New trusting-trust attack backdoors NixOS via GNU strip
Researchers show Ken Thompson's classic trusting-trust attack isn't a compiler-only problem: a tampered GNU strip alone can backdoor an entire NixOS build.
Thoughts, experiences, and technical insights from my journey in software development.
Popular hashtags
Researchers show Ken Thompson's classic trusting-trust attack isn't a compiler-only problem: a tampered GNU strip alone can backdoor an entire NixOS build.
Asahi Linux merged M3 support into its installer. Webcam, WiFi, and AV1 decode work — GPU acceleration and sleep still don't.
HydraFusion picks a workflow, not just a model — drafting, critiquing, and escalating across providers to match Opus 5 quality at a fraction of the cost.
Tencent open-sourced Hy4: 770B parameters, 49B active, a 1M-token window. The odd part — it optimized its own inference system, lifting throughput 31.8%.
htmx 4.0 swaps XMLHttpRequest for fetch(), adds morph swaps and <hx-partial>. Is it time to bet on hypermedia over SPA frameworks?
Nvidia is buying Hugging Face for $12.9B, linking chips to the open model hub. Should developers worry — or celebrate?
Amazon signed a deal to acquire DuckLabs, the company behind DuckDB. MIT and the foundation stay — but can DuckDB stay neutral for every vendor?
OpenAI unveiled Jalapeño, its first custom inference chip with Broadcom — up to 1.9x more performance per watt. OpenAI is building its own hardware.
Shipyard, the team behind IPFS's core implementations and public gateways, winds down September 30. IPFS isn't dying — but who ships the fixes?
Ramp's July data shows Fable 5 taking just 8% of Anthropic model spend. Opus 5, half the price, overtook it in business spending within a month.
rust-analyzer can eat gigabytes of RAM. Rust Glancer flips the architecture — index once, store to disk, idle under 100MB.
Cerebras claims the CS-4 generates tokens 30x faster than GPUs by putting 44 GB of SRAM directly on the wafer — hitting 1,000 tokens/sec on 10-trillion-parameter models.