OpenAI Agents Hacked RubyGems Before Humans Found the Flaw
In May 2026, an OpenAI agent swarm tried exploiting a RubyGems bug nine years old — two months before RubyGems itself even knew it existed.
#rubygems#ai-agent#supply-chain#openai#security
Blog Posts
Thoughts, experiences, and technical insights from my journey in software development.
Popular hashtags
GitLab's CVSS 10 Flaw Was Under Attack Within Hours of Disclosure
CVE-2026-85706 lets unauthenticated attackers read GitLab server files. CISA flagged it as actively exploited, with a Sept 14 patch deadline.
#gitlab#cve#vulnerability#security#devops
Real-SWE: The Benchmark That Exposes AI Coding Agents
The top model solves just 38.8% of tasks pulled from real enterprise codebases. Real-SWE shows the gap between demo and production.
#ai-coding-agent#benchmark#swe-bench#claude-code#developer-tools
Rust Is Now a Tier-1 Language at Microsoft
Rust now sits alongside C++, C# and TypeScript as a Tier-1 language at Microsoft, thanks to a new codegen backend wired directly into MSVC.
#rust#microsoft#compiler#windows#open-source
Tailwind CSS Joins Shopify: 110M Weekly Installs Change Hands
Adam Wathan is bringing Tailwind Labs into Shopify after nine years independent. Tailwind CSS stays MIT, but Tailwind Plus closes to new customers.
#tailwindcss#shopify#open-source#frontend#web-development
Qwen3.8 27B: 4-bit Quantization Holds Up, 1-bit Falls Apart
A $3,000 independent GPU benchmark shows the 17GB version of Qwen3.8 27B matches the 55GB original — but the 1-bit version barely beats random guessing.
#qwen#quantization#local-llm#llama-cpp#benchmark
New trusting-trust attack backdoors NixOS via GNU strip
Researchers show Ken Thompson's classic trusting-trust attack isn't a compiler-only problem: a tampered GNU strip alone can backdoor an entire NixOS build.
#supply-chain-security#nixos#reproducible-builds#linux#open-source
Asahi Linux Now Officially Supports Apple M3 Macs
Asahi Linux merged M3 support into its installer. Webcam, WiFi, and AV1 decode work — GPU acceleration and sleep still don't.
#asahi-linux#apple-silicon#open-source#linux#reverse-engineering
GitHub Copilot's HydraFusion Cuts Cost 67% by Mixing AI Models
HydraFusion picks a workflow, not just a model — drafting, critiquing, and escalating across providers to match Opus 5 quality at a fraction of the cost.
#github-copilot#ai-coding-agent#llm#developer-tools#benchmark
Tencent Hy4: A 770B Open Model That Optimized Its Own Inference
Tencent open-sourced Hy4: 770B parameters, 49B active, a 1M-token window. The odd part — it optimized its own inference system, lifting throughput 31.8%.
#tencent#hunyuan#llm#open-source#moe
htmx 4.0 Released: fetch() Replaces XHR, Morph Swaps Built In
htmx 4.0 swaps XMLHttpRequest for fetch(), adds morph swaps and <hx-partial>. Is it time to bet on hypermedia over SPA frameworks?
#htmx#hypermedia#web-development#frontend#javascript
Nvidia Buys Hugging Face for $12.9B: Completing the AI Stack
Nvidia is buying Hugging Face for $12.9B, linking chips to the open model hub. Should developers worry — or celebrate?
#nvidia#hugging-face#open-source#open-weight#llm