Em dashes are amazing
An ode to a punctuation mark
An ode to a punctuation mark
Cal.com goes closed source after 5 years. Here’s why rising AI-driven security risks and vulnerability discovery are forcing us to protect customer data.
A compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds…
A fictitious Sean Byrne ended up on a U.S. government restricted-party list. Sixteen years later, Apple, Nasdaq and others have mistaken me for him.
I was creating a Google Workspace account for my company, as everyone knows, it’s a pretty straightforward sign-up process, until I’m hit with a weird, confusing error when I type my domain name:
My reflections on raising money for Skald Labs
Like all good nerds, I generate a unique email address for every service I sign up to. This has several advantages - it allows me to see if a message is legitimately from a service, if a service is hacked the hackers can't go credential stuffing, and I instantly know who leaked my address. A few weeks ago I signed up…
How coding models respond when familiar engineering tasks ask for something different.
Are people using AI, or is the organization learning from it? What changed because we spent those tokens? And who moves discoveries from individuals to teams to organizational capabilities?
I fought against Google’s Pentagon AI deal from the inside. Powerful people and institutions failed to keep their AI ethics promises under pressure.
From April 24 onward, interaction data from Copilot Free, Pro, and Pro+ users will be used to train and improve our AI models unless they opt out.
Last night, I was taken aback to discover that my name appears in the Epstein Files, in 26 different documents. This is despite the fact that I met Jeffrey Epstein a grand total of zero times, and …
A few years ago, I wrote a blog post on design issues in LLVM IR . Since then, one of these issues has been fixed fully (opaque pointers migration), one has been mostly fixed (constant expression removal), and one is well on the way towards being fixed (ptradd migration).
Certainly the industry is transforming, however, the people and organizations falling into the trap of no longer reading and writing code only do so at their peril.
Across 44,143 European companies with a detected CDN, 89.6% use Cloudflare. We publish the per-country counts and what the 2025-26 outages showed.
Except for the SaaS, almost none of this is useful and I don't want to maintain any of it. I accidentally run a news outlet which is surely a liability. Sure, it has helped me "learn AI tooling" and I use many of these tools, but I didn't need them. I can't afford to maintain any of them, not in terms of time…
If we think writing code is dead, and AI is generating all codebases, I still think the bigger problem is people or full teams not knowing anything anymore about the system...
The rise and fall of the largest bug bounty platform in the world
New details about what we found, and how agentic harnesses are now able to reproduce real bugs and dismiss false positives.
Tencent has released and open-sourced Tencent Hy4 preview, a next-generation large language model with 770B total parameters and 49B active parameters, and a context window exceeding 1M tokens.
I tried Claude Design yesterday and I have a theory for how this whole thing shakes out.
We needed the insight and confidentiality to protect our users, but now that anyone can get the same results from LLM?
I sometimes resort to a rather common measuring technique that is neither fast, nor accurate, nor recommended by any standards body and yet it hasn't failed me whenever I have had to use it. I will describe it here, though calling it a technique might be overselling it. Please do not use it for installing kitchen…
DuckDB instances can now talk to each other using the Quack remote protocol. This lets you run DuckDB in a client-server setup with multiple concurrent writers. In DuckDB's spirit, Quack is simple to set up and builds on proven technologies such as HTTP. It's also fast, which allows it to support workloads ranging…
I felt the familiar feeling of depression and lethargy creep in while my eyes darted from watching claude-code work and my phone. “What’s the point of it all?” I thought, LLMs can generate decent-ish and correct-ish looking code while I have more time to do what? doomscroll? This was the third time I gave claude-code…
How does the latest entry-level MacBook perform on database workloads? We benchmarked it using ClickBench and TPC-DS SF300. We found that it could complete both workloads, sometimes with surprisingly good results.
kitty is a feature-rich, cross-platform, fast, GPU based terminal. To update kitty, follow the instructions. Recent major new features: Docked windows [0.50]: kitty windows can now be docked to an ...
AI agents produce slop when not restricted. Here are 10 things to watch out for