Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Tailscale SSH: Investigation and remediation update
Tailscale says it is investigating security vulnerabilities in Tailscale SSH, mostly privilege-escalation issues where an already-authorised user could exceed their local user's permissions. Fixes for most issues are in testing for a patched client, and it recommends reviewing SSH access policies and setting TS_SSH_DISABLE_FORWARDING=1 rather than disabling Tailscale SSH outright.
2 min · 452 words
Resend announces Forge, its own Mail Transfer Agent built from scratch and sending from IP blocks it owns, with no code changes for customers, faster time-to-inbox and improved deliverability figures, activated per domain with a single CNAME record.
3 min · 599 words
Preliminary Report: Oct 21st Security Incident
Railway's preliminary incident report on the October 20-21 targeted attack that reached a subset of internal systems, apparently seeking AI provider API keys for distillation, with a timeline, impact, remediation steps and customer FAQ.
9 min · 2,013 words
Introducing Amutable Foundations
Amutable opens a private preview of Amutable Foundations, a Linux-based system engineered to be provable at every level, with hardware attestation of every machine, software image, and configuration for machine identity and compliance auditing.
7 min · 1,542 words
Security Disclosure: Wednesday October 21st
Railway discloses that an unauthorized third party may have accessed encrypted customer environment variables, and in some cases their decrypted contents, as part of a series of attacks on platform companies; it recommends rotating secrets and explains paused builds and next steps.
1 min · 252 words
Native Prometheus integration with NGINX
Categorica open-sources nginx-stats-prometheus, an MIT-licensed NGINX module that exposes Prometheus metrics directly from NGINX instead of running the separate NGINX Prometheus Exporter sidecar with its own web server, and explains the design and trade-offs.
5 min · 1,150 words
Day 0 support for Muse Spark Open on vLLM
The vLLM team explains its day-0 support for Meta's Muse Spark Open, an 816B-total, 42B-active MoE model with 1M context and multimodal inputs: usage, model architecture details, DSpark speculative decoding, NVIDIA, AMD and initial TPU serving, and reinforcement learning support in vLLM.
7 min · 1,561 words
Announcing pg_vectorsearch: Scalable Open-Source Vector Search in PostgreSQL
Tiger Data launches pg_vectorsearch, an open-source PostgreSQL extension whose PRISM index uses partitioning and compression instead of HNSW graphs to deliver faster vector queries with far less memory and quicker index builds.
11 min · 2,613 words
10 Years of the SRE book: Announcing the second edition of "Site Reliability Engineering"
Google announces a completely rewritten second edition of its Site Reliability Engineering book, ten years after the first: how SLOs, observability, automation, reliability testing, capacity management and SRE org models have matured, how SRE supports and uses AI, and why culture still matters.
3 min · 718 words
Announcing AWS Lambda Web Functions for fast, consistent web app performance anywhere
AWS introduces Lambda Web Functions: run standard HTTP servers (Express, Hono, Fastify, Next.js and other Node frameworks) on Lambda without event-handler adapters, with multi-concurrent requests, active CPU billing, one-command multi-region deploy and latency-based routing alongside Event Functions and MicroVMs.
5 min · 1,051 words
Oxide Computer Company announces a $445M Series D, opening with the milestone that ordinary operations made it pay income tax this spring, and explains why a profitable hardware company still raises: to keep accepting new demand, expand manufacturing capacity and build an enduring company.
3 min · 694 words
Ryan Dahl announces that the entire Deno team is joining Cloudflare, explaining how the move continues Deno's goal of simpler server software beyond the runtime, what it means for Deno Deploy and the open-source runtime, and why the new celld work focuses on Durable Objects.
2 min · 512 words
Unison Cloud is now open source
Paul Chiusano announces that Unison Cloud, which turns a pool of nodes into a distributed computer programmable in Unison, is now MIT licensed, newly open-sourcing the Nimbus worker node, the Haskell Cloud API server and the Unison Cloud UI alongside the existing client.
1 min · 291 words
64-Day Certificate Lifetimes Coming Feb 2027
Let's Encrypt will move all subscribers to 64-day certificates by default on February 10, 2027 (with 45- and 6-day profiles available), staging first, as part of the industry shift to shorter lifetimes that reduce key-compromise and mis-issuance risk.
2 min · 416 words
Chrome's Response to Recent ccTLD Registry Hijacks
Google's Chrome security and networking team explains how attackers hijacked the .gh, .sl and .as country-code TLD registries to obtain unauthorized HTTPS certificates, how Chrome blocked them via CRLSets and worked with CAs on revocation, and why domain owners should monitor Certificate Transparency and publish restrictive CAA records.
2 min · 574 words
TidesDB now available for MySQL v9, v26
The TidesDB team announces TideSQL-MySQL v2.0.0, which loads the TidesDB LSM-tree storage engine into stock MySQL 9.7 and 26.7 as a plugin rather than a fork. The post covers per-table options via ENGINE_ATTRIBUTE, compression, value separation for large values, durability modes, TTL, encryption, optimistic MVCC, and sysbench comparisons against InnoDB.
7 min · 1,580 words
FTL: A new operating system for clouds
FTL introduces itself as a new operating system designed for clouds—outlining goals around cloud-native systems software and pointing to the project’s public materials.
1 min · 304 words
marimo launches marimohub, a self-hostable open-source platform to store, manage, and run marimo notebooks on your own compute, storage, and SSO—without operating a separate database.
5 min · 1,089 words
An Update on Orion for Linux and Windows
Kagi is ending development of Orion for Linux and Windows and open-sourcing both so the community can continue them, while the team focuses on Orion for macOS and iOS.
2 min · 558 words
Announcing Cloudflare OHTTP Gateway
Cloudflare announces OHTTP Gateway, expanding access to its privacy-preserving Oblivious HTTP infrastructure so apps and services can route requests without exposing client IPs to origin servers.
9 min · 2,100 words