Lean proved this program correct; then I found a bug
AI agents are getting very good at finding vulnerabilities in large-scale software systems.
The latest blog posts to take off on Hacker News. 5,961 posts.
AI agents are getting very good at finding vulnerabilities in large-scale software systems.
This summary of Brad’s HIPS 2025 keynote looks at how HPC programming has (and has not) changed over the past 30 years
California’s bill, AB 2047, will not only mandate censorware on all 3D printers; it will also criminalize the use of open-source alternatives. Repeating the mistakes of DRM won’t make anyone safer, but it will hurt innovation in the state and risks a slew of new consumer harms ranging from surveillance to platform…
You should have gone before you left Earth
In the previous post, I mentioned that buildcache has some unique properties compared to ccache and sccache. One of them is its Lua plugin system, which lets you write custom wrappers for programs that aren’t compilers in the traditional sense. With Bug 2027655 now merged, we can use this to cache Firefox’s WebIDL…
I made a programming language. I'm sorry.
Last week, I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into
LLMs will make more of your average stuff. And that's OK. Here's how average SQL beats fancy attribution models when your agent writes the queries.
This is a long article, so I've broken it up into a series of posts, listed below. You can also read the full work as a PDF or EPUB .
We’re introducing cf, a new unified CLI designed for consistency across the Cloudflare platform, alongside Local Explorer for debugging local data. These tools simplify how developers and AI agents interact with our nearly 3,000 API operations.
An archive of this year’s insane timeline of hacks few people are talking about
Customize the look and feel of tmux
The AI boom is more likely a marker of the end of the 50-year digital boom than the start of a new wave of innovation.
Initial crates.io release and LTS version of Servo
My wife and I run OpenBenches. It's a niche little site which lets people share photos of memorial benches and their locations. Most modern phones embed a geolocation within the photo's metadata, so we use that information to put the photos on a map. Google's Android has now broken that. On the web, we used to use…
The following post involves far too much discussion of the XOR swap trick. If XOR itself is unfamiliar, I have written a gentler introduction to it .
What the PNR locator on your boarding pass actually contains, and why the fare calculation line on your e-ticket is written in a currency that does not exist.
On your computer graphics journey, you will eventually run into some paper or code mentioning spherical harmonic functions. They are indeed a very useful tool: with just a few coefficients, they allow us to approximate a given function defined on a sphere. This can be very useful for modeling complex lighting.
A breakdown of what software development teams actually cost, what they need to generate to be financially viable, and why most organizations have no visibility into either number.
Now that we have actually good AI, I have this vision of a form of computing that doesn’t involve me using a computer so much. Imagine you had the day’s emails to go through. It would be nice if the ones that required a simple decision could be dispatched with a few pen-strokes: I could write down a date that would…
Apple’s accidental moat
Evolution of a self-hosting hobby: from clueless to amateur.
The chart below compares the forward P/E ratios for the S&P 500 and the S&P 500 Information Technology sector. Subscribe for daily updates.
At a party, Sydney Von Arx asked if I could name 40 programming languages. Yeah, that's the Bay for you. Racket, Agda, Clean, Elm, TypeScript, sh, ASP, Verilog, JavaScript, Scheme, Rust, Nim, INTERCAL, sed, Isabelle, Visual Basic, zsh, AlokScript, Coq, Idris, Hack, Prolog, Whitespace, PureScript, Go, Odin, Haskell…
A 93-strong international expedition team has been exploring the northwestern Weddell Sea in the Antarctic on board the Alfred Wegener Institute's icebreaker Polarstern since 8 February 2026. In this key region for global ocean currents, the focus has been on the outflow of ice and water from the Larsen Ice Shelf and…
Similar to the previous post, this post covers my analysis of a benchmark on RISC-V targets. Unlike the previous post, I was able to land a patch to eliminate the performance gap to GCC (for this benchmark)!
In his classic Programming Perl — affectionately known to a generation of technologists as "the Camel Book" — Larry Wall famously wrote of the three virtues of a programmer as laziness, impatience, and hubris:
T he Anthropic Mythos announcement is the first time in my life I’ve felt truly poor. Maybe because I grew up on the internet and it was the one permissionless place where you could have leverage and a shot at uncapped exploration and ambition. That is now changing with the gap between models that are publicly…
Cola, orange soda, and almond soda!