Posts

JavaScript’s Date API is Broken JavaScript’s built-in Date API has quietly corrupted production data for 30 years due to unintuitive design choices like 0-indexed months and silent timezone shifts. The new Temporal API replaces these ‘sharp edges’ with immutable objects and explicit type separation for calendar dates and machine timestamps. https://blog.gaborkoos.com/posts/2026-07-21-Your-JS-Date-Is-Lying-to-You/ Securing AI-Generated Scripts with GraalVM As applications increasingly run AI-generated or customer-provided scripts, GraalVM provides a sandboxing framework to prevent malicious code from crashing hosts. By using separate heaps and strict resource limits, developers can execute untrusted JavaScript or WebAssembly without risking host application stability. ...

Linux Kernel to Enable Dynamic Interpreter Selection The Linux kernel is adding support for dynamic interpreter selection using eBPF, which enables binaries to be relocatable. This removes the need for fixed paths to interpreters (like ld.so), allowing software to run from any location without complex environment hacks, a major win for ecosystems like NixOS. https://fzakaria.com/2026/07/20/linux-kernel-will-support-origin-sort-of

Linux GPU Network Offloading Network packet processing is moving from the CPU to the GPU to bypass CPU bottlenecks. New Linux kernel patches enable AMD GPUs to handle high-speed packet processing and IPsec crypto directly in-kernel, significantly increasing throughput by leveraging the GPU’s parallel architecture. https://www.phoronix.com/news/KNOD-Network-Offload-AMD-GPUs Qualcomm Crypto Driver Disabled A dedicated hardware accelerator for encryption is being removed from default Linux builds because it is actually slower than the CPU it was meant to accelerate. The driver has a history of bugs and security race conditions, rendering it ‘harmful’ to system stability. ...

Postgres WAL Lock Bottleneck A database incident revealed that when storage slows down, Postgres WAL writes can cause thousands of backends to queue up behind a single exclusive lock, while read operations remain relatively unaffected. This occurs because WAL flushes hold the lock across the fsync operation, whereas reads drop their locks before hitting the disk, meaning a slow disk can trigger a catastrophic lock contention event rather than just aslowdown. ...

15-Year Linux Kernel Flaw Exposed A critical vulnerability known as ‘GhostLock’ has been discovered in every major Linux distribution since 2011. The flaw allows an unprivileged user to hijack kernel control flow and gain root access, highlighting a massive long-term security gap in the kernel’s locking mechanisms. https://nebusec.ai/research/ionstack-part-2/ Cloudflare Fixes Silent Data Truncation Bug Cloudflare identified a rare, years-old bug in the widely used Rust ‘hyper’ library that silently truncated large HTTP responses while reporting success. The issue was only detectable via kernel-level syscall tracing (strace), illustrating the dangers of silent cancellation in async Rust. ...

xAI Grok CLI Leaks Entire Repositories A security teardown proves xAI’s Grok Build CLI transmits unredacted secrets and full repository snapshots to Google Cloud Storage by default. Even when explicitly told not to read files, the tool uploads the entire codebase as a git bundle, creating a massive data exfiltration risk for developers. https://gist.github.com/cereblab/dc9a40bc26120f4540e4e09b75ffb547 Browser Math Fingerprinting Exposed Anti-bot systems can now identify a user’s operating system by analyzing the last bits of mathematical calculations. Because different OS math libraries round numbers differently, a single call to Math.tanh can betray whether a browser is running on Windows, macOS, or Linux, bypassing traditional User-Agent spoofing. ...

Ghost Font: The Anti-AI Typeface A new experimental font uses motion-based rendering to create text that is easily readable by humans but nearly impossible for current AI models to decode, effectively creating a visual ‘CAPTCHA’ for the emberek. https://www.mixfont.com/ghost-font AI-Driven Shift from Haskell to Python Scarf has abandoned Haskell after seven years in production, citing that AI coding agents make Python’s rapid iteration and fast build cycles far more productive than Haskell’s rigorous but slow compilation process. ...

Linux Now Boots on Apple M3 Pro, Max, and Ultra Mainline Linux is expanding support for Apple’s M3 chip family. New patches allow the kernel to boot to a console on M3 Pro, Max, and Ultra hardware, providing the foundation for future GPU acceleration and full system functionality. https://www.phoronix.com/news/Linux-DT-Apple-M3-Pro-Max-Ultra AMD OLED Power Savings Coming to Linux AMD is bringing Content Adaptive Contrast and Power (CACP) to Linux, a feature that optimizes power consumption for OLED panels. This update, along with Panel Replay and PSR, aims to significantly reduce battery life impact for OLED laptop users. ...

Mistral’s Robot Brain: Single-Camera Navigation Mistral has launched Robostral Navigate, an AI model that allows robots to navigate complex, unseen environments using only a standard camera. By outperforming multi-sensor systems, it significantly lowers the hardware requirements for autonomous robots in logistics and hospitality. https://mistral.ai/news/robostral-navigate/ Eve Online’s Engine Goes Open Source Fenris Creations has open-sourced the Carbon engine behind Eve Online. This move allows developers to use the tech for free to build their own games or expand the Eve ecosystem, though the game’s complex economy remains proprietary. ...

The AI Margin Collapse Frontier AI labs face a potential margin collapse as open-weights models like GLM 5.2 reach parity with GPT-5.5 and Claude Opus at a fraction of the cost. Because switching costs for developers are now trivial, the high profit margins previously earned on inference are under threat, shifting the value from model providers to those who can optimize serving costs. https://martinalderson.com/posts/the-upcoming-ai-margin-collapse-part-1-glm-5-2/ Windows ‘Global Device ID’ Surveillance A federal arrest of a hacker revealed that Microsoft uses a ‘Global Device ID’ (GDID) to uniquely identify Windows installations. This persistent ID allows Microsoft to link specific devices to third-party web activity, effectively enabling OS-level surveillance that bypasses traditional browser privacy protections and is difficult for users to opt out of. ...