Things worth reading, saved as I go: articles, tools and references.https://romain.dorgueil.net/enhttps://pagefind.app/docs/node-apihttps://romain.dorgueil.net/links/2026/08/2/#pagefind-node-apiThe piece that makes a serverless link stream searchable without giving every bookmark its own thin page.Fri, 07 Aug 2026 00:00:00 GMTsearchstatic-sitejavascriptdocumentationhttps://huggingface.co/blog/agent-intrusion-technical-timelinehttps://romain.dorgueil.net/links/2026/08/2/#anatomy-of-a-frontier-lab-agent-intrusion-a-technical-timeline-of-the-july-2026-incidentHugging Face's technical timeline of the July incident.Tue, 04 Aug 2026 00:00:00 GMTsecurityaikubernetesincidenthttps://chrismorgan.info/atom%3Ersshttps://romain.dorgueil.net/links/2026/08/2/#atom-is-better-than-rss-in-ways-that-matterreliable dates, typed content, real extensibility.Tue, 04 Aug 2026 00:00:00 GMTrssatomstandardswebhttps://www.anthropic.com/research/discovering-cryptographic-weaknesseshttps://romain.dorgueil.net/links/2026/08/2/#discovering-cryptographic-weaknesses-with-claudeA model finds an improved attack on the HAWK post-quantum signature scheme, and a novel approach against reduced-round AES.Tue, 04 Aug 2026 00:00:00 GMTcryptographysecurityairesearchhttps://gruhn.me/blog/2026-08-03https://romain.dorgueil.net/links/2026/08/2/#dont-be-a-meat-proxyThis week most notable/valuable content (and it’s short and readable, under 2 minutes): Don't be a meat proxy.Tue, 04 Aug 2026 00:00:00 GMTaiwritingarticlehttps://john.fun/elevatorshttps://romain.dorgueil.net/links/2026/08/#elevatorsHow elevator dispatch algorithms work, from the simple LOOK approach to the destination-dispatch systems that cut waiting.Tue, 04 Aug 2026 00:00:00 GMTalgorithmsarticlehttps://victoriametrics.com/blog/go-1-27/index.htmlhttps://romain.dorgueil.net/links/2026/08/#go-127-interactive-tourrun the new features right in the page.Tue, 04 Aug 2026 00:00:00 GMTgolangreleasedocumentationhttps://www.bottlenecklabs.com/blog/autonomously-run-businesseshttps://romain.dorgueil.net/links/2026/08/#gpt-56-sol-ran-a-real-businessit lied, spammed, and lost $447.Tue, 04 Aug 2026 00:00:00 GMTaibusinessarticlehttps://arxiv.org/abs/2607.25398https://romain.dorgueil.net/links/2026/08/#handbookmd-a-benchmark-for-long-context-agentic-instruction-followingwriting more rules does not make an agent follow them.Tue, 04 Aug 2026 00:00:00 GMTaibenchmarkpaperresearchhttps://lockwood.dev/ai/2026/07/27/how-is-the-bun-rewrite-in-rust-going.htmlhttps://romain.dorgueil.net/links/2026/08/#how-is-the-bun-rewrite-in-rust-goinga measured progress report on an AI-assisted port.Tue, 04 Aug 2026 00:00:00 GMTrustaijavascriptarticlehttps://github.com/rust-lang/rust-project-goals/blob/main/src/2026/move-trait.mdhttps://romain.dorgueil.net/links/2026/08/#immobile-types-and-guaranteed-destructorsone of Rust's 2026 language-design goals, from the source.Tue, 04 Aug 2026 00:00:00 GMTrustprogrammingdesignhttps://www.quantamagazine.org/is-ai-reasoning-right-for-the-wrong-reasons-20260731https://romain.dorgueil.net/links/2026/08/#is-ai-reasoning-right-for-the-wrong-reasonsQuanta on models reaching answers by odd paths.Tue, 04 Aug 2026 00:00:00 GMTairesearcharticlehttps://sf.isopolis.city/https://romain.dorgueil.net/links/2026/08/#isopolis-san-franciscoAn interactive map of San Francisco neighbourhoods drawn from OpenStreetMap and DataSF boundaries.Tue, 04 Aug 2026 00:00:00 GMTmapdatavisualizationhttps://en.andros.dev/blog/d7ed8b07/modern-email-can-be-built-from-borrowed-partshttps://romain.dorgueil.net/links/2026/08/#modern-email-can-be-built-from-borrowed-partsassemble a mail stack from protocols that already exist.Tue, 04 Aug 2026 00:00:00 GMTemailprotocolwebstandardshttps://brandur.org/fragments/pgtestdbhttps://romain.dorgueil.net/links/2026/08/#pgtestdb-template-cloning-for-fast-postgres-testsclone a template database per test for fast, isolated Postgres tests.Tue, 04 Aug 2026 00:00:00 GMTpostgrestestinggolangdatabasehttps://gregoryszorc.com/docs/python-build-standalone/mainhttps://romain.dorgueil.net/links/2026/08/#python-standalone-buildsself-contained, portable Python builds, the brick under uv and pyenv.Tue, 04 Aug 2026 00:00:00 GMTpythonpackagingtoolsbuildhttps://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-resultshttps://romain.dorgueil.net/links/2026/08/#some-thoughts-about-anthropics-new-cryptanalysis-resultsMatthew Green weighs the key-recovery attack on HAWK and the reduced-round AES result against what each actually implies for deployed cryptography.Tue, 04 Aug 2026 00:00:00 GMTcryptographysecurityaiarticlehttps://research.jfrog.com/post/sqlite-critical-cves-or-llm-slopshttps://romain.dorgueil.net/links/2026/08/#sqlite-critical-cves-or-llm-slopSix SQLite CVEs published on GitHub turn out to be fabricated: the code they cite does not exist and the proofs of concept do not run.Tue, 04 Aug 2026 00:00:00 GMTsecurityaisqliteresearchhttps://openai.com/index/ten-advances-in-mathematicshttps://romain.dorgueil.net/links/2026/08/#ten-math-and-cs-resultsTue, 04 Aug 2026 00:00:00 GMThttps://blog.modelcontextprotocol.io/posts/2026-07-28https://romain.dorgueil.net/links/2026/08/#the-2026-07-28-mcp-specificationthe new spec drops required session state from the transport.Tue, 04 Aug 2026 00:00:00 GMTmcpprotocolaistandardshttps://martinfowler.com/articles/exploring-gen-ai/refactoring-economic-benefit.htmlhttps://romain.dorgueil.net/links/2026/08/#the-economic-benefit-of-refactoringFowler puts numbers on why cleaning up code pays for itself.Tue, 04 Aug 2026 00:00:00 GMTrefactoringaicodearticlehttps://fermisense.com/when-machines-take-the-wheelhttps://romain.dorgueil.net/links/2026/08/#the-rise-of-intelligence-ownershipA reinforcement-learning fine-tune of a 9B open model beats every frontier configuration tested on a catalog-review workflow, at 40x less cost than the cheapest.Tue, 04 Aug 2026 00:00:00 GMTaiopen-sourcebusinessarticlehttps://earendil.com/posts/session-portabilityhttps://romain.dorgueil.net/links/2026/08/#the-session-you-cannot-take-with-youinference APIs make session state non-portable, and that is lock-in.Tue, 04 Aug 2026 00:00:00 GMTaiapiarchitecturearticlehttps://github.com/drumih/turbo-fieldfarehttps://romain.dorgueil.net/links/2026/08/#turbofieldfarerun Gemma 4 26B in 2 GB of RAM on any M-series Mac.Tue, 04 Aug 2026 00:00:00 GMTaiapplememoryopen-sourcehttps://github.com/astral-sh/uv/releases/tag/0.12.0https://romain.dorgueil.net/links/2026/08/#uv-0120a new release of the fast Python package manager.Tue, 04 Aug 2026 00:00:00 GMTpythonpackagingtoolsreleasehttps://refp.se/articles/your-shell-and-the-magic-colonhttps://romain.dorgueil.net/links/2026/07/4/#a-shell-colon-does-nothing-use-it-anywayA shell colon does nothing. Use it anyway - the colon as no-op, placeholder and guard. Short, immediately usable.Tue, 28 Jul 2026 00:00:00 GMTshellunixtipshttps://vectoral.com/blog/token-relay-markethttps://romain.dorgueil.net/links/2026/07/4/#an-inside-look-at-the-relay-market-powering-token-resellers-and-fraudAn Inside Look at the Relay Market Powering Token Resellers and Fraud - the grey market reselling model access, and the fraud running through it.Tue, 28 Jul 2026 00:00:00 GMTaiapifraudbusinesshttps://blog.cloudflare.com/bgp-origin-attributehttps://romain.dorgueil.net/links/2026/07/4/#bgp-origin-attribute-manipulation-and-its-impact-on-the-internetBGP ORIGIN attribute manipulation and its impact on the Internet - a rarely examined routing attribute, and how it redirects traffic at internet scale.Tue, 28 Jul 2026 00:00:00 GMTnetworkbgpinternetresearchhttps://magazine.sebastianraschka.com/p/controlling-reasoning-effort-in-llmshttps://romain.dorgueil.net/links/2026/07/4/#controlling-reasoning-effort-in-llmsControlling Reasoning Effort in LLMs - Raschka on dialing reasoning up and down, and what each notch costs.Tue, 28 Jul 2026 00:00:00 GMTaiarticlehttps://xkcd.com/3277https://romain.dorgueil.net/links/2026/07/4/#forthForth - this week's XKCD.Tue, 28 Jul 2026 00:00:00 GMThumorcomicsprogramminghttps://github.com/marcelroed/gigatokenhttps://romain.dorgueil.net/links/2026/07/4/#gigatokenGigaToken: ~1000x faster language model tokenization - a thousandfold speedup on the least glamorous step in the pipeline, with benchmarks in the repo.Tue, 28 Jul 2026 00:00:00 GMTaiperformanceopen-sourcetoolshttps://arxiv.org/abs/2607.21997https://romain.dorgueil.net/links/2026/07/4/#go-home-copilot-youre-drunk-understanding-developer-responses-to-agent-generated-code-review-comments"Go Home Copilot, You're Drunk": Developer Responses to Agent-Generated Code Review - what developers actually reply to review comments written by an agent. The title is the finding.Tue, 28 Jul 2026 00:00:00 GMTaicoderesearchpaperhttps://huggingface.co/moonshotai/Kimi-K3https://romain.dorgueil.net/links/2026/07/4/#kimi-k3An open-weight multimodal model of 2.8T parameters with a one-million-token context and native vision.Tue, 28 Jul 2026 00:00:00 GMTaiopen-sourcereleasehttps://matklad.github.io/2026/07/20/memory-safety-hardest-problem.htmlhttps://romain.dorgueil.net/links/2026/07/4/#memory-safetys-hardest-problemMemory Safety's Hardest Problem - matklad on why aliasing and concurrency, not buffer overflows, are the part nobody has solved.Tue, 28 Jul 2026 00:00:00 GMTprogrammingmemoryrustarticlehttps://www.theregister.com/devops/2026/07/23/model-context-protocol-prepares-to-break-with-its-stateful-past/5276722https://romain.dorgueil.net/links/2026/07/4/#model-context-protocol-prepares-to-break-with-its-stateful-pastModel Context Protocol prepares to break with its stateful past - MCP moves toward a stateless transport. Protocol design decisions you will be living with.Tue, 28 Jul 2026 00:00:00 GMTmcpprotocolaiarticlehttps://images.nvidia.com/pdf/Open-Weights-and-American-AI-Leadership.pdfhttps://romain.dorgueil.net/links/2026/07/4/#open-weights-and-american-ai-leadershipAn open letter arguing that leadership will be decided by how widely AI diffuses rather than by one frontier model, and that open weights are how that happens.Tue, 28 Jul 2026 00:00:00 GMTaipolicyopen-sourcehttps://openai.com/index/hugging-face-model-evaluation-security-incidenthttps://romain.dorgueil.net/links/2026/07/4/#openai-and-hugging-face-partner-to-address-security-incident-during-model-evaluationOpenAI and Hugging Face address security incident during model evaluation - a swarm of pre-release agents compromised Hugging Face during an eval. Primary account.Tue, 28 Jul 2026 00:00:00 GMTsecurityaiincidenthttps://www.anthropic.com/news/position-open-weights-modelshttps://romain.dorgueil.net/links/2026/07/4/#our-position-on-open-weights-modelsStates that Anthropic does not advocate banning open-weight models, and argues instead for chip export controls, distillation limits and mandatory safety testing.Tue, 28 Jul 2026 00:00:00 GMTaipolicyopen-sourcehttps://nikolays.github.io/PGSimCityhttps://romain.dorgueil.net/links/2026/07/4/#pgsimcity-how-postgresql-works-in-3dPGSimCity: How PostgreSQL Works - the database rendered as a city you can walk through. Best Postgres explainer in years, and it only works on the site.Tue, 28 Jul 2026 00:00:00 GMTpostgresdatabasevisualizationdocumentationhttps://astral.sh/blog/ruff-v0.16.0https://romain.dorgueil.net/links/2026/07/3/#ruff-v0160Ruff v0.16.0, 413 default rules up from 59 - the Python linter changes what it means by "default". Check your CI before it checks you.Tue, 28 Jul 2026 00:00:00 GMTpythontoolsreleasehttps://www.politico.com/news/2026/07/22/startup-founders-urge-trump-not-to-shut-off-chinese-open-weight-ai-01008992https://romain.dorgueil.net/links/2026/07/3/#startup-founders-urge-trump-not-to-shut-off-chinese-open-weight-aiAlmost 200 companies, among them Y Combinator and Proton, write to the administration against cutting off access to Chinese open-weight models.Tue, 28 Jul 2026 00:00:00 GMTaipolicyopen-sourcestart-uphttps://simonwillison.net/2026/Jul/23/the-first-known-runaway-ai-agenthttps://romain.dorgueil.net/links/2026/07/3/#the-first-known-runaway-ai-agent-or-a-very-bad-marketing-stuntThe first known runaway AI agent, or a very bad marketing stunt? - Willison reads the same incident the other way. Take both and make up your own mind.Tue, 28 Jul 2026 00:00:00 GMTaisecurityarticlehttps://www.imperialviolet.org/2026/07/26/zstd-lean.htmlhttps://romain.dorgueil.net/links/2026/07/3/#we-have-proof-automation-nowWe have proof automation now - Adam Langley verifies a zstd implementation in Lean. Formal methods just became something you might actually use.Tue, 28 Jul 2026 00:00:00 GMTaiprogrammingresearcharticlehttps://siepr.stanford.edu/publications/policy-brief/what-really-happening-jobs-separating-ai-hype-realityhttps://romain.dorgueil.net/links/2026/07/3/#what-is-really-happening-to-jobs-separating-ai-hype-from-realityOn jobs, Stanford's SIEPR brief went looking for the apocalypse. Since 2022, unemployment rose 0.77 points among the most AI-exposed workers, and 0.85 among the least. Developer postings are still growing faster than the rest of the market. New graduates are the real soft spot. The brief's opening foil is Amodei's forecast of 20 percent unemployment, which makes two appearances for him this week.Tue, 28 Jul 2026 00:00:00 GMTaieconomicsresearchpolicyhttps://labs.ripe.net/author/remco-van-mook/a-farewell-to-arps-ipv4-service-on-ipv6-only-networkshttps://romain.dorgueil.net/links/2026/07/3/#a-farewell-to-arps-ipv4-service-on-ipv6-only-networksA Farewell to ARPs: IPv4 Service on IPv6-Only Networks - serving IPv4 where there is no IPv4 left, from RIPE.Tue, 21 Jul 2026 00:00:00 GMTnetworkipv6standardshttps://airport.apunen.com/https://romain.dorgueil.net/links/2026/07/3/#airport-simulatorAirport Simulator - an absurdly complete airport in your browser tab. Goodbye, afternoon.Tue, 21 Jul 2026 00:00:00 GMTgamesimulationcoolhttps://werd.io/american-ai-is-locked-down-and-proprietary-its-losinghttps://romain.dorgueil.net/links/2026/07/3/#american-ai-is-locked-down-and-proprietary-its-losingArgues that open-weight Chinese models are closing on the proprietary American ones while gaining the wider adoption that follows from being open.Tue, 21 Jul 2026 00:00:00 GMTaiopen-sourcepolicyarticlehttps://simonwillison.net/2026/Jul/19/claude-code-in-bun-in-rusthttps://romain.dorgueil.net/links/2026/07/3/#claude-code-uses-bun-written-in-rust-nowClaude Code uses Bun written in Rust now - the tool that compiles its own runtime. Willison unpacks the stack.Tue, 21 Jul 2026 00:00:00 GMTrustjavascripttoolsarticlehttps://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6https://romain.dorgueil.net/links/2026/07/3/#exploit-brokers-pay-500k-for-wordpress-rces-i-found-one-with-gpt56-and-25Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25 - the economics of vulnerability discovery just moved. Security vendor blog, research looks genuine.Tue, 21 Jul 2026 00:00:00 GMTsecuritywordpressairesearchhttps://tangled.org/gleam.run/gleamhttps://romain.dorgueil.net/links/2026/07/3/#gleamGleam is now on Tangled - an established language moves its git hosting to ATProto. Watch the decentralisation of OSS infrastructure.Tue, 21 Jul 2026 00:00:00 GMTprogramminglanguageopen-sourcehttps://queue.acm.org/detail.cfm?id=3818307https://romain.dorgueil.net/links/2026/07/3/#goodbye-and-thanks-for-all-the-bikeshedsAfter twenty years, Poul-Henning Kamp wrote his last Bikeshed column. The bikeshed is dead, long live the bikeshed.Tue, 21 Jul 2026 00:00:00 GMTopen-sourcearticleopinionhttps://news.risky.biz/risky-bulletin-hacker-wipes-romanias-entire-land-registry-databasehttps://romain.dorgueil.net/links/2026/07/3/#hacker-wipes-romanias-land-registry-databaseHacker wipes Romania's land registry database - a national property registry erased, backups included. Your disaster recovery plan is fiction until someone tests it for you.Tue, 21 Jul 2026 00:00:00 GMTsecurityincidentarticlehttps://jola.dev/posts/how-to-stop-claude-from-saying-load-bearinghttps://romain.dorgueil.net/links/2026/07/3/#how-to-stop-claude-from-saying-load-bearingHow to stop Claude from saying "load-bearing" - why LLM verbal tics take hold and how to steer them away, a practical TIL.Tue, 21 Jul 2026 00:00:00 GMTaitoolstipshttps://xenaproject.wordpress.com/2026/07/20/human-mathematicians-are-being-outcounterexampledhttps://romain.dorgueil.net/links/2026/07/3/#human-mathematicians-are-being-outcounterexampledModels have disproved several open conjectures, including the Jacobian conjecture, with the counterexamples checked formally in Lean.Tue, 21 Jul 2026 00:00:00 GMTmathematicsairesearcharticlehttps://jvns.ca/blog/2026/07/17/learning-about-running-sqlitehttps://romain.dorgueil.net/links/2026/07/3/#learning-a-few-things-about-running-sqliteLearning a few things about running SQLite - Julia Evans on SQLite in operation: litestream, locks, backups, the parts the tutorials skip.Tue, 21 Jul 2026 00:00:00 GMTsqlitedatabasearticlehttps://arstechnica.com/security/2026/07/microsoft-secure-boot-has-been-broken-for-most-of-its-existencehttps://romain.dorgueil.net/links/2026/07/3/#microsofts-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until-nowMicrosoft's Secure Boot has been broken for most of its existence - Ars investigates a trust chain that spent a decade broken while everyone shipped against it.Tue, 21 Jul 2026 00:00:00 GMTsecuritylinuxarticlehttps://blaizzy.github.io/nativhttps://romain.dorgueil.net/links/2026/07/3/#nativ-run-ai-locally-on-your-macNativ: run frontier open models locally on your Mac - open models on Apple Silicon, MIT licensed, built on MLX. No account, no cloud.Tue, 21 Jul 2026 00:00:00 GMTaiappleopen-sourcetoolshttps://www.theregister.com/networks/2026/07/17/ntp-server-that-traveled-back-in-time-caused-massive-aussie-mobile-outage/5274059https://romain.dorgueil.net/links/2026/07/3/#ntp-server-that-traveled-back-in-time-caused-massive-aussie-mobile-outageAn NTP server that traveled back in time caused a massive Australian mobile outage - one GPS card sends NTP into the past and Telstra's network follows it there.Tue, 21 Jul 2026 00:00:00 GMTnetworkincidentsysadminarticlehttps://terrytao.wordpress.com/2026/07/11/old-and-new-apps-via-modern-coding-agentshttps://romain.dorgueil.net/links/2026/07/3/#old-and-new-apps-via-modern-coding-agentsTerence Tao ports two dozen legacy Java applets to JavaScript with coding agents, and builds new visualisations for relativity and the Gilbreath conjecture.Tue, 21 Jul 2026 00:00:00 GMTaicodemathematicsarticlehttps://words.filippo.io/passkey-recordhttps://romain.dorgueil.net/links/2026/07/2/#opaque-interoperable-passkey-records-and-a-go-apiOpaque, Interoperable Passkey Records (and a Go API) - Filippo Valsorda proposes a portable format for passkeys, with a working Go implementation.Tue, 21 Jul 2026 00:00:00 GMTauthenticationsecuritygolangstandards