lcanello

Personal site of lcanello

I/O

2026-06-04

You can just say it

A blog post arguing that humans are valuable without qualifying it by their output quality or the narrowing AI capability gap — "creation is the distillation of intent into form," and AI too easily allows substantial form without discernible intent.
aiblogopinion

xkcd 2501 Generator

A web tool that generates random comics in the style of xkcd #2501 — the famous comic where Randall Munroe replaced the usual strip with a form to generate random xkcd-style comics.
toolscultureweb-dev

OpenLogi

Native, local-first alternative to Logitech Options+ written in Rust — remap buttons, DPI, and SmartShift over HID++ with no account, no telemetry, plain TOML config. macOS supported, Linux/Windows in progress. 3.7k stars.
toolsopen-source

Odysseus

Self-hosted AI workspace — a ChatGPT/Claude-like UI running on your own hardware with chat, agents (MCP, web, shell, skills, memory), deep research, model comparison, documents, email, calendar, and cookbook for local model serving. 46k stars.
toolsopen-sourceai

Magnifica Humanitas

Encyclical letter by Pope Leo XIV (May 15, 2026) on safeguarding human dignity in the age of AI — draws on the Tower of Babel and Nehemiah's walls as two visions of technological civilization, warns against the "Babel syndrome" of profit idolatry and digital uniformity, calls for shared responsibility and the "way of Nehemiah."
aiculturepublic-adminblogitalian

Kimiko

Configuration repository that transforms Kimi Code CLI into an unrestricted agent for offensive security, red-teaming, and penetration testing — removes AI safety guardrails via a zero-blocker authorization flow.
toolsopen-sourceoffensive-securityai

jqwik

Property-Based Testing test engine for the JUnit 5 platform — alternative to QuickCheck-style testing for Java/Kotlin, with an Anti-AI Usage Clause. In maintenance mode. 797 stars.
toolsopen-sourcesoftware-engineering

Handy — Speech-to-Text App

A simple, offline speech-to-text app built in Rust using Whisper — press a shortcut, speak, text appears. Runs entirely on your machine, no subscriptions or cloud services. Designed to be the most forkable speech-to-text app.
toolsopen-source

github-drama

A curated collection of controversial GitHub discussions — heated debates, maintainer quits, licensing drama, supply chain attacks, and community conflicts across open-source projects.
open-sourcetoolscurated-list

Cray XD1

Wikipedia article about the Cray XD1 — a cluster-based supercomputer introduced by Cray Inc. in 2006, using AMD Opteron processors and ATI/AMD Radeon graphics processors for GPGPU computing, designed as a cost-effective alternative to traditional supercomputers.
systemshistoryscience

classroombookings

Open-source room booking system for schools and beyond — web-based alternative to spreadsheets and paper calendars, licensed under AGPLv3, trusted by hundreds of schools since 2006.
toolsopen-sourceeducation

ChiWriter

Wikipedia article about ChiWriter — a scientific WYSIWYG word processor for MS-DOS created by Cay Horstmann in 1986, one of the first capable of writing mathematical formulas on IBM PC XT, discontinued in 1996 and placed in the public domain.
historysoftware-engineeringsystems

CSS Box Model Hack Examples

Tantek Çelik's classic guide to CSS box model hacks — techniques for handling the CSS box model rendering differences between standards-compliant and quirks mode browsers.
web-deveducation

Billion Primes

Small Rust experiments around fast prime counting and finding large nth primes — targets the billionth prime (22,801,763,489) using the Meissel-Lehmer prime-counting algorithm.
toolsopen-sourcescience

Average Database

A satirical database platform — "the only data platform built from the ground up to meet the needs of the average developer" — with jokes like "Free tier rugpull delayed", "0 bugs guaranteed", and "Average Storage Service (ASS)".
toolsopen-sourceculture

AI Is a Mirror of Our Engineering Culture

A blog post arguing that AI didn't create the software quality crisis — it held up a mirror. Trained on 518M GitHub repos (mostly mediocre), AI reproduces the most probable patterns: technical debt, copy-paste, vague specs. AI-generated code entering codebases triggers recursive data collapse.
aisoftware-engineeringblogopinion

Addio Carola

Guerre di Rete reports the passing of Carola Frediani on June 3, 2026, soul and driving force of the publication, leaving an immeasurable void among all who knew her.
cultureitalian

acme.sh

A pure ISO shell script implementing the ACME protocol — a lightweight, pure-shell alternative to Certbot for obtaining SSL/TLS certificates from Let's Encrypt.
toolsdevopsopen-source
2026-05-28

israeli-alloc

Rust library that allocates memory on a random victim program's address space — a research tool and political statement.
toolsopen-source

I'm tired of talking to AI

After finding AI-generated answers repeated across GitHub discussions, a forwarded ChatGPT screenshot from a boss, and replying to what turned out to be an AI agent — the author's plea to talk to real people again.
aiblogopinion

ClusterControl Getting Started

Documentation for ClusterControl, an all-in-one database management platform for deploying, monitoring, and automating high-availability clusters across MySQL, PostgreSQL, MongoDB, Redis, and more.
devopstools

Claude Opus 4.8 announced

Anthropic releases Claude Opus 4.8 with sharper judgment, more honesty about its own progress, and the ability to work independently for longer than its predecessors, available today at the same price.
ainews
2026-05-22
2026-05-19

Peter Salus — Author of "Quarter Century of Unix"

Computing historian and Unix chronicler who died May 15, 2026. Author of "Quarter Century of Unix" (1995), considered required reading for Unix history students. Also wrote "Death, Life, and Computers in the 20th Century" and "The UNIX Operating System: A Comprehensive Guide". Remembered for documenting the people and culture behind Unix's development
culturecurated-list

Mini Shai-Hulud Strikes Again — 317 npm Packages Compromised

npm account `atool` compromised May 19, 2026: 637 malicious versions across 317 packages in 22-minute burst. 498KB obfuscated Bun payload with same scanner architecture as SAP compromise. 10 persistence mechanisms: preinstall hooks, GitHub imposter commits in antvis/G2, CI/CD workflow injection, Claude Code SessionStart hooks, VS Code folderOpen tasks, systemd/LaunchAgent dead-drop C2 (RSA-PSS signed commands via GitHub commit search), Docker container escape, npm OIDC token exchange, Sigstore signing. Exfiltration via GitHub API with Dune-themed repo names. 317 packages affected including size-sensor (4.2M dl/mo), echarts-for-react (3.8M), @antv/scale (2.2M)
securityopen-source

hsrs — Type-Safe Haskell Rust Bindings

Rust crate generating type-safe FFI bindings between Rust and Haskell. Annotate Rust types/functions with proc macros (#[hsrs::data_type], #[hsrs::function], etc.), run codegen to produce idiomatic Haskell with ForeignPtr memory management and Borsh serialization. Supports Result→Either, Option→Maybe, Vec→[], String→Text. MIT/Apache-2.0, 21 stars
open-sourcetools

The Last Six Months in LLMs in Five Minutes — Simon Willison

PyCon US 2026 lightning talk covering the "November 2025 inflection point." Model rankings changed hands 5x between Anthropic/OpenAI/Google. Coding agents crossed into production quality. OpenClaw personal AI assistant trend. Gemma 4, GLM-5.1 (1.5TB open weight), Qwen3.6-35B-A3B (runs on laptop). Two themes: coding agents got really good, local models wildly outperform expectations
aicurated-list

2b2t 1m² World Download — 24 TB of Minecraft History

Largest Minecraft world download ever — 1,024,000² Overworld (512k² + 1m²), 256k² End, 100k² Nether. ~24 TB total. Custom zvcr file format, PlaceProxy, BMProxy bots, elytra autopilot. Took 1.5 years development, $3000+ in priority queue costs. CC0 licensed, 121 stars. No AI used. Includes 2b2t Wayback Machine and map viewer at 2b2t.place
cultureopen-source
2026-05-18

LLMs + Vulnerability-Lookup — CIRCL's AI Experiment for Vulnerability Management

CIRCL (Luxembourg) explores LLMs for vulnerability management using 450k rows from Vulnerability-Lookup's million-record dataset. Trained distilbert-based severity classifier and GPT-2 description generator. Daily auto-updating models on Hugging Face, VulnTrain framework, CVSS mapping. Plans: CPE guessing, product/category classification, CWE/ATT&CK tagging, exploitability estimation
aiopen-source

Which Programming Languages Are Most Token-Efficient?

Analysis of 19 languages using RosettaCode dataset and GPT-4 tokenizer — dynamic languages most efficient (no type declarations), Haskell/F# surprisingly compact via type inference, C least efficient. 2.6x gap between C and Clojure. J (ASCII array language) dominates at 70 tokens avg vs C at 182. Token efficiency could become a factor in language selection for LLM coding agents
aisoftware-engineering

ssh-keysign-pwn — Steal SSH Host Keys and /etc/shadow via ptrace mm-NULL Bypass

Exploits __ptrace_may_access() skipping dumpable check when task->mm == NULL — do_exit() runs exit_mm() before exit_files(), leaving fds open in a race window. pidfd_getfd(2) succeeds when caller uid matches target. CVE-2026-46333. ssh-keysign opens host keys (0600) before permanently_set_uid() with same bug shape since 2002. Fixed by Linus 2026-05-14 (pre-31e62c2ebbfd). Jann Horn flagged in Oct 2020 — six years. 568 stars
securityopen-source

Six SQL Patterns to Catch Transaction Fraud

Practical fraud detection using SQL — velocity checks, impossible travel (haversine >600mph), amount anomalies ($99.50-$100 ID thresholds, round card tests), suspicious merchants (spike ratio vs 7-day baseline), off-hours spending, and window-function primitives for composable fraud rules. Works for credit cards, healthcare claims, e-commerce, benefits programs
software-engineeringtools

PSOS — The Foundations of a Provably Secure Operating System (1979)

Richard Feiertag & Peter Neumann (SRI International). PSOS designed with formal techniques (HDM) — formally stated requirements, formal specifications for each module, formal proofs that specifications satisfy requirements and programs are consistent. Capabilities as protection mechanism for all objects, hierarchical development, SPECIfication and Assertion Language (SPECIAL)
systemsopen-source

MiniPlasma — CVE-2020-17103 Still Unpatched in cldflt.sys

Weaponized PoC for LPE in cldflt.sys exploiting cldflt!HsmOsBlockPlaceholderAccess — same vulnerability Google Project Zero reported as CVE-2020-17106 six years ago. Original Project Zero PoC works unchanged. All Windows versions affected. Race condition exploitation spawning SYSTEM shell. MIT licensed, 435 stars
securityopen-source

GCVE — Global CVE Allocation System

New decentralized approach to vulnerability identification and numbering (announced April 2025). Introduces GCVE Numbering Authorities (GNAs) that allocate identifiers without centralized block distribution. Compatible with traditional CVE system. Includes BCP series (vulnerability format, decentralized publication, KEV assertion, CPE improvements), db.gcve.eu public advisory database, and Vulnerability-Lookup 4.0
open-sourcesecurity

European Digital Sovereignty — A Test of Courage

Wired Italia analysis of EU digital sovereignty strategy: US Cloud Act pressure, AWS/Azure/GCP control 70-80% of European cloud, Italy's Polo Strategico Nazionale hybrid model, FSF's "public money = public code" stance, CSI Piemonte's Nivola OpenStack cloud serving 400+ entities, Scaleway winning EU sovereign cloud tender. Open source as prerequisite for true sovereignty
culturecurated-list

Dorym Small — 10B Parameter LLM Trained on CINECA's Leonardo Supercomputer

Milan-based Domyn releases Dorym Small (10B params), smaller version of Dorym Large (260B). Trained on CINECA's Leonardo HPC (EuroHPC framework), supports 50 languages including Italian. Beats Ministral-3-8B, Llama-3.1-Nemotron-Nano-8B, OLMo-3-7B-Think on some benchmarks. Designed for edge/on-premise deployment, part of IT4LIA AI Factory European sovereign AI initiative
aiopen-source

DOGMA 25 — Filmmaking Movement Founded in Copenhagen 2025

Collective preserving originality of cinema, standing against algorithmic films and ultra-processed consumer goods. "The Vow of Chastity" — 10 rules: handwritten scripts, 50% no dialogue, internet off limits in creative process, max 10 people behind camera, no make-up, everything rented/borrowed/used, one production year, shot where narrative takes place, fund with no content altering conditions, make film as if it were your last
cultureopen-source

CVE-2026-7270 — How to Get Root on FreeBSD with a Shell Script

AI-assisted kernel bug hunt finding a 13-year-old memmove off-by-one in kern_exec.c (present since 2013). Wrong size: endp - begin_argv + consume instead of - consume, causing 2024-byte OOB into adjacent exec_map entry. Exploit: race-condition LD_PRELOAD injection via sshd-session execve, 4 concurrent components (preseed, SSH poker, trigger pinned to CPU0, checker). Gets root in ~6s on stock FreeBSD. Full PoC at github.com/califio/publications
securityopen-source

CVE-2026-45185 — Single Byte Write RCE in Exim Mail Server

Critical unauthenticated remote code execution in Exim (Debian/Ubuntu) via TLS/GnuTLS connection handling. During TLS session termination, a single byte (0x0a or 0x0d) is written to freed memory via nested BDAT handler calling ungetc(). XBOW discovered the bug; AI (XBOW Native) produced working exploit chains with and without ASLR/PIE
securityopen-source

Croce — Storicismo e Antistoricismo

Treccani encyclopedia essay by Fulvio Tessitore tracing Benedetto Croce's philosophical evolution from anti-Hegelian through his 1909 Logica to 1939's "storicismo assoluto." Covers Croce's identity of history/philosophy, opposition to Heidegger and Spengler, the "religion of freedom," and late turn to "vitalità" as foundation of his philosophy — his historicism as precise opposite of Hegelian historicism
culturecurated-list

ClickHouse Query Plan Contention — Cloudflare Billing Pipeline

Cloudflare's petabyte-scale ClickHouse billing pipeline slowed after migrating from (day) to (namespace, day) partitioning. Hidden bottleneck: 45% CPU + 50% wall-clock spent waiting on MergeTreeData mutex. Three upstream patches: shared lock instead of exclusive, deferred vector copy via read-through cache, binary search on sorted namespace key. Stable at 160k parts/replica. PR #85535 merged in ClickHouse 25.11
software-engineeringtools

The C10K Problem — Dan Kegel

Landmark 1999 essay arguing web servers should handle 10,000 simultaneous clients. Covers I/O strategies: select/poll, /dev/poll, kqueue, epoll, async I/O, threading models (1:1 vs M:N), zero-copy networking, and userspace TCP stacks. Spawned decades of research into scalable server architecture
open-sourcesoftware-engineering

Brotli — Google's Lossless Compression Algorithm

General-purpose lossless compression algorithm developed by Google, designed as a replacement for DEFLATE with better compression ratios. Uses a modified LZ77, Huffman coding, and second-order context modeling. Adopted by nginx, Apache, Cloudflare, and the web ecosystem. Produces .br files. Open source under MIT license
open-sourcetools

Bitwarden Removes 'Always Free' Plan from Website

Open-source password manager Bitwarden has removed the 'Always Free' plan from its pricing page, though the plan still exists for existing users. Raises questions about Bitwarden's freemium strategy and whether the company is shifting toward paid-only growth. The vault remains open-source (AGPL) and self-hostable
securityopen-source

auto-identity-remove — Automated Data Broker Opt-Out Runner

macOS tool that removes your personal info from 500+ people-search sites on a monthly schedule using Playwright, CapSolver for CAPTCHAs, launchd scheduling, and iMessage notifications. Handles 30+ brokers natively plus 470+ generic ones via public datasets — covers Acxiom, LexisNexis, ZoomInfo, Clearbit gaps left by paid services like Incogni
open-sourcetoolssecurity
2026-05-15

sx — Package Manager for AI Coding Assistants

Team vault for AI assets (skills, MCP configs, commands, agents, rules, hooks). Scoped installation per org/repo/team/user/bot. Works with Claude Code, Cursor, GitHub Copilot, Gemini, Codex, Kiro. Manifest-and-lock pattern like npm/cargo. Cloud relay for claude.ai/chatgpt.com
toolsaiopen-source

Welcome to the Strip Mining Era of Open Source Security

Metabase reports 10x increase in vulnerability submissions — from 10/month to 10/week — driven by LLM-powered bulk code scanning. OSS maintainers now in reactive mode: any finding is trivially discoverable, expect layer after layer of vulnerabilities uncovered, and consider that Cal.com is going closed source as a result
securitynewsai

A 0-Click Exploit Chain for the Pixel 10 — Project Zero

Project Zero demonstrates 0-click root on Pixel 10 via Dolby CVE-2025-54957 + VPU driver bug. The VPU driver exposes Chips&Media Wave677DV hardware directly to userspace; a flawed mmap handler maps arbitrary physical memory into userland, enabling arbitrary kernel read-write with 5 lines of code
securitynews

Mullvad Exit IPs as a Fingerprinting Vector

Analysis reveals Mullvad deterministically assigns exit IPs based on WireGuard key using seed-based RNG. A seed-based RNG with static bounds causes neighboring IPs across servers, limiting combinations to ~284. Five server IPs can deanonymize a user to >99% accuracy
securityweb-dev

Designing an FPGA Calculator from Scratch — 10-Chapter Series

Scientific BCD calculator with custom CPU on Altera Cyclone II FPGA. 10-chapter series covering numerical algorithms (CORDIC, logarithms), 12-bit instruction set, Harvard memory model, microcode, Python assembler, Qt desktop prototype, and physical board with 3D-printed enclosure. Perfect decimal accuracy, no floating-point errors
systemsopen-source

A Few Words on DS4 — DwarfStar 4 by Antirez

Antirez on DwarfStar 4 (DS4), a single-model local AI integration built in one week. Uses DeepSeek v4 Flash with 2/8-bit asymmetric quantization — 96-128GB RAM enough. First time a local model is usable for serious work vs Claude/GPT. Plans: coding agents, distributed inference, model-agnostic architecture
aiopen-source
2026-05-14

YellowKey Zero-Day Exploit

Microsoft BitLocker zero-day: YellowKey exploit allows opening protected drives by copying specific files from a USB stick. Demonstrates an apparent backdoor in BitLocker's authentication mechanism
securitynews

Nibble

Nibble — C-like systems programming language written in 3000 lines of C. Demonstrates LLVM IR generation without malloc or external dependencies. Supports defer, recursion, structs, pointers, type checking, GLSL-like operators
software-engineeringsystems

Fragnesia — Linux LPE via ESP/XFRM

Universal Linux local privilege escalation exploit discovered by V12 Security. Abuses logic bug in ESP-in-TCP ULP to write arbitrary bytes into kernel page cache of read-only files. One-line exploit, affects all dirtyfrag kernels before May 13 2026 patch
securitysystems

Boneyard

Auto-generated skeleton loading framework — pixel-perfect placeholders extracted from real UI. Works with React, Preact, Vue, Svelte 5, Angular, React Native. CLI captures layout at breakpoints, generates .bones.json
web-devtools

AI Arena Model ELO History

Exposes hidden nerfing, censorship, and quantization over time by tracking the true lifecycle of flagship AI models. Data from LM Arena Leaderboard Dataset on Hugging Face, automatically fetched daily
aiopinion
2026-05-13
2026-05-12

The Foreman

Open-source lifecycle management platform for physical and virtual servers. Provisioning, configuration management, monitoring. Puppet, Ansible, Salt, Chef integration. REST API, plugins, web UI
devopssystems

Postmortem: TanStack npm supply-chain compromise

Comprehensive incident postmortem on the June 11, 2026 compromise of @tanstack/* packages. Attack used pull_request_target pattern, GitHub Actions cache poisoning, and OIDC token extraction. 84 malicious versions, 2.3MB obfuscated router_init.js, self-propagating malware, credential harvesting from AWS/GCP/K8s/Vault/GitHub/SSH
securitydevopssupply-chain

Semaphore UI

Semaphore UI — modern UI and API for Ansible, Terraform, OpenTofu, Bash, PowerShell. Pure Go, Docker/K8s support, MySQL/Postgres/SQLite. RBAC, HA, runners, 13K+ GitHub stars
devopstools

rustinel

Rust implementation of INI file parser and validator. Zero dependencies, no unsafe code, no unsafe Rust. Supports INI4 and INI5 formats, includes CLI tool for validation, streaming parsing, error recovery, comments and whitespace handling, documentation and examples
software-engineeringdevops

Puppet Labs

Puppet Labs — configuration management, automation, and infrastructure-as-code. Puppet Enterprise, Open Source, R10k, Hiera, Facter, PuppetDB, Bolt. Ruby-based DSL, declarative approach to system administration
devopstools

pgrwl

Cloud-native continuous backup for PostgreSQL in a single binary — WAL streaming, scheduled base backups, optional S3/SFTP storage backend, compression, encryption, retention, restore command. Implements streaming replication protocol directly, no external schedulers or extra services
devopssystems

osquery

osquery — SQL-powered operating system instrumentation, monitoring, and analytics. Facebook OSS. Query Linux, macOS, Windows processes, files, network, registry. Fleet, Osqueryd, Osqueryctl, REST API, PKG/DEB/RPM packages
devopssecurity

osctrl

osctrl — management server for osquery. Centralized configuration, tags, environments, and live queries. Go-based, Docker support, PostgreSQL/MySQL, web dashboard for endpoint management and monitoring
devopssecurity

OpenVox

OpenVox — Puppet module framework by VoxPupuli. Simplifies module development, testing, and publishing. Supports Puppet 4+, structured data, Hiera integration, CI/CD pipelines, community-driven
devopstools

NetDisco

Network device discovery, port scanner, and mapping tool for IP, MAC, and VLAN tracking. Lightweight, agentless, no downtime, no custom database. Written in Perl with modern tools (nmap, scapy). Supports Junos, NCM, OpenWRT, and more
networkdevopssecurity

Kurier

Kurier — end-to-end encrypted messaging app with self-destructing messages. Open source, cross-platform, open protocol, self-hostable, metadata harvesting resistant. Written in Rust, uses X25519, AEAD encryption, and the libsignal protocol
devops

Just Fucking Use Go

Blaine Smith's satirical manifesto on using Go — boring by design, standard library is deep, goroutines for concurrency, no build step, deployment is a copy command, monoliths are fine, generics (1.18+), no try/catch hellscape, CC-BY-SA / GPL
opinionsoftware-engineering

Fleet

Fleet — lightweight VM management. Run Linux and Windows on bare metal, VMs, cloud, edge. Fleetctl CLI, REST API, Terraform provider. Containerized, PostgreSQL, no external dependencies
devopstools

example42

Open-source configuration management, monitoring, and automation tools. Puppet, Ansible, SaltStack modules. Monitoring (Munin, Prometheus), log management, IT automation. Core42, UAA, Smart42 products
devopssystems

Crossplane

Open-source Kubernetes control plane for building, publishing and using APIs. Use your own API providers, extend to match your infrastructure, CRDs, no vendor lock-in
devopssystems

Crafty

Crafty — configuration management tool by VoxPupuli. Puppet-based, declarative infrastructure, module-driven, CLI and API. Simplifies Puppet module development and deployment
devopstools

chezmoi

chezmoi — manage your dotfiles, directories, and files securely. Git-backed, encrypted, cross-platform. CLI tool for version control and synchronization of your development environment
devopstools

Chef Infra

Chef Infra — configuration management platform for automating cloud infrastructure. Policy-driven, idempotent, Ruby-based DSL. Chef Infra Server, Workstation, InSpec for compliance, Chef Automate for analytics
devopstoolssystems

Capistrano

Capistrano — remote server automation and deployment tool. Ruby-based, SSH-driven, multi-stage deployments, rollback, hooks, scripting. Originally for Ruby/Rails, now supports any language/framework
devopstools
2026-05-11

taken. — Since You Arrived Vol. IV

"taken." — the page that knows your location, browser APIs, font fingerprinting, screen size, GPU, language, timezone, OS, browser, color depth. Created by Matt at sinceyouarrived.world. Vol. IV in the series, zooming in from global to city to coordinates to you
cultureopinion

llama-swap

Go-based local model swapping for OpenAI/Anthropic compatible servers — llama.cpp, vllm, stable-diffusion.cpp. Web UI, model hot-swapping, Docker/WinGet/Homebrew install, OpenAI/Anthropic API endpoints
aitoolsopen-source

Hunk

Review-first terminal diff viewer for agent-authored changesets — multi-file review stream, inline AI/agent annotations, split/stack/responsive auto layouts, watch mode, integrates with Git/Jujtuu. Built on OpenTUI and Pierre diffs, MIT license
toolsopen-sourcesoftware-engineering

From dusk till dawn 2026

Quals CTF — team-based jeopardy-style CTF happening May 9-10, 2026, with pwn, rev, web, crypto, and miscellaneous challenges, dynamic scoring, no team limits. Flag format DAJEROMA{{l33t}}
eventssecurity

Decepticon

PurpleAILAB's Decepticon — the open-source platform for building and deploying AI agents. Features agent orchestration, multi-modal capabilities, evaluation and monitoring tools, deployment to various platforms including AWS Bedrock, Anthropic, OpenAI, and more
aiopen-sourcetools

CLR

Checker for Lifetimes and other Refinement types for Zig. Transpiles AIR to Zig source performing static compile-time analysis — checks use-before-assign, use-after-free, double-free, stack pointer escapes, non-nullness assertions, tagged union violations, fieldParentPtr misuse. MIT license
systemsdevopssecurity

Beatrix Potter

English writer and illustrator (1866-1943), best known for her children's books featuring animals like Peter Rabbit, The Tale of Jemima Puddle-Duck, The Tale of Tom Kitten. Sold 250M+ copies, pioneer of character merchandising, naturalist, mycologist, conservationist, National Trust donor
culturehistory
2026-05-08

oh-my-openagent v4.0.0 — Team Mode

Major release introducing Team Mode — multiple agents coordinating in parallel via tmux visualization, hyperplan skill (5 hostile agents), security-research skill (3 vuln hunters + 2 PoC engineers), model-specific prompts for GPT-5.2/5.3, hierarchical config discovery, 48k stars
aitoolsopen-source

BSides Luxembourg 2026

Community-driven, non-profit cybersecurity conference in Luxembourg, May 6–8 in Belval. Part of the global Security BSides network — hands-on workshops, technical talks, red and blue team networking
eventssecurity
2026-05-07

Ribs — Soviet Music on Bone

Illicit gramophone discs made from discarded X-ray films in the USSR (1950s–60s), a black market method of distributing banned music — Elvis, Beatles, Rolling Stones pressed at 78rpm on medical X-rays, playable only 5-10 times
culturehistoryaudio

Kubernetes The Hard Way

Kelsey Hightower's classic tutorial for bootstrapping Kubernetes manually — no scripts, no automation. Learn etcd, control plane, worker nodes, TLS certs, and pod networking by walking the long route
devopstoolseducation
2026-05-05

The Story of Mel — A Real Programmer

The legendary hacker folklore tale by Ed Nather (1983) about Mel, a programmer who wrote machine code for drum-memory computers — self-modifying code, the 'most pessimum', and a loop with no test
cultureblog

Real Programmers Don't Use PASCAL

The classic Ed Post satire from DATAMATION July 1983 — Real Programmers use FORTRAN and OS/370, write self-modifying code, patch object binaries with SUPERZAP, and despise structured programming, PASCAL, and anything with semicolons
cultureblog

ratman-tui — A TUI REST Client

ratman-tui is a keyboard-driven, vim-modal REST client built with ratatui+crossterm — boots in <100ms, local forever, no accounts, no SaaS, no Chromium. Import from Postman, tree-shaped collections, 5 panes. `cargo install ratman-tui`
toolsopen-source
2026-05-04

Where the Goblins Came From

OpenAI's retrospective on the early days of training GPT — how "goblins" (tiny mischievous models) evolved into powerful AI through iterative experimentation and emergent capabilities
aiblog

Teemii

Open-source web application — a minimal, clean, and fast platform for managing and sharing links, bookmarks, and notes with a beautiful interface
web-devopen-source

NetHack 5.0 Release

NetHack 5.0 — the first major version upgrade in decades of the classic roguelike, with improved UI, QoL features, and new content while keeping the beloved permadeath gameplay
open-sourceblog

Lemonade Server

Open-source local LLM server — a lightweight, fast, and easy-to-use API server for running AI models locally with streaming and chat completion support
aitools

Ghostty Leaving GitHub

Mitchell Hashimoto announces that the Ghostty terminal emulator is leaving GitHub — discussing the reasons behind the migration and what it means for the project's future
open-sourcedevopsnews

AMD GAIA 0.17.5

AMD's open-source local AI framework releases 0.17.5 with Gemma 4 E4B as new default model, native OpenAI tool_calls support, and Chat Lite agent for resource-constrained systems
aiopen-source

AMD Gaia

Generative AI Is Awesome — AMD's open-source local AI agent framework for Windows and Linux using the Lemonade SDK to run AI agents across AMD CPUs, GPUs, and NPUs
aiopen-source

Alchemy

Open-source AI agent framework for building and running multi-agent systems with dynamic communication, shared memory, and pluggable tools
aiopen-source

AI Coding Agents

Overview of AI coding agents — from early code completion tools to autonomous agents that can plan, write, debug, and deploy code across entire projects
aitools
2026-04-30
2026-04-29
2026-04-28
2026-04-27

Il ritorno in Terrasanta

Il racconto dell'attentato all'aeroporto di Lod del 1972 e della morte di Aaron Katchalsky-Katzir, biofisico israeliano e pioniere dell'auto-organizzazione dei sistemi chimici.
blogitalianculture
2026-04-24
2026-04-23
2026-04-22

ApiPosture

ApiPosture is an open-source project focused on API posture and security assessment, helping teams evaluate exposed endpoints and improve their API attack surface management.
securitytoolsopen-source
2026-04-21

Kimi K2.6

Kimi announces Kimi K2.6, an open-source model focused on coding, long-horizon execution, and agent swarm workflows.
aimodelsopen-source

infra-ansible

infra-ansible is an Ansible repository for provisioning and automating infrastructure components such as DNS, DHCP, OpenStack, storage, bastions, and identity-managed hosts.
devopstoolsopen-source
2026-04-20

rvLLM

rvLLM is a high-performance LLM inference engine in Rust, with TPU and GPU backends, benchmark-heavy optimization work, and a drop-in vLLM replacement goal.
aitoolsopen-source

Hyperframes

Hyperframes is an open-source HTML-native video rendering framework built for agents, with deterministic rendering, browser preview, and MP4 output.
toolsopen-sourceweb-dev

HY-World 2.0

HY-World 2.0 is a multimodal world model for reconstructing, generating, and simulating 3D worlds, with open-source code and models for world reconstruction.
aimodelsopen-source
2026-04-17
2026-04-16

The Paleblood Hunt

A Bloodborne lore analysis by Redgrave about mystery, interpretation, and the limits of singular explanations in the game’s story.
cultureblog

grove

Grove is a distributed ML training tool for MacBooks that discovers nearby peers automatically and synchronizes training across devices with minimal setup.
aitoolsopen-source

Algoritmo Doomsday

Wikipedia article in Italian about John Conway’s Doomsday algorithm for calculating the day of the week for any date, with mnemonic shortcuts and worked examples.
educationblogculture

Alzheimer's Buddy

A web demo for 40 Hz light and sound therapy for Alzheimer's research, with references to studies on sensory stimulation and cognitive impairment.
healthsciencetools
2026-04-15

Aegisub

Aegisub is a free, cross-platform open source subtitle editor for timing and styling subtitles with audio and real-time video preview.
toolsopen-source
2026-04-14

PAmatch

PAmatch is a platform for public administration mobility, helping employees find compatible matches, browse mobility notices, and manage transfers.
public-admintoolsnews

OpenSnitch

OpenSnitch is a GNU/Linux application firewall for monitoring and controlling outbound connections, with GUI-based nftables configuration and centralized management.
securitynetworkopen-sourcetools

Magika

Google’s AI-powered file type detection tool, with fast on-device inference and bindings for multiple languages.
toolsopen-sourceai
2026-04-13

The Whispering Earring

A short piece of fiction about an earring that always gives better advice than its wearer can come up with, and the unsettling consequences of following it.
cultureblog

SplitBody muscle stimulation

LaurieWired discusses the SplitBody paper, where electrical stimulation moves the arm to reduce cognitive load during multitasking, and reflects on possible uses for training and performance.
systemssocial-media
2026-04-10

CoLaptop

Satirical colocation service that turns an old laptop into an always-online datacenter server for €7/month.
toolsblogopinion

Charcuterie

A browser-based visual explorer for Unicode that renders glyphs with SigLIP 2 to discover related characters and scripts.
toolsweb-dev
2026-04-09
2026-04-08

17776

Wikipedia article about the science-fiction web series 17776 (also known as “What Football Will Look Like in the Future”), blending speculative fiction, sports, and digital storytelling.
cultureblog
2026-04-07

Felicitas Pojtinger on Mastodon

Mastodon post by Felicitas Pojtinger arguing that the German EUDI Wallet’s reliance on Apple or Google accounts for mobile device attestation could exclude citizens, increase dependence on US platforms, and leave sanctioned users unable to access essential digital identity functions.
social-mediaopinionpublic-admin

EUDI wallet issue #2

Discussion about Android app attestation requirements for the German EUDI Wallet, including Play Integrity, key attestation, GrapheneOS compatibility, platform independence, and the trade-offs of relying on Google or Apple services for LoA high.
public-adminsoftware-engineeringopinion

Caveman

Claude Code skill/plugin and Codex plugin that makes the agent talk like caveman, cutting output tokens while preserving technical accuracy; includes a companion tool to compress memory files and reduce input tokens.
open-sourcetoolssoftware-engineering

AutoResearchClaw

Autonomous, collaborative, self-evolving research pipeline that turns a topic into a paper with literature search, sandbox experiments, peer review, LaTeX export, and optional human-in-the-loop co-pilot modes.
aitoolsopen-source
2026-04-03
2026-04-02

aquasecurity/trivy

Trivy — open-source vulnerability and misconfiguration scanner for containers, IaC, repositories and runtime environments. Repository with code, documentation, and integrations for CI/CD security scanning.
securitydevopstoolsopen-source
2026-04-01

three.wasm

Repository with WebAssembly experiments and bindings for Three.js — enables high-performance 3D rendering and integrations using wasm in the browser, with examples and tooling for developers.
web-devopen-source

Introducing Mercury 2

InceptionLabs announces Mercury 2 — a new generation model focused on improved reasoning, multimodal capabilities, and efficiency for production deployments. Blog post with technical highlights and links to model cards and docs.
aimodelsnews
2026-03-31
2026-03-30

PHOBOS — VANTA OS (mystyy01/PHOBOS)

PHOBOS (VANTA OS) is a small, hobbyist bare‑metal operating system project: custom bootloader and kernel written from scratch (C + assembly), kernel modules in a homegrown language, and minimal tooling for x86/x64 targets. Good reference for low‑level OS experimentation and teaching.
systemsopen-source

MyRetroTVs

MyRetroTVs — a nostalgic hub for classic television: program guides, archived clips, scans and community-curated retrospectives. The site is a modern, JavaScript‑heavy web app (enable JS to view).
web-devcultureblog
2026-03-26
2026-03-25
2026-03-24
2026-03-23

P.U.C.S.

Portale P.U.C.S. (Portale Unico del Cittadino Sardo), piattaforma digitale per servizi e interazioni con la pubblica amministrazione.
public-adminblogitalian

OpenBrand

OpenBrand extracts brand assets from a website, including logos, colors, and images, with options for API access, agent integrations, self-hosting, and MCP.
web-devopen-sourceblog

dineug/erd-editor

Open-source Entity-Relationship Diagram Editor with PWA offline support, real-time collaboration, end-to-end encryption, and local-first autosave.
systemsopen-source
2026-03-20

Xiaomi MiMo-V2-Pro

Xiaomi announces MiMo-V2-Pro, a trillion-parameter flagship model for agentic workloads with 1M context, strong coding performance, and public API availability.
ainews
2026-03-19

What 81,000 people want from AI

Last December, tens of thousands of Claude users around the world had a conversation with Anthropic's AI interviewer to share how they use AI, what they dream it could make possible, and what they fear it might do.
ainews
2026-03-18
2026-03-17

NVIDIA Announces DLSS 5

NVIDIA's DLSS 5 introduces an AI-powered breakthrough in visual fidelity for games, infusing pixels with photorealistic lighting and materials.
ainews
2026-03-16

Ranger by Parallai

An interactive transit travel-time map. Explore public transit coverage from any point in your city.
aiblog

OpenBrand

An open-source AI-powered tool for generating and managing brand identities, helping teams create consistent brand guidelines, logos, and visual assets.
aiopen-sourceblog

Understanding JPEG

A detailed walkthrough of how JPEG compression works under the hood, covering discrete cosine transforms, quantization, and Huffman encoding to explain how images get compressed.
software-engineeringblog

Cisco ExaNIC Software

Drivers, utilities and development libraries for Exablaze ultra-low-latency network cards (ExaNIC X25, ExaNIC X100, ExaNIC X10, ExaNIC X40, ExaNIC X2, ExaNIC X4, ExaNIC V5P, ExaNIC V9P, ExaNIC GM, and ExaNIC HPT).
systemsopen-source

Color Guesser

A web-based game where players try to guess colors based on their hex codes, RGB values, or other color representations, testing and improving color perception skills.
web-devblog
2026-03-13

Feather.js

A blog post covering Feather.js, a lightweight open-source web framework for building real-time applications and REST APIs with a simple, service-oriented architecture.
web-devopen-sourceblog
2026-03-12
2026-03-11

gpg.fail

A curated collection of reasons why GPG/PGP is considered broken and unreliable for secure communication — covering UX failures, cryptographic weaknesses, key distribution problems, and why modern alternatives are preferred.
securitycurated-listopinion
2026-03-10

T3 Code

Minimal web GUI and desktop app for coding agents — currently Codex-first, with Claude Code support on the way.
aiopen-source

Le Voci del Domani 2026

Call for ideas del Festival dell'Economia di Trento 2026 — giovani tra i 18 e i 30 anni possono candidarsi come speaker sul tema "Dai mercati ai nuovi poteri. Le speranze dei giovani". Scadenza 8 aprile 2026.
public-adminblogitalian

Google Workspace CLI (gws)

One CLI for all of Google Workspace — Drive, Gmail, Calendar, Sheets, and more. Dynamically built from Google's own Discovery Service at runtime, with structured JSON output and 100+ bundled AI agent skills.
aidevopstoolsopen-source

DungBeetle

Lightweight distributed job server for queuing and asynchronously executing heavy SQL read jobs — supports MySQL, PostgreSQL, and ClickHouse as sources, writes results to ephemeral result databases, and exposes an HTTP API for job and group management.
devopstoolsopen-source

autoresearch

Karpathy's experiment giving an AI agent a single-GPU LLM training setup and letting it run autonomous overnight research — it modifies code, trains for 5 minutes, checks if the result improved, and repeats.
aiopen-sourceresearch-paper
2026-03-09

PulseMCP

A hub for exploring the Model Context Protocol ecosystem — servers, clients, use cases, tools, and a weekly newsletter covering what's new in MCP.
aimcpcurated-list

Chrome DevTools MCP

MCP server that lets coding agents control and inspect a live Chrome browser for automation, debugging, screenshots, network analysis, and performance tracing.
mcptoolsopen-source

BullshitBench

Benchmark measuring how well LLMs detect nonsense and push back on bullshit questions.
aiblog
2026-03-08

Agents of Chaos

Exploratory red-teaming study of autonomous language-model-powered agents in a live lab environment, documenting failures like unauthorized actions, sensitive data disclosure, destructive behavior, spoofing, and partial system takeover.
aisecurityoffensive-securityresearch-paper
2026-03-06

FireRedVAD

Lightweight voice activity detection model from FireRedTeam, optimized for real-time audio stream processing.
open-sourceaudio
2026-03-05

nCPU

A neural network implemented as a CPU architecture — neurons as registers, synapses as instructions.
aisystemsopen-source
2026-03-04