» curated · synthesized
Skip the noise.
Read the signal.
Curated tech news and synthesis for developers and technology professionals.
» Latest posts
1032 postsUnisoc T606/T616 Backdoors Enable Zero-Click Root on Budget Androids
Chained BootROM, modem RCE, and backdoored OEM apps let attackers silently root Unisoc-based budget Android phones with zero user interaction.
Porting Gemma-4 (2B/4B/12B) to AWS Inferentia2: A Field Report
How Gemma-4's mixed attention heads and KV-sharing broke AWS's vendor stack, and the tracing/sharding fix that made Inferentia2 inference work.
How Bun rewrote 535K lines from Zig to Rust with 64 AI agents
Bun's creator used 64 parallel Claude agents to rewrite 535,000 lines of Zig into Rust in two days. Key lessons for engineering teams.
Beyond login: encrypting data with passkeys and WebAuthn PRF
WebAuthn's PRF extension turns passkey login into an encryption key source; pknotes shows a master-password-free, end-to-end encrypted architecture.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comJulia Introduces UnifiedIR to Merge Parser, Lowering and Optimizer IRs
Julia's compiler team unifies parsing, lowering and optimization under one IR, UnifiedIR, with a shared kind registry and source provenance tracking.
Pre-Auth SQL Injection in WordPress Core via Batch API Desync
Array desync in WordPress's REST batch API enables pre-auth SQL injection (CVE-2026-63030/60137); details plus a fast bitmask extraction technique.
Mozilla Report: Open-Source AI Wins Tokens, Lags in Production
Mozilla's 2026 report shows open-source AI models leading in token volume but trailing closed models in production deployment.
The four hidden causes behind an AI agent's vanishing memory writes
Four distinct causes make AI agent memory writes vanish silently: key mismatches, compaction drops, lost-update races, and stale-read writes.
Source review of 200 self-hosted AI tools finds 78 leak tenant data
A source review of 200+ self-hosted multi-tenant AI/SaaS tools found 78 with cross-tenant data leaks via unguarded read endpoints, 31 filed as CVEs.
6 MCP Servers, One Agent: What the Token Bill Really Showed
An engineer benchmarked 6 MCP servers on one agent, exposing hidden token, latency, and OAuth costs — and the four fixes that cut spend by 53%.