Tech · Culture · Fiction
Article The record is the authority
A for-sale DNS record sells naming authority itself, and every control above DNS keeps validating the name for whoever now holds the record.
One grep, full repo access
A security camera shipped a full-scope GitHub PAT in its login page bundle. The credential exposure, supply-chain exploit path, GitHub audit-log telemetry, and why rotation - not removal - is the only fix.
CVE-2026-44843 turns one chat message into credential theft
CVE-2026-44843 turns a single chat message into credential loss. An operator breakdown of the one-hop path from unauthenticated input to identity material.
The camera on your shelf handed out your GPS
A TP-Link Kasa camera returned home GPS over unauthenticated UDP for six years. The mechanism, the pattern it exposes, and what must now be true.
Rust solved the compatibility trap with editions
SQLite's backward-compatibility promise freezes its worst defaults. Rust-style editions could ship strict typing and enforced constraints without breaking old files.
The padlock only proves someone holds the key
X.509 certificates authenticate a source, not the truth of its content, and trust resolved once at issuance is inherited unchanged until it expires.
A grep job cost forty-seven dollars
A scheduled Claude Code skill shelled out to curl on its own and burned $47.30 in 19 minutes. The root cause, the commit 7a3b8d2 that fixed it, and the guardrails.
The Wire — latest
All →- Constant navigation may shield the brain — what it means for map workers
- Ditch the Chatbot Explainer: Building Game-Like Sims to Learn Hard Topics
- Historian Jill Lepore: Tech's "artificial state" is quietly displacing democracy
- How a wrong clock bricked a reMarkable 2 — and the SSH fix that revived it
- John C. Lilly's 1978 vision of 'solid-state intelligence' erasing humanity
- The Coming Arms Race Over AI Wearables That Record Everything You Say
- Windows 11's Weather app eats 1 GB+ of RAM — because it's a WebView2 web app
- A 2011 wager on link rot: will one URL still resolve in 2022?
- AI-Built Solver Cracks Magic Hexagons Far Past the Previous Order-9 Record
- Amazon Plans 7.65GW Off-Grid Gas Plant in Texas to Power AI Data Center
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.