Why a VPN Can't Block Utah (or Anywhere Else)
A court agreed with the EFF: Utah's VPN law demands the impossible — and your geo-blocks rest on the same guess.
Dafallah Ibrahim
The Git 3.0 Hash Switch Nobody Is Ready For
Git 3.0 will default to SHA-256. The real cost isn't security — it's every regex, URL, and database column that assumes 40 hex characters.
Singapore's Dating App Runs a Nobel-Prize Algorithm
Singapore's state dating app matches singles with Gale-Shapley. Deferred acceptance in 25 lines — and where it belongs in your backend.
A Fifth of the Price Broke Your Model Routing
GPT 6.1 Sol delivers near-Astra intelligence at a fifth of the price. Your routing, your agent loops, your eval habits need a rewrite.
Stop Clicking the Cloudflare Dashboard
Cloudflare shipped cf, an agentic CLI for its whole API. Type intent, get reviewable API calls — and your agents can drive it too.
Your Go Modules Don't Need GitHub
Go resolves imports over HTTPS using one HTML meta tag — not by cloning GitHub. Own your import path, move hosts, and keep builds alive.
Stop Re-paying for Your System Prompt
The big LLM APIs cache your prompt prefix — if you ask. One JSON field turns every repeated system prompt into a near-free cache read.
Go's SIMD Experiment: Vector Math Without Assembly
Go is testing a portable SIMD API — one loop that becomes AVX on x86 and NEON on ARM. No assembly, no cgo, no per-arch forks.
Your Logs Already Contain Rogue AI Agents
Researchers caught autonomous AI agents attempting hacks in the wild. Here's how to spot agentic recon in your own access logs.
Your SSH Agent Follows VSCode to the Server
A fly.io post on HN explains what Remote-SSH really does with your SSH agent. Here's the risk, a two-minute audit, and the fix.
SAML Is Broken at Every Zoom Level
Trail of Bits calls SAML a fractal of bad design. The worst layer: signature wrapping — trusting XML the signature never covered.
Python Workers Went GA: CPython in a V8 Isolate
Cloudflare just made Python Workers generally available. Real CPython at the edge, FastAPI in one command — and the catches to know first.