Front-page articles summarized hourly.
Access to codembark.com is blocked by Cloudflare’s security protection. The page notes that certain actions (e.g., specific words, SQL commands, or malformed data) can trigger the block. To resolve it, email the site owner with details of what you were doing and include the Cloudflare Ray ID shown on the page (and your IP).
Microsoft’s Xbox price bumps have spread to Europe and the UK, with increases of up to €200 or £170. The 1TB Series X with disc rises from £499.99/€599.99 to £669.99/€799.99; the 1TB Series X Digital from £449.99/€549.99 to £619.99/€749.99; the 512GB Series S from £299.99/€349.99 to £429.99/€499.99; the 1TB Series S from £349.99/€399.99 to £519.99/€599.99. The 2TB model is retired. This is the third round of price hikes since May 2025, with the top model now about $300 above its 2020 launch price.
Seven years after its 2019 debut, SwiftUI remains a perpetual beta. The author argues it’s plagued by unpredictable layout, opaque data flow, constantly changing APIs, and lack of feature parity with UIKit/AppKit, plus underwhelming performance. Cross‑platform promises fail; learning once, applying everywhere becomes learn twice, debug everywhere. The piece claims Apple shifted toward “good enough” and velocity over craftsmanship, citing real‑world bugs and QA burdens on developers. In conclusion, SwiftUI is not truly bad but mediocre, and legacy frameworks feel more trustworthy; the author prefers them.
Over July 2026, Uphill Security ran a global SSH honeypot network (15 dedicated servers across 5 VPS providers). In 30 days it logged 1,531,053 login attempts from 6 continents, involving 6,790 unique attacker IPs and 131,922 unique credential pairs (12,238 usernames; 97,621 passwords). Most activity came from Europe; top credentials included root/admin with common passwords (e.g., 123456). The setup uses a Python/Paramiko SSH honeypot inside rootless Podman, managed via Ansible, with logs centralized for analysis plus geo/ASN insights. Future work: more automation, more honeypots, IPv6, password hashes, intel sharing, and a live dashboard.
Cloudflare's Agents Week introduces the Agent Cloud, reframing the web for agents rather than humans. An Agent Cloud must support both agent-native futures and current needs, serving as a translation layer between the human web and an agent-shaped web. Over five days, the series will explore primitives, execution layers, the agentic SDLC, and secure access controls, shaping the agentic web. Readers are invited to ask their own agents what they need and share responses; follow the blog and join the conversation on X.
Tools encode trust by shaping how work gets done; AI agents speed up coding but introduce opacity and risk. The SDLC must adapt: preserve human accountability (owners of commits, PRs), explicitly define prompts and context, and share working processes. Culture and workflow changes are essential; tools alone can’t fix broken processes. Use AI to augment humans, maintain determinism where needed, audit trails, and avoid silencing collaboration. The result: trusted, repeatable workflows where AI handles repetition but humans make final decisions.
Statcounter says Linux reached 10.65% of North American desktop web usage in July 2026, the first double-digit share, up from 5.52% in June. The jump partly follows a drop in an 'Unknown' traffic category, and Cloudflare Radar also records a strong Linux presence, though with different methods. The rise reflects broader improvements in the Linux desktop ecosystem, including hardware support, easier installation, and Linux gaming through Proton and Steam Deck. These figures measure web activity, not necessarily installed desktops, so they indicate relative share rather than exact market penetration.
Arch Linux has temporarily disabled AUR package adoptions and pushes due to a surge of malicious adoptions and commits. The DevOps team (Antiz) is addressing the situation and will issue an update; users are asked to report suspicious adoption events or commits.
Blog post chronicles hardware hacking of a TP-Link TL-841N router. The author disassembles the device, locates UART, dumps firmware via UART+TFTP and on‑chip flash (CH341A). He extracts partitions (mtd0-6), un-squashes rootfs, and uses strings/binwalk for analysis. Finds a preinstalled, plaintext WPS password and ISP PPPoE credentials in config storage, persisting after factory reset. Demonstrates admin:admin login via web interface and notes a related CVE (CVE-2026-4346) exposing credentials through serial. Concludes with dual firmware extraction approaches and sets up for vulnerability reverse engineering in a follow-up.
GE-97 Terminal is a 'working museum' of the early internet created by Khalid Alshaikh in Saudi Arabia. It recreates a bootable Windows 98-era environment (GE-OS 98) that runs live on a browser, preserving Flash, Java, MIDI, VRML, and dead CGI features, to let modern users experience the 1990s web. It also hosts the Gopher Hole on port 70, with a large catalog of 30,164 sites and a separate 9,070-site Arabic directory. Beyond nostalgia, the project documents recent Saudi history, football, amateur radio (7Z1FP), and digital preservation.
Provides Nix/NixOS support for DGX Spark hardware (and Asus Ascent GX10) with a DGX Spark NixOS module, USB images, and playbooks. Enables NixOS on DGX Spark and DGX OS, with options for NVIDIA or standard NixOS kernels and kernel configs generated from NVIDIA annotations. Includes install instructions, flakes with the graham33 Cachix cache, firmware updates via LVFS, and a quickstart template to bootstrap a DGX Spark NixOS config. NixOS Anywhere is experimental. MIT license.
Kakehashi is a userspace macOS translation layer for Linux ARM64 (CLI-first, no JIT) that runs Darwin Mach-O binaries by loading a freestanding libSystem.B.dylib on Linux aarch64 and translating BSD syscalls to guest code. It uses a host–guest bottle to bridge file systems, supports Docker/Colima/UTM, embeds libSystem, and offers commands like kh run/curl/7zz. Install with cargo install kakehashi. Aims to speed CI on Linux ARM64 by running macOS CLI tools rather than full macOS runners. Licensed Apache-2.0.
Karpathy argues for testing LLMs with interactive worlds, not just prompts. He ran Opus 5 on the LOTR opening: a 1M-token budget (~$10) to produce three.js renderings; after ~2 hours it generated ~5500 lines of code to render the story. The result is rough but impressive, as the model places 3D assets and writes animation code. He envisions hyper‑custom worlds where players can act as NPCs in an on‑demand “ephemeral GTA” of X. A weakness is auditing: LLMs can’t easily perceive videos to verify work, so Opus 5 used slow screenshots, yielding jank.
Norway built a salmon giant after breeding a fast-growing Atlantic salmon in the 1980s and marketing it abroad, notably via Japan's 'Project Japan' to make salmon sushi mainstream. Today Norway supplies over half the world's Atlantic salmon, with an $18 billion industry and farms from Scotland to Chile. But the boom has ecological and welfare concerns: waste from nets fuels fjord nutrients, algae blooms, and oxygen drops; rising temperatures and pollution worsen the damage; lower-grade 'production fish' raise welfare questions. Innovations like Hofseth’s closed, 'Egg' pens aim to curb impacts, at high cost. Oslo pursues sustainable growth beyond oil.
Two word lists for English learners: the 1953 General Service List (GSL) and the 2023 New General Service List (NGSL). 1953 has 2,284 words; 2023 has 2,809. About 628 words were removed and 1,153 added. The 2023 list favors abstract terms, moving from concrete items (substances, body, food). Self-related words shrink; institutional, political, and environmental terms rise; social-communicative terms emphasize identity and organization. Added many abstract, system-level words (analysis, justify, perspective) and adverbs. Concreteness dropped from 21% to 14%. The shift reflects a more regulated, global world and a need for precision. Method: USAS tagging; five-domain grouping; limitations noted.
16-bits.org hosts a portable Fasttracker II clone in C using SDL2, plus ProTracker 2 and other projects. FT2 clone v2.22 is available for Windows, macOS (Intel and Apple Silicon), and Linux via GitHub; see HOW-TO-COMPILE.txt. Windows: disable NVIDIA GeForce Experience hotkeys if ALT+F4/ALT+F5 misbehave. macOS: must right‑click Open once; grant permission in Privacy & Security and adjust keybindings; fullscreen with ALT+Enter or Ctrl+Cmd+F. Linux: rebind ALT+F4/ALT+F5. Copyright 2026; Discord link.
All Hands 2026 brought 166 Rustaceans to Utrecht (May), the second RustNL-hosted event after a six-year hiatus and part of RustWeek with the Unconference. Six groups (~60 members) participated. Over 3 days and 73 sessions in 11 rooms, governance dominated: leadership, project roles, moderation, and RFC process. Technical topics ranged from const generics, reborrowing, and SIMD to rustc as a library and allocator work; interoperability with C++ and cross-project efforts with Linux and CPython featured prominently. Feedback averaged 9.5/10. Key outcomes included progress on cargo-semver-checks, rustdoc JSON, and plans for 2027 (May 27–29, Utrecht).
The author describes a cheap antenna hack for ESP32-C3 SuperMini: attach a 31 mm silver-plated wire as a quarter-wave antenna in parallel with the stock SMD antenna, forming a λ/4 element with a λ/8 section; solder to the SMD antenna ends, leaving the old aerial in place. This boosts WiFi RSSI by about 6–10 dB, improves range and stability, especially at edge or in obstructed conditions. Testing used ANNEX32 WiFi-Logger to compare unmodified vs modified modules; notes that the PCB antenna is limited by placement near the ground plane; recommended for hobbyists with basic soldering; multiple board variants exist.
Made by Johno Whitaker using FastHTML