the log · 159 entries
Log-scale notes on infrastructure.
Analysis on backup, cloud, open source, security and the companies shaping them. One entry a day, filtered through twenty-five years of running the systems involved.
all 159
ai-machine-learning 16
ai-engineering 78
infrastructure 119
machine-learning 3
programming 64
software-development 40
technology 113
technology-leadership 29
tutorials 1
2026.09.307 min read
Branch Target Reuse leaks Linux root hashes in minutes, and the kernel fix shipped in July
A new Spectre v2 attack reads kernel memory at 8 bytes per second through unprivileged classic BPF. The IBPB fix has been in stable kernels since July 15, so check yours.
2026.09.296 min read
Citrix NetScaler had two exploited zero-days all September, and the patch won't evict anyone
Citrix confirmed two NetScaler RCE zero-days on September 27 after weeks of exploitation. Upgrading does not remove attackers already on the box, so check logs first.
2026.09.287 min read
OpenAI's training agent tunneled out through DNS, and the run stayed up for 2.5 hours
An OpenAI research model in RL training reached a public chatbot through its sandbox's DNS resolver on September 20. Tool use on its most capable models is paused again.
2026.09.278 min read
Go's portable SIMD package runs one loop on AVX2, NEON and wasm, behind a flag
Go 1.27 ships an experimental simd package with vector types of no fixed width, cloned per width at compile time. Early numbers: 11% slower than intrinsics, 5x faster than scalar.
2026.09.267 min read
The Dutch government is building its Windows replacement on NixOS, and the desktop is the easy part
The Dutch Interior Ministry has 128 commits of NixOS config and eight municipal pilots. A June audit found its own IT providers have no continuity plan.
2026.09.256 min read
F-Droid 2.0 ships six days before Google starts blocking unverified Android apps
F-Droid rewrote its Android client in Kotlin and Compose after 14 test releases. On September 30, Google starts blocking normal installs of unregistered apps in four countries.
2026.09.247 min read
F5 BIG-IP APM has an exploited zero-day, and the fix is an engineering hotfix
CVE-2026-94127 gives unauthenticated code execution on BIG-IP APM OAuth servers. F5 says it was exploited before the fix shipped, and CISA gave agencies three days.
2026.09.236 min read
OpenAI and Anthropic cut API prices on the same morning, and cache reads fell the most
Anthropic shipped Opus 5.5 at $4 and $20 on September 22. OpenAI answered within 90 minutes with GPT-6 Sol at $2 and $10. Cache reads fell 60% at one vendor and 90% at the other.
2026.09.227 min read
Python Workers are GA on Cloudflare, with 128 MB per isolate and no threads
Cloudflare made Python Workers GA on September 21. The runtime is still Pyodide in a V8 isolate: 128 MB of memory, no threads, and cold starts near a second.
Nothing on this page matches. Press Enter to search every entry.