Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Why Does an npm Math Library Need an Encrypted Loader?
SafeDep reverse-engineers a malicious npm math package: encrypted loader, trigger matrix, remote access payload, and indicators of compromise for defenders.
10 min · 2,385 words
A short, illustrated first-principles walkthrough of what Jev likely is—an LLM that returns a single token—and how that design compares to other projects doing the same thing.
9 min · 1,982 wordsagent-assisted
Inside ZCode: Silently Uploading Your Entire Git History to the Cloud
A forensic reverse-engineering of Zhipu’s ZCode desktop app shows it silently packages full workspace Git history to Aliyun OSS with server-held decryption keys, plus a filesystem lock to stop it.
6 min · 1,430 wordsagent-assisted
funes: Local Memory for Coding Agents, Built on Lance
Hugging Face’s funes indexes Claude Code, Codex, pi, and Hermes session traces into a local Lance dataset with recall/get tools—no LLM summarization at ingest, privacy-first, BM25 + vector search.
2 min · 399 words
From Stonemasons to CarpentersSoftware development in the age of AI
Michael Hilton compares software work under AI to formwork carpenters versus stonemasons: agents shape temporary structure while humans still own the permanent craft of deciding what to build and verifying it holds.
4 min · 968 words
How SpaceX Streamlined the Raptor Engine
Brian Potter walks through Raptor 1→3: how SpaceX deleted sensors and flanges, internalized plumbing with 3D printing, and cut vehicle-side heat-shield mass while raising thrust—and where complexity merely moved inside.
15 min · 3,366 words
C3 0.8.4 The last renamingParameter reflection, stack probing, iOS support, and stdlib streams—plus what may be the final keyword renames.
Release notes for C3 0.8.4: expanded parameter reflection and contracts, configurable stack probing/protection, iOS targeting, new collection and stream utilities, and a round of keyword renames the author expects to be the last.
9 min · 1,976 words
On turn-taking in voice AI: why silence, timing, and semantic VAD matter as much as low latency for natural conversational agents.
6 min · 1,380 words
Introducing TIN: full-text search for Postgres
PlanetScale announces TIN (Text INdex), a GA full-text search extension for Postgres and Neki with boolean/phrase/span queries, fuzzy and regex matching, BM25 ranking, and transaction-correct updates—built to be fast while staying inside Postgres.
15 min · 3,349 words
Replace PRs with Delta – Now in Public BetaA multiplayer environment for coding with agents and reviewing what they build
Zed launches the public beta of Delta, a multiplayer agent-coding environment that replaces pull requests with shared threads, DeltaDB versioning compatible with Git, and continuous engineering on macOS, Linux, Windows, and the web.
4 min · 819 words
Build Your Own AI Agent Harness in C#, the MafClaw Live Series
Bruno Capuano’s four-part .NET / Microsoft Reactor series builds a finance-education agent on the Microsoft Agent Framework harness—tools, file boundaries, approvals, skills, shell, CodeAct, observability, and Foundry hosting.
2 min · 349 words
Apple Copland D11E4 booting in your Browser
Michael Steil ships Apple’s cancelled Copland OS build D11E4 in-browser via improved DingusPPC wasm, with patch notes for unlocking the last developer build.
1 min · 161 words
Why building a Rust LSP is hard
A deep dive into why implementing a Rust language server is unusually hard: incremental analysis, macro expansion, borrow checking at IDE latency, and lessons from building Rust Glancer alongside rust-analyzer.
26 min · 6,056 words
Migrating the GitHub Copilot runtime to Rust, using Copilot
Stephen Toub recounts porting GitHub Copilot’s agent runtime from TypeScript/Node to 800k+ lines of production Rust with Copilot agents across 128 incremental PRs, and what the performance and process lessons were.
64 min · 14,699 words
The engineering behind the US Strategic Petroleum Reserve
One of the most fascinating things I’ve learned about recently is the engineering behind the US Strategic Petroleum Reserve. Here are the key requirements it’s designed to meet:
4 min · 939 words
Why JSON Array Diffing Is Harder Than It Looks
Positional JSON array diffs explode into noise when records reorder. Chaitanya Chandurkar walks through identity inference for semantic diffs—and why matching “same entity, moved” is harder than it looks.
5 min · 1,071 words
Divide by depth for instant 3D
Gabriel O'Flaherty-Chan peels open how 3D cameras work: perspective divide by depth, projection matrices, and building intuition beyond black-box game engines.
4 min · 886 words
Building a continuous security testing harness
Robert Lackey at Cribl turns an agentic vulnerability-research workflow into a continuous security testing harness—architecture, loops, and lessons from Product Security.
7 min · 1,540 words
“The Secret Life of Circuits” is hereWhy Michał Zalewski wrote a book about how circuits actually behave
lcamtuf (Michał Zalewski) announces The Secret Life of Circuits—why he wrote a hands-on electronics book focused on how real circuits behave, with notes on layout, endorsements, and who it’s for.
2 min · 442 words
You can run git on object storage if you re-make packfiles
Building ObjGit, Tigris explains why Git packfiles fight object storage, how remaking packfiles unlocks workable remote repositories, and what that means for Git servers backed by S3-style buckets.
15 min · 3,408 words