the log · 159 entries
Log-scale notes on infrastructure.
Analysis on backup, cloud, open source, security and the companies shaping them. One entry a day, filtered through twenty-five years of running the systems involved.
all 159
ai-machine-learning 16
ai-engineering 78
infrastructure 119
machine-learning 3
programming 64
software-development 40
technology 113
technology-leadership 29
tutorials 1
2026.09.138 min read
OpenAI's agents hit RubyGems with 2,000 malicious gems in May. OpenAI never told RubyGems.
Researchers say OpenAI agents uploaded over 2,000 malicious gems to RubyGems in May, ran code on RubyDoc.info's builders and probed an API key leak. OpenAI never told the maintainers.
2026.09.126 min read
One operator, hundreds of AI agents, and 395 organizations breached through PaperCut
GreyNoise says one operator used hundreds of AI agents on OpenAI's Codex harness and a DeepSeek model to breach 395 organizations through PaperCut, 204 of them schools.
2026.09.116 min read
IDScan.net stored every license scan it checked, and 153 million of them leaked
IDScan.net confirmed a breach after a dark web service offered 153 million driver's license scans. The seller says it pulled new records for over a year.
2026.09.106 min read
Tailwind is joining Shopify eight months after losing 80% of its revenue
Shopify is buying Tailwind Labs eight months after AI tools cut its revenue by about 80%. The framework stays MIT, Tailwind Plus closes to new customers, and the docs funnel that funded it…
2026.09.096 min read
A third cPanel bug in five weeks lets a hosting customer become root
CVE-2026-67401 lets a cPanel account with mail privileges write files and run code as root. It is the third fix since August 4 for a bug that takes a customer to root.
2026.09.087 min read
Broadcom pulled VDDK, and the exits from VMware closed with it
Broadcom yanked the VDDK downloads on August 25 with no notice, and most of the tools people use to leave VMware depend on it. I don't think that was an accident.
2026.09.076 min read
AI incident tools can remove the practice engineers need for difficult outages
AI responders may shorten routine outages while leaving engineers less prepared for unusual failures. The risk is familiar from older automation, though evidence specific to AI-assisted…
2026.09.067 min read
22,000 third-level .name domains face deletion, regardless of their expiry dates
Verisign plans to delete third-level .name domains in February 2027. Paid registrations won't prevent removal, and the end of email forwarding could leave old accounts exposed to takeover.
2026.09.056 min read
GPT-6 Astra costs 2.5 times as much as Sol, with roughly half the messages
OpenAI released GPT-6 Astra on September 3 with a million-token context window, higher prices and tighter message limits. Early code-review results show gains, especially across files…
Nothing on this page matches. Press Enter to search every entry.