Archive

249 broken tasks in SWE-Bench Pro's 731-task split. Your model comparison table just lost its foundation.

2 min read

JetBrains kills its DataSpell IDE, admitting it was just PyCharm with a different label.

3 min read

The dream of declarative Postgres migrations is here. So is the nightmare of accidental data deletion.

4 min read

mise puts your languages, env vars, and tasks in one file. We checked whether 'reproducible' holds up.

4 min read

uv 0.11.19 hashes every download and grows a type checker. The Python toolchain keeps collapsing into one binary.

4 min read

ToolHive puts every MCP server in a container with a minimal permission profile. It shrinks the blast radius, it does not remove the bomb.

3 min read

CISA leaked its own AWS keys on GitHub for six months

4 min read

Cursor's new pricing: $0 for hobbyists, $200 for power users, and a calculator for everyone in between.

3 min read

271 Firefox security bugs fixed with Claude Mythos Preview. 180 sec-high. Mozilla describes the dynamic change in their own words.

4 min read

Shopify's River agent refuses DMs. All coding sessions run in public Slack - 100+ engineers can watch in real time.

3 min read

Airbnb CEO: 60% of new code AI-generated on a regulated earnings call. Managers expected to code or use agents directly.

3 min read

Amazon gave up on Q Developer internally. Claude Code and Codex are now available to all Amazon corporate engineers.

3 min read

GitHub cut their agentic workflow costs by 62% by pruning unused MCP tools, pre-downloading data before agents start, and switching models. All repos are public.

4 min read

IDE-native search cuts agent tail latency 16% and budget overruns a third in JetBrains' paired-delta benchmark, but wait for external replication.

3 min read

Docker + Black Duck auto-suppress phantom CVE alerts with VEX

2 min read

A popular Python AI gateway was weaponized in under two days. Attackers went after high-value OpenAI and AWS credentials, not profile data.

3 min read

GitHub disclosed CVE-2026-3854, where the friendly git push path became the RCE door.

1 min read

Five million monthly downloads, 22 models, no attribution. The package was deleted; the wheels were not.

1 min read

JetBrains sells Qodana on the IBM '100x bug cost' figure. Bossavit and Menzies already traced that citation chain back to nothing.

1 min read

'Skills are not verified by GitHub.' It's npm for prompts with a formal hands-off security policy.

1 min read

Opus 4.7 names authors of unpublished prose from a 125-word excerpt. Same flagship, same week as KYC.

1 min read

83% of orgs plan agentic AI, 29% can secure it. Two hours in a CTF teaches more than a production breach.

3 min read

AI can write the patch, but only a human signs the DCO. Torvalds points out the slop crowd won't self-report anyway.

3 min read

TCP slow start gives you 14KB before the first round trip. React's empty shell blows past that before your code even loads.

8 min read

Each task gets its own fresh context window. Sounds obvious until you realize nobody else automated it.

3 min read

One fake WakaTime extension on Open VSX, one Zig binary, and every VS Code-compatible editor on your machine is compromised in seconds.

2 min read

Retired by GitHub on April 10, 2026 after two months in Copilot Pro+. Cause of death: 'streamlining'.

2 min read

A floating semver tag in CI and a three-hour window on npm were enough for poisoned axios to reach code-signing certificates.

2 min read