The DuckDB team has released DuckDB 2.0.0 LTS “Cinnamon Teal”, named after a duck as always: the cinnamon teal, a reddish-brown duck from the western Americas. If 1.0 was the stability release, 2.0 is, …
This morning I wrote about what to do with your PHP servers until the patch arrives for PHP2Shell. At 14:00 UTC, as planned, PHP published the fixed versions and the details of both bugs. Time to update, and in my case …
Update: the patches are now available (PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35). The fixed versions, the details of both bugs and the official mitigations are in PHP2Shell: the patch is out. Note: this post was written on …
When you work with geographic data at scale, sooner or later you end up using a global grid: splitting the planet into cells, each with a numeric identifier, and assigning every point, line or polygon to the cells it …
DELETE has a bad reputation in Postgres. Many performance-sensitive systems avoid deleting rows and prefer to empty whole tables with TRUNCATE or drop entire partitions by date. Peter Kraft and Qian Li, from DBOS, have …
Every time a browser sets up an HTTPS connection with an ECDSA signature, it most likely uses the P-256 curve. It’s one of the elliptic curves NIST published in 2000 in the FIPS 186-2 standard, along with P-192, …
Writing a driver for undocumented hardware has always been a job of patience: capturing bus traffic, staring at hex dumps for hours, guessing what each register does and testing the hypotheses one by one, often for …
The Go blog has published Better HTTP/1 connection reuse, a short post explaining a Go 1.27 change that looks small but can make many programs noticeably faster without touching a line. It starts with this function: func …
When we think about software supply-chain attacks, we almost always picture the same thing: someone steals the account of a popular package’s maintainer and publishes a version with malicious code. Trail of Bits …
Yesterday I wrote about a Harvard study showing that AI agents write far more code, but the gain gets lost in review. Today Anthropic published Redesigning source control at Anthropic, which tells the other side of the …
I’ve been working with coding agents every day for months, and there’s a feeling I find hard to explain: I write far more code than before, but I’m not sure the team ships that many more things to …
Two weeks ago I wrote about how Netlify swapped V8 isolates for Firecracker microVMs in its Edge Functions, and I closed by saying microVMs were becoming the default for running third-party code, with Lambda as an …
