Nicolas Gras
@armgd.bsky.social
đ¤ 33
đĽ 50
đ 180
Tech Lead | GenAI Engineer | DevOps philosophy
https://www.n-gr.xyz/
I also paint minis
PostgreSQL 19 adds Property Graph DDL: CREATE PROPERTY GRAPH with vertex/edge labels backed by tables/views, properties mapped from columns/expressions, plus indexes & constraints. Graph model becomes schema-managed in SQLâuseful for relationship-heavy data and KG/RAG stores.
loading . . .
5.15. Property Graphs
5.15. Property Graphs # A property graph is a way to represent database contents, as an alternative to the usual (in âŚ
https://www.postgresql.org/docs/19/ddl-property-graphs.html
20 days ago
0
1
0
âiOS 27 system promptsâ â extracted assistant instruction templates from dyld_shared_cache. Includes HomeKit summarizer, Wallet pass extractor, call-intelligence schemas, and other on-device directives. Useful for prompt design patterns + auditing privacy/attack surface.
loading . . .
iOS 27 system prompts
iOS 27 system prompts. GitHub Gist: instantly share code, notes, and snippets.
https://gist.github.com/samhenrigold/4d107eddf2c0a9d0afb428922adcc2c3
20 days ago
0
0
0
Appleâs `container` repo documents âmacOS Container Machinesâ â CLI-managed, container-capable VMs on macOS with details on networking, filesystem sharing, and limitations. A Docker Desktop alternative that makes the VM boundary explicit and scriptable.
loading . . .
container/docs/container-machine.md at main ¡ apple/container
A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon. - apple/container
https://github.com/apple/container/blob/main/docs/container-machine.md
20 days ago
1
3
2
Vincent Bernat documents a blogging pipeline that uses LLMs for copyediting/translation with explicit disclosure per post (icons + notes). Uses Claude Sonnet 4.5, DeepL, and Kagi, with concrete before/after edits and a year-by-year tool log.
loading . . .
Blogging with an LLM assistant
As a non-native English writer, I rely on LLMs for grammar, copyediting, and translation, despite hating AI slop.
https://vincent.bernat.ch/en/blog/2026-blogging-llm
20 days ago
0
0
0
GitHub/npm v12 (July 2026) tightens install defaults: lifecycle scripts blocked unless explicitly approved (`allowScripts`), and git/remote URL dependencies blocked unless allowed. Upgrade to npm 11.16.0+, run installs to see warnings, use `npm approve-scripts` and commit the allowlist.
loading . . .
Upcoming breaking changes for npm v12 - GitHub Changelog
Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…
https://github.blog/changelog/2026-06-09-upcoming-breaking-changes-for-npm-v12/
20 days ago
0
0
0
EU Open Source Strategy: full-lifecycle OSS plan for âtech sovereigntyâ â procurement guidance, an Open Internet Stack catalogue, and a maintenance instrument for critical dependency mapping + mirroring. Focus is on keeping deps buildable/patchable, not just funding repos.
loading . . .
The EU Open Source Strategy
The EU Open Source Strategy places open source at the centre of the EUâs technological sovereignty by promoting European open alternatives to non-EU proprietary solutions in critical domains.
https://digital-strategy.ec.europa.eu/en/policies/open-source-strategy
21 days ago
0
0
0
âAI is slowing downâ argues the drag isnât benchmarks â itâs ops: inference cost, latency, GPU limits, safety/regulation, and product integration. Useful framing for leaders shipping LLM features with real SLAs, not demoware.
loading . . .
AI Is Slowing Down
If you liked this piece, you should subscribe to my premium newsletter. Itâs $70 a year, or $7 a month, and in return you get a weekly newsletter thatâs usually anywhere from 5,000 to 18,000 words, including vast, detailed analyses of NVIDIA, Anthropic and OpenAIâs
https://www.wheresyoured.at/ai-is-slowing-down/
21 days ago
0
1
0
Signalâs PDF warns the UKâs proposed age-verification + automated nudity scanning would require client-side content inspection on everyoneâs devices. That creates a permanent, updateable surveillance mechanism at the OS/app layerâeasy to expand beyond the original scope.
loading . . .
Surveillance Is Not Safety: A statement on the UK's latest threat to privacy [pdf]
Signalâs June 8, 2026 statement condemns the UK governmentâs proposal to require ageâverification and automated nudity scanning of all device content as a form of mass surveillance that will erode privacy, strengthen platform control, and be expanded beyond its original scope; the statement argues this policy wonât keep children safe and calls for investment in education, social services, and AI guardrails instead. îciteîturn0view0î
https://signal.org/blog/pdfs/2026-06-08-uk-surveillance-is-not-safety.pdf
21 days ago
0
0
0
Jimmy Koppelâs âSoftware Design in the Age of AIâ argues LLMs will automate low-level coding but amplify the need for explicit design intent. Focus: removing hidden coupling, human-led refactoring, and tools/agents that assist understanding vs âdark factoryâ automation.
loading . . .
Arch-Engineer: Software Design in the Age of AI
Eliminate impostor syndrome, Escape software influencer dogma, Rise above subjective debates, Give concrete answers you can explain. Unleash your full potential as a software engineer
https://self-service.mirdin.com/software-design-in-the-age-of-ai
21 days ago
0
1
0
âAI rockstar devâ failure mode: lots of LLM-generated code from ephemeral sessions â inconsistent patterns, naming, logging, retries, config schemas. The post argues for small guided snippets, slower architecture choices, and human curation to avoid unpayable tech debt.
loading . . .
Cleaning up after AI rockstar developers - Jesse Skinner
We
https://www.codingwithjesse.com/blog/rockstar-developers/
21 days ago
0
0
0
Apple Core AI: framework + tooling (coreai-torch, coreai-build) to compile and run .aimodel assets on-device across iPhone/iPad/Mac/visionOS. Includes debugging/profiling and fine-grained memory control. Zero server dependency, optimized for Apple silicon.
loading . . .
Core AI | Apple Developer Documentation
Run AI models in your app on Apple silicon.
https://developer.apple.com/documentation/coreai/
21 days ago
0
2
0
0xsid documents a patched Instagram account takeover via Metaâs AI support flow: attacker gets support to change the linked email, then runs a standard password reset. 2FA is bypassed because account recovery becomes the new auth path.
loading . . .
The newest Instagram âexploitâ is the goofiest I've seen
Short, punchy write-up describing a trivial-seeming Instagram account takeover that abused Metaâs AI-powered support flow to change a linked email and reset the password, bypassing 2FA; author notes Meta appears to have patched it. High signal for practitioners interested in real-world AI automation failures and the security gaps in account-recovery workflows.
https://www.0xsid.com/blog/meta-account-takeover-fiasco
28 days ago
0
1
0
âAI job griefâ essay: argues AI disruption triggers a distinct grief pattern (identity loss + anticipatory mourning) because the threat is ongoing. Proposes an AIRD framing, pulls from clinical literature + Reddit incidents, and notes HR lacks rituals/language for it.
loading . . .
AI Job Grief: The Unnamed Psychological Crisis Hitting Tech Workers
Across hundreds of Reddit threads and a small body of clinical literature, AI-driven displacement is producing an emotional category that most closely resembles grief, and the institutions causing it have no language for it.
https://jackmaguire.org/blog/ai-job-grief/
29 days ago
0
0
0
reposted by
Nicolas Gras
antirez
about 1 month ago
Many of you forgot too fast the insane amount of shitty software we had to see and suffer in the pre-AI era.
7
138
11
DBOS shows durable workflow execution on Postgres: job tables + `FOR UPDATE SKIP LOCKED`, advisory locks, LISTEN/NOTIFY, transactional retries, idempotent handlers. Fewer moving parts than a workflow engine, with trade-offs in long-running state machines + observability.
loading . . .
Postgres-backed Durable Workflow Execution | DBOS
Explaining the concept of a Postgres-backed durable execution system like DBOS and comparing it to external workflow orchestration systems like Temporal.
https://www.dbos.dev/blog/postgres-is-all-you-need-for-durable-execution
about 1 month ago
0
1
0
Walkthrough: patching a Yamaha THR10c guitar amp firmware via UART/JTAG. Uses FT2232H + OpenOCD to dump flash, disassemble, relink, patch, and reflash. A practical embedded RE pipeline from soldering pads to rebuilding images.
loading . . .
Patching my guitar amp's firmware
A deep, handsâon walkthrough of reverse engineering and patching the Yamaha THR10c guitar amp firmware. The post covers hardware work (soldering UART/JTAG connectors), using an FT2232H adapter with OpenOCD, dumping and disassembling memory, relinking and patching the firmware, flashing updates, and possible next steps like MIDI 2 and custom DSP.
https://mforney.org/blog/2026-05-28-patching-my-guitar-amps-firmware.html
about 1 month ago
0
0
0
reposted by
Nicolas Gras
Retro Tech Dreams
about 1 month ago
Bryce2 (1996)
14
574
157
Research shows a new web sideâchannel: JavaScript can infer SSD I/O timing/patterns to fingerprint or track users without network beacons. It relies on storage access latency signals and could be mitigated via browser timer fuzzing, cache partitioning, or OS/firmware changes.
loading . . .
Websites have a new way to spy on visitors: Analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript.
https://arstechnica.com/security/2026/05/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity/
about 1 month ago
0
1
0
mlsu.io âCan we have the day off?â argues AI productivity gains should convert into shorter workweeks (e.g., Fridays off). Itâs a management/redistribution take â automation savings get reclaimed by humans, not just more output.
loading . . .
Can we have the day off?
Short, timely opinion piece arguing that AI-driven productivity gains should translate into shorter workweeks (e.g., a Friday off), mixing wry personal anecdotes about childcare and a broader point about redistributing gains from automation. Useful provocation for engineering leaders weighing AI efficiency vs. workplace norms. îciteîturn0view0î
https://mlsu.io/posts/day-off/
about 1 month ago
0
0
0
`airtop`: terminal âhtop for the airwavesâ â live 802.11 dashboard with spectrum, per-station RSSI traces, frame-type activity feed, histogram, and AP list using braille/block graphics. Uses eBPF on mac80211/cfg80211 from a normal connected iface (no monitor mode).
loading . . .
GitHub - yeet-src/airtop: htop for the airwaves â a live 802.11 (Wi-Fi) RF dashboard in your terminal
htop for the airwaves â a live 802.11 (Wi-Fi) RF dashboard in your terminal - yeet-src/airtop
https://github.com/yeet-src/airtop
about 1 month ago
0
0
0
Essay on âpackage managers that package package managersâ: shipping npm/pip/etc inside products to make installs reproducible, at the cost of layered dependency resolution, harder security patching, and more complex upgrade/rollback paths for ops and maintainers.
loading . . .
Package managers that package package managers
brew install pip install poetry add pdm add uv tool install conda
https://nesbitt.io/2026/05/28/package-managers-that-package-package-managers.html
about 1 month ago
0
0
0
DoomBench: a reproducible âCan it run DOOM?â benchmark for data stacks. It drives ingest/storage/query behavior with an unusual workload to expose tail latency, throughput limits, and operational failure modes across the full pipeline â not just microbenchmarks.
loading . . .
Introducing DoomBench - Can Your Data Stack Run DOOM?
A playful, practical benchmark that uses the cultural âCan it run DOOM?â meme to exercise and measure a data stackâs behaviour under unusual workloads. Useful as a reproducible, attention-grabbing stress test for DB/ingest/processing pipelines, itâs the kind of experiment SREs, backend engineers and tech leads can use to validate latency, throughput and operational assumptions.
https://cedardb.com/blog/doombench/
about 1 month ago
1
0
0
Starlette CVEâ2026â48710 (âBadHostâ) is an auth bypass via crafted Host header that can influence request.url.path and defeat path-based auth middleware. Affects Starlette <1.0.1 (many FastAPI AI services like vLLM/LiteLLM/MCP). Fix: upgrade to 1.0.1+.
loading . . .
Millions of AI agents imperiled by critical vulnerability in open source package
BadHost" was found in Starlette, a package with 325 million weekly downloads.
https://arstechnica.com/information-technology/2026/05/millions-of-ai-agents-imperiled-by-critical-vulnerability-in-open-source-package/
about 1 month ago
0
0
0
Agent Trace RFC (v0.1.0, Jan 2026): vendor-neutral JSON schema to attribute repo changes to humans + AI agents. Supports file/line ranges, movement-resistant content hashes, VCS metadata, model IDs, and session/conversation URLs. Excludes legal/provenance/quality.
loading . . .
Agent Trace
A standard format for tracking AI-generated code.
https://agent-trace.dev/
about 1 month ago
0
0
0
Article argues Wikipedia is drifting toward Big Techâs anti-labor pattern â privatizing value created by volunteers and weakening the public knowledge commons. Useful lens on platform governance, incentive design, and the hidden supply chain risk of volunteer-run infra.
loading . . .
Big Techâs Anti-Labor Playbook Has Come for Wikipedia
TLDR: In ten days last month, the Wikimedia Foundation fired the longtime lead developer of MediaWiki and disbanded the team whose entireâŚ
https://medium.com/@jakeorlowitz/wikipedia-is-doing-the-capitalist-thing-56a393232943
about 1 month ago
0
0
0
SignalBloom models when âoffshore engineer + local/OSS LLM (DeepSeek as proxy)â beats frontier API economics. Uses token blend + cache-hit assumptions and salary inputs to argue frontier inference is ~10x pricier, and rising token use + better local models cap pricing power.
loading . . .
Outsourcing plus LocalAI will soon become more economical vs Frontier labs | SignalBloom AI posts
Outsourcing plus LocalAI will soon become more economical vs Frontier labs
https://www.signalbloom.ai/posts/outsourcing-plus-localai-will-soon-become-more-economical-vs-frontier-labs/
about 1 month ago
0
1
0
Qwen3.7-Max (Qwen) is an âagent-firstâ LLM release focused on tool use and orchestration. The writeup frames production concernsâlatency, tool-call reliability, and safety/guardrailsâaimed at shipping LLM-driven automation instead of just chat.
loading . . .
Qwen Studio
Blog post announcing Qwen3.7-Max, positioned as an âagent-firstâ LLM release that emphasizes improved tool use, orchestration, and production-ready agent capabilities. Useful read for engineers evaluating agentic workflows and integrations â it highlights practical trade-offs (tooling, latency, safety/guardrails) that matter when shipping LLM-driven automation in production.
https://qwen.ai/blog?id=qwen3.7
about 1 month ago
0
0
0
âGoogle Declaring War on the Webâ breaks down how AI Overviews + SERP UI shifts cut publisher clicks while increasing crawl/hosting costs. Useful framing for building less search-dependent distribution and instrumenting for zero-click traffic.
loading . . .
Google Declaring War on the Web
The piece argues that recent Google product and search-ui moves amount to a de facto "war on the web" â redirecting attention and revenue away from independent publishers via AI summaries, search result changes, and other UX shifts. îciteîturn0reddit12î It frames these changes as causing measurable traffic loss and increased hosting/crawl costs for sites, a concern echoed in analyses of Googleâs AI Overviews and their impact on publishers. îciteîturn0search20îturn0search10î For tech leads this is worth sharing: itâs a practical reminder to plan for decreased owned-traffic dependency (RAG/first-party APIs, paywalled or API-first content, caching, and resilient analytics) rather than a purely theoretical rant. îciteîturn0search7î
https://tante.cc/2026/05/20/on-google-declaring-war-on-the-web/
about 1 month ago
0
0
0
Greg Wilson lists 12 ways orgs mis-measure AI-assisted coding: LOC, toy task timing, adoption/acceptance rates, etc. Argues for controlled studies and system-level metrics (review load, security, tech debt, long-term outcomes) instead of short-term output.
loading . . .
Twelve Ways to Be Wrong About AI-Assisted Coding
Greg Wilsonâs May 20, 2026 post enumerates twelve common mistakes organisations make when measuring the impact of AI-assisted coding â from counting lines of code and timing toy tasks to treating adoption or acceptance rates as success metrics â and argues these metrics systematically mislead unless studies use proper controls and system-level outcomes. The piece is a concise, evidence-backed critique (with a bibliography of recent studies) urging better experimental design and measurements that account for security, review burden, technical debt, and long-term effects. îciteîturn0view0î
https://third-bit.com/2026/05/20/twelve-ways-to-be-wrong/
about 1 month ago
1
1
0
Forge: a Python reliability layer for self-hosted LLM tool-calling. Adds rescue parsing, retry nudges, step enforcement, and VRAM-aware context management. Ships an OpenAI-compatible proxy + clients for Ollama, llama-server, Anthropic to boost agent task success.
loading . . .
GitHub - antoinezambelli/forge: A Python framework for self-hosted LLM tool-calling and multi-step agentic workflows
A Python framework for self-hosted LLM tool-calling and multi-step agentic workflows - antoinezambelli/forge
https://github.com/antoinezambelli/forge
about 1 month ago
0
3
0
reposted by
Nicolas Gras
Olivier Poncet đŚ
about 1 month ago
Un changement de libellĂŠ qui en dit plus qu'il n'y parait ...
3
13
4
reposted by
Nicolas Gras
Fabien Potencier
about 1 month ago
During the last few weeks, the
#Symfony
core team has been hard at work fixing a long list of vulnerabilities for both
#Symfony
and
#Twig
. Today, we're publishing that work in the biggest security patch releases ever. Bare with us and wish us luck đ
2
28
18
OpenCode + llama.cpp + Qwen3.6: a local, self-hosted workflow to scan your repo for likely bugs. Walkthrough covers setup, prompt patterns, and trade-offs (model size vs latency/accuracy). Privacy-friendly LLM-assisted debugging without cloud deps.
loading . . .
Find bugs in YOUR code using OpenCode, Llama.cpp and Qwen3.6
Background For quite some time I had been submitting tasks to LLMs via llama-cli (natively) or llama-server (API), both from the excellent...
http://wtarreau.blogspot.com/2026/05/find-bugs-in-your-code-using-opencode.html
about 1 month ago
0
2
1
FediMeteo runs many snac instances behind HAProxy using two separate caches (media vs ActivityPub JSON). It microcaches AP JSON for ~60s, strips/normalizes headers, reuses connections, and routes hosts via map files to reduce backend thread usage.
loading . . .
FediMeteo, HAProxy, and the art of not wasting snac threads
Practical deepâdive showing how Stefano Marinelli uses HAProxy as an edge cache and routing layer in front of many snac instances to ânot waste snac threadsâ â two separate caches (media vs ActivityPub JSON), header cleanup, microcaching (60s for JSON), connection reuse, and simple map-based host routing keep backend work minimal and predictable. Great concrete example for small selfâhosted Fediverse services and reverseâproxy centric architectures. îciteîturn1view0î
https://it-notes.dragas.net/2026/05/18/fedimeteo-haproxy-and-the-art-of-not-wasting-snac-threads/
about 1 month ago
0
0
0
Anthropic acquired Stainless â a codegen stack that produces SDKs + CLIs across multiple languages and tooling for MCP servers. Goal: reduce integration friction for Claude apps/agents with consistent types, errors, pagination, retries, and connector scaffolding.
loading . . .
Anthropic acquires Stainless
Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.
https://www.anthropic.com/news/anthropic-acquires-stainless
about 1 month ago
0
0
0
Qwen 3.7 preview from Alibaba â another open-weight LLM iteration to benchmark. Relevant if you run RAG/agents: check quality deltas, latency + cost at your real context length, and serve it via vLLM/TGI with quantization options for self-hosted inference.
loading . . .
Qwen 3.7 Preview
Alibaba posted a preview of Qwen 3.7 (tweet linked), signalling another incremental LLM release worth watching for performance and deployment implications. High relevance for engineering teams doing RAG, LLM evaluation, and production integrations â good share for peers who care about model quality, inference cost, and integration trade-offs.
https://twitter.com/Alibaba_Qwen/status/2056403591464984753
about 1 month ago
0
0
0
Mozilla argues UK regulators shouldnât age-gate or restrict VPNs. VPNs reduce tracking, mask location/IP, and protect high-risk users (journalists/activists). Proposal: focus on platform accountability, parental controls, and digital skillsânot undermining privacy tools.
loading . . .
Mozilla to UK regulators: VPNs are essential privacy and security tools and should not be undermined â Open Policy & Advocacy
In the context of concerns around young peopleâs interactions with digital technologies, the UKâs Department for Science, Innovation and Technology is consulting on additional measures to prepare young people for ...
https://blog.mozilla.org/netpolicy/2026/05/15/mozilla-to-uk-regulators-vpns-are-essential-privacy-and-security-tools-and-should-not-be-undermined/
about 1 month ago
0
1
0
δ-mem: add a tiny 8Ă8 online associative memory to a frozen full-attention transformer. Update it with a delta-rule, read it out to generate low-rank attention corrections. Reports ~1.10Ă avg gain; bigger on memory-heavy MemoryAgentBench/LoCoMo. Self-contained âmemoryâ without longer context or fine
loading . . .
$δ$-mem: Efficient Online Memory for Large Language Models
Large language models increasingly need to accumulate and reuse historical information in long-term assistants and agent systems. Simply expanding the context window is costly and often fails to ensure effective context utilization. We propose $δ$-mem, a lightweight memory mechanism that augments a frozen full-attention backbone with a compact online state of associative memory. $δ$-mem compresses past information into a fixed-size state matrix updated by delta-rule learning, and uses its readout to generate low-rank corrections to the backbone's attention computation during generation. With only an $8\times8$ online memory state, $δ$-mem improves the average score to $1.10\times$ that of the frozen backbone and $1.15\times$ that of the strongest non-$δ$-mem memory baseline. It achieves larger gains on memory-heavy benchmarks, reaching $1.31\times$ on MemoryAgentBench and $1.20\times$ on LoCoMo, while largely preserving general capabilities. These results show that effective memory
https://arxiv.org/abs/2605.12357
about 1 month ago
0
0
0
AI SaaS per-seat + feature-tier subscriptions create lock-in and cost drift: usage scales with tokens and workflows, not headcount. The piece argues for treating LLMs like infraâgateways, logging, budgets, and swap-friendly model routing over vendor UIs.
loading . . .
Every AI Subscription Is a Ticking Time Bomb for Enterprise
Every AI lab is losing money serving your company right now. They know it. And they are doing it on purpose.
https://www.thestateofbrand.com/news/ai-subscription-time-bomb
about 1 month ago
0
0
0
Perfetto essay: donât answer the first user question. Ask âwhyâ to uncover missing context, wrong mental models, and hidden product paths. Concrete examples: trace splitting, plugin API, trace mergeâbetter UX and fewer premature features.
loading . . .
Don
In my work on Perfetto, a performance debugging tool, one question I get often is: âhow do I split a Perfetto trace into multiple files?â Instead of answering directly, I say: âthere isnât an easy way to do that, but whatâs leading you to collect traces large enough to want to split?â This is one of my golden rules at work. When a user asks me something âweirdâ: donât answer the first version of the question. On the surface this might appear like Iâm talking about the XY problem, but that stops one step short. It treats the userâs stated question as a puzzle to decode: figure out what they really meant, answer that, move on. I think we can go much further. Instead, the confusion that produced the wrong question is itself an opening, and the conversation it sparks is valuable to both sides. The user walks away with a better mental model of the tool. I walk away with a clearer picture of where the product confuses people. And sometimes, between us, we figure out that the product itself n
https://lalitm.com/post/dont-answer-the-first-question/
about 1 month ago
0
0
0
`rk3562deb` documents turning an RK3562 Android tablet into a Debian workstation: bootloader + kernel + rootfs steps, scripts, and hardware/driver workarounds. Practical reference for low-cost ARM edge nodes where mainline support is the real constraint.
loading . . .
GitHub - tech4bot/rk3562deb
Contribute to tech4bot/rk3562deb development by creating an account on GitHub.
https://github.com/tech4bot/rk3562deb
about 1 month ago
0
1
0
`mcusite`: serves a tiny website straight from an 8âbit AVR. Implements a minimal TCP/IP stack + HTTP server under tight RAM/flash limitsâstatic content, trimmed headers, small buffers, explicit retransmit logic. A clear demo of constrained networking trade-offs.
loading . . .
Hosting a website on an 8-bit microcontroller
Practical project showing how the author serves a simple website directly from an 8âbit AVR microcontroller, implementing a tiny TCP/IP stack and HTTP server within severe memory and CPU limits. It's a technical curiosity that surfaces concrete lessons about constrained networking, protocol trimming, latency/power trade-offs, and where such minimal hosting could make sense (IoT edge, ultraâlowâpower endpoints) â useful for engineers interested in lowâlevel constraints and selfâhosted edge devices.
https://maurycyz.com/projects/mcusite/
about 1 month ago
1
1
0
PVLDB 2026 âHow to Write to SSDsâ: retrofits LeanStore to use out-of-place writes + page packing/compression + âdeathtimeâ grouping + ZNS/FDP-aligned placement (NoWA pattern). Reports 1.65â2.45Ă throughput and 6â10Ă fewer flash writes.
loading . . .
How to Write to SSDs [pdf]
This PVLDB 2026 paper shows that moving DBMSs from in-place to out-of-place writes and applying coordinated optimizations (page packing/compression, grouping by âdeathtimeâ, ZNS/FDP alignment, and a NoWA pattern) drastically reduces end-to-end write amplification and extends SSD lifespan; the authors retrofit LeanStore and demonstrate large gains in throughput and flash-write reduction. Their evaluation reports roughly 1.65â2.24Ă throughput improvement and 6.2â9.8Ă reduction in flash writes on YCSB, and up to 2.45Ă throughput with 7.2Ă fewer flash writes on TPCâC, plus compatibility with ZNS/FDP interfaces. îciteîturn0view0î
https://www.vldb.org/pvldb/vol19/p1469-lee.pdf
about 1 month ago
0
0
0
Bitsocial: open-source P2P networking layer for decentralized social apps. Clients discover peers and sync/replicate data without a central server or federation hub. Useful building block to compare with ActivityPub/Matrix when you want resilient, privacy-first sync.
loading . . .
Bitsocial - Open Source P2P Network for Social Apps
Bitsocial is an open-source IPFS-backed peer-to-peer network for social apps, with no servers, no global bans, where users and communities are cryptographic property.
https://bitsocial.net/
about 1 month ago
0
0
0
Fits on a Floppy: a manifesto for intentionally small softwareâtiny binaries, minimal dependencies, low resource use, and designs that survive years of updates. Pushes back on feature bloat and stack sprawl in favor of privacy, simplicity, and longevity.
loading . . .
Fits on a Floppy - A Manifesto for Small Software
A Manifesto for Small Software
https://fitsonafloppy.com
about 1 month ago
0
0
0
Semble: local CPU-only code search for LLM agents. Index a repo fast, answer queries in milliseconds, and return concise snippets (not whole files) to cut prompt tokens. Runs as an MCP server or via bash for Claude Code/Codex/Cursor. No API keys/GPU.
loading . . .
GitHub - MinishLab/semble: Fast and Accurate Code Search for Agents. Uses ~98% fewer tokens than grep+read
Fast and Accurate Code Search for Agents. Uses ~98% fewer tokens than grep+read - MinishLab/semble
https://github.com/MinishLab/semble
about 1 month ago
2
2
2
Reverse engineering Android malware with Claude Code â a practical APK workflow: jadx/decompile, have the LLM interpret obfuscated Java/Kotlin, extract IOCs, and draft YARA/Sigma detections. Emphasizes verification steps to avoid hallucinated findings.
loading . . .
Reverse engineering Android malware with Claude Code
Practical walkthrough showing how Claude Code can assist reverse-engineering Android malware: decompiling APKs, interpreting obfuscated Java/Kotlin, extracting indicators of compromise, and generating detection rules. The write-up highlights concrete LLM-assisted workflows, sample prompts, and important caveats (hallucinations, verification needs), making it a useful primer for security engineers testing LLMs in malware analysis.
https://zanestjohn.com/blog/reing-with-claude-code
about 1 month ago
0
0
0
GenCAD (MIT, MIT license): image-conditioned model that generates full parametric CAD command sequences (editable CAD programs), not meshes. Uses transformer encoders + contrastive multimodal reps + a latent diffusion prior to sample manufacturable CAD artifacts.
loading . . .
GenCAD
GenCAD (MIT) is an imageâconditional generative model that produces not just 3D solids but full parametric CAD command sequences (CAD programs) from images using a pipeline of transformer-based encoding, contrastive multiâmodal representation learning, and a latent diffusion prior. The demo, code and paper (arXiv) show it can retrieve and generate editable, manufacturable CAD artifacts rather than meshes or point clouds â a useful datapoint for teams exploring structured program-output generation and multimodal latent priors. Practical takeaways: this demonstrates a path for generative models to produce editable engineering artifacts (programs), which is more valuable for real-world workflows than blackâbox geometry alone.
https://gencad.github.io/
about 1 month ago
0
0
0
I have this old NAS from Buffalo I bought in 2007 (LH-CHL 1.0). Just upgraded to something more moder. I opened the case to see if the controller card can run linux on it's own đ´ââ ď¸ Let's investigate đ Some note: made in Japan. Also the LED indicator shape is... interesting
#linux
#oldtech
about 1 month ago
2
2
0
SecurityBaseline.eu scans ~200k EU government domains (32 countries) and publishes 21 security metrics as traffic-light maps. Findings include 3,081 sites setting tracking cookies, 1,070 publicly reachable phpMyAdmin panels, and ~99% email failing current TLS/mail guidelines.
loading . . .
European governments: 3.000 tracking sites, 1.000 phpMyAdmins, and 99% poorly encrypted email. Introducing SecurityBaseline.eu - Internet Cleanup Foundation
On May 13, 2026, the website SecurityBaseline.eu was launched. It is a spin-off from the Dutch “Basisbeveiliging”, which has monitored baseline security for over a decade and is part of governmental policy. Three months ago we sent tens of thousands of e-mails to European governments indicating the new site would launch, giving them time to […]
https://internetcleanup.foundation/2026/05/european-governments-3000-tracking-sites-1000-phpmyadmins-and-99pct-poorly-encrypted-email-introducing-securitybaseline-eu/
about 2 months ago
0
0
0
Load more
feeds!
log in