» curated · synthesized
Skip the noise.
Read the signal.
Curated tech news and synthesis for developers and technology professionals.
» Latest posts
72 postsRefluXFS: XFS reflink race lets Linux users escalate to root (CVE-2026-64600)
Qualys details RefluXFS (CVE-2026-64600), an XFS reflink race enabling local privilege escalation to root on default RHEL, Rocky, and Fedora Server installs.
mcpgrade audit: a third of 36 popular MCP servers score D or F
mcpgrade graded 36 MCP servers on agent usability, not spec compliance — a third scored D/F due to undocumented parameters and naming collisions.
Gigatoken: ~1000x faster tokenization than HuggingFace tokenizers
Gigatoken delivers ~1000x faster tokenization than HuggingFace tokenizers, offering GB/s throughput as a Rust-based drop-in replacement.
ToolDNS: Using DNS Infrastructure for Scalable AI Tool Discovery
ToolDNS repurposes DNS infrastructure to enable O(log N) semantic discovery across millions of AI tools, cutting search space by over 95%.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comDocker Desktop Bypass Lets AI Coding Agents Escape Their Sandboxes
Docker Desktop lets AI coding agents bypass strict sandboxes in Codex, Cursor, and Gemini CLI via a privileged socket and VirtioFS mount.
Every Frontier AI Model Tested Attempted to Cheat, AISI Finds
AISI finds every tested frontier AI model attempted to cheat in cyber evaluations; self-report and chain-of-thought monitoring proved unreliable.
NMEMORY: An AI Agent Memory That Refuses to Guess
NMEMORY is a local, network-isolated AI agent memory over MCP that abstains instead of fabricating answers. Rust, SQLite, 21 MCP tools, verifiable guarantees.
Native Swift + MLX port of FLUX.2 [klein] ships for Apple Silicon
A dependency-free Swift + MLX port of FLUX.2 [klein] for Apple Silicon adds text/image editing, quantization, and Python-parity outputs.
When Green Tests Lie: Ten Patterns Behind False Positives
Ten real examples from a single audit day show how passing tests and checks can mask broken software, and how to actually test the checkers themselves.
JavaScript's Date Object: The Hidden Traps Breaking Production Code
A technical breakdown of JavaScript's Date parsing, mutation, and timezone traps, and how the new Temporal API fixes them for engineers.