Nix and has run hands-off for months. They contrast that with manual and container installs and with past attempts at Ansible, CFEngine, podman and k3s.
3 min · 763 words