Jessica Kerr joins Kent by the fire to argue that AI didn't take the programmer's job, it split it in two. The part we loved, crafting code by hand, has been commoditized like IKEA furniture. What's…

I gave up blogging a long time ago (apart from an occasional thing about ArduPilot), I tend to just write code and hope people find it…

Technical debt used to be friction. With LLMs, it becomes a prompt: bad architecture can teach machines to repeat the same mistakes.

AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.

The other month I finally ran an experiment we had been postponing for over a year at .txt.

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Security, Vulnerability Research

A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.

GitHub's Status Page - Incident with Pull Requests.

Powerful forces are exploiting parents’ fears to strengthen their toxic business models. Here’s how we stop them.

The open web with AIs is turning into a dark forest.

A promise that never resolves is a surprisingly clean way to interrupt an async function.

Bryan Cantrill explores Oxide’s mission to bring cloud-like infrastructure to on-prem environments and unpacks why owning hardware is making a comeback.

We have been using Signals in production for years via several modern front-end frameworks like Solid, Vue, and others, but few of us are able to explain how they work internally. I wanted to dig into it, especially diving deep into the push-pull based algorithm, the core mechanism behind their reactivity.

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying cross-platform RAT malware.

A terrible paper and even worse interpretation is threatening to become common wisdom

It was inevitable. After three years in the ad-free "honeymoon" phase, ads are slowly creeping into generative AI products, including Copilot.

Elon Musk says AI will make programming languages obsolete by 2026. The compiler pipeline already does what he’s describing, deterministically, in milliseconds.

A complete guide to what quantization is, how it works, and how it's used to compress large language models

Les Orchard made a quiet observation recently that I haven't been able to shake. Before LLM coding assistants arrived, the split between developers was…

It Is Called Deep Blue.

Writing code is easier than ever. Being a software engineer is harder than ever. The paradox nobody talks about, and what engineers and leaders should do.

Writing about the big beautiful mess that is making things for the world wide web.

The big idea of James C. Scott’s Seeing Like A State can be expressed in three points: Modern organizations exert control by maximising “legibility”: by…

I see a lot of bad system design advice. One classic is the LinkedIn-optimized “bet you never heard of queues” style of post, presumably aimed at people who are…

Breaking changes I would like to see in Kubernetes 2.0