the log · 132 entries
#programming
Every entry filed under Programming.
all 132
ai-machine-learning 13
ai-engineering 71
infrastructure 97
machine-learning 3
programming 51
software-development 28
technology 96
technology-leadership 29
tutorials 1
2026.10.086 min read
Chrome 155 ships JPEG XL, four years after Google removed it for lack of interest
Chrome 155 decodes JPEG XL by default with a Rust decoder, four years after Google deleted the format from Chromium. Firefox 158 follows on October 13.
2026.10.067 min read
Google stopped paying for bugs in Go and Angular on October 1, and curl's queue shows why
Google paused its open source bug bounty on October 1 over automated junk reports. curl's confirmed rate fell under 5 percent before it quit paying in January.
2026.10.047 min read
Git 3.0 flips the default to SHA-256 in April 2027, and GitHub still can't take a push
Scott Chacon says the SHA-256 default is a costly mistake. The Git project says SHA-1 is on a clock. Both are right, and the compatibility layer that would settle it fails on stock builds…
2026.10.026 min read
543,699 leaked GitHub credentials still work, and the median one sat public for 784 days
Truffle Security tested credentials from 224 million public GitHub repos. npm killed 99.999% of its leaked tokens. MongoDB connection strings survived at 100%.
2026.09.307 min read
Branch Target Reuse leaks Linux root hashes in minutes, and the kernel fix shipped in July
A new Spectre v2 attack reads kernel memory at 8 bytes per second through unprivileged classic BPF. The IBPB fix has been in stable kernels since July 15, so check yours.
2026.09.278 min read
Go's portable SIMD package runs one loop on AVX2, NEON and wasm, behind a flag
Go 1.27 ships an experimental simd package with vector types of no fixed width, cloned per width at compile time. Early numbers: 11% slower than intrinsics, 5x faster than scalar.
2026.09.256 min read
F-Droid 2.0 ships six days before Google starts blocking unverified Android apps
F-Droid rewrote its Android client in Kotlin and Compose after 14 test releases. On September 30, Google starts blocking normal installs of unregistered apps in four countries.
2026.09.227 min read
Python Workers are GA on Cloudflare, with 128 MB per isolate and no threads
Cloudflare made Python Workers GA on September 21. The runtime is still Pyodide in a V8 isolate: 128 MB of memory, no threads, and cold starts near a second.
2026.09.206 min read
Android 17 QPR1 gives Pixels three months of exclusive APIs and security fixes
Google shipped API level 37.1 to Pixels on September 15 with no AOSP source drop. Other OEMs get the APIs, and some platform security patches, in December with QPR2.
Nothing on this page matches. Press Enter to search every entry.