» curated · synthesized
Skip the noise.
Read the signal.
Curated tech news and synthesis for developers and technology professionals.
» Latest posts
70 postsnibble: Diagnose and Fix Redis Memory Waste, No Install Required
nibble diagnoses and fixes Redis memory waste with zero install, claiming an 8.6x memory reduction backed by transparent, documented benchmarks.
pgColumnar 1.0-alpha2 Ships Read-Only Iceberg and S3 Object Storage
pgColumnar 1.0-alpha2 adds read-only Apache Iceberg support, S3-compatible object storage, a maintenance daemon, and six security fixes.
Unigram: A Rust Codec Turning Bytes Into Single-Token Words for LLMs
Unigram is a Rust crate encoding bytes into words that cost exactly one LLM token each, giving fixed token-budget guarantees over hex or base64.
Operation CameraSwarm: 14,000+ Dahua Cameras Compromised
Hunt.io traced Operation CameraSwarm to an exposed dev directory, revealing three exploit paths behind 14,000+ compromised Dahua cameras.
GeoServer jsonArrayContains SQLi Confirmed Regression of CVE-2023-25158
GeoServer's GHSA-mqjf-5f49-2fjh SQL injection is a confirmed regression of CVE-2023-25158, enabling unauthenticated RCE. Patch and mitigation details inside.
Linux 7.2 Released with Cache-Aware Scheduler and USB4STREAM
Linux 7.2 ships cache-aware task scheduling, a fairer GPU scheduler, USB4STREAM support, and Btrfs performance gains.
Python library verifies OpenAI's signed AI agent traffic (RFC 9421)
regent-httpsig is an open-source Python library that verifies and signs OpenAI-style AI agent HTTP traffic per RFC 9421 and Web Bot Auth drafts.
Spectre Flaw Leaks JWT Tokens on Cloudflare Workers via Remote Timers
A new Spectre attack bypasses Cloudflare Workers' DyPrIs defense, leaking JWT tokens via microarchitectural timers; Cloudflare responded with MPK-based isolation.
Linux Kernel Bridge STP Timer Use-After-Free Vulnerability
Linux bridge STP timers vulnerable to use-after-free via dellink teardown gap, enabling potential kernel control-flow hijack. Patched upstream.
New API integer overflow turns $0.10 balance into $16.9 trillion
CVE-2026-71479 lets one request overflow New API's billing math, turning a $0.10 balance into $16.9T. CVSS 9.1, fixed in v1.0.0-rc.18.