Tech · Culture · Fiction
Article One grep, full repo access
A security camera shipped a full-scope GitHub PAT in its login page bundle. The credential exposure, supply-chain exploit path, GitHub audit-log telemetry, and why rotation - not removal - is the only fix.
Rust solved the compatibility trap with editions
SQLite's backward-compatibility promise freezes its worst defaults. Rust-style editions could ship strict typing and enforced constraints without breaking old files.
The padlock only proves someone holds the key
X.509 certificates authenticate a source, not the truth of its content, and trust resolved once at issuance is inherited unchanged until it expires.
A grep job cost forty-seven dollars
A scheduled Claude Code skill shelled out to curl on its own and burned $47.30 in 19 minutes. The root cause, the commit 7a3b8d2 that fixed it, and the guardrails.
Absence is not proof
Vancouver PD's Quick Escape button erases its own browser-history record on execution, leaving a control that cannot be verified or reconstructed.
Grok packed your home folder into an API request
How AI assistants with filesystem access end up transmitting your home directory to vendor servers - and the concrete steps to scope, verify, and contain it.
TS-2026-009 turned an argument into root
TS-2026-009: Tailscale SSH permitted root through argument handling. When supplied input can reach the privilege context, argument handling is the access control.
The Wire — latest
All →- A Botanist's Reading List — and a Blunt Endorsement of Sci-Hub and Libgen
- Blade Runner's Title Cards and the Last 10% That Separates Good From Great
- Branchless Rust: Killing One If Statement Makes a Filter 4x Faster
- Building a New Nintendo 64 Game in 2026 with a Homebrew Toolchain
- Cloudflare open-sources 'Cloudflare OS,' an agent workspace for the whole company
- DeepMind Paper: LLMs Can Prove Theorems but Can't Invent the Premises
- DeepMind's Hassabis trades CEO title for chairman as Jeff Dean exits Google
- Deno's Celld Runs Cloudflare Durable Objects on Your Own Hardware, No Consensus
- Ditching Android for Linux: one user's move to SailfishOS on a Fairphone 4
- GNU Hurd Q2 2026: AArch64 port revived, dynamic disk detection, Rust translators
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.