#agent #docker #game #news #sec
- #env
    - 'It's too late': David Suzuki says the fight against climate change is lost (on HN)
- #sandbox
    - Basically Everyone Should Be Avoiding Docker (on HN)
    - What is gVisor? (on HN) (on lobste.rs)
        - gVisor is an abstraction on top of existing Linux Kernel and acts as a middleman between the container and the Kernel
        - The system calls are intercepted and handled by the a gVisor component called “Sentry”
        - gVisor is designed to minimize and restrict the types of system calls the Sentry makes to the host kernel.
        - Sandboxing and Workload Isolation · The Fly Blog
            - "The Linux kernel has almost 400 system calls. How many of them do we need to efficiently emulate the rest? gVisor needs less than 20. With those, gVisor implements basically all of Linux in userland. Processes. Devices. Tasks. Address spaces and page tables. Filesystems. TCP/IP; the entire IP network stack, all reimplemented, in Go, backended by native Linux userland."
    - Container Use for Locally Sandboxed, Background Agents in Zed #agent
- #agent
    - Building a Mac app with Claude code (on HN)
    - Claude Code Pro Limit? Hack It While You Sleep (on HN)
    - Optimizing Tool Selection for LLM Workflows with Differentiable Programming #dspy
- #os
    - GrapheneOS: the private and secure mobile OS
        - from Cops in [Spain] think everyone using a Google Pixel must be a drug dealer
        - related: GrapheneOS: Why I ditched Google for a privacy-focused Pixel ROM
    - Mkosi – Build Bespoke OS Images
        - osbuild/bootc-image-builder: A container for deploying bootable container images.
        - Debcraft – Easiest way to modify and build Debian packages (on HN)
- #game-dev
    - Two and a Half Years in GameDev (on HN)
    - List of open source game clones
    - Adding Planets to Celestia on macOS
    - Shrinkle – Shrink words, find hidden phrase

#agent #jujutsu #neovim #news #os #software #tla
- #formal
    - A supposedly worthwhile contract I'll never do again
        - "What mattered here wasn’t the weights being moved or the TLA⁺ spec being produced - it was the thinking that writing the TLA⁺ specification required."
            - expectation of TLA⁺ contract: catch issues early, save training time, and get a formal spec
            - real value—deep system thinking during writing—vanishes when the expert leaves
            - the dev team values the 'what do we do in this case' discussions more than the final TLA⁺ specification artifact (risking abandonment)
            - alternative: adopting Hillel Wayne’s approach: "pair-program TLA⁺ specs with team members" to let them grasp the thinking
        - HN discussion summarized
            - success of TLA contracts requires refocusing on knowledge transfer
                - teaching teams to ask critical questions
                - embedding the spec in their workflow (via checks or collaboration)
                - treating the spec as a living document rather than a one-time deliverable
- #anti-bot
    - Anubis Pilot Project Report - June 2025
        - it's interesting to see how serious business sees the adoption of Anubis
    - Anubis now supports non-JS challenges
        - this changelog is very informative
            - weight thresholds in policy is flexible
            - `robots2policy` is convenient if a site has a well-maintained robots.txt
            - no-JS challenge via metarefresh doesn't seem to battle-ready: "many modern scrapers use headless Google Chrome", "its false positive rate is ascertained"
    - How Perplexity is Evading Anti-crawling Measures
    - Robots.txt - Archiveteam #anti-bot
            - On HN
    - Iocaine: The deadliest poison known to AI
    - I was wrong about robots.txt (on HN)
- #agent/idea
    - Everything around LLMs is still magical and wishful thinking
        - Why your vibe coded app only works in your head
    - Enough AI copilots, we need AI HUDs (on HN)
    - Every reason why I hate AI
    - Riff: LLMs are Software Diamonds
    - Identify, solve, verify
    - Operators, Not Users and Programmers
            - the distinction between "user" and "programmer" is an artifact of our presently barely-programmable and barely-usable computing systems.  I would like to use the neutral word "operator" instead. —Stanislav
            - programming to be easy and simple enough to pick up that people can do it without specialized training in the field, so that they can write situated software
            - malleable languages
                - spreadsheets
                    - Every Visual Workflow Tool Is Just Excel for Developers Who Gave Up
                - WYSIWYG editors
                - browser devtools
    - AI promised efficiency. Instead, it's making us work harder
        - AI tools aren’t just saving us time—they’re shifting where we spend our mental energy. And that shift is exhausting in ways we haven’t fully recognized yet.
        - No, AI is not Making Engineers 10x as Productive
    - Lack of intent is what makes reading LLM-generated text exhausting
        - Eleven Music
            - AI is still in the uncanny valley, it still has no soul
    - LLM Inevitabilism
        - New comment by lsy in "LLM Inevitabilism"
        - New comment by mg in "LLM Inevitabilism"
    - Gaslight-driven development
    - Don't Fall for AI: Reasons for Writers to Reject Slop
    - AI is killing the web – can anything save it?
        - from HN
            - Wiby - Search Engine for the Classic Web
            - I2P Anonymous Network
    - Rethinking CLI interfaces for AI
    - Local LLMs versus offline Wikipedia (on HN)
    - Terence Tao: A human metaphor for evaluating AI capability (on HN)
    - Will the Fear of Being Confused for AI Mean That We Will Now Write Differently? (on HN)
    - The vibe coder's career path is doomed (on HN)
    - AI coding agents are removing programming language barriers (on HN) (on lobste.rs)
    - Building better AI tools (on HN)
    - Stop Pretending LLMs Have Feelings Media's Dangerous AI Anthropomorphism Problem (on HN)
    - Developing our position on AI (on HN)
    - GPT might be an information virus (2023) (on HN)
    - #ai-policy
        - You Can’t Pay Me To Prompt!
            - an intereting writeup for (no) AI policy
            - from his AI Policy, I have quite some ideas about my own AI policy, starting by naming it "LM policy"
        - You can now disable all AI features in Zed (on HN)
        - Artificial Intelligence and the Linux Community
        - Generative AI. "Slop Generators, are unsuitable for use [ ]" (on HN)
- #jj
    - Git experts should try Jujutsu
    - Jujutsu For Busy Devs
        - Jujutsu For Busy Devs, Part 2: "How Do I...?"
    - zerowidth positive lookahead | jj tips and tricks
        - earlier: zerowidth positive lookahead | What I've learned from jj
    - rbtools/docs/rbtools/workflows/jujutsu.rst at master · reviewboard/rbtools
    - Jujutsu Strategies :: Reasonably Polymorphic
    - Jujutsu + Radicle = ❤️
    - dtolnay/dissimilar: Diff library with semantic cleanup, based on Google's diff-match-patch #struct
    - Sapling: A Scalable, User-Friendly Source Control System
        - many commands look like `jj`'s
    - The JJ VCS workshop: A zero-to-hero speedrun (on HN) (on lobste.rs)
- #incident
    - Recent Archive of Our Own outage was caused by integer exhaustion
    - Why AO3 Was Down (on HN)
    - GitHub pull requests were down (on HN)
    - Tell HN: 1.1.1.1 Appears to Be Down
    - Cloudflare 1.1.1.1 incident postmortem for July 14, 2025 (on HN) (on lobste.rs)
    - Cloudflare and the infinite sadness of migrations
    - Ask HN: GCP Outage?
    - How we discovered, and recovered from, Postgres corruption on the matrix.org homeserver
    - Starlink is currently experiencing a service outage. Our team is investigating (on HN)
    - Webflow Down for >31 Hours (on HN)
- #agent
    - bgcmd: let AI interact with any REPL
        - a nice example of Claude driving `rr` to debug
    - What I learned building an AI coding agent for a year
        - Codebuff
- #dev
    - What clever tools/workflows do you use to manage development environments?
        - mise
        - Devbox: Portable, Isolated Dev Environments
        - Fast, Declarative, Reproducible, and Composable Developer Environments - devenv (using Nix)
    - Why I got rid of all my neovim plugins
    - Stop using nix-env
- #idea
    - When in doubt, Go for a Walk
    - its ok to have a normal job
- #sec
    - iris
        - a neurosymbolic framework that combines LLMs with static analysis for security vulnerability detection
- #tech/fun
    - Useful utilities and toys over DNS
    - mawkdown, a lightweight, line-oriented(ish) text markup tool implemented in awk

#cg #duckdb #gpu #news #os #proof #render #rust #wasm #✍️
- #web
    - Astro is a return to the fundamentals of the web
    - Our Fullstack Architecture: Eta, HTMX, and Lit
        - Eta: a lightweight, fast, and simple embedded JavaScript templating engine
            - maybe that's all I need for my writings, I don't really need another SSG, just a templating engine
        - HTMX: allows us to add dynamic behavior directly to our server-rendered HTML
        - Lit: allows us to create encapsulated, reusable components with their own internal state and logic
    - Why Semantic HTML Still Matters
        - Semantic rot wrecks performance
        - Structure is resilience
        - Agents are the new users – and they care about structure
    - Rethinking DOM from first principles (on HN)
        - A Complete Introduction to Web Components in 2025
        - CSS Flexbox: a guide from CSS-tricks
        - About Wiby
        - DOM

            > The DOM has too many ways to do the same thing, none of them nice.

            > The achilles heel is the DOM's SGML/XML heritage, making everything stringly typed.

            > ARIA (accessibility) is notable, and only because this was what Semantic HTML was supposed to do and didn't.

            > There's this feeling that HTML always had paper-envy, and couldn't quite embrace or fully define its hypertext nature, and did not trust its users to follow clear rules.

            > Nobody really believes in the old gods of progressive enhancement and separating markup from style anymore, not if they make apps.

        - CSS

            > Your mental model of CSS should be applying two passes of constraints, first going outside-in, and then inside-out.

            > To avoid the recursive dependency, you need to isolate the children's contents from the outside, thus making speculative layout trivial.

        - Canvas that skips DOM

            > The actual achilles heel of canvas is that you don't have any real access to system fonts, text layout APIs, or UI utilities.

            -  GPU's HTML-like renderer: Layout and UI

        - Future

            > Taste matters. Good big systems grow from good small ones, not bad big ones. Maybe if Mozilla hadn't imploded... but alas.

        - vanilla-extract — Zero-runtime Stylesheets-in-TypeScript.
    - Understanding SVG Paths
    - A Friendly Introduction to SVG
    - Remove these tags from <head>
    - Client-side epub generation
    - Bookmarkable by Design: URL-Driven State in HTMX
    - On designing application UIs for children
        - most also apply universally
            - Show, Co-locate and Hint tools
            - Mistakes should be easy to fix
            - Simplify, then add delight(ness)
                - bright colours, sound, tactility, sparkle effects
            - Maintain visual context when changing state
    - Postcard is now open source
        - written in Ruby on Rails
        - personal site + newsletter
        - "I no longer expect meaningful revenue from the project. Open-sourcing it feels right. In the age of vibe coding, I think it would be fun to give people a working app they can customize."
        - How to host web apps on a Mac Mini
    - Rust and WASM for Form Validation (on HN)
        - avoid using Webpack and a whole array of Node-related tools in order to use WASM
        - form validation shows all the crucial aspects to use WASM instead of JS, like wiring up DOM events to Rust functions, and then reacting to those events
        - used Rocket - Simple, Fast, Type-Safe Web Framework for Rust
        - might motivate me to write Rust for web
    - HTML-in-Canvas
    - Don't animate height
- #idea
    - Setting constraint
        - goals provide a structured roadmap to success, thriving in controlled, predictable conditions like training for a marathon or preparing for an exam.
        - however, life rarely follows a straight line. It’s messy, unpredictable, and full of curveballs.
        - “I must finish this report,” -> “I won’t check email after 6 PM.”
        - for business: “we won’t hire until we have 100 users”
    - How to Network as an Introvert
        - really useful for me to script my reaction ahead of time to be natural
        - my natural response is abrupt, if any
- #data-org
    -Kepler.gl (on HN)
        - cool 3D map
        - powered by deck.gl, a GPU-powered framework for visual exploratory data analysis of large datasets
        - mountayaapp/insight-editor: Open source geospatial analysis for large-scale data sets with kepler.gl, DuckDB (and charts coming soon). Alternative to CARTO, ArcGIS Online, Foursquare Studio, Felt, Mango GIS, Maptable.
- #sec
    - Nonce CSP bypass using Disk Cache
    - Opening up ‘Zero-Knowledge Proof’ technology
- #game
    - I AI-coded a tower defense game and documented the whole process (on HN)
    - Steam has been flooded with games stolen from itch.io
- #forth
    - Tiny Great Languages: MOUSE
- #sci
    - how did the Solar System form?
    - Solar+storage is so much farther along than you think (on HN)
    - The most otherworldly, mysterious forms of lightning on Earth (on HN)
    - Lightning on Earth is sparked by a powerful chain reaction from outer space (on HN)
    - How to grow almost anything
    - Scientists shine a laser through a human head (on HN)
    - New colors without shooting lasers into your eyes
    - New battery has life so long you may never have to recharge (on HN)
    - Mammals Evolved into Ant Eaters 12 Times Since Dinosaur Age, Study Finds (on HN)
    - 'Universal cancer vaccine' trains the immune system to kill any tumor (on HN)
    - Earth Has Tilted 31.5 Inches. That Shouldn't Happen (on HN)
    - More Women Than Expected Are Genetically Men (on HN)

#cg #ebpf #gpu #news #os #simd #software #sqlite #wasm #web
- #rust
    - Introducing tmux-rs
        - initially used c2rust, a tool to migrate C code to (unsafe) Rust
            - didn't keep constant name
            - lots of casts polluting the code
            - still requires looking at the origin C code for rewriting
        - went with manually translating one file at a time
            - start with linking rust static lib to C
            - end with linking c to rust via crate `cc`
        - fixed interesting bugs
        - summarized C patterns in Rust
        - nice quote: "You might be asking: why did you rewrite tmux in Rust? And yeah, I don’t really have a good reason. It’s a hobby project. Like gardening, but with more segfaults."
        - skim-rs/skim: Fuzzy Finder in rust!
    - The scary and surprisingly deep rabbit hole of Rust's temporaries
- #ai-slop
    - The rise of Whatever
    - EBAF – eBPF Based Ad Firewall
        - it's pointed out on HN that
            - its doc and code are both AI slop
            - install script adds sudoers rules to allow ebaf executable to be run with no password
            - allows any ebpf code to be loaded into the kernel without a sudo password
            - re-resolves all 1k+ domain names every 600 seconds
- Poor Man's Back End-as-a-Service (BaaS), Similar to Firebase/Supabase/Pocketbase
    - possibly useful
- #zig
    - async is back
        - Zig breaking change – initial Writergate (on HN)
    - Zig's New Async I/O
    - Zig's new Writer
    - WebGPU in zig
        - bronter/wgpu_native_zig: Zig bindings for wgpu-native
        - Silverclaw/zig-wgpu-native: Zig bindings for the wgpu-native graphics API - Codeberg.org
    - KurtWagner/zlinter: An extendable and customisable Zig linter that is integrated from source into your build.zig.
        - I should integrate it with my zig code
    - Zig CLI Bible tool for the WEB translation in USFM format
    - Base64 for compression
        - assembly used to pass octal escape codes for UTF-8 and expand significantly
        - GCC 15 now supports base64 encoding of data during compilation, with a new “base64” pseudo-op
    - The most mysterious bug I solved at work
        - root cause: copying a hyphen at the end of a text-wrapped line in Microsoft Edge's PDF viewer, you get `0x2` (meaning "start of text") on your clipboard
    - note that I put most C stuff and low-level technical details under #zig for now
- #sec
    - I scanned all of GitHub's "oops commits" for leaked secrets (on HN)
    - goHardDrive Leaked Personal Data for Thousands of Customers
- Introducing the first alpha of Turso: The next evolution of SQLite
    - rewritten is Rust, with full compatibility and new features
    - Antithesis, a continuous reliability platform that autonomously searches for problems in software within a simulated environment, so these problems are deterministic reproducible
- #agent
    - Writing Code Was Never The Bottleneck
        - agent coding influenced mentoring young, ambitious, but inexperienced interns
    - WASM Agents: AI agents running in the browser (on HN)

#os #sec #web
- Code-GUI bidirectional editing via LSP
- OpenBao, the community fork of Vault
    - manage secrets, or encrypted passwords, API keys, and other bits of sensitive information in distributed computing setups
- found ansic, crate of the week
    - a modern, efficient and compile time ansi macro and utilities
- #nix
    - Moving on from Nix
        - it's a good thing that I have kept my distance from Nix from the start
            - mostly because I didn't like the syntax, and I don't want to be locked in
    - Three Years of Nix and NixOS: The Good, the Bad, and the Ugly
    - You don't have to use Nix to manage your dotfiles
- Types of Types: Common to Exotic #lean
- Uncloud - tool for deploying and managing containerised applications
    - "the solution for developers who want the flexibility of self-hosted infrastructure without the operational complexity of Kubernetes"
- You MUST listen to RFC 2119
    - RFC 2119 establishes language around requirement levels, e.g. terms like “MUST”, “MUST NOT”, “SHOULD”, and “SHOULD NOT”
    - the author hire a voice actor to read 2119 in the most over the top, passive-aggressive way possible
- You should delete tests
    - Confidence is the point of writing tests
    - Tests that decrease confidence
        - flaky tests that fails at random
        - few changes of code causing lots of changes to tests
        - tests that takes too long to run and are skipped from time to time
- clamp / median / range
    - I also prefer chained comparison styleA
    - fun fact: clamp is median

#agent #agent/tasking #codegen #compiler #debugger #duckdb #gpu #haskell #json #llvm
- #agent
    - Claude Code now supports hooks (on HN)
        - Claude Code hooks: user-defined shell commands that execute at various points in Claude Code’s lifecycle.
    - archgw
        - preference-based LLM routing
        - agent routing and hand-off
        - guardrails
        - clarify and convert prompts to tools/API calls
        - observability
    - Interesting prompts found in vscode-copilot-chat
    - Stream per agent session
    - Using Claude Code to build a GitHub Actions workflow
        - recorded by Descript: Edit Videos & Podcasts Like a Doc | AI Video Editor
            - Direct your AI co-editor to turn your vision into video
    - Building a Personal AI Factory
    - How large are large language models?
- Doing My Day Job on Chimera Linux
    - Chimera is built from scratch using novel tooling, approaches, and userland (FreeBSD + Musl C)
    - Distrobox creates a container that's tightly integrated with the host (break isolation whenever possible)
- #formal
    - From Python Programmer to Distributed Systems Researcher in 10 Years Without a PhD
        - Conformance Checking at MongoDB: Testing That Our Code Matches Our TLA+ Specs
            - use the model-checker to output the entire state graph for the spec. The state space is a DAG, with a finite number of behaviors (paths from an initial state to a final state). There are 30,184 states and 4913 behaviors. Max wrote a Go program to parse the model-checker’s output and write out a C++ unit test for each behavior, 4913 tests in total.
    - Rapid Prototyping a Safe, Logless Reconfiguration Protocol for MongoDB with TLA+
- #zig
    - The build cache of Zig
        - how the cache is structured
        - what's included in hash to check modification
        - incremental compilation: working toward cache per top-level declaration
        - cross compilation: musl, libc, compiler-rt, libunwind etc. are compiled from source and cached
    - Zprof: Cross-allocator profiler
- #anti-bot
    - Cloudflare: Introducing pay per crawl: enabling content owners to charge AI crawlers for access
        - Cloudflare Introduces Default Blocking of A.I. Data Scrapers
    - The web's broken deal with AI companies
- My Database Is My Application: Rethinking Webhook Logic with DuckDB and SQL
    - DuckDB as an in-process SQL engine capable of acting as a programmable substrate for data transformation at runtime
    - manifold
        - a Java compiler plugin
        - use DSL directly and type-safely from Java
            - SQL, JSON, GraphQL, XML, YAML, CSV, JavaScript
- #diagram
    - OpenFLOW – Quickly make beautiful infrastructure diagrams local to your machine
        - based on markmanx/isoflow
    - mmastrac/stylus: Lightweight status page for home infrastructure
        - architecture and health status
- #lang
    - Reflections on Haskell and Rust
    - The KDL Document Language
        - From XML to JSON to CBOR
            - Concise Binary Object Representation (CBOR)'s evolution optimizes for binary efficiency while maintaining JSON's flexible data model
                - flexible data model
                    - intentionally builds upon the JSON data model
                        - supporting equivalent types (numbers, strings, arrays, maps, booleans, and null)
                        - adding native support for binary byte strings
                    - extensibility without version negotiation: forward compatibility
                    - schema-free decoding: Self-describing data items, parsable without predefined schemas
                - for Internet of Things (IoT) and constrained environments
                    - compact code size: minimal code footprint for memory-constrained devices
                    - reasonable message size: and without complex compression
        - Essential and accidental configuration
        - bikeshed, a spec preprocessor
            - Bikeshed-flavored Markdown
            - related
                - awesome-standards: A curated list of technical standards
                - quickly converting djot to html+mathml
                    - djot is a markdown variant
                        - it "fixes a few things that make commonmark's syntax complex and difficult to parse efficiently"
                            - more strict but very reasonable
                        - it can be converted from markdown by pandoc
                - Markdown Monster
                    - detect markdown parser variants
    - 10 features of D that I love
        - I like
            - in/out contract
            - parenthesis omission
        - seen and liked in other language
            - like zig's `comptime`: an interpreter for the language which allows a very large amount of D code to be ran at compile time
            - `baz(bar(foo))` can be rewritten as `foo.bar().baz()`
    - Pluto is a unique dialect of Lua with a focus on general-purpose programming (on HN)
    - The Chapel Programming Language
        - GPU programming on NVIDIA and AMD
    - Onyx Programming Language
        - inspired from languages like Jai, Odin and Zig
        - compiles to WebAssembly, run on Wasmer
    - Helix language
- #rust
    - Exception handling in rustc_codegen_cranelift
        - introduces "landing pad" style expcetion handling
            - see also Lele's Memo: Landingpad
        - unwinding ABI crash course
            - personality function: language-specific data format during unwinding
        - the appendix provided a gdb script for reproducing the debugger session
    - Alternative Blanket Implementations for a Single Rust Trait
    - It's Types All the Way Down - Rust CLI with Clap (on HN)
- #agent/tasking
    - MrLesk/Backlog.md: Backlog.md - A tool for managing project collaboration between humans and AI Agents in a git ecosystem
    - Vibe Kanban - Orchestrate AI Coding Agents
    - VibeTunnel - access terminal from the browser to command agents
- #misc
    - Melbourne man discovers extensive model train network underneath house (on HN)
    - Feasibility study of a mission to Sedna - Nuclear propulsion and solar sailing
    - GPEmu: A GPU emulator for rapid, low-cost deep learning prototyping [pdf] (on HN)
    - Converting a large mathematical software package written in C++ to C++20 modules (on HN)

#agent #json #lean #news #os
- Agile Was Never Your Problem
    - lean process
        - minimal structure, shorten feedback loop, allowing changing direction quickly
        - enough time to write proper tests and refactor without begging
        - monitoring and alerting built into the work, not bolted on later
        - developers talk because they’re solving problems together, not because it’s time for standup meeting
    - flexible timing
        - roadmaps should not be commitments
        - feedback loops should not be performance metrics
        - planning should not become forecasting
- #context
    - Tools: Code Is All You Need
        - The problem with MCP is that it's not composeable.
        - Mandelbrot in x86 Assembly by Claude
            - demonstrates simple usage of container for cross-arch assembly debugging
            - I would like to add a yard for assmebly in native-land
    - How to Fix Your Context
        - covers some attempts to improve MCP tool selection if it can't be avoided
        - context rot: poisoning, distraction, confusion, clash
        - solution: quarantine, pruning, offloading
    - The new skill in AI is not prompting, it's context engineering (on HN)
    - Taming agentic engineering - Prompts are code, .json/.md files are state
    - Context Engineering Guide
- #sec
    - Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies
        - amazed by Browser-in-the-Browser
    - CVE-2025-32463 Vulnerability Advisory: Sudo chroot Elevation of Privilege
- NativeJIT: A C++ expression –> x64 JIT (2018)
    - I'm strongly confused about the use cases without operator overloading, except their own
- SQL Noir: Learn SQL by Solving Crimes
    - fun to play, but the challenge should be using the SQL to output the answer