Feed Concierge
updated · repo
- Efficient Extraction for Effectful E-graphscompilerscompsciperformanceztatlock.net ·
- A New Way to Think About Borrow Checking (In Reverse)compilerspltcompsciverdagon.dev ·
- Beyond synthetic testing: Capturing and replaying real database workloads at Airbnbdatabasestestingdevopsmedium.com ·
- Feature #22446: Speed up several core methods in Array, Range, String, Integer, Float and Time (open)performancebugs.ruby-lang.org ·
- Jev-Driven SRE Diagnosis: What Worked and What Faileddevopsdebuggingaisregym.com ·
- Feature #22437: Speed up creation and basic operations of Struct / Data (open)performancebugs.ruby-lang.org ·
- Static Analysis for the Uninitializedcompsciplttenderlovemaking.com ·
- Ghidra + CBMC = Assembly Model Checkerformalmethodsphilipzucker.com ·
- Foreman or Docker Compose? The ideal local Rails setup in 2026performancerubyinsights.blog ·
- PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)securitylinuxpwn.ai ·
- rails/rails#59183 Add config.zjit to enable ZJIT after bootjitperformancecompilersgithub.com ·
- Saturation at GitHub: the saga continuesdebuggingdevopssurfingcomplexity.blog ·
- ruby_llm-providers-lms v0.3.0 with decisions API releasedreleaseaiapimadbomber.github.io ·
- Feature #22400: Use rb_long_t for lengths so that String and Array can exceed 2GiB on mswin (closed)pltapibugs.ruby-lang.org ·
- Chris van Eijk: Rails, ActiveRecord and PostgreSQL RLS, measureddatabasesconcurrencydebuggingpostgr.es ·
- Key Autoscaling Metric #2 – Mean Time to Stop Suckingdevopsblog.appliedcomputing.io ·
- Bots - Precursor adds Monitor modecloudreleasedevelopers.cloudflare.com ·
- Christophe Pettus: All Your GUCs in a Row: random_page_cost and seq_page_costdatabasesperformancepostgr.es ·
- Standard Ruby on Apple Silicon and Docker: one linter, two runnersrubyinsights.blog ·
- 運営指定の遠隔操作ソフト導入を参加条件とされたセキュリティイベントについてまとめてみたsecuritypiyolog.hatenadiary.jp ·
- Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix Scaledevopsdebuggingnetflixtechblog.com ·
- Superoptimizing an FPU Emulatorperformancecompscicompilerspurplesyringa.moe ·
- rails/rails#59181 Deprecate `ssl_default_redirect_status:` argument of `ActionDispatch::SSL`webapigithub.com ·
- rails/rails#59140 Extract missing_attribute from generated readerperformancegithub.com ·
- Chris van Eijk: TypeORM and PostgreSQL row-level security, measureddatabasesconcurrencyperformancepostgr.es ·
- [$] Safe self-referential data structures in kernel Rustlinuxcompscipltlwn.net ·
- Hybrid Reasoning Agents: LLM agents that think in latent space, act through textaiarxiv.org ·
- Ship Your Interpreterformalmethodscompilerspltbasis.ai ·
- Feature #21308: Replacing the Float#to_s (dtoa.c) implementation with a modern algorithm (open)performancecompscibugs.ruby-lang.org ·
- Upgrading a Rails app from Ruby 3.4.4 to 4.0.3: what actually breaksreleaserubyinsights.blog ·
- Cloud Workload Security - Cloud Workload Security is now available in Betacloudsecurityreleasedevelopers.cloudflare.com ·
- rails/rails#59166 Find the media type of a request without a Regexpperformancewebgithub.com ·
- rails/rails#59163 Share one frozen Arel.star instead of building it per callperformancegithub.com ·
- Amazon DynamoDB Streams now supports timestamp-based stream processingclouddatabasesreleaseaws.amazon.com ·
- A small RSpec helper that saves code, risk, and AI tokenstestingwidefix.com ·
- CVE-2026-16317 and CVE-2026-16318: Issues with s2n-tls: an open-source implementation of the TLS/SSL protocolssecuritycryptographynetworkingaws.amazon.com ·
- rails/rails#59162 Avoid String allocations in Request#content_mime_typeperformancewebgithub.com ·
- rails/rails#59175 Bump the minimum supported MySQL version to 5.7.9databasesgithub.com ·
- rails/rails#59026 Add `before_ractorize` load hook and move framework ractorizing into railtiesconcurrencyapigithub.com ·
- New release Truemail 🚀 configurable framework agnostic plain Ruby 📨 email validatorreleasesecuritygithub.com ·
- Stop paging on how your machines feeldevopsgreatcircle.com ·
- Does moving a GPU server's request loop into the kernel save CPU?linuxperformancenetworkeunomia.dev ·
- CLP: Efficient and Scalable Search on Compressed Text Logs (2021)performancecompsciusenix.org ·
- vercel-labs/tsc-ts: TypeScript written in TypeScriptcompilerstypinggithub.com ·
- 開発・検証環境のPR承認と負荷試験をAIに任せる ── SRE待ちを減らす線引きとハーネスdevopsvcstechblog.zozo.com ·
- Álvaro Hernández: Open-source Citus matches PlanetScale's Neki at 10M QPS on half the data nodesdatabasesperformancedistributedpostgr.es ·
- Christophe Pettus: All Your GUCs in a Row: quote_all_identifiersdatabasespostgr.es ·
- rails/rails#59165 Share the constant Arel.sql literals instead of building them per queryperformancegithub.com ·
- I built a programming language that LLMs can't useaipltblog.picheta.me ·
- Chris van Eijk: stack depth limit exceeded in PostgreSQL: four causesdatabasesdebuggingpostgr.es ·
- Developing for Debugging (2025)networkingdebuggingdavepacheco.net ·
- Christophe Pettus: All Your GUCs in a Row: primary_slot_namedatabasesdistributedpostgr.es ·
- SolidJobs + SolidTrace + Warm IPC perform worker 2000 alloc/s vs 200 alloc/s sidekiqperformanceconcurrencygithub.com ·
- I built the RealWorld app in Lean 4formalmethodswebleangineer.com ·
- It's time to talk about TEEssecurityhardwarealinush.github.io ·
- Feature #21020: Sync sig directory for prism of default gem. (closed)typingbugs.ruby-lang.org ·
- Show HN: Sphinx – A hook that quizzes you on your AI's code before shippingvibecodingvcssphinx-six-theta.vercel.app ·
- Lean now ships with verified kernelsformalmethodsreleasepltleodemoura.github.io ·
- Prompt injection in HTTP headers: what 217M web responses showsecurityaisignalscorps.com ·
- Bug #22286: Closing a TCPServer while another thread is blocked in accept can discard a just-accepted connection's file descriptor, leaving the peer connected to nothing (open)concurrencybugs.ruby-lang.org ·
- Faster blank? checks, safer SQLite rollbacks, and more!performancewebrubyonrails.org ·
- Threads, Ractors and Fibers in Ruby 4: what I learned by measuringconcurrencyperformanceamalrik.github.io ·
- Chris Travers: PostgreSQL 18 and libnumadatabasesperformancepostgr.es ·
- Staying Evergreen: How we automated secure access and repo hygiene in a shared orgauthvcsgithub.blog ·
- JPCERT/CC、アプリ解析によるAPI攻撃の手口を報告、Flutter解析ツールの痕跡も ——API認証情報の扱いに注意喚起securitygihyo.jp ·
- Black-Box HashDoS: Attacking Hash Tables Without Knowing the Hash Functionsecuritycompsciorlp.net ·
- CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of servicesecuritycloudnetworkingaws.amazon.com ·
- I never authorized an integration that scans my secretssecuritygithub.com ·
- Parser Combinatorscompscipltt3.at ·
- Lessons learned building Fronteira, an MCP proxy with behavioral guardrailssecurityaiwiki.alcidesfonseca.com ·
- Bug #22396: Using rb_postponed_job_trigger causes YJIT/ZJIT compiled methods side exits (closed)jitcompilersperformancebugs.ruby-lang.org ·
- Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernelsecuritylinuxaws.amazon.com ·
- Amazon CloudFront announces dual-stack support for VPC originscloudnetworkingreleaseaws.amazon.com ·
- Everyone is doing Git on S3 wrongvcsperformanceenroute.sh ·
- Dirty Frag and other issues in Amazon Linux kernelslinuxsecuritycloudaws.amazon.com ·
- Composite objects and C++26 the std::polymorphic typepltmariusbancila.ro ·
- You could have invented transformers from memoryaicompscimathalexwang.ai ·
- Programming Language Fundamentals in Agdapltcompsciformalmethodsplfa.github.io ·
- Multi-region disaster recovery for Amazon API Gateway WebSocket APIsclouddistributeddevopsaws.amazon.com ·
- A Preflight You Can Run | Syed Aslamwebsyedaslam.com ·
- Workers, Cloudflare CLI - Test Cron Triggers with Local Explorercloudtestingreleasedevelopers.cloudflare.com ·
- Amazon CloudWatch announces log routing and chained log parsersclouddevopsreleaseaws.amazon.com ·
- Reducing storage initialization impact in Amazon RDS for PostgreSQL after snapshot restorecloudperformancedatabasesaws.amazon.com ·
- TimeSeries Tiered Storage Journey: Kafka/Flink Streams to Native Cassandra Cold Readsdatabasesdistributednetflixtechblog.com ·
- What requirements don't you have?seangoedecke.com ·
- rails/rails#59170 Share the remaining constant Arel nodes instead of building them per queryperformancegithub.com ·
- Bug #22452: `rb_equal` returns true for `NaN == NaN` (open)bugs.ruby-lang.org ·
- Outboxパターンの素振りをしたspeakerdeck.com ·
- CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()securitycloudaws.amazon.com ·
- Package managers have an integrity problemsecurityblog.trailofbits.com ·
- AI Scan for pull requests generally availablereleasesecuritygithub.blog ·
- Building a Linearizable Log on READ COMMITTED Isolationdatabasesconcurrencyperformancematerialize.com ·
- Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSDsecuritycalif.io ·
- Open source license compliance generally availablereleasegithub.blog ·
- AWS Lambda Durable Execution SDK for Go is now generally availablecloudreleaseapiaws.amazon.com ·
- rails/rails#59024 Avoid building separator regexps on every strip_insignificant_zeros callperformancegithub.com ·
- CVE-2026-18140 - Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated serverssecuritycloudaws.amazon.com ·
- Web Framework Benchmark Battle 2026, Any%performancewebspeakerdeck.com ·
- Email notifications for repository push events have been retiredgithub.blog ·
- Christophe Pettus: A Parade of Horribles, in Serial Orderdatabasesconcurrencycompscipostgr.es ·
- rails/rails#59083 Add read-only attributes and use it instead of building a cacheperformancegithub.com ·
- Superlite: A Faster Alternatie to Superpowersvibecodingcontextfirst.blog ·
- Building Node.js applications with Sequelize ORM and Amazon Aurora DSQLclouddatabasesaws.amazon.com ·
- rails/rails#59164 Raise ActiveModel::MissingAttributeError with a real backtracegithub.com ·
- The Intel 8087 chip: floating-point addition and subtractionhardwarehistoricalrighto.com ·
- rails/rails#59094 Spare the thunk in before callbacks for known terminatorsperformancegithub.com ·
- Agentic autofix for code scanning alerts general availabilityreleasevibecodinggithub.blog ·
- Writing stateful effect handlers in EYGplteyg.run ·
- Rails engines: a gem that lives inside your appwebrubyinsights.blog ·
- rust-djinn: You Should Specify Your Code Unambiguously (and Prove That You Did)formalmethodsvibecodingplthenniger.dev ·
- rails/rails#59106 Cut allocations in per-form CSRF token generationperformancewebgithub.com ·
- Bug #22406: Process.fork can leave the child unable to resolve hostnames: getaddrinfo helper threads take glibc's resolver lock after releasing the fork lock (closed)concurrencybugs.ruby-lang.org ·
- rails/rails#59097 Memoize the attribute builder per schema contextperformancegithub.com ·
- The Lifecycle of LLM-as-a-Judge: Building, Aligning, and Monitoring at scaleainetflixtechblog.com ·
- High performance policy routed IPsec mesh SD-WANnetworkranet3.com ·
- Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-reactsecuritycloudaws.amazon.com ·
- rails/rails#59158 Share a collection buffer only between ERB templateswebgithub.com ·
- rails/rails#59056 Don't build structured events that no subscriber will consumeperformanceapigithub.com ·
- Railsのためのパスキー実践入門 〜マルチテナントSaaSでの意思決定〜authwebspeakerdeck.com ·
- 同じ質問に2回お金を払うのをやめた: LLM の前に置くだけの重複排除プロキシを Rust (Tokio) で作ったaiqiita.com ·
- Download GitHub Code Quality license usage as a CSVgithub.blog ·
- A UAF turned RCEsecuritydaniel.haxx.se ·
- Why Is My Kubernetes Job Still Pending? Tracing Kueue Admission with Headlampdebuggingdevopskubernetes.io ·
- How to Profile Rust Performance using Grafana and Prometheusperformancedevopshotpath.rs ·
- CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAFsecuritycloudnetworkingaws.amazon.com ·
- llm-echo 0.5releasedebuggingaisimonwillison.net ·
- From 2,500 requests to 24: Rebuilding star history without the stargazersapiperformancegithub.blog ·
- Making all divisions slower to fix a bug in 0.000000000000000000542% of casescompilerspltcompscifuthark-lang.org ·
- AWS End User Messaging now offers managed OTP verification end-to-endcloudauthreleaseaws.amazon.com ·
- rails/rails#59058 Reduce allocations across URL generationperformancewebgithub.com ·
- Feature #22244: `ruby -UU` should set both internal and external, `ruby -E` should print encoding list (open)bugs.ruby-lang.org ·
- Hackers exploit SiteGuard WAF flaw to run commands as adminssecuritybleepingcomputer.com ·
- Dave Page: pgbuild, and Knowing What Ships with pgAdminpostgr.es ·
- rails/rails#59155 Keep per-item collection rendering for CollectionRenderer subclasseswebgithub.com ·
- Chris van Eijk: Hibernate multi-tenancy and PostgreSQL RLS in Spring Bootdatabasesdebuggingconcurrencypostgr.es ·
- Feature #22444: Ractor.new should use Ractor.shareable_proc semantics for the block (open)concurrencypltapibugs.ruby-lang.org ·
- rubygems.org now shows security warnings for gemssecurityblog.rubygems.org ·
- Tejaswi Thimmaiah: PostgreSQL Roles and Privileges Explained: A Practical RBAC Guidedatabasesauthpostgr.es ·
- Java sealed classes and exhaustive pattern matchingpltneilmadden.blog ·
- rails/rails#59115 Delimit numbers in place and assemble format options in one passperformancegithub.com ·
- rails/rails#59121 Use new resolve_alias method in read_attribute tooperformancegithub.com ·
- rails/rails#59100 Disable triggers of tables shadowed on the PostgreSQL search pathdatabasesgithub.com ·
- Tmux and Claude Code: Sessions, Send-Keys, and the Ceilingvibecodingcrystl.dev ·
- GitHub Actions workflow lockfiles in public previewdevopsreleasesecuritygithub.blog ·
- Cloudflare、Viteアプリの開発と展開をつなぐ「Void」をオープンソースで公開cloudreleasewebgihyo.jp ·
- Why harnesses matter for energy (and token) efficiencyaiperformanceneuralwatt.com ·
- rails/rails#59102 Use Symbol#name for session key stringificationperformancegithub.com ·
- rails/rails#59118 Render collection items into one buffer when nothing needs them apartperformancewebgithub.com ·
- rails/rails#59091 Allocation-free reads through OrderedOptions#method_missingperformancegithub.com ·
- When a database restore signs you in as someone elseauthwebsecuritymsg.samsonov.io ·
- Netflix Stratum Media Processing: Automated Container Right-Sizingdevopsperformancenetflixtechblog.com ·
- Christophe Pettus: All Your GUCs in a Row: primary_conninfodatabasesdistributedpostgr.es ·
- rails/rails#59054 Short-circuit route matching for static pathsperformancewebgithub.com ·
- rails/rails#59053 Skip static file candidates whose top-level entry doesn't exist in public/performancewebgithub.com ·
- The road to iroh 1.0networkingreleaseiroh.computer ·
- CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driversecuritycloudaws.amazon.com ·
- Workers, Cloudflare CLI - Search Cloudflare documentation with the Cloudflare CLIcloudreleaseapidevelopers.cloudflare.com ·
- Teal – A statically-typed dialect of Luatypingpltcompilersteal-language.org ·
- GitHub’s model for secret detection: Finding more secrets with less noiseaisecurityperformancegithub.blog ·
- Cloudflare Tunnel, Cloudflare Tunnel for SASE, Cloudflare Mesh, Cloudflare One - 50,000 routes per account and Tunnels for Platformscloudnetworkingdevopsdevelopers.cloudflare.com ·
- Amazon ECS adds LiveTaskCount and removes the charge for RunningTaskCount metricclouddevopsaws.amazon.com ·
- Translations at Scale: Memory Optimization Techniques That Kept Uber's P99 Under 1msperformancegcuber.com ·
- Bug #22451: Coderange may be set incorrectly when concatenating a string into itself (open)bugs.ruby-lang.org ·
- rails/rails#59103 Cache derived controller constant namesperformancewebgithub.com ·
- rails/rails#59099 Skip path normalization for already-normalized request pathsperformancewebgithub.com ·
- rails/rails#59096 Spare the Content-Type parsing on the response for headers it set itselfperformancewebgithub.com ·
- scrap4rb: Find the Messy Tests in a Ruby Projecttestingroberthopman.com ·
- rails/rails#59114 Build token_list and class_names with fewer intermediate arraysperformancegithub.com ·
- rails/rails#59113 Translate distance_of_time_in_words without an OptionMergerperformancewebgithub.com ·
- Inline rendering with document.currentScriptwebsimonwillison.net ·
- Bulk Executor for Amazon DynamoDB, Part 2: Lessons we learned the hard wayclouddatabasesconcurrencyaws.amazon.com ·
- Clearer, Not Louder: Simona Ursan on Leading Incidentsdevopsuptimelabs.io ·
- Ruby 4.1.0-preview1 Released | Rubyreleaseconcurrencygcruby-lang.org ·
- CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentialssecuritycloudaws.amazon.com ·
- CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failuresecuritycloudauthaws.amazon.com ·
- AWS、Lambda Web Functionsを提供開始 ——WebアプリをLambda用のイベントハンドラーへ書き換えずにデプロイcloudreleasedevopsgihyo.jp ·
- Better HTTP/1 connection reuse in Go 1.27performancenetworkinggo.dev ·
- Hubert 'depesz' Lubaczewski: Old tech is sometimes better – a case study based on blogpost from Now-Next…databasesperformancepostgr.es ·
- rails/rails#59105 Avoid materializing per-instance config copies for common readsperformancegithub.com ·
- CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptunesecurityclouddatabasesaws.amazon.com ·
- Changelog #350releasecompilersrust-analyzer.github.io ·
- CVE-2026-62322: Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)securityauthwebgithub.com ·
- It Turns Out Intel TDX Doesn't Need So Much Cache Flushingperformancehardwarelinuxphoronix.com ·
- Unload event deprecated in Chrome | Blog | Chrome for Developerswebapideveloper.chrome.com ·
- rails/rails#59101 Truncate tables shadowed on the PostgreSQL search pathdatabasesgithub.com ·
- Dave Page: Moving the pgAdmin Build Farm to GitHub Actionsdevopspostgr.es ·
- Inline rendering with document.currentScriptwebleanrada.com ·
- Bug #22432: Range#include? returns true for the end of an empty range of single-character Strings (open)bugs.ruby-lang.org ·
- RuboCop 1.92: Agents Welcomereleasevibecodingmetaredux.com ·
- CVE-2026-15738 - Issue with AWS Load Balancer Controller Cross-Namespace Traffic Interception via HTTPRoute/GRPCRoute Priority Orderingsecuritycloudnetworkingaws.amazon.com ·
- Sequences and other volatiles in Nekidatabasesdistributedplanetscale.com ·
- Analyzing Rust programs with Charoncompilersapilwn.net ·
- Beam model by Reflection is now available on Amazon SageMaker JumpStart and AWS Trainiumcloudaireleaseaws.amazon.com ·
- CVE-2026-13769 – Insecure file permissions in AWS CLIsecuritycloudaws.amazon.com ·
- Interactive refactoring in goplsapigo.dev ·
- rails/rails#59111 Build the association cache on first accessperformancegithub.com ·
- Sentry's Flutter SDK 10.0: Streaming Traces and More Accurate Crash-Free Ratesreleasemobiledevopsblog.sentry.io ·
- rails/rails#59107 Dispatch polymorphic URL helpers for a model without intermediate arraysperformancewebgithub.com ·
- Visualizing crossbeam Epoch Based Reclamationconcurrencycompscisofiabelen.github.io ·
- Cloudflare WAN, Magic Transit, Cloudflare One - BGP route filtering for IPsec and GRE tunnelscloudnetworkingdevopsdevelopers.cloudflare.com ·
- Adding Custom Thor Commands to Your Rails Appisland94.org ·
- AWS Transfer Family now supports AWS Secrets Manager storage for SFTP server host keyscloudreleasedevopsaws.amazon.com ·
- Launch AWS DevOps Agent to review findings and test results from AWS Resilience Hubclouddevopsreleaseaws.amazon.com ·
- rails/rails#59087 Fast path for single primary keys in to_paramperformancegithub.com ·
- CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-libsecuritycloudaws.amazon.com ·
- RFC8950: Announce IPv4 with an IPv6 next-hopnetworkinganuragbhatia.com ·
- rails/rails#59109 Skip the %Z substitution in TimeWithZone#strftime when the format has noneperformancegithub.com ·
- CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-httpsecuritycloudaws.amazon.com ·
- Anthropic、社内モノレポをGitから独自基盤へ移行 ——AIエージェントによるコード変更の急増に対応vcsperformancedevopsgihyo.jp ·
- rails/rails#59108 Build Enumerable#index_with without a pair array per elementperformancegithub.com ·
- Nemotron 3.5 Super VL model now available on Amazon SageMaker JumpStartcloudaireleaseaws.amazon.com ·
- GitHub App improvements for least privilege and managementauthreleasegithub.blog ·
- Feature #21539: Export symbols for external profiling of stripped shared Ruby builds (open)bugs.ruby-lang.org ·
- rails/rails#59090 Read the controller logger from the config hash directlyperformancegithub.com ·
- Codex Desktop continuously generates Crashpad pending dumpsgithub.com ·
- Privileged Access for Web Apps: HTTPSreleasetwingate.com ·
- CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDKsecurityaws.amazon.com ·
- Amazon Managed Workflows for Apache Airflow now offers AI agent skillscloudreleasevibecodingaws.amazon.com ·
- サイボウズのログ基盤 2026年版 ― Apache Iceberg × Trino によるアーキテクチャ刷新devopsdatabasesdistributedblog.cybozu.io ·
- 11 year old unsoundness bugs found in Rust borrow checkercompilersplttypinggithub.com ·
- CVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflowsecuritycloudaws.amazon.com ·
- [tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jevsecurityaitldrsec.com ·
- Escape LIKE Wildcards with sanitize_sql_likedatabaseswebandycroll.com ·
- Storage layout and best practices for Amazon RDS Custom for SQL Serverclouddatabasesdevopsaws.amazon.com ·
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driversecuritycloudaws.amazon.com ·
- rails/rails#59119 Keep Ractor-proxied connection state on the main Ractorconcurrencygithub.com ·
- C++26: the new debugging headerdebuggingapisandordargo.com ·
- CVE-2026-12283 - Issue with Athena Federated Query Synapse Connectorcloudsecuritydatabasesaws.amazon.com ·
- CVE-2026-106495: Backstage: Improper access control in backend action invocationsecurityauthgithub.com ·
- Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262securityaws.amazon.com ·
- CVE-2026-11400 and CVE-2026-11401securitycloudaws.amazon.com ·
- rails/rails#59104 Memoize the host on the request and skip the port regexp when there is noneperformancewebgithub.com ·
- How the Claude Code team does code reviewvibecodingclaude.dev ·
- Feature #22441: Add Ractor#alive? (open)concurrencyapibugs.ruby-lang.org ·
- Upcoming deprecation of selected GitHub Copilot models in mid-Novemberaigithub.blog ·
- Claude reveals ECDSA curve originscryptographyhistoricalanthropic.com ·
- The NIST Elliptic Curves Seeds Bounty Has Been Claimedcryptographyhistoricalwords.filippo.io ·
- Bug #22450: Jump value attaches block in incorrect place under parse.y (closed)compilersbugs.ruby-lang.org ·
- Neural networks are cleanaialready-clean.goodfire.com ·
- Alexander Ioffe: Explain Analyze is a sample-size of One: Your query ran 1,100x faster the second time. It wasn't the cache.databasesperformancedebuggingpostgr.es ·
- Gleam case exhaustiveness, as a fancompilerspltoyster.pckt.blog ·
- Feature #22431: Add `IO#unpack` and `IO#unpack1` (open)apiperformancebugs.ruby-lang.org ·
- Release v5.3.0 · expressjs/expressreleasewebapigithub.com ·
- rails/rails#59089 Memoize controller url_options with script_name across callsperformancewebgithub.com ·
- CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driversecuritycloudaws.amazon.com ·
- Scope workloads and share resilience policies with AWS Resilience Hubclouddevopsreleaseaws.amazon.com ·
- Show HN: Parsimony – an open-source benchmark for how much code AI models addaiparsimony.lasu.dev ·
- rails/rails#59117 Append tag attributes without a string per attributeperformancewebgithub.com ·
- rails/rails#59095 Allocate nothing in the notifications fanout for silenced subscribersperformancegithub.com ·
- Cloudflare One, Gateway - Application Library now supports custom applicationscloudreleasedevelopers.cloudflare.com ·
- rails/rails#59092 Automatically detect Aube as a JavaScript package managergithub.com ·
- Show HN: Building an LLM from Scratch in TypeScriptaibook.humanexperiences.io ·
- rails/rails#59110 Build String#truncate's result in one copyperformancegithub.com ·
- CVE-2026-102989: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responsessecuritywebgithub.com ·
- Chris van Eijk: Who bypasses row-level security in PostgreSQL? Measureddatabasesauthsecuritypostgr.es ·
- The Double Headed Stack Allocatorperformancecompsciblog.demofox.org ·
- TAINT_FORCED_BIND Sent In For Linux 7.4 To Deal With Major Fuzzing Attacklinuxphoronix.com ·
- PostgreSQL 19 RC1 is now available in Amazon RDS Database Preview Environmentclouddatabasesreleaseaws.amazon.com ·
- Exploring AWS Lambda Web Functions for building web applicationscloudwebdevopsaws.amazon.com ·
- llm.rb v17.0.0 released!releaseaigithub.com ·
- Zero to Calc in Six Days: Inside XBOW's Chrome Full Chainsecuritywebxbow.com ·
- The Folders Programming Languagepltdanieltemkin.com ·
- Cloudflare One, Workers, Gateway - Gateway and Workers integration is now in public betacloudreleasedevopsdevelopers.cloudflare.com ·
- rails/rails#59120 AssociationRoute: consolidate how association keys are read and writtengithub.com ·
- rails/rails#59088 Build ActionDispatch::Request's inner Rack::Request lazilyperformancewebgithub.com ·
- Bug #22453: GET_EC() may break when the native thread switches under M:N threads (open)concurrencycompilersbugs.ruby-lang.org ·
- rails/rails#58977 Make Active Job's queue adapter name and queue name prefix readable from non-main Ractorsconcurrencygithub.com ·
- CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transportsecuritycloudaws.amazon.com ·
- Bug #21559: Unicode normalization nfd -> nfc -> nfd is not reversible (closed)bugs.ruby-lang.org ·
- ZXC: Lossless compression built for ultra-fast decodeperformancelibzxc.org ·
- Notes on the Complex Roots of Unitymatheli.thegreenplace.net ·
- Kill SSH on ECS: get a Rails console via ECS Exec with Terraformclouddevopsrubyinsights.blog ·
- Gravity Defied, the old fashion motorbike game, rebuilt with pure Ruby physicsgithub.com ·
- CVE-2026-31431securitycloudaws.amazon.com ·
- I Deleted 168,000 Lines of Comments. My AI Agent Didn't Noticevibecodingaiopenstation.blog ·
- A practical guide to AI in Rails with RubyLLM: structured text, tools, imagesaiwebrubyinsights.blog ·
- Monitor Amazon Aurora DSQL costs with the Aurora DSQL console and CloudWatch alarmsclouddatabasesdevopsaws.amazon.com ·
- A skeptic's first contact with Kubernetes (2024)devopsblog.davidv.dev ·
- Pg_vectorsearch: An index that is faster than pgvector's IVFFlat and HNSWdatabasesperformancecompscigithub.com ·
- AWS Lambda recursive loop detection now supports Amazon EventBridge Custom event busesclouddevopsreleaseaws.amazon.com ·
- Apple Contributes SSAF Driver To LLVM Clang For Source Code Transformationscompilersphoronix.com ·
- Creusot 0.14.0 release - Contracts for Rust, formally provedformalmethodsreleasepltdevlog.creusot.rs ·
- rails/rails#59045 Keep the lock when re-pinning a pinned connectionconcurrencygithub.com ·
- Bug #22434: "No live threads left. Deadlock?" when running system() or spawn in Ractors (open)concurrencybugs.ruby-lang.org ·
- CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Pythonsecuritycryptographycloudaws.amazon.com ·
- Rules - Remove surrounding bytes with trim functionscloudreleasedevelopers.cloudflare.com ·
- Iodine 0.8: A C-Powered Ruby Server Built for Long-Lived Connectionsreleasewebgithub.com ·
- rails/rails#59112 Build the render_template instrumentation payload only when subscribedperformancegithub.com ·
- Hackers exploit Collabora RCE flaw to backdoor Nextcloud serverssecuritybleepingcomputer.com ·
- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attacksecurityauthbleepingcomputer.com ·
- Your Node.js App Might Be Leaking Memory Because of cls-hookedperformanceconcurrencydebuggingscoutapm.com ·
- Chris van Eijk: A read-only user in PostgreSQL: what it can still dodatabasesauthsecuritypostgr.es ·
- Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)securitycloudaws.amazon.com ·
- Multi-repository support and other improvements for GitHub in Slack and Teamsreleasegithub.blog ·
- Yandex outage: data shows that instead of going dark, malicious bots movedsecuritycloudblog.cloudflare.com ·
- CVE-2026-100409: OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded pathssecuritywebauthgithub.com ·
- Amazon CloudFront now supports AWS Lambda Web Functions as an origincloudreleasedevopsaws.amazon.com ·
- sslx: A fast, modern alternative to OpenSSL's CLIcryptographygithub.com ·
- Qwen3.8-27B on the iPhone 18 Neural Engine at 15–70 tok/s (1.5 bpw)aiperformancetwitter.com ·
- Scout Trails Is in Beta: See What Your AI Coding Agents Are Doingreleasevibecodingscoutapm.com ·
- Servo Gets CSS Grid Working, Threadboost Offering Big Speed-Upswebphoronix.com ·
- Chasing a -O2 pessimization in antcccompilersperformancedebugging386s.org ·
- AWS Lambda durable functions increases durable operation and checkpoint payload limitscloudreleasedevopsaws.amazon.com ·
- Show HN: Proa – A Rust web framework with fast SSR and multi-target renderingwebproa.so ·
- Owning C types from Rust codelinuxapipltlwn.net ·
- zjit - Documentation for Ruby 4.1jitcompilersperformancedocs.ruby-lang.org ·
- ARC Region switch adds four new capabilitiesclouddevopsreleaseaws.amazon.com ·
- Regex visualized as 3D marble runvisualizationcompsciregexmarblerun.com ·
- Advancing Generative Recommendation Inference: our collaboration with NVIDIA on TensorRT LLMaiengineering.atspotify.com ·
- GitHub - fractaledmind/solid_errors: database-backed, app-internal exception tracker for Rails applicationswebgithub.com ·
- Implementing kubernetes node bin packingdevopsblog.costgraph.ai ·
- CVE-2026-10740 - Excessive memory allocation in s2n-quicsecuritynetworkingaws.amazon.com ·
- PgBouncer 1.26.1 released - Fixes three CVEsreleasesecuritydatabasespostgresql.org ·
- AWS Lambda announces Lambda Web Functionscloudreleaseaws.amazon.com ·
- Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisorssecuritylinuxnetworkingaws.amazon.com ·
- nginx 1.31.7: SSL: support for iPAddress subjectAltName in · HTTP/2: implement RFC 9218 Extensible · GeoIP2: support for GeoIP2 http & stream modulesreleasenetworkingwebgithub.com ·
- Feature #22443: Remove multi-line regular expression comments from object inspection (open)bugs.ruby-lang.org ·
- Chris van Eijk: permission denied for table in PostgreSQL: which grant?databasesauthdebuggingpostgr.es ·
- CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request toolsecurityauthcloudaws.amazon.com ·
- CVE-2026-102527: Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routessecuritywebgithub.com ·
- CVE-2026-62268: borg extract might modify out-of-tree files when extracting maliciously crafted archivessecuritygithub.com ·
- C++26 Contracts: Introduction to Preconditions and Postconditionspltcppstories.com ·
- CVE-2026-12530 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()securitycloudaws.amazon.com ·
- Behind the Scenes: Evolving Netflix’s Ads Event Pipeline for Live — Part IIdistributednetflixtechblog.com ·
- CVE-2026-14265- Deserialization of Untrusted Data in AWS Advanced JDBC Wrapper RemoteQueryCachePluginsecuritycloudaws.amazon.com ·
- yet another place where a linux man page is inaccuratesebsite.pw ·
- rails/rails#59074 Don't match through associations by direct keysgithub.com ·
- AWS License Manager now supports license type conversions for Ubuntu Pro purchased through AWS Marketplaceclouddevopsaws.amazon.com ·
- Introducing pglifecycle 2.0 betadatabasesreleasedevopspostgresql.org ·
- Synchronous Queues For VirtIO-FS Show Huge Performance Potentialperformanceconcurrencylinuxphoronix.com ·
- Chris van Eijk: ALTER DEFAULT PRIVILEGES not working? What we measureddatabasesauthdebuggingpostgr.es ·
- Making Hybrid Images (2014)mathgraphicsjeremykun.com ·
- Grape's error! Inside a Transaction Commits Your Data. Grape 4.1 Fixes It.apiwebdebuggingscoutapm.com ·
- Bug #22447: parse.y `-> do ... end` COND state (open)compilersbugs.ruby-lang.org ·
- Bug #22445: On macOS, a child of Kernel#fork can abort with "[BUG] pthread_rwlock_destroy: Resource busy (EBUSY)" (closed)concurrencybugs.ruby-lang.org ·
- Chris van Eijk: must be owner of table in PostgreSQL: who may alter it?databasesauthpostgr.es ·
- Deploying a Roundhouse App with Kamaldevopsgreg.molnar.io ·
- crecheck v6.0 has been releasedreleasedatabasesauthpostgresql.org ·
- Integrating Netflix’s Foundation Model into Personalization applicationsainetflixtechblog.com ·
- Visualizing MySQL Telemetry with Grafanadatabasesvisualizationdevopsblogs.oracle.com ·
- Improved detection for withdrawn Dependabot alertsapigithub.blog ·
- The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrimesecuritymicrosoft.com ·
- CVE-2026-96620: Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Executionsecuritygithub.com ·
- Are Harnesses Worth the Cost?aivibecodingtestingmartinfowler.com ·
- Writing a hypermedia app in Rustwebbenjamingeer.eu ·
- pg_utl_smtp v2.0 releasedreleasedatabasesapipostgresql.org ·
- Bug #22414: YJIT: arm64 panic "should not fail when writing to a fresh code page" when the code region fills at a page boundary — please backport 5a7089fc03fb to 3.4 (closed)jitcompilersbugs.ruby-lang.org ·
- Free Pascal compiler now supports dynamic packagescompilersreleasegetlazarus.org ·
- Audit GitHub Code Quality finding dismissals and reopeningsgithub.blog ·
- scriptc | TypeScript-to-Native Compilercompilersscriptc.dev ·
- pg_hint_plan v1.9.0 Releasedreleasedatabasespostgresql.org ·
- CVE-2026-15895: OS command injection in jsii-diff in AWS jsiisecuritycloudaws.amazon.com ·
- Interactive Linear Programming in the Browsermathvisualizationcompscilpviz.net ·
- Muse Spark Open model now available on Amazon SageMaker JumpStartcloudaireleaseaws.amazon.com ·
- Feature #9779: Add Module#descendants - Ruby - Ruby Issue Tracking Systemapipltbugs.ruby-lang.org ·
- AdFection: Targeted ads turned into a pipeline for zero-click mercenary spywaresecurityprivacycitizenlab.ca ·
- Pele – Mermaid diagrams as themeable SVGwebvisualizationpele.run ·
- CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerabilitysecuritynvd.nist.gov ·
- Fat Rails Models Might Be a Domain Modeling Problem (Kaigi on Rails 2026)decks.yasaichi.com ·
- Push attribution for commits in limited public previewvcsreleasesecuritygithub.blog ·
- CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsingsecuritynetworkingaws.amazon.com ·
- AWS Security Hub now supports resource criticality for prioritizationcloudsecurityreleaseaws.amazon.com ·
- Bug #22442: Lazy loading of error_highlight etc. is skipped in threads and Ractors (closed)concurrencybugs.ruby-lang.org ·
- CVE-2026-86063: Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinningsecuritygithub.com ·
- AI Search - AI Search keyword search supports Japanese, Chinese, and Korean queriescloudreleasedevelopers.cloudflare.com ·
- rails/rails#59072 Deprecate supports_native_partitioning? on the PostgreSQL adapterapidatabasesgithub.com ·
- rails/rails#58848 Move adapter-specific migration compatibility into per-adapter behaviorsapigithub.com ·
- Show HN: WhatsApp MCP running free on Cloudflaregithub.com ·
- Weekly Report: pgvectorに境界外書き込みの脆弱性securitydatabasesjpcert.or.jp ·
- Netflix Conductor: The Next Chapterdevopsdistributednetflixtechblog.com ·
- rails/rails#59078 Zip keys without going through Enumerableperformancegithub.com ·
- CVE-2026-104250: unstructured: Stored XSS via unescaped HTML generationsecuritygithub.com ·
- Linux 7.4 Removing Its Broken & Rarely Touched Code For ARM64 Big Endianlinuxphoronix.com ·
- Redesigning source control at Anthropicvcsperformanceanthropic.com ·
- Tor VPN Beta: What we've learned building our own VPN for Android from scratchprivacymobileblog.torproject.org ·
- Cloudflare One - Validate data loss prevention matches with Cloudflare Workerscloudsecuritydevelopers.cloudflare.com ·
- Forgejo v17.0 is availablereleasevcsforgejo.org ·
- How the L0pht (probably) optimized attack against the LanMan hash (2019)securitycryptographymodexp.wordpress.com ·
- GitHub - boazsegev/neorack: Pushing the Ruby webserver interface to the next levelwebapigithub.com ·
- Docker Hub flaw let attackers impersonate users, tamper with imagessecurityauthbleepingcomputer.com ·
- rails/rails#59123 Use resolve_alias for all instance methodsgithub.com ·
- Migrate CLR code to AWS Lambda when upgrading Amazon RDS for SQL Server to 2025clouddatabasesaws.amazon.com ·
- Source code of the Estonian online voting systemgithub.com ·
- Finding a $90,000 Remote Code Execution Vulnerability in Googlesecurityauthsimonkoeck.com ·
- CVE-2026-102832: JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedsecuritygithub.com ·
- AWS End User Messaging now supports Brand Profilescloudreleaseaws.amazon.com ·
- Bug #22448: Jump value with a command call with a method call chained (open)compilersbugs.ruby-lang.org ·
- GitHub availability report: September 2026devopsgithub.blog ·
- Rails World '26: Rails in the Agentic Eradevopsperformancetestinggo.fastruby.io ·
- Same Job, Two Engines: InnoDB and Iceberg Internalsdatabasesperformancecompscimarcpaul.io ·
- ArenaAllocators don't play nicely with ArrayListsopenmymind.net ·
- Fixing C Strings With String Viewseliasebner.com ·
- Running Apache Spark experiments in my sleep (and on a plane)performancedebuggingnetflixtechblog.com ·
- How Meta Built Forum With AI-Native Engineeringvibecodingengineering.fb.com ·
- rails/rails#59079 Respect custom primary keys in grouped calculations and through buildsgithub.com ·
- HOL Light Tutorialformalmethodshol-light.github.io ·
- How Signal and WhatsApp deploy Rust to billions of Android and iOS devicesmobilekerkour.com ·
- If you don't run your own LLM proxy, how do you know whats going on?aijrdsgl.com ·
- [$] Owning C types from Rust codelinuxpltapilwn.net ·
- The DelightQL Query Languagedatabasesdelightql.org ·
- psqlODBC 18.00.0005 released with security fix for CVE-2026-109448securityreleasedatabasespostgresql.org ·
- CLI v16.2.0releaseclouddevopsfastly.com ·
- Understanding the differences between PgBouncer and Amazon RDS Proxy for PostgreSQL connection poolingclouddatabasesdevopsaws.amazon.com ·
- Mull: note-taking with a language server / vscode extensiongithub.com ·
- rails/rails#58975 Don't modify the job data a job was deserialized from when it's retriedgithub.com ·
- Amazon Time Sync Service adds support for microsecond-accurate time on 135 additional EC2 instance types in all commercial regionscloudperformancedevopsaws.amazon.com ·
- Ghostscript flaw lets hackers hijack servers via PDF uploadssecuritybleepingcomputer.com ·
- Automated blocking and query alerts for Amazon RDS for SQL Serverclouddatabasesdevopsaws.amazon.com ·
- Strands Decider: Why Not an Encoder?aibrooker.co.za ·
- Sakana AI、「The AI Scientist」の第3世代を公開 ——複数エージェントで仮説検証から論文執筆まで、図生成ツール「AutoIllustrate」もオープンソース化aireleasegihyo.jp ·
- Pavel Luzanov: PostgreSQL 19: part 5.2 (DBA1 and DBA2) of CommitFest 2026-03databasespostgr.es ·
- CVE-2026-15957 - Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapessecurityaws.amazon.com ·
- DeepSeek V4.1 Flash 1017 (Max)aiperformanceartificialanalysis.ai ·
- Issues with Amazon Athena ODBC Driverclouddatabasesaws.amazon.com ·
- rails/rails#59077 Map key values in the key's own shapegithub.com ·
- Linux 7.4 To Enable Intel Instruction Timeout For Fending Off TDX VM DoS Attackslinuxsecurityphoronix.com ·
- その Valkey 使いこなしていますか？databasesspeakerdeck.com ·
- Ensuring Similar Computational Resources to Stateful Workloads Running on a Diverse Server Fleetperformancedevopsuber.com ·
- pgBackRest 2.60.0 Releasedreleasedatabasesdevopspostgresql.org ·
- rails/rails#59068 ActiveRecord perfperformancegithub.com ·
- Bug #18782: Race conditions in autoload when loading the same feature with multiple threads. (closed)concurrencybugs.ruby-lang.org ·
- We found a Tencent agent fleetsecurityaiswarmcha.se ·
- CVE-2026-104150: AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexitysecuritywebgithub.com ·
- My self-hosted infrastructure with Incus OSdevopslinuxsecuritydataswamp.org ·
- CVE-2026-84994: Qwik: Crashing any Qwik Server via Resource thenablesecuritywebconcurrencygithub.com ·
- Reliable GPU compute for large training & inference jobsdistributeddevopsainetflixtechblog.com ·
- rails/rails#59073 Preserve array-valued composite keys in find_bygithub.com ·
- rails/rails#59075 Fix composite-key association query edge casesgithub.com ·
- Secret scanning blocks Anthropic keys by default, adds Salesforcesecurityreleasegithub.blog ·
- ARP! Tell your network to explain itselfnetworkbenjcal.space ·
- Ensuring Similar Computational Resources to Stateful Workloads Running on a Diverse Server Fleetperformancedevopsuber.com ·
- Postgres isn't slow, your storage isdatabasesperformanceclickhouse.com ·
- rails/rails#59076 Fix type matching in inverse polymorphic queriesgithub.com ·
- My C23 Conventionsabner.page ·
- CVE-2026-103975: Appium: Symlink based Zip Slip in @appium/support ZIP extractionsecuritygithub.com ·
- Announcing Rust 1.99.1releasecompilersblog.rust-lang.org ·
- Anonymous organization-level registries for Dependabotauthdevopsgithub.blog ·
- Compiler bootstrapping depends on more than you might thinkcompilersutcc.utoronto.ca ·
- Bug #22415: Thread.handle_interrupt needs to preserve errinfo (closed)concurrencybugs.ruby-lang.org ·
- Cloudflare One, Access - Infrastructure applications support a configurable session durationcloudauthdevelopers.cloudflare.com ·
- Christophe Pettus: All Your GUCs in a Row: post_auth_delay and pre_auth_delaydatabasesdebuggingpostgr.es ·
- CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NETsecuritycloudcryptographyaws.amazon.com ·
- Mitos editor is a fork of Helixmitos.computer ·
- rails/rails#59070 Don't require ActiveStorage service that is already definedgithub.com ·
- Conquering Recursioncompscipltnsl.com ·
- Linux Lands Fix for Rare, Varying SMP Boot Hangs Affecting Kernels Since 2024linuxconcurrencyphoronix.com ·
- Targeted ads installed Candiru spyware in zero-click attackssecuritybleepingcomputer.com ·
- Xcode 27 runner image generally availablereleasedevopsgithub.blog ·
- AWS Lambda Web Functionscloudreleasedevopsaws.amazon.com ·
- (Post-Quantum) Cryptographic Right Answerscryptographysecuritywords.filippo.io ·
- CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDKsecuritycloudaws.amazon.com ·
- Claude Code 2.1.300: Added /advisor on Claude Platform on AWS · Added OpenTelemetry GenAI semantic-convention · Added support for rewriting a workflow agent'sreleaseaigithub.com ·
- Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912securitycloudaws.amazon.com ·
- DeepSeek search and fetch – $0.75 per 1000 successful requestsapiaiapi-docs.deepseek.com ·
- MeshXFS: AI Adapts XFS Into A Clustered File-Systemdistributedlinuxvibecodingphoronix.com ·
- AI models can provably hide arbitrary capabilitiesaisecuritycompsciarxiv.org ·
- Abstraction, intuition, and the “monad tutorial fallacy”(2009)byorgey.wordpress.com ·
- 現場と育てるRailsモデリング 〜Spreadsheetから始めたモデル設計〜webspeakerdeck.com ·
- When LLM Decompilers Recompile More and Preserve Lessaisecurityarxiv.org ·
- rails/rails#58979 Make Active Job's exception handlers work in non-main Ractorsconcurrencygithub.com ·
- Fluent Bit 5.1.4: multiline: enforce multiline_buffer_limit for EQreleasedevopsgithub.com ·
- The 7.3 kernel has been releasedlinuxreleaselwn.net ·
- 第281回 MySQL 26.7で変わったAUTO_INCREMENTのカウンター保存databasesperformancereleasegihyo.jp ·
- CVE-2026-59951: MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustionsecuritygithub.com ·
- Proof-based general-purpose computing with Magnetarcryptographycompsciformalmethodsmicrosoft.com ·
- CVE-2026-105192: LMCache: Remote code execution via unsafe deserialization in multiprocess mode transportsecuritygithub.com ·
- Code scanning AI Scan metrics in security overviewreleasegithub.blog ·
- Linus Torvalds's first LLM-assisted patch serieslinuxperformanceconcurrencylwn.net ·
- Quoting Addy Osmani, Morgan Westlee Lunt, and Qing Wangvibecodingsimonwillison.net ·
- Apple ML Research: Muse Spark Open with MLX on Mac Studioaiperformancemachinelearning.apple.com ·
- CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Pluginssecuritycloudaws.amazon.com ·
- Making git hooks visible in fish shellvcsoffby1.website ·
- Nixpkgs for the frontend impairedcompilersfzakaria.com ·
- Neckbeard – A DevOps/platform/SRE plugin for your agentdevopsgithub.com ·
- ValkeyConf 2026: Nobody Owns Valkey. That's Why It's Working.databasesreleasevalkey.io ·
- Access, Cloudflare One - Account context in Access deny redirectscloudauthdevelopers.cloudflare.com ·
- Amazon OpenSearch Service now supports index-level encryptionclouddatabasesaws.amazon.com ·
- rails/rails#59033 Skip ROLLBACK when SQLite already rolled back the transactiondatabasesgithub.com ·
- Weekly Report: 複数のElastic製品に脆弱性securityjpcert.or.jp ·
- Weekly Report: GitLab AI Gatewayに任意のコマンド実行の脆弱性securityjpcert.or.jp ·
- The Brain Sandwichvibecodingterriblesoftware.org ·
- rails/rails#59063 Introduce "definition" methods that return ActiveRecord::Keyperformancegithub.com ·
- How to make System 1 LLMs show System 2 competencies?aionlinelibrary.wiley.com ·
- Redesigning source control at Anthropicvcssimonwillison.net ·
- CVE-2026-15643 - AWS HealthLake MCP Server SSRF via Unvalidated Pagination URLsecuritycloudaws.amazon.com ·
- Show HN: Deslop – Oxlint rules for AI-generated TypeScriptgithub.com ·
- DeepSeek: DeepSeek v4.1 Flash 1017aireleaseopenrouter.ai ·
- BeamFS Sent Out As Newest File-System Proposal For Linuxlinuxphoronix.com ·
- Please stop hashing the public key first (or: ML-DSA's µ annoys me)cryptographyblog.erincandescent.net ·
- We CanCanCan fix everythingreleaseauthwebcoorasse.com ·
- Passkeys are not a trapauthwebsecurityscotthelme.co.uk ·
- Running RAG with a (small) language model in the browseraiwebbart.degoe.de ·
- Amazon ElastiCache for Valkey introduces ElastiCache Insightsclouddevopsreleaseaws.amazon.com ·
- GitHub - socketry/falcon: A high-performance web server for Ruby, supporting HTTP/1, HTTP/2 and TLS.webnetworkingperformancegithub.com ·
- What gets TOASTed in Postgresdatabasesperformanceplanetscale.com ·
- A look at the math that OpenAI claims computes faster Fourier transformscompscimathperformanceargmin.net ·
- BeyondTrust patches zero-day exploited in attacks since Augustsecurityauthbleepingcomputer.com ·
- Wanted to download an ISO, ended up writing a kernel exploitsecuritydebugginglinuxblog.dfb.sh ·
- Seven stable kernels for Thursday with fix for critical vulnerabilitylinuxreleasesecuritylwn.net ·
- CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWSsecuritycloudaws.amazon.com ·
- rails/rails#59018 Only consult the connection pools the execution context has usedperformancegithub.com ·
- rails/rails#59066 Use an ivar for the primary key definitionperformancegithub.com ·
- Root DNSSEC trust anchorsnetworkingcryptographyjpmens.net ·
- Linux Lockdown and Hibernation (again)linuxsecuritycodon.org.uk ·
- Janas: Run LLMs larger than RAM by streaming experts from SSDaiperformancegithub.com ·
- Claude Code 2.1.301: Added OpenTelemetry tracing guidance to the · Added the % motion to vim mode · Added rows to a mod's Inputreleasegithub.com ·
- JDK 28releaseopenjdk.org ·
- Amazon RDS Proxy now supports SQL Server 2022clouddatabasesreleaseaws.amazon.com ·
- Show HN: Graphicle, a Rust port of Graphify with memory for coding agentsgithub.com ·
- Crawlers, floods and fleets: a year of keeping our digital collections openstacks.wellcomecollection.org ·
- End-to-end encrypted relays for OCapNnetworkingcryptographyspritely.institute ·
- Audit Logs - Audit Logs v2 now captures view actionsclouddevopsreleasedevelopers.cloudflare.com ·
- Bug #22427: `--enable=zjit` does not enable ZJIT (closed)jitcompilersbugs.ruby-lang.org ·
- Epic's EAC2 v2 seems fairly easily bypassablesecuritylinuxcodon.org.uk ·
- Show HN: Gemini 4 Argon plays StarCraftaistarskirmish.com ·
- AWS Transfer Family supports custom ports for public SFTP serverscloudreleasedevopsaws.amazon.com ·
- Rustls 0.23.46 Released With Four Security Fixesreleasesecuritycryptographyphoronix.com ·
- Why is GitOps so good?devopsthorsell.io ·
- rails/rails#59116 Add a new private reader method, refactor alias resolutionperformancegithub.com ·
- Client telemetry user attribution and configurable captureprivacyreleasegithub.blog ·
- Agents, Workers - Cloudflare API MCP server sends Workers Issues as MCP Eventscloudapidevopsdevelopers.cloudflare.com ·
- Enterprise managed settings enforcement updatesgithub.blog ·
- introducing runsheets, an executable runbookdevopsgithub.com ·
- Workers AI, Realtime - Pipecat PhoneLLM Mini now available on Workers AIaicloudreleasedevelopers.cloudflare.com ·
- rails/rails#59069 Match sequence reset rows by the table name given, not regclass::textdatabasesgithub.com ·
- Bug #22449: Out-of-bounds in `Array#sample` when array modified (closed)bugs.ruby-lang.org ·
- Security updates for Thursdaysecuritylinuxlwn.net ·
- Christophe Pettus: All Your GUCs in a Row: portdatabasespostgr.es ·
- llm-tools-datasette 0.1.1releasesimonwillison.net ·
- Security updates for Fridaysecuritylinuxlwn.net ·
- Valen's Memory Safety: A New Kind of Borrow Checkingcompilerspltverdagon.dev ·
- SQLite Release 3.54.0 On 2026-10-09databasesreleasesqlite.org ·
- rails/rails#58978 Make Active Job argument serialization work in non-main Ractorsconcurrencygithub.com ·
- Fake Arch Linux packages push malware with root privilegessecuritylinuxbleepingcomputer.com ·
- HTTP resilience and failure-testing tools for JavaScripttestingwebfetchkit.org ·
- rails/rails#58948 Apply the table name prefix to the index name 4.2 migrations computegithub.com ·
- CVE-2026-59180: Apprise forwards configured auth headers across cross-origin HTTP redirectssecurityauthgithub.com ·
- Claude Code 2.1.302: Changed claude -p and Agent SDK sessions with no · Changed fork subagents · Changed the desktop app and VS Code to always runreleasegithub.com ·
- Devrim GÜNDÜZ: bigquery_fdw works again on every distribution we ship in the RPM repodatabasesdebuggingreleasepostgr.es ·
- The Unreasonable Effectiveness of Vex in NixOSsecurityblog.kammel.dev ·
- rails/rails#58981 Make deprecation warnings work in non-main Ractorsconcurrencygithub.com ·
- Drupal patches critical RCE flaws, warns exploits may emerge soonsecuritybleepingcomputer.com ·
- Modernizing document storage for search, scale, and agilitydatabasesperformanceaws.amazon.com ·
- We turned EmbeddingGemma 2 into a speech-to-text modelaiperformanceeg2.haku.sh ·
- [$] LWN.net Weekly Edition for October 15, 2026linuxlwn.net ·
- Scrolling is All You Need: Building a Swipeable Sheet | React Ariawebreact-aria.adobe.com ·
- Playground | RuboCoprubocop.org ·
- Gateway, Cloudflare One - Request Gateway DNS64 through DNS locations and EDNScloudnetworkingreleasedevelopers.cloudflare.com ·
- RPKI now protects 70% of internet routesnetworkingsecurityipinfo.io ·
- ファイルの内容から探せるMac向けOSSアプリ「DigUp」、EmbeddingGemma 2をローカル実行aigihyo.jp ·
- rails/rails#59020 Avoid database collisions for concurrent AR test runsconcurrencytestingdatabasesgithub.com ·
- Stream - Ultra-low latency live with WebRTC is now Generally Available in Streamcloudreleasewebdevelopers.cloudflare.com ·
- rails/rails#59065 Reduce method calls in fast pathperformancegithub.com ·
- Agents on Rails: Stage 3. Can a model build on its own work?aivibecodingrubyonrails.org ·
- What Is Service Virtualization: Definition, Types & Toolstestingdevopskeploy.io ·
- Gemini 4 Argon in GitHub Copilotreleaseaivibecodinggithub.blog ·
- AWS End User Messaging adds a guided wizard for RCS registration videoscloudreleaseaws.amazon.com ·
- Feature #13677: Add more details to error "Name or service not known (SocketError)" (closed)bugs.ruby-lang.org ·
- AWS End User Messaging adds registration improvements for faster, higher-quality submissionscloudreleaseaws.amazon.com ·
- Linux 7.3 Lands Last-Minute Fixes For Samsung 990 PRO & 990 EVO Plus SSDslinuxhardwarephoronix.com ·
- Why 'externalized' proofs of cyclic trait impls does not workplttypingcompilerssmallcultfollowing.com ·
- Safe SIMD in Rust, even on the insideshnatsel.github.io ·
- Type-safe HTML templating in Zigweblalinsky.com ·
- An Emulator Writer's HOWTO for Static Binary Translationcompilersgtoal.com ·
- Ad-tech company was a delivery system for "mercenary spyware"securityprivacypluralistic.net ·
- Bug #22426: ZJIT: keyword arguments swapped when passed out of declared order to a method with a block (please backport d81a11d4e6 to 4.0) (closed)jitcompilersbugs.ruby-lang.org ·
- Issues in tough library and tuftool CLI utilitysecurityaws.amazon.com ·
- 「skyticket」で確認された3つの不正アクセスについてまとめてみたsecurityprivacypiyolog.hatenadiary.jp ·
- DNS - Configure Advanced Custom Nameservers with nameserver sets (beta)cloudnetworkingreleasedevelopers.cloudflare.com ·
- WAF - WAF Release - 2026-10-14 - Emergencysecuritycloudreleasedevelopers.cloudflare.com ·
- Bug #22305: Ruby::Box: statically linked prism loads in only one box (closed)compilersdebuggingbugs.ruby-lang.org ·
- A new version of bidi2pdf is outreleasegithub.com ·
- Postgres 19 delayed after AI reviewers find more bugs than humans can fixdatabasesreleasetheregister.com ·
- RFC 10055: Configuring UDP Sockets for Explicit Congestion Notification (ECN) for Common Platformsnetworkingrfc-editor.org ·
- QML for C & Ziggist.github.com ·
- Cloudflare Web Analytics - Deeper Core Web Vitals Diagnostics: LCP & INP Sub-Part Metrics in Real User Monitoringcloudperformancewebdevelopers.cloudflare.com ·
- Intuitive concurrent programming in any languageconcurrencydistributedpltlf-lang.org ·
- rails/rails#59060 Fix join order when `left_joins` is combined with merged joinsgithub.com ·
- Fastly Terraform Provider (beta) 0.2.3releaseclouddevopsfastly.com ·
- rails/rails#59017 Dump create_schema if_not_exists for every schema that holds an extensiondatabasesgithub.com ·
- Ongoing updates on Copy.fail and variantscloudsecurityaws.amazon.com ·
- AWS DataSync Enhanced mode now supports FSx for OpenZFS, NFS 4.2, and object metadata controlscloudreleasedevopsaws.amazon.com ·
- JSON Tiles: Fast Analytics on Semi-Structured Data (2021)databasesperformancedb.cit.tum.de ·
- How shredding JSON is giving Logfire 1000x query speedupsperformancedatabasespydantic.dev ·
- Bug #22424: IO#readpartial and IO#sysread should respect IO#timeout= value (open)bugs.ruby-lang.org ·
- AWS Secrets Manager adds managed external secrets support for Databricks and Twiliocloudauthreleaseaws.amazon.com ·
- Show HN: Petal, open-source CoScreen/ScreenHero finally freereleasepetal.live ·
- [$] GCC development with large-language modelscompilerslwn.net ·
- BB(10) > Graham's Numbermathcompscigithub.com ·
- CVE-2026-104266: tinytag: Infinite loop when parsing certain M4A files containing invalid atomssecuritygithub.com ·
- Bug #22240: Protect against SEGV caused by native extensions using rb_funcall between rb_protect and rb_jump_tag (open)bugs.ruby-lang.org ·
- Amazon EMR now supports native data quality checks in Apache Spark jobscloudreleaseaws.amazon.com ·
- Pavel Luzanov: PostgreSQL 19: part 5.1 (QPT) or CommitFest 2026-03databasesreleasepostgr.es ·
- OpenCode Hacked: User credentials leakedsecurityauthtwitter.com ·
- What agents mean for Rust (and vice versa)pltvibecodingsmallcultfollowing.com ·
- Development statistics for the 7.2 kernellinuxreleaselwn.net ·
- OpenCode has a security breach last that impacted 1.4% of console userssecuritytwitter.com ·
- GitHub - flyerhzm/bullet: help to kill N+1 queries and unused eager loadingperformancewebgithub.com ·
- rails/rails#59059 Fix join order when `eager_load` is combined with merged joinsgithub.com ·
- Workers, Pages - GitHub repository picker reflects your accesscloudauthdevelopers.cloudflare.com ·
- CVE-2026-68549: ClickMigrate has Path Traversal in "revision -m" argumentsecuritygithub.com ·
- Critical BlockStrap flaw lets hackers run code on Magento serverssecuritybleepingcomputer.com ·
- サブエージェントと Claude Mods で作る独自 Advisor ツールの話aispeakerdeck.com ·
- Choreographic Programming in Rustpltconcurrencygithub.com ·
- Weekly Report: 複数のAtlassian製品に脆弱性securityjpcert.or.jp ·
- What we ended up doing about alias propagationplttypingcompilersfuthark-lang.org ·
- Using TrustZone-M in Rust on the Raspberry Pi Pico 2securityhardwaretweedegolf.nl ·
- rails/rails#59184 Update the MySQL minimum version in the database.yml templatesgithub.com ·
- Profiling web-edit with Python 3.15: flame graphs and source heatmapsperformancesimonwillison.net ·
- Bug #22440: Referencing an autoload constant from multiple Ractors dumps core (closed)concurrencybugs.ruby-lang.org ·
- Linux 7.3 Released With Faster I/O Performance, AMD Zen 6 Preparations & Morelinuxreleasephoronix.com ·
- A Bazel Bardsluongng.substack.com ·
- Prometheus and OpenTelemetry interoperability in 2026: Survey resultsdevopsopentelemetry.io ·
- Agents - New persistent browser tool in the Agents SDK, with tabs and logins that last between turnscloudapiwebdevelopers.cloudflare.com ·
- your c is not standard ccompilerssebsite.pw ·
- Running Windows desktop tests from Linux with disposable VMstestingqawolf.com ·
- [$] Recent and future changes to the Linux NFS serverlinuxnetworkinglwn.net ·
- Eisentraut: The reverts will continue until morale improvesdatabasesreleaselwn.net ·
- Amazon Route 53 now supports registrations, transfers, and renewals for Premium Domainscloudreleasenetworkingaws.amazon.com ·
- Weekly Report: Google Chromeに複数の脆弱性securitywebjpcert.or.jp ·
- rails/rails#59061 Fix `eager_load` with a `limit` on a relation that joins a CTEgithub.com ·
- CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLIsecurityauthaws.amazon.com ·
- GitLab warns of max severity code execution vulnerabilitysecuritydevopsbleepingcomputer.com ·
- Radim Marek: How TABLESAMPLE picks rowsdatabasesperformancepostgr.es ·
- DataCube: A Relational Aggregation Operator Generalizing Group-By, Cross-Tab, and Sub-Totals (1997)databasescompsciarxiv.org ·
- Microsoft: October Windows Server updates break Exchange sign-in, mail flowbleepingcomputer.com ·
- Nix and Lix local root-privilege-escalation vulnerabilitiessecuritylwn.net ·
- Versioned metrics: Shipping the first Release Candidate metrics in hostmetricsdevopsreleaseopentelemetry.io ·
- Thank You, Denovlt.io ·
- Who is vfmaddrnd231pd?purplesyringa.moe ·
- Bug #22433: IO#sysread and IO#pread are inconsistent for length 0 and negative numbers (open)bugs.ruby-lang.org ·
- We solved SQLite's single-writer limitationdatabasesconcurrencymarcobambini.substack.com ·
- Bug #22428: Fiber scheduler: rb_nogvl returns as if the function ran when an offloaded operation is cancelled before execution (open)concurrencybugs.ruby-lang.org ·
- Codex CLI installs a persistent, self-updating background daemon by defaultgithub.com ·
- rails/rails#59080 Reach the joined table's model through the table itselfgithub.com ·
- AI-First, Git-Compatible Source Controlvcsvibecodingstrata.madskristiansen.com ·
- How UTS established a modern curriculum data services foundation on AWScloudaws.amazon.com ·
- What the heck is /pkg?anderegg.ca ·
- Just Because You Can SELECT Everything Doesn’t Mean You Shoulddatabasesblogs.oracle.com ·
- ClickHouse C – Talk to ClickHouse using its native binary protocoldatabasesapigithub.com ·
- Vectorized CLZ and CTZperformancecompscipurplesyringa.moe ·
- Key Autoscaling Metric #1: Workload Committed Capacitydevopsblog.appliedcomputing.io ·
- A response to claims about flatpak being insecure (2023)linuxoro.gay ·
- Show HN: Flipflop – Iroh-powered persistent tunnels for filesharinggithub.com ·
- The math that OpenAI keeps for itselfmathainewsletter.danielpaleka.com ·
- Building resilient AI-powered software, and planning for when things go wrongdistributeddevopsnewsletter.pragmaticengineer.com ·
- Can we change an AI model’s architecture without retraining it from scratch?aiperformanceamazon.science ·
- 仕組みを動く図で説明するエージェントスキルAnatomy公開gihyo.jp ·
- HydraFusion updates and new Max optionaireleasegithub.blog ·
- CVE-2026-102682: Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creationsecurityauthgithub.com ·