ZCode Secretly Uploads Your Entire Git History to the Cloud
Zhipu's ZCode packages your .git history, encrypts it, and uploads it to Aliyun OSS — with a key only the server can use.
#ai-coding-agent#privacy#security#git#zhipu
Blog Posts
Thoughts, experiences, and technical insights from my journey in software development.
Popular hashtags
GitLab.com Ties API Rate Limits to Your Subscription Plan
GitLab.com is moving rate limits to match subscription tiers. Unauthenticated requests drop to 60 per hour.
#gitlab#devops#api#rate-limiting#ci-cd
Baseten's Admin GitHub Token Sat in Docker History for 3 Years
Security firm Strix scanned Baseten in 25 minutes and found a live admin GitHub token from 2023, hidden in a public Docker image's build history.
#security#docker#github#supply-chain#devops
OpenAI Agents Hacked RubyGems Before Humans Found the Flaw
In May 2026, an OpenAI agent swarm tried exploiting a RubyGems bug nine years old — two months before RubyGems itself even knew it existed.
#rubygems#ai-agent#supply-chain#openai#security
GitLab's CVSS 10 Flaw Was Under Attack Within Hours of Disclosure
CVE-2026-85706 lets unauthenticated attackers read GitLab server files. CISA flagged it as actively exploited, with a Sept 14 patch deadline.
#gitlab#cve#vulnerability#security#devops
Real-SWE: The Benchmark That Exposes AI Coding Agents
The top model solves just 38.8% of tasks pulled from real enterprise codebases. Real-SWE shows the gap between demo and production.
#ai-coding-agent#benchmark#swe-bench#claude-code#developer-tools
Rust Is Now a Tier-1 Language at Microsoft
Rust now sits alongside C++, C# and TypeScript as a Tier-1 language at Microsoft, thanks to a new codegen backend wired directly into MSVC.
#rust#microsoft#compiler#windows#open-source
Tailwind CSS Joins Shopify: 110M Weekly Installs Change Hands
Adam Wathan is bringing Tailwind Labs into Shopify after nine years independent. Tailwind CSS stays MIT, but Tailwind Plus closes to new customers.
#tailwindcss#shopify#open-source#frontend#web-development
Qwen3.8 27B: 4-bit Quantization Holds Up, 1-bit Falls Apart
A $3,000 independent GPU benchmark shows the 17GB version of Qwen3.8 27B matches the 55GB original — but the 1-bit version barely beats random guessing.
#qwen#quantization#local-llm#llama-cpp#benchmark
New trusting-trust attack backdoors NixOS via GNU strip
Researchers show Ken Thompson's classic trusting-trust attack isn't a compiler-only problem: a tampered GNU strip alone can backdoor an entire NixOS build.
#supply-chain-security#nixos#reproducible-builds#linux#open-source
Asahi Linux Now Officially Supports Apple M3 Macs
Asahi Linux merged M3 support into its installer. Webcam, WiFi, and AV1 decode work — GPU acceleration and sleep still don't.
#asahi-linux#apple-silicon#open-source#linux#reverse-engineering
GitHub Copilot's HydraFusion Cuts Cost 67% by Mixing AI Models
HydraFusion picks a workflow, not just a model — drafting, critiquing, and escalating across providers to match Opus 5 quality at a fraction of the cost.
#github-copilot#ai-coding-agent#llm#developer-tools#benchmark