Tech · Culture · Fiction
Article Nobody had to hack your meetings.
Over 180,000 tl;dv meetings were left open because access to recorded content was not conditioned on validated identity. What that failure exposes.
The benchmark isn't your bottleneck
Qwen3.8 Max topped the agentic index, but a benchmark win is a signal to test against your own tasks, not a reason to migrate your automation.
One grep, full repo access
A security camera shipped a full-scope GitHub PAT in its login page bundle. The credential exposure, supply-chain exploit path, GitHub audit-log telemetry, and why rotation - not removal - is the only fix.
CVE-2026-44843 turns one chat message into credential theft
CVE-2026-44843 turns a single chat message into credential loss. An operator breakdown of the one-hop path from unauthenticated input to identity material.
The camera on your shelf handed out your GPS
A TP-Link Kasa camera returned home GPS over unauthenticated UDP for six years. The mechanism, the pattern it exposes, and what must now be true.
Rust solved the compatibility trap with editions
SQLite's backward-compatibility promise freezes its worst defaults. Rust-style editions could ship strict typing and enforced constraints without breaking old files.
The padlock only proves someone holds the key
X.509 certificates authenticate a source, not the truth of its content, and trust resolved once at issuance is inherited unchanged until it expires.
The Wire — latest
All →- AI Bug-Hunting May Make Software Too Secure — and Revive the Backdoor Wars
- AI by Hand: Tom Yeh's Substack Teaches ML Math via Pen-and-Paper Exercises
- Australia's Home Battery Subsidy Halves Wholesale Power Prices in a Year
- Building an e-ink 'newspaper' from RSS feeds to escape phone reading
- China taps Deutsche Bank as Europe's first foreign yuan clearing bank
- Eigendrum: a client-side FEM solver that plays the modes of any drum shape
- Firefox becomes the last major browser to fully support uBlock Origin
- Gloomberb: an open-source, keyboard-driven Bloomberg Terminal clone
- Let cheap LLMs hallucinate labels, then map them back with embeddings
- The Same Code Fix Can Cost Wildly Different Token Bills — Here's Why
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.