1
Creepy Crawlies
You've probably heard me complain about the "AI crawlers" before, but now I actually have some hard numbers I can put up to show their im...
2
The Waymo World Model
We are excited to introduce the Waymo World Model, a frontier generative model that sets a new bar for large-scale, hyper-realistic autonomous driving simulation.
3
An update on recent Claude Code quality reports
We traced recent reports of Claude Code quality issues to three separate changes. Here's what happened, what we fixed, and what we're changing.
4
Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
5
TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. RHEL has fixes; Ubuntu's are still in testing.
6
Asahi Linux Progress Linux 7.0
Porting Linux to Apple Silicon
7
The August 17 outage
An update on the August 17 outage and the steps we're taking to improve reliability.
8
Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
No patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating.
9
Linux support is coming to Snapdragon X2 series
Explore the agentic AI PCs, Googlebook laptops, Linux support and partner devices powered by Snapdragon unveiled at Snapdragon Summit 2026.
10
11
Asahi Linux 7.1 Progress Report
Porting Linux to Apple Silicon
12
Asahi Linux on M3
Porting Linux to Apple Silicon
13
Meta’s renewed commitment to jemalloc
Meta recognizes the long-term benefits of jemalloc, a high-performance memory allocator, in its software infrastructure. We are renewing focus on jemalloc, aiming to reduce maintenance needs and mo…
14
How OpenAI delivers low-latency voice AI at scale
How OpenAI rebuilt its WebRTC stack to power real-time Voice AI with low latency, global scale, and seamless conversational turn-taking.
15
The time the x86 emulator team found code so bad they fixed it during emulation
Offensive content in the eyes of a software engineer.
16
17
Saving another 100TB of RAM
Cloudflare's global network is immense but not limitless. As we look for small ways to trim our resource usage, we sometimes get lucky and we can cut significantly more. Here’s how we reduced one of our Pingora-based service's RAM usage with statistics.
18
DuckDB Internals Part 1
Walk through DuckDB's internals: how it skips serialization overhead, parses and optimizes SQL, and stores data in columnar row groups with zone maps.
19
Asahi Linux Progress Report: Linux 6.19
Porting Linux to Apple Silicon
20
First public macOS kernel memory corruption exploit on Apple M5
Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with Mythos Preview, built a working exploit in five days.
21
LineageOS 24
You know what's funnier than 24?
22
We found an undocumented bug in the Apollo 11 guidance computer code
How a specification surfaced a defect in the Apollo flight code.
23
Gentoo on Codeberg
News and information from Gentoo Linux
24
25
GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in…
26
Platform-independent SIMD in Go
Go 1.27 adds an experimental platform-agnostic SIMD API
27
Asahi Linux Progress Report: Linux 7.2
Porting Linux to Apple Silicon
28
Kitty 0.50
kitty is a feature-rich, cross-platform, fast, GPU based terminal. To update kitty, follow the instructions. Recent major new features: Docked windows [0.50]: kitty windows can now be docked to an ...
29
MicroVMs: Run isolated sandboxes with full lifecycle control
AWS launches a new serverless compute primitive, AWS Lambda MicroVMs. VM-level, isolated sandboxes with no shared kernel or resources between sessions. Rapid launch and resume, full lifecycle control, state preservation up to 8 hours, no infrastructure to manage.
30
Postgres LISTEN/NOTIFY actually scales
How we optimized Postgres LISTEN/NOTIFY-backed data streams to 60K writes per second on a single Postgres server, with millisecond-scale latency.