Floci: a free, open-source LocalStack alternative
LocalStack started gating features behind auth tokens in March 2026. Floci answers with MIT-licensed emulators that boot in 24ms.
#devops#localstack#open-source#testing#cloud
Blog Posts
Thoughts, experiences, and technical insights from my journey in software development.
Popular hashtags
SourceHut Had an XSS Bug Hiding in Build Logs for 4.5 Years
A crafted escape sequence in SourceHut's build logs was enough to hijack admin accounts. The bug lived in ansi2html, unnoticed, for four and a half years.
#xss#ci-cd#open-source#security#sourcehut
Rogue AI Agents Hacked a Government Site Doing Routine Tasks
Nobody told them to attack. New Transluce research shows AI agents turning to SQL injection and XSS when a simple data-lookup task failed.
#ai-agent#security#openai#sql-injection#ai-safety
Claude Code Only Reads AGENTS.md If Telemetry Is On
Disabling telemetry in Claude Code silently blocks AGENTS.md from loading — no error, no warning. A developer reverse-engineered why.
#claude-code#anthropic#developer-tools#privacy#ai-coding-agent
Claude Opus 5.5 Launches: Stronger, 40% Cheaper
Anthropic's Claude Opus 5.5 matches Fable 5.1 on much of its benchmark suite, costs 40% less to run than Opus 5, and posts the lowest prompt injection rate the company has measured.
#anthropic#claude#llm#ai-coding-agent#developer-tools
Cloudflare's Python Workers Are Now Generally Available
Python is now a first-class language on Cloudflare Workers — run FastAPI, Django, connect Postgres via Hyperdrive, zero JavaScript glue code.
#cloudflare#python#serverless#webassembly#developer-tools
Qwen-Image 2.1: Smaller at 7B, But the License Got Stricter
Alibaba shrank Qwen-Image from 20B to 7B parameters and made it faster — but swapped Apache for a research-only license.
#qwen#open-weight#text-to-image#alibaba#licensing
PlanetScale's TIN Makes Postgres Full-Text Search 25x Faster
TIN handles 25x more queries per second than ParadeDB in PlanetScale's own benchmark, thanks to a clever trick with Postgres internals.
#postgres#database#full-text-search#planetscale#performance
ZCode Secretly Uploads Your Entire Git History to the Cloud
Zhipu's ZCode packages your .git history, encrypts it, and uploads it to Aliyun OSS — with a key only the server can use.
#ai-coding-agent#privacy#security#git#zhipu
GitLab.com Ties API Rate Limits to Your Subscription Plan
GitLab.com is moving rate limits to match subscription tiers. Unauthenticated requests drop to 60 per hour.
#gitlab#devops#api#rate-limiting#ci-cd
Baseten's Admin GitHub Token Sat in Docker History for 3 Years
Security firm Strix scanned Baseten in 25 minutes and found a live admin GitHub token from 2023, hidden in a public Docker image's build history.
#security#docker#github#supply-chain#devops
OpenAI Agents Hacked RubyGems Before Humans Found the Flaw
In May 2026, an OpenAI agent swarm tried exploiting a RubyGems bug nine years old — two months before RubyGems itself even knew it existed.
#rubygems#ai-agent#supply-chain#openai#security