Front-page articles summarized hourly.
WebAuthn's credential protection policy (CTAP 2.1) lets Relying Parties influence credential discovery via the credentialProtectionPolicy and enforceCredentialProtectionPolicy extensions. The extension controls when a credential can be discovered by the authenticator, with three modes: default userVerificationOptional, userVerificationOptionalWithCredentialIDList, and userVerificationRequired. Discovery is still verified by the RP’s checks. enforceCredentialProtectionPolicy can cause creation to fail if the authenticator/browser doesn't support it. Chrome/Firefox support; Safari ignores. Roaming vs non-roaming behavior and Chrome's mappings: residentKey and userVerification settings affect policy application. Server must enforce user verification to prevent unauthenticated access.
Nature Human Behaviour (2026) finds that conservative Americans experienced worse health and higher mortality than liberals in the 2010s, with the gap growing into the 2020s. Using Add Health biomarkers and death records, plus a post-2020 survey, the authors identify two mechanisms: demographic realignment into the conservative coalition and politically driven health-behavior gaps. Right-leaning individuals, especially Trump voters, report less trust in doctors, less care-seeking, and greater skepticism of medicines, linking to more deaths from internal causes by 2020–2022. About half the health-gap is explained by observed factors; the rest remains unexplained, highlighting a politicized health landscape and the need for causal research.
The post argues that creating good commits for large features is tough; strict git rhythm often slows you down. It proposes a workflow using jujutsu (jj): sketch an ideal history first (e.g., red for types, blue for UI) with jj new; add other changes; then squash actual edits into the corresponding ideal commits, ending with an empty "everything" commit. This lets you make improvised, temporary commits and tidy at the end. It's smaller than jj split; avoids merge-conflict hell but sacrifices guaranteed compile-time success in each intermediate commit; tradeoff between debuggability and reviewer convenience, with help from AI fixes.
CBP Directive No. 3340-049B provides guidance and standard operating procedures for border searches of electronic devices by U.S. Customs and Border Protection. It covers searching, reviewing, retaining, and sharing information from devices such as laptops, tablets, mobile phones, cameras, and other media during inbound and outbound border encounters, outlining scope, privacy considerations, and data-handling requirements.
Back-end Go teams migrating to Rust should expect a gradual, boundary-by-boundary move rather than a rewrite. Rust replaces many Go conventions with compile-time guarantees: ownership/borrowing, exhaustive matching, and traits instead of interfaces. Go is fast to compile and excellent for tooling; Rust yields memory safety, zero-cost abstractions, and fearless concurrency, at the cost of learning curve and longer builds. Key tactics: start with a hot path, use strangler/sidecar patterns, keep API contracts, and train the team. Expected wins: 20–60% CPU, 30–50% memory, much steadier P99 latency; fewer production incidents.
Go 1.24 lets you enable HTTP/2 cleartext (h2c) directly on http.Server by enabling HTTP/1.1 and unencrypted HTTP/2; no x/net/http2/h2c wrapper is needed. Previously you had to use golang.org/x/net/http2/h2c. Test locally with curl -i --http2-prior-knowledge http://localhost:9888. In Cloud Run, TLS ends at the frontend and traffic can be HTTP/1.1 or h2c; configure the v2 service to expose port 9888 and support long SSE timeouts (idle ~900s). The load balancer upgrades to HTTP/2 during negotiation; default serverless backend timeouts are long (60 minutes).
Could not summarize article.
Stephen Diehl reviews Solvej Balle's On the Calculation of Volume, a planned seven-volume project about Tara Selter, a book dealer who repeats the same day—November 18—until she and others fill time. Volume I is spare; Volume II a travelogue inward; Volume III introduces Henry Dale; Volume IV shifts to a 'we' voice as fifty people debate how to live inside the loop; Volume V settles into a second life with new duties. The cycle explores time, selfhood, marriage, language, and daily life; Diehl calls it one of the original novels about life, and eagerly awaits Volume VI.
The piece warns that AI like Claude should not be the architect. AI can generate technically sound, generic architectures quickly, but lacks the context to say no, leading to designs that fit the “median” and production realities poorly. When AI outputs epics and stories, engineers become mere ticket implementers, creating an accountability gap. Senior reviews often accept AI-led plans with minor edits, short-circuiting debate. The author advocates a division: humans design, AI implements; use AI to accelerate, but keep evaluation, trade-offs, and ownership with people.
Tom's Hardware compares Ryzen 5 5500, Core i3-12100F, and Core i3-14100F at about $100 to find the best DDR4 CPU. All three support DDR4; AMD uses cheaper AM4 boards, while Intel’s DDR4/PCIe 4.0 on LGA1700 costs more for motherboards. In gaming, the Core i3-14100F typically leads, often ahead of Ryzen 5500 and i3-12100F; in multithreaded tasks, Ryzen 5500 wins due to its six cores. Power draw is very low for all, with Ryzen 5500 most efficient. Bottom line: under $100, i3-14100F is the gaming winner; Ryzen 5500 excels in heavy multitasking.
Bayesian spatial modeling with unknown coordinates: treat observed coordinates as noisy measurements of latent true locations; model Y with GP evaluated at latent s_i = tilde s_i + Delta_i, Delta ~ N(0, sigma_s^2 I_2). Fit via PyMC pm.gp.Marginal with priors on mu, sigma, ell, sigma0. Demonstrated on Walker Lake uranium/vanadium data; perturb coordinates with increasing noise and assess parameter recovery and surface prediction. As sigma_s grows, posterior location densities widen, yet key spatial features of the surface are preserved; naïve Nadaraya-Watson kernel smoother fails to capture spatial structure. Computation shows divergences; higher target_accept or reparameterization advised.
Firefox enables Adafruit Web Serial projects directly in the browser, letting you connect to compatible hardware, code, and control devices without desktop apps. The page notes Firefox ESR is required on Windows 8.1 and below and macOS 10.14 and below. It presents Firefox as an open-source, Mozilla-driven platform for easier, browser-based hardware projects.
FreeBSD Foundation Executive Director Deb Goodkin tried daily driving FreeBSD on a modern laptop (Framework Laptop) to highlight improved laptop support and a KDE desktop on FreeBSD. After years of finding it difficult to run FreeBSD on laptops, she committed to at least 10 minutes a day during OSS 2026. She found the touchscreen and KDE peripherals mostly worked; Zoom initially failed but later worked, and webcam and Microsoft Teams had partial or required steps. The OSS 2026 assets detail her experience.
Flick is hiring a Senior Frontend Engineer (founding role) to build the core AI filmmaking editor—canvas, timeline, node graph—with React/TypeScript. Full-time, Sunnyvale/remote; $100K–$200K; 0.10%–1.00% equity; visa sponsorship. Lead architecture, prototyping, and end-to-end UX, working with founders to shape the editor and workflows. Requirements: 3+ years in high-performance web apps; expertise in modern frontend tooling; deep experience with complex editors/canvases; scalable UI; startup mindset. Nice-to-haves: video/animation tools, open-source contributions.
HBM now accounts for 63% of AI chip component costs, up from 52% (Q1 2024–Q4 2025). Memory spend rose from about $12B in 2024 to $32B in 2025, while logic dies ~13%, packaging ~15%, and auxiliary ~9% by late 2025. Total AI chip component spend grew from roughly $22B in 2024 to $52B in 2025, with memory adding about $20B. The analysis covers Nvidia, AMD, Google, and Amazon across four categories (Memory, Logic, Packaging, Auxiliary) with uncertainty ranges. Memory share likely climbs in 2026 due to tight supply and higher prices.
SCOTUSblog distills the Supreme Court’s Guide for Counsel on oral arguments. Formal address is required: Chief Justice is ‘Mr. Chief Justice’; others are ‘Your Honor’ or ‘Justice [Last Name]’ and no first names. Do not interrupt; listen when a justice questions you and answer directly—yes or no if possible, and concede or explain if wrong. Humor and casual familiarity are discouraged, though a few advocates push boundaries. Selfies and devices are prohibited at the podium; attendees may bring home quill pens as souvenirs. Swearing isn’t addressed directly, but emotional rhetoric is frowned upon; quoting profanity is sometimes permissible.
Tracing the co-evolution of UNIX and C around braces, the piece explains how ASCII 1963 and the Teletype Model 33 lacked { and }, pushing early C/B code toward parentheses, escapes, and later trigraphs/digraphs (??<, <%). UNIX V4’s terminal driver transparently translated braces to parentheses on output and back on input. Structs briefly used parentheses after braces were introduced on PDP-11; braces became standard by 1974. The Model 37 and full ASCII enabled modern C, while legacy choices (lowercase, short identifiers, flat naming) still shape libc. Includes a nostalgic appendix of hello, world variants.
UK firms are engaging in "AI washing," rebranding routine automation as artificial intelligence to ride the hype. PRs say bosses push AI pitches even when links are weak, and journalists tire of constant "AI-powered" claims. Examples include AllBirds pivoting to acquiring AI GPUs and genetics firms touting AI-powered tests, plus AI-driven consumer devices. Critics say many claims are just automation, not true AI. The trend coincides with layoffs and cautious markets, with some brands positioning themselves as AI commentators despite eroding credibility.
Ruby for Good is a weekend event (Aug 27–30, 2026) in the Washington DC area at Shepherd's Spring Retreat Center, Sharpsburg, MD. Registration includes shared lodging, all meals and snacks, social time, and swag. Programmers and designers collaborate to build open-source projects for nonprofits. Refunds aren’t available after Jun 7, but transfers can be arranged until Jul 20. Contact [email protected] for details.
The piece argues that omarchy is not a Linux distribution but Arch Linux with DHH's personal dotfiles, lacking real distro characteristics; it questions why DHH promotes it with a conference, sponsors, and merch while established distros struggle for funding. It attributes the hype to the ease of Unix customization via LLMs, Apple's design issues, and DHH cashing in on new users. Omarchy bundles heavy-handed preinstalled proprietary software (1Password, Claude, Spotify, Typora) and scripts to install others, plus a tiny default ghostty config; it relies on Arch/AUR rather than packaging itself. The author urges newcomers to avoid omarchy.
Made by Johno Whitaker using FastHTML