All news

Analysis of why php2shell is not yet mass-exploited despite the panic.

The node2shell Brotli bug CVE-2026-111497 also affects Python and other Brotli consumers, not just Node.

A FAST feature detector using the 128-bit SIMD unit of the ESP32-S3 runs about 2x faster, about 6 ms per QVGA frame.

Walks through using SIMD in Go for a simple float32 add loop and the speedup over scalar code.

A 2001 USENIX paper on DERIVE, which reverse-engineers bit-level instruction encodings by feeding permutations of instructions to an assembler, covering MIPS, SPARC, Alpha, PowerPC and most of ARM and x86.

A glibc update in Flatpak runtime 21.08 broke Chromium audio because of a sandbox syscall filter, and the post traces the cause.

Lessons on Docker oddities learned while writing a container runtime.

An incremental approach to building a JIT compiler.

Twelve-year retrospective of rqlite, which replicates SQLite writes through a Raft log.

Indian government sites still serve revoked eMudhra TLS certificates.

MongoDB describes conformance testing a dozen specs across drivers in a dozen languages.

Explains incremental computation graphs learned while building the Yabu build tool.

Shows concrete cases where C undefined behavior does far worse than segfault.

POSIX wordexp(3) can run command substitution, so using it for tilde expansion is a code execution risk.

An essay on two aspects of compiler warning design: machine-applicable fixits and how code can suppress a warning, using GCC and Clang -Wparentheses as the example.

Shows the Tov language faster-than-Rust claims rely on rigged benchmarks.

Zig now uses partial operator precedence, so mixing some operators without parentheses is a compile error.

How a city builder game was made to run on a 16 MHz CPU.

Argues software is slow because of design choices, not language, so AI rewrites in fast languages will not help most programs.

C++26 ballot was disapproved with 12 of 20 P-members in favor, short of the required threshold.

A step-by-step guide to building Java ME feature phone apps with OpenJDK 8, MicroEmulator stub JARs and ProGuard for preverification, without the old Sun SDKs.

Matrix conference talk on redesigning the chat timeline data model for the next protocol generation.

Wild linker 0.11.0 enables Wasm linking by default and adds ports.

Astral ships experimental uv and ty integration with a unified uv check command.