{"articles":[{"slug":"tailscale-ssh-investigation-and-remediation-update","title":"Tailscale SSH: Investigation and remediation update","subtitle":null,"summary":"Tailscale says it is investigating security vulnerabilities in Tailscale SSH, mostly privilege-escalation issues where an already-authorised user could exceed their local user's permissions. Fixes for most issues are in testing for a patched client, and it recommends reviewing SSH access policies and setting TS_SSH_DISABLE_FORWARDING=1 rather than disabling Tailscale SSH outright.","content_type":"announcement","language":"en","canonical_url":"https://tailscale.com/ssh-investigation-update","author":{"name":"Tailscale","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Tailscale","url":"https://tailscale.com/","listing_slug":"tailscale-blog","listing":{"slug":"tailscale-blog","name":"Tailscale Blog","listing_type":"product","url":"https://listedstartups.com/products/tailscale-blog"}},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Networking","slug":"networking","url":"https://listedarticles.com/topics/networking"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":452,"reading_minutes":2,"published_at":"2026-10-26T00:00:00.000Z","added_at":"2026-10-27T23:14:20.320Z","updated_at":"2026-10-27T23:14:20.320Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/tailscale-ssh-investigation-and-remediation-update","markdown_url":"https://listedarticles.com/articles/tailscale-ssh-investigation-and-remediation-update.md","example":false,"citation":"Tailscale, Tailscale. \"Tailscale SSH: Investigation and remediation update.\" 26 Oct 2026. https://tailscale.com/ssh-investigation-update (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://tailscale.com/ssh-investigation-update"},"snippet":null,"score":null},{"slug":"bunkering-down","title":"Bunkering down","subtitle":null,"summary":"Matt Webb explains why he shut down the web servers he had self-hosted for 27 years, archiving old sites and moving his blog to GitHub Pages, because a wave of new vulnerabilities (PHP, HTTPS certificates, Linux root exploits) has tipped the calculus against securing his own internet-facing boxes, with musings on AI agents in a future of pervasive exploits.","content_type":"essay","language":"en","canonical_url":"https://interconnected.org/home/2026/10/24/bunker","author":{"name":"Matt Webb","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Interconnected","url":"https://interconnected.org/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"AI Agents","slug":"ai-agents","url":"https://listedarticles.com/topics/ai-agents"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Opinion","slug":"opinion","url":"https://listedarticles.com/topics/opinion"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1226,"reading_minutes":5,"published_at":"2026-10-24T12:28:00.000Z","added_at":"2026-10-24T17:10:03.168Z","updated_at":"2026-10-24T17:10:03.168Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/bunkering-down","markdown_url":"https://listedarticles.com/articles/bunkering-down.md","example":false,"citation":"Matt Webb, Interconnected. \"Bunkering down.\" 24 Oct 2026. https://interconnected.org/home/2026/10/24/bunker (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://interconnected.org/home/2026/10/24/bunker"},"snippet":null,"score":null},{"slug":"broccoli2shell-the-brotli-decoder-bug-cve-2026-111497","title":"Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497)","subtitle":null,"summary":"A write-up of CVE-2026-111497, an out-of-bounds write in Google's reference C Brotli decoder that can lead to code execution in Node.js, Python Brotli/brotlicffi and other software, covering who is exposed, the bug, vendored copies still unpatched, version checks, fixes, workarounds, exploitation status and timeline.","content_type":"research","language":"en","canonical_url":"https://broccoli2shell.com/","author":{"name":null,"url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"broccoli2shell.com","url":"https://broccoli2shell.com/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Open Source","slug":"open-source","url":"https://listedarticles.com/topics/open-source"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1710,"reading_minutes":7,"published_at":"2026-10-24T00:00:00.000Z","added_at":"2026-10-25T17:10:36.345Z","updated_at":"2026-10-25T17:10:36.345Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/broccoli2shell-the-brotli-decoder-bug-cve-2026-111497","markdown_url":"https://listedarticles.com/articles/broccoli2shell-the-brotli-decoder-bug-cve-2026-111497.md","example":false,"citation":"broccoli2shell.com. \"Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497).\" 24 Oct 2026. https://broccoli2shell.com/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://broccoli2shell.com/"},"snippet":null,"score":null},{"slug":"distributed-data-centralized-fixes","title":"Distributed data, centralized fixes","subtitle":null,"summary":"After a week of breaches and vulnerabilities (Railway, Zeabur, eMudhra, PHP, GitLab, LiteLLM and more), Miren's Paul Hinze sorts the incidents into three structural shapes - concentrated secrets, fragmented patching and hijacked update channels - and explains how Miren's self-hostable design aims to keep data distributed while centralizing fixes.","content_type":"blog_post","language":"en","canonical_url":"https://miren.dev/blog/distributed-data-centralized-fixes","author":{"name":"Paul Hinze","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Miren","url":"https://miren.dev/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Open Source","slug":"open-source","url":"https://listedarticles.com/topics/open-source"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1278,"reading_minutes":6,"published_at":"2026-10-23T12:00:00.000Z","added_at":"2026-10-24T05:09:06.062Z","updated_at":"2026-10-24T05:09:06.062Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/distributed-data-centralized-fixes","markdown_url":"https://listedarticles.com/articles/distributed-data-centralized-fixes.md","example":false,"citation":"Paul Hinze, Miren. \"Distributed data, centralized fixes.\" 23 Oct 2026. https://miren.dev/blog/distributed-data-centralized-fixes (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://miren.dev/blog/distributed-data-centralized-fixes"},"snippet":null,"score":null},{"slug":"giving-cloud-agents-production-access-with-oidc-not-secrets","title":"Giving Cloud Agents Production Access with OIDC, Not Secrets","subtitle":null,"summary":"Formal engineer Aditya Saligrama explains how the company lets cloud coding agents such as Cursor and Devin query production data and cloud infrastructure without long-lived secrets: the agents act as OIDC issuers, and Formal grants each session short-lived, read-only, policy-controlled and auditable access tied to the engineer, repository and run.","content_type":"blog_post","language":"en","canonical_url":"https://www.formal.ai/blog/cloud-agents-oidc-infrastructure/","author":{"name":"Aditya Saligrama","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Formal","url":"https://www.formal.ai/","listing_slug":"formal","listing":{"slug":"formal","name":"Formal","listing_type":"company","url":"https://listedstartups.com/companies/formal"}},"topics":[{"name":"AI Agents","slug":"ai-agents","url":"https://listedarticles.com/topics/ai-agents"},{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1799,"reading_minutes":8,"published_at":"2026-10-23T00:00:00.000Z","added_at":"2026-10-27T17:16:55.782Z","updated_at":"2026-10-27T17:16:55.782Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/giving-cloud-agents-production-access-with-oidc-not-secrets","markdown_url":"https://listedarticles.com/articles/giving-cloud-agents-production-access-with-oidc-not-secrets.md","example":false,"citation":"Aditya Saligrama, Formal. \"Giving Cloud Agents Production Access with OIDC, Not Secrets.\" 23 Oct 2026. https://www.formal.ai/blog/cloud-agents-oidc-infrastructure/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://www.formal.ai/blog/cloud-agents-oidc-infrastructure/"},"snippet":null,"score":null},{"slug":"twelve-years-of-distributed-sqlite","title":"Twelve years of distributed SQLite","subtitle":null,"summary":"rqlite creator Philip O'Toole recounts the history of distributed SQLite from rqlite's 2014 launch (Raft + SQLite) through dqlite, Litestream, LiteFS, cr-sqlite, libSQL/Turso, SQLite Cloud and Cloudflare D1, arguing the design space has three corners (consensus, streaming, merge) and that the money went to the platforms.","content_type":"blog_post","language":"en","canonical_url":"https://philipotoole.com/twelve-years-of-distributed-sqlite/","author":{"name":"Philip O'Toole","url":"https://philipotoole.com/","person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Philip O'Toole","url":"https://philipotoole.com/","listing_slug":null,"listing":null},"topics":[{"name":"Databases","slug":"databases","url":"https://listedarticles.com/topics/databases"},{"name":"Open Source","slug":"open-source","url":"https://listedarticles.com/topics/open-source"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1129,"reading_minutes":5,"published_at":"2026-10-23T00:00:00.000Z","added_at":"2026-10-24T05:08:55.185Z","updated_at":"2026-10-24T05:08:55.185Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/twelve-years-of-distributed-sqlite","markdown_url":"https://listedarticles.com/articles/twelve-years-of-distributed-sqlite.md","example":false,"citation":"Philip O'Toole, Philip O'Toole. \"Twelve years of distributed SQLite.\" 23 Oct 2026. https://philipotoole.com/twelve-years-of-distributed-sqlite/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://philipotoole.com/twelve-years-of-distributed-sqlite/"},"snippet":null,"score":null},{"slug":"animations-for-system-builders-metastability-and-lost-writes","title":"Animations for System Builders: Metastability and Lost Writes","subtitle":null,"summary":"Marc Brooker shows how LLM-built animations backed by real test traces help build intuition for distributed-systems failures, including how a Raft cluster can lose writes when one node's storage lies, and metastable failure.","content_type":"blog_post","language":"en","canonical_url":"https://brooker.co.za/blog/2026/10/23/animations.html","author":{"name":"Marc Brooker","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Marc's Blog","url":"https://brooker.co.za/blog/","listing_slug":null,"listing":null},"topics":[{"name":"Engineering","slug":"engineering","url":"https://listedarticles.com/topics/engineering"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Databases","slug":"databases","url":"https://listedarticles.com/topics/databases"},{"name":"AI","slug":"ai","url":"https://listedarticles.com/topics/ai"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":509,"reading_minutes":2,"published_at":"2026-10-23T00:00:00.000Z","added_at":"2026-10-23T20:06:43.310Z","updated_at":"2026-10-23T20:06:43.310Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/animations-for-system-builders-metastability-and-lost-writes","markdown_url":"https://listedarticles.com/articles/animations-for-system-builders-metastability-and-lost-writes.md","example":false,"citation":"Marc Brooker, Marc's Blog. \"Animations for System Builders: Metastability and Lost Writes.\" 23 Oct 2026. https://brooker.co.za/blog/2026/10/23/animations.html (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://brooker.co.za/blog/2026/10/23/animations.html"},"snippet":null,"score":null},{"slug":"announcing-resend-forge","title":"Announcing Resend Forge","subtitle":null,"summary":"Resend announces Forge, its own Mail Transfer Agent built from scratch and sending from IP blocks it owns, with no code changes for customers, faster time-to-inbox and improved deliverability figures, activated per domain with a single CNAME record.","content_type":"announcement","language":"en","canonical_url":"https://resend.com/blog/announcing-resend-forge","author":{"name":null,"url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Resend","url":"https://resend.com/","listing_slug":"resend","listing":{"slug":"resend","name":"Resend","listing_type":"company","url":"https://listedstartups.com/companies/resend"}},"topics":[{"name":"announcements","slug":"announcements","url":"https://listedarticles.com/topics/announcements"},{"name":"infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"developer-tools","slug":"developer-tools","url":"https://listedarticles.com/topics/developer-tools"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":599,"reading_minutes":3,"published_at":"2026-10-23T00:00:00.000Z","added_at":"2026-10-23T11:15:43.747Z","updated_at":"2026-10-23T11:15:43.747Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/announcing-resend-forge","markdown_url":"https://listedarticles.com/articles/announcing-resend-forge.md","example":false,"citation":"Resend. \"Announcing Resend Forge.\" 23 Oct 2026. https://resend.com/blog/announcing-resend-forge (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://resend.com/blog/announcing-resend-forge"},"snippet":null,"score":null},{"slug":"preliminary-report-oct-21st-security-incident","title":"Preliminary Report: Oct 21st Security Incident","subtitle":null,"summary":"Railway's preliminary incident report on the October 20-21 targeted attack that reached a subset of internal systems, apparently seeking AI provider API keys for distillation, with a timeline, impact, remediation steps and customer FAQ.","content_type":"announcement","language":"en","canonical_url":"https://blog.railway.com/p/preliminary-report-october-security-incident","author":{"name":"Jacob Cooper & Angelo Saraceno","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Railway","url":null,"listing_slug":"railway","listing":{"slug":"railway","name":"Railway","listing_type":"company","url":"https://listedstartups.com/companies/railway"}},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"DevOps","slug":"devops","url":"https://listedarticles.com/topics/devops"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":2013,"reading_minutes":9,"published_at":"2026-10-22T23:31:37.000Z","added_at":"2026-10-23T20:06:46.800Z","updated_at":"2026-10-23T20:06:46.800Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/preliminary-report-oct-21st-security-incident","markdown_url":"https://listedarticles.com/articles/preliminary-report-oct-21st-security-incident.md","example":false,"citation":"Jacob Cooper & Angelo Saraceno, Railway. \"Preliminary Report: Oct 21st Security Incident.\" 22 Oct 2026. https://blog.railway.com/p/preliminary-report-october-security-incident (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://blog.railway.com/p/preliminary-report-october-security-incident"},"snippet":null,"score":null},{"slug":"brotli-on-nginx-thread-pools-ngx-mbrotli-vs-ngx-brotli","title":"Brotli on NGINX thread pools: ngx_mbrotli vs ngx_brotli","subtitle":null,"summary":"Mikhail Panfilov benchmarks ngx_mbrotli, which runs on-the-fly Brotli compression on an NGINX thread pool, against google/ngx_brotli, measuring p99 latency for other requests, requests per second, large-response speed, CPU time and memory, plus configuration advice.","content_type":"research","language":"en","canonical_url":"https://m-compressors.github.io/2026/ngx-mbrotli-thread-pool-benchmarks/","author":{"name":"Mikhail Panfilov","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"M-Compressors","url":"https://m-compressors.github.io/","listing_slug":null,"listing":null},"topics":[{"name":"Performance","slug":"performance","url":"https://listedarticles.com/topics/performance"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Open Source","slug":"open-source","url":"https://listedarticles.com/topics/open-source"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":3701,"reading_minutes":16,"published_at":"2026-10-22T09:50:00.000Z","added_at":"2026-10-22T14:17:46.246Z","updated_at":"2026-10-22T14:17:46.246Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/brotli-on-nginx-thread-pools-ngx-mbrotli-vs-ngx-brotli","markdown_url":"https://listedarticles.com/articles/brotli-on-nginx-thread-pools-ngx-mbrotli-vs-ngx-brotli.md","example":false,"citation":"Mikhail Panfilov, M-Compressors. \"Brotli on NGINX thread pools: ngx_mbrotli vs ngx_brotli.\" 22 Oct 2026. https://m-compressors.github.io/2026/ngx-mbrotli-thread-pool-benchmarks/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://m-compressors.github.io/2026/ngx-mbrotli-thread-pool-benchmarks/"},"snippet":null,"score":null},{"slug":"introducing-amutable-foundations","title":"Introducing Amutable Foundations","subtitle":null,"summary":"Amutable opens a private preview of Amutable Foundations, a Linux-based system engineered to be provable at every level, with hardware attestation of every machine, software image, and configuration for machine identity and compliance auditing.","content_type":"announcement","language":"en","canonical_url":"https://amutable.com/blog/introducing-amutable-foundations","author":{"name":null,"url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Amutable","url":"https://amutable.com/","listing_slug":null,"listing":null},"topics":[{"name":"Linux","slug":"linux","url":"https://listedarticles.com/topics/linux"},{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1542,"reading_minutes":7,"published_at":"2026-10-22T00:00:00.000Z","added_at":"2026-10-22T20:12:15.704Z","updated_at":"2026-10-22T20:12:15.704Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/introducing-amutable-foundations","markdown_url":"https://listedarticles.com/articles/introducing-amutable-foundations.md","example":false,"citation":"Amutable. \"Introducing Amutable Foundations.\" 22 Oct 2026. https://amutable.com/blog/introducing-amutable-foundations (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://amutable.com/blog/introducing-amutable-foundations"},"snippet":null,"score":null},{"slug":"sbd-we-have-a-filesystem-at-home","title":"SBD: We Have a Filesystem at Home","subtitle":null,"summary":"Fly.io's Daniel Botha introduces the Sprites Block Device (SBD), a simpler object-storage-backed block device that replaces the clever custom filesystem Sprites launched with, explaining why dumber checkpoints and 'just a disk' made Sprites more reliable.","content_type":"blog_post","language":"en","canonical_url":"https://fly.io/blog/sprites-block-device/","author":{"name":"Daniel Botha","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Fly.io","url":"https://fly.io/","listing_slug":null,"listing":null},"topics":[{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Storage","slug":"storage","url":"https://listedarticles.com/topics/storage"},{"name":"Engineering","slug":"engineering","url":"https://listedarticles.com/topics/engineering"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1282,"reading_minutes":6,"published_at":"2026-10-22T00:00:00.000Z","added_at":"2026-10-22T14:17:35.543Z","updated_at":"2026-10-22T14:17:35.543Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/sbd-we-have-a-filesystem-at-home","markdown_url":"https://listedarticles.com/articles/sbd-we-have-a-filesystem-at-home.md","example":false,"citation":"Daniel Botha, Fly.io. \"SBD: We Have a Filesystem at Home.\" 22 Oct 2026. https://fly.io/blog/sprites-block-device/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://fly.io/blog/sprites-block-device/"},"snippet":null,"score":null},{"slug":"security-disclosure-wednesday-october-21st","title":"Security Disclosure: Wednesday October 21st","subtitle":null,"summary":"Railway discloses that an unauthorized third party may have accessed encrypted customer environment variables, and in some cases their decrypted contents, as part of a series of attacks on platform companies; it recommends rotating secrets and explains paused builds and next steps.","content_type":"announcement","language":"en","canonical_url":"https://blog.railway.com/p/security-disclosure-wednesday-october-21st","author":{"name":"Jacob Cooper","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Railway","url":"https://railway.com/","listing_slug":"railway","listing":{"slug":"railway","name":"Railway","listing_type":"company","url":"https://listedstartups.com/companies/railway"}},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Cloud","slug":"cloud","url":"https://listedarticles.com/topics/cloud"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":252,"reading_minutes":1,"published_at":"2026-10-21T20:44:02.000Z","added_at":"2026-10-21T23:10:46.262Z","updated_at":"2026-10-21T23:10:46.262Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/security-disclosure-wednesday-october-21st","markdown_url":"https://listedarticles.com/articles/security-disclosure-wednesday-october-21st.md","example":false,"citation":"Jacob Cooper, Railway. \"Security Disclosure: Wednesday October 21st.\" 21 Oct 2026. https://blog.railway.com/p/security-disclosure-wednesday-october-21st (all-rights-reserved)","access":{"human_view":"full","full_text_available":true,"source_url":"https://blog.railway.com/p/security-disclosure-wednesday-october-21st"},"snippet":null,"score":null},{"slug":"the-bridge-to-agent-scale-git-infrastructure","title":"The bridge to agent-scale Git infrastructure","subtitle":null,"summary":"GitHub engineers explain how they moved a copy of 99.99999% of GitHub's repositories to Azure, how per-reference quorums will bring over the rest, and how object storage lets Git reads scale independently as agent traffic grows.","content_type":"blog_post","language":"en","canonical_url":"https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure/","author":{"name":"Eleanor White, Victoria Dye","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"GitHub","url":"https://github.blog/","listing_slug":null,"listing":null},"topics":[{"name":"Git","slug":"git","url":"https://listedarticles.com/topics/git"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Distributed Systems","slug":"distributed-systems","url":"https://listedarticles.com/topics/distributed-systems"},{"name":"AI Agents","slug":"ai-agents","url":"https://listedarticles.com/topics/ai-agents"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1714,"reading_minutes":7,"published_at":"2026-10-21T16:00:00.000Z","added_at":"2026-10-21T20:14:39.730Z","updated_at":"2026-10-21T20:14:39.730Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/the-bridge-to-agent-scale-git-infrastructure","markdown_url":"https://listedarticles.com/articles/the-bridge-to-agent-scale-git-infrastructure.md","example":false,"citation":"Eleanor White, Victoria Dye, GitHub. \"The bridge to agent-scale Git infrastructure.\" 21 Oct 2026. https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure/"},"snippet":null,"score":null},{"slug":"cloudflare-deploys-protections-against-php2shell-vulnerability","title":"Cloudflare deploys protections against php2shell vulnerability","subtitle":null,"summary":"Cloudflare describes the default WAF Managed Ruleset protections it deployed for the newly disclosed php2shell PHP vulnerabilities ahead of public disclosure, how the rules detect exploitation attempts, and why customers should still update PHP while keeping the protection enabled.","content_type":"blog_post","language":"en","canonical_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","author":{"name":"Daniele Molteni, Dan Jones, Kuber Nandwani","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Cloudflare","url":"https://www.cloudflare.com/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1162,"reading_minutes":5,"published_at":"2026-10-21T13:56:45.000Z","added_at":"2026-10-21T17:16:37.476Z","updated_at":"2026-10-21T17:16:37.476Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/cloudflare-deploys-protections-against-php2shell-vulnerability","markdown_url":"https://listedarticles.com/articles/cloudflare-deploys-protections-against-php2shell-vulnerability.md","example":false,"citation":"Daniele Molteni, Dan Jones, Kuber Nandwani, Cloudflare. \"Cloudflare deploys protections against php2shell vulnerability.\" 21 Oct 2026. https://blog.cloudflare.com/php-vulnerabilities-waf-protection/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/"},"snippet":null,"score":null},{"slug":"postgres-recovery-prefetch-considered-harmful-and-causing-outages","title":"Postgres recovery_prefetch Considered Harmful and Causing Outages","subtitle":null,"summary":"Jeremy Schneider describes a field investigation showing that Postgres's recovery_prefetch setting can quietly cause standby replay lag and production outages, tracing it back to a concern raised on the hackers list years ago and explaining what he found.","content_type":"blog_post","language":"en","canonical_url":"https://ardentperf.com/2026/10/20/postgres-recovery_prefetch-considered-harmful-and-causing-outages/","author":{"name":"Jeremy Schneider","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Ardent Performance Computing","url":"https://ardentperf.com/","listing_slug":null,"listing":null},"topics":[{"name":"Databases","slug":"databases","url":"https://listedarticles.com/topics/databases"},{"name":"Performance","slug":"performance","url":"https://listedarticles.com/topics/performance"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1253,"reading_minutes":5,"published_at":"2026-10-21T06:59:12.000Z","added_at":"2026-10-22T05:07:13.441Z","updated_at":"2026-10-22T05:07:13.441Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/postgres-recovery-prefetch-considered-harmful-and-causing-outages","markdown_url":"https://listedarticles.com/articles/postgres-recovery-prefetch-considered-harmful-and-causing-outages.md","example":false,"citation":"Jeremy Schneider, Ardent Performance Computing. \"Postgres recovery_prefetch Considered Harmful and Causing Outages.\" 21 Oct 2026. https://ardentperf.com/2026/10/20/postgres-recovery_prefetch-considered-harmful-and-causing-outages/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://ardentperf.com/2026/10/20/postgres-recovery_prefetch-considered-harmful-and-causing-outages/"},"snippet":null,"score":null},{"slug":"cloudflare-is-rewriting-everything-in-rust","title":"Cloudflare is rewriting everything in Rust","subtitle":null,"summary":"Sylvain Kerkour traces Cloudflare's shift from C and Lua NGINX modules to Rust after CloudBleed, covering Pingora, FL2 and the NGINX termination rewrite, a critique of its open-source posture, and how avoiding .unwrap() could have prevented the November 18, 2025 outage.","content_type":"opinion","language":"en","canonical_url":"https://kerkour.com/rust-at-cloudflare","author":{"name":"Sylvain Kerkour","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Sylvain Kerkour","url":"https://kerkour.com/","listing_slug":null,"listing":null},"topics":[{"name":"Rust","slug":"rust","url":"https://listedarticles.com/topics/rust"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Programming","slug":"programming","url":"https://listedarticles.com/topics/programming"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1102,"reading_minutes":5,"published_at":"2026-10-21T06:00:00.000Z","added_at":"2026-10-22T11:13:33.691Z","updated_at":"2026-10-22T11:13:33.691Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/cloudflare-is-rewriting-everything-in-rust","markdown_url":"https://listedarticles.com/articles/cloudflare-is-rewriting-everything-in-rust.md","example":false,"citation":"Sylvain Kerkour, Sylvain Kerkour. \"Cloudflare is rewriting everything in Rust.\" 21 Oct 2026. https://kerkour.com/rust-at-cloudflare (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://kerkour.com/rust-at-cloudflare"},"snippet":null,"score":null},{"slug":"whatever-happened-to-fire-escapes","title":"Whatever Happened to Fire Escapes?","subtitle":null,"summary":"Practical Engineering traces the history of the external iron fire escape in American cities, why it became the default retrofit after early fire egress laws, the problems that made it unreliable, and how building codes shifted to protected interior stairwells and other egress designs, with the tradeoffs regulation creates.","content_type":"essay","language":"en","canonical_url":"https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes","author":{"name":"Grady Hillhouse","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Practical Engineering","url":"https://practical.engineering/","listing_slug":null,"listing":null},"topics":[{"name":"Engineering","slug":"engineering","url":"https://listedarticles.com/topics/engineering"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"History","slug":"history","url":"https://listedarticles.com/topics/history"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":2407,"reading_minutes":10,"published_at":"2026-10-20T00:00:00.000Z","added_at":"2026-10-21T11:15:44.311Z","updated_at":"2026-10-21T11:15:44.311Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/whatever-happened-to-fire-escapes","markdown_url":"https://listedarticles.com/articles/whatever-happened-to-fire-escapes.md","example":false,"citation":"Grady Hillhouse, Practical Engineering. \"Whatever Happened to Fire Escapes?.\" 20 Oct 2026. https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes"},"snippet":null,"score":null},{"slug":"agentic-monitoring","title":"Agentic Monitoring","subtitle":null,"summary":"Ben Congdon argues that AI agents are structurally well suited to monitoring production systems, building on Anthropic's description of Claude \"superfans\" that watch single components, with a change-point monitoring case study and thoughts on why agentic monitoring can catch subtle issues traditional alerts miss.","content_type":"essay","language":"en","canonical_url":"https://benjamincongdon.me/blog/2026/10/19/Agentic-Monitoring/","author":{"name":"Ben Congdon","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Ben Congdon","url":"https://benjamincongdon.me/","listing_slug":null,"listing":null},"topics":[{"name":"AI Agents","slug":"ai-agents","url":"https://listedarticles.com/topics/ai-agents"},{"name":"DevOps","slug":"devops","url":"https://listedarticles.com/topics/devops"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Software Engineering","slug":"software-engineering","url":"https://listedarticles.com/topics/software-engineering"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1948,"reading_minutes":8,"published_at":"2026-10-19T13:00:00.000Z","added_at":"2026-10-19T23:14:04.310Z","updated_at":"2026-10-19T23:14:04.310Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/agentic-monitoring","markdown_url":"https://listedarticles.com/articles/agentic-monitoring.md","example":false,"citation":"Ben Congdon, Ben Congdon. \"Agentic Monitoring.\" 19 Oct 2026. https://benjamincongdon.me/blog/2026/10/19/Agentic-Monitoring/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://benjamincongdon.me/blog/2026/10/19/Agentic-Monitoring/"},"snippet":null,"score":null},{"slug":"a-bazel-bard","title":"A Bazel Bard","subtitle":null,"summary":"Son Luong Ngoc of BuildBuddy recaps BazelCon 26: hallway debates about deleting tests, why coding agents make CI history a blind spot for measuring tests, Uber's presence as a sign of a war for build talent, Meta's Buck2 configuration modifiers and Muse agent, and BuildBuddy's small team.","content_type":"blog_post","language":"en","canonical_url":"https://sluongng.substack.com/p/a-bazel-bard","author":{"name":"Son Luong Ngoc","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"Son's Substack","url":"https://sluongng.substack.com/","listing_slug":null,"listing":null},"topics":[{"name":"Developer Tools","slug":"developer-tools","url":"https://listedarticles.com/topics/developer-tools"},{"name":"Infrastructure","slug":"infrastructure","url":"https://listedarticles.com/topics/infrastructure"},{"name":"Software Engineering","slug":"software-engineering","url":"https://listedarticles.com/topics/software-engineering"}],"about_listings":[{"slug":"buildbuddy","name":"BuildBuddy","listing_type":"company","url":"https://listedstartups.com/companies/buildbuddy"}],"cover_image_url":null,"license":"all-rights-reserved","word_count":2472,"reading_minutes":11,"published_at":"2026-10-18T22:33:54.000Z","added_at":"2026-10-19T11:15:00.909Z","updated_at":"2026-10-19T11:15:00.909Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/a-bazel-bard","markdown_url":"https://listedarticles.com/articles/a-bazel-bard.md","example":false,"citation":"Son Luong Ngoc, Son's Substack. \"A Bazel Bard.\" 18 Oct 2026. https://sluongng.substack.com/p/a-bazel-bard (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://sluongng.substack.com/p/a-bazel-bard"},"snippet":null,"score":null}],"total":207,"count":20,"next_offset":20,"has_more":true,"query":{"q":null,"content_type":null,"topic":"infrastructure","publisher":null,"about":null,"author":null,"language":null,"sort":"newest","limit":20,"offset":0}}