“Writing has been called the process by which you find out you don’t know what you are talking about. Actually doing stuff meanwhile is the process by which you find out you also did not know what you were writing about.” - https://berthub.eu/articles/posts/a-2024-plea-for-lean-software/

"I know from experience and for a fact that in the past I've hurt
myself following those desires, and that in the future I'll do so again."

A new page of my comic Ekphrasis, which you can read for free at https://ekphrasiscomic.neocities.org/

Very quick blog post to start the week: "enhanced session" shares your host clipboard with virtual machines, even if you didn't copy/paste anything from the VM itself.
Might be common knowledge but it surprised me so I'm sharing it here
https://windows-internals.com/random-windows-things-part-2-unexpected-clipboard-data-behavior/

The Orphaned Sources At The Hacker Camp: What Happened Next

https://hackaday.com/2026/07/28/the-orphaned-sources-at-the-hacker-camp-what-happened-next/

New issue - #9 - of the free @PagedOut zine is here!
90 pages of pure technical awesomeness!
Please help spread the news ❤️

Web: https://pagedout.institute/webview.php?issue=9&page=1
PDF: https://pagedout.institute/download/PagedOut_009.pdf
Wallpaper: https://pagedout.institute/download/PagedOut_009_wallpaper.png
Patreon: https://www.patreon.com/cw/PagedOut

Enjoy!

How is the Bun rewrite in Rust going? https://lockwood.dev/ai/2026/07/27/how-is-the-bun-rewrite-in-rust-going.html

It seems like if the initial token costs are to believed, the cost is approaching $1m USD, but it's likely, as the article says, that there were a lot of non-reported costs being spent from Anthropic helping the project along and continuous CI/CD.

I see LLMs as a continuation of the Silicon Valley obsession with 'problem solving' and their specific definition.

Back when I was an undergrad, the refrain we heard from big tech recruiters was 'we're not interested in specific skills, we want to hire problems solvers'. This always struck me as odd: everyone in my year could solve problems, it wasn't a rare skill, the difficult thing was identifying the correct problems to solve.

Digging a bit deeper, it turns out that they didn't even want people capable for solving generic problems, they wanted people who had learned a load of problem-solution pairs and would do closest-fit matching. People who would look at a problem and say 'ah, this looks like this well-known problem, the solution is therefore a variation of this well-known solution'. Not people who would create novel solutions but people who could pattern match and apply off-the-shelf solutions with small tweaks.

They wrote books about how to hire people with that skill, all without being explicit that this is what they were looking for.

And now they have machines that can do this: ingest a load of problem-solution pairs and match problems to some space of problems and infer a solution from the nearby solutions.

It's not surprising that they believe this is the same as novelty, because they've spent three decades incentivising their employees to avoid true novelty.

The @EUCommission has just published guidance documents clarifying how the Cyber Resilience Act #CRA affects (among other things) #OpenSource. This is the result of the extensive engagement of many open source community members.

https://digital-strategy.ec.europa.eu/en/library/commission-publishes-new-guidance-support-timely-cyber-resilience-act-implementation

About time for me to remind everyone that:

a) there was a TV series version of The Net in 1998

and

b) Tim goddamn Curry played the voice of a mysterious hacker called Sorcerer in it

Remember, kids:

In proper scientific terms, an attempt to explain observable phenomena is called a "hypothesis".

It is called a "theory" when it fits all the observable facts, and there is no observable evidence to the contrary. We don't call it a "truth" because there's always a chance that it might be overturned by later evidence - but as far as science is concerned, a "theory" is as hard as it gets.

This is often confusing to people who dismiss science they don't like as "it's just a theory". But this distinction should be kept in mind when discussing things like the "Theory of Evolution", "Theory of Relativity", "Global Warming Theory", and "Dead Internet Theory".

#PSA #Evolution #GlobalWarming #DeadInternetTheory #Science #Theory

An attacker has remotely executed code through a JSON parsing library in production.

https://fearsoff.org/research/fastjson-1-2-83-rce

This unpriv-reachable vuln in the upstream 6.6 LTS was finally fixed yesterday after being publicly triggered in syzkaller over 5300 times since March when it was introduced: https://syzkaller.appspot.com/bug?extid=3ad17e94107dda6b6b03 Since we don't ignore syzkaller results, we fixed it the day it was introduced.
https://bird.makeup/users/spendergrsec/statuses/2074499846887674260

🚨 New advisory was just published!

An independent security researcher working with SSD Secure Disclosure has identified a critical vulnerability in vBulletin that allows an unauthenticated attacker to execute arbitrary code on a remote server. The vulnerability has been assigned CVE-2026-61511. Read our full advisory: https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/