MP Marc Popeinfra · open source
sys: online · EST Let's talk
the log · 163 entries

#software-development

Every entry filed under Software Development.

RSS
2026.11.077 min read Libghostty 1.0 freezes the C ABI, and JetBrains shipped it before the tag Mitchell Hashimoto tagged libghostty-vt 1.0 on November 6 with a frozen C ABI, an MIT license and a libc only runtime. JetBrains already runs it for 12.5 million IDE users. programminginfrastructuresoftware-development 2026.11.068 min read A 257 byte password logs into Alpine's passwordless accounts, and the bug dates to 2012 OpenSSH 10.6p2 and new Alpine packages fix a musl crypt() bug that lets any 257 to 1,024 byte password log into accounts stored as *. Patch, restart sshd, and turn passwords off. technologyinfrastructuresoftware-development 2026.11.056 min read Postman wrote itself into Codex and Claude Code, and approved its own hook Postman Desktop 12.33.4 installed its plugins into Codex and Claude Code on October 24 without asking and marked its own Codex hook trusted. Postman reverted it on November 5. programmingai-engineeringsoftware-development 2026.11.047 min read Binance lost $6.3 billion through a container deploy token on an engineer's laptop Binance's October 29 theft started with a tampered Homebrew download in June and ended at a container deployment token on a laptop, an internal AI tool, and the wallet signing service. technologyinfrastructuresoftware-development 2026.11.027 min read Jepsen filed 96 bugs against ParticleDB, and WHERE 4 = 5 returned a row Jepsen's October 31 report on Orkes' ParticleDB found 96 issues on a single healthy node, including lost committed writes in the default mode, and told users to migrate. programminginfrastructuresoftware-development 2026.11.017 min read Debian patched the Linux TCP root bug on October 16. Ubuntu and RHEL still haven't. CVE-2026-98432 is a remote use-after-free in the Linux TCP handshake with a fix upstream since October 5. Debian, Oracle and AlmaLinux shipped it. Ubuntu and RHEL have not. technologyinfrastructuresoftware-development 2026.10.297 min read CPython's JIT is coming out of main, and the number it reached was 7 to 8 percent PEP 836 was withdrawn on October 19, so the experimental JIT leaves CPython's main branch. Python 3.15 shipped that same JIT ten days earlier at a 7 to 8 percent gain. programmingsoftware-development 2026.10.267 min read DreamHost reset FTP and email passwords, took its File Manager down for three days, and won't say why DreamHost has rotated customer email and FTP/SFTP passwords since October 23 and kept its File Manager offline for three days, with nine status updates and no stated cause. technologyinfrastructuresoftware-development 2026.10.217 min read An eMudhra CA private key was the number 4, and your servers may still trust it Eight eMudhra intermediate CA keys are integers under 256 that anyone can compute. Browsers blocked them on October 17. Linux and language trust stores took three more days. technologyinfrastructuresoftware-development
open channel

Have an infrastructure problem that needs an owner?

Backup, recovery, remote access, fleet automation, or a platform that has to stay up. Tell me what is breaking.

Start a conversation