Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Tell your network to explain itself and then some
A unixdigest.com tutorial that goes beyond using arp-scan to list devices on a home network, showing how to track and identify every machine and run your own DNS so you can block ads and telemetry without relying on an ISP, Google or Cloudflare.
5 min · 1,044 words
SBD: We Have a Filesystem at Home
Fly.io's Daniel Botha introduces the Sprites Block Device (SBD), a simpler object-storage-backed block device that replaces the clever custom filesystem Sprites launched with, explaining why dumber checkpoints and 'just a disk' made Sprites more reliable.
6 min · 1,282 words
Turning IPv6 tunnels into programmable delay lines for pulsing DoS
An APNIC Blog guest post summarising the USENIX Security 2026 paper on TED, a pulsing denial-of-service technique that abuses permissive tunnel decapsulation and inconsistent IPv6 Extension Header handling to focus low-rate traffic into short high-rate bursts, with measurements and mitigations.
5 min · 1,259 words
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Amazon Threat Intelligence reports a PHP2Shell (CVE-2026-109618/109619) exploitation attempt against its MadPot honeypots on Oct. 17, 2026, four days before public disclosure, plus a wave of proof-of-concept exploits around the embargo lift, with recommended actions and indicators of compromise.
3 min · 722 words
kqr of Entropic Thoughts shows how to use a Nix flake on any Linux distribution to manage a simple script's dependencies, packaging a Python text-to-speech script as a binary and then adapting the approach to other languages.
8 min · 1,907 words
Security Disclosure: Wednesday October 21st
Railway discloses that an unauthorized third party may have accessed encrypted customer environment variables, and in some cases their decrypted contents, as part of a series of attacks on platform companies; it recommends rotating secrets and explains paused builds and next steps.
1 min · 252 words
Murat Demirbas's notes from day 1 of HPTS 2026 at Asilomar, including Ion Stoica's keynote 'Reality is the Final Verifier' on gaps in agentic software engineering, plus talks on storage, metastable failures and Little's Law, CXL memory, LLM training resilience on TPUs and inference.
13 min · 2,948 words
No Need for Retirement When Utopia Is Around the Corner
Jim Nielsen compares Daniel Ellsberg's account of RAND's missile-gap years, where staff felt a quasi-religious mission and doubted they'd live to collect retirement, with today's rhetoric from AI labs like Anthropic.
2 min · 425 words
Novastart: laptops and smart whiteboards that ship with an infinite-canvas OS
Novastart OS is The Infinite Canvas Whiteboard OS, an infinite canvas for apps, shared canvases, and AI agents, with a free plan. Novastart also sells six computers with it pre-installed: 14", 15", and 17" laptops from $350 and 75", 90", and 100" smart whiteboards from $1,200, with a minimum order of 1 unit.
2 min · 386 wordsagent-assisted
The bridge to agent-scale Git infrastructure
GitHub engineers explain how they moved a copy of 99.99999% of GitHub's repositories to Azure, how per-reference quorums will bring over the rest, and how object storage lets Git reads scale independently as agent traffic grows.
7 min · 1,714 words
Xingjian Bai, Jia-Hao Liang, Jayden Teoh and Vincent Sitzmann put an LLM agent inside the optimizer: it watches training dynamics and rewrites the optimizer's source code mid-run. Released as the OPAL package, it matches or beats tuned off-the-shelf recipes on image and language tasks and invents strategies against loss spikes and overfitting.
30 min · 6,946 words
I can't believe PowerShell is actually good
Corbin Davenport of The Spacebar admits he underestimated PowerShell after Bash scripting frustrations, showing how its native data types, easy web API parsing, and .NET objects made a real scripting job, migrating old Tumblr posts with their metadata, far easier.
10 min · 2,286 words
UCLA or USC? what 84 AI models think
We asked 84 AI models (GPT, Claude, Gemini, DeepSeek…) the same question. 99% picked UCLA. See every answer, who searched the web, and who dissented.
10 min · 2,341 words
Your AI agent fixed the bug, but what else did it change?
Trail of Bits releases patching-bugs and regression-hunt, two agent plugins built through its Patch the Planet work with OpenAI that reproduce bugs, develop and test fixes, and check patches for regressions within a project's own threat model and patching guidelines.
8 min · 1,778 words
Cloudflare deploys protections against php2shell vulnerability
Cloudflare describes the default WAF Managed Ruleset protections it deployed for the newly disclosed php2shell PHP vulnerabilities ahead of public disclosure, how the rules detect exploitation attempts, and why customers should still update PHP while keeping the protection enabled.
5 min · 1,162 words
PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
Wiz Research details multiple critical vulnerabilities it found in the core PHP engine with AI assistance, enabling remote code execution and Heartbleed-style memory disclosure across PHP-powered sites like WordPress, Drupal and MediaWiki, plus the coordinated patch release and what defenders should do.
10 min · 2,373 words
In his Oxford Etymologist column, Anatoly Liberman looks back at the English Spelling Society's century-long push for reform and argues that the movement needs popular culture, media and influencers, not just scholars, if it is ever to make English spelling more humane.
6 min · 1,379 words
New Mexico Attorney General Raúl Torrez announces a court order requiring Facebook to pay $25 billion in civil penalties after a jury found 43,899,725 violations of the state's Unfair Practices Act in its Cambridge Analytica case.
3 min · 587 words
Garmin Revamps and Opens Up Connect Developer API Program: All the Details
DC Rainmaker's Ray Maker breaks down Garmin's reopened and revamped Connect Developer API program after a seven-month freeze driven by a flood of AI-generated app applications, covering the new access tiers, what data third-party platforms can send and receive, and what it means for developers.
9 min · 2,058 words
We just gave a million dollars to Open Source maintainers
Sentry raised its Open Source budget from $750,000 to $1,000,000 this year. The post explains why, its Open Source Pledge, and how the money was split among maintainers and foundations, with the full list of recipients.
3 min · 771 words