Software
Custom software development, tools and good practices, explained for people who build or commission software.
7 posts
20 October 2026 · 5 min read
Softwarecurl takes low-severity bugs public: when triage costs more than the bug
From 26 October, curl handles low and medium severity reports in the open. The reason isn't ideological: over 90% of what arrives isn't serious, and the maintainers are at breaking point.
16 October 2026 · 5 min read
SoftwarePostgreSQL 19 slips because AI review finds more bugs than anyone has time to fix
Version 19 moves to mid-November and loses eight to ten features. The stated reason is the interesting bit: finding defects has become cheap, fixing them hasn't. What that means for anyone wiring an automated reviewer into their CI.
30 September 2026 · 5 min read
SoftwareUnicode ranges lie: ask the font, not the range
I replaced the Unicode range whitelist in my social card generator with a direct question to the font: can you draw this character? Less code, fewer tofu boxes, and a rule that goes well beyond typography.
30 September 2026 · 5 min read
SoftwareKDE 6.8 drops the X11 session: what breaks isn't your apps, it's everything around them
Plasma 6.8 lands on 14 October, the day KDE turns thirty, and it's the first release that no longer boots into X11. Old applications keep running; what stops working is everything that used to reach into the graphics server.
25 September 2026 · 5 min read
SoftwareDocker puts agents inside micro VMs: the problem was never the container, it was the socket
Docker launched Cloud Sandboxes with an uncomfortable demo: Claude escapes an ordinary container through the host Docker socket mounted inside it. The lesson isn't to buy anything — it's to check what you're mounting into your agent.
21 September 2026 · 5 min read
SoftwareThe attack no longer targets the repo: it targets the maintainer, and it starts with a job offer
Rust has warned about fake recruiters using video calls to plant a remote access trojan on people who publish crates. The real story isn't the anecdote: it's that the publishing account for a package with hundreds of millions of downloads lives on one person's laptop.
7 September 2026 · 5 min read
SoftwareInvisible characters in email: the AI trick has moved to phishing, and the hole is in your code
Microsoft spotted a phishing campaign splitting words with invisible Unicode characters to break literal matching, peaking at over 2.37 million messages a day. Not a single instruction aimed at a model. The interesting part isn't the spam: it's that every text comparison in your product has the same blind spot.