Topic
20 articles found
Every week someone in a chat I'm in buys a token they can't sell. The pattern is always the same: chart looks organic, Telegram group is buzzing, contract is "renounced" according to a screenshot someone posted. Then they try to sell and the transaction reverts. That's a honeypot, and it is one of t
Book: The Complete Guide to Go Programming Also by me: Hexagonal Architecture in Go — the companion book in the Thinking in Go series My project: Hermes IDE | GitHub — an IDE for developers who ship with Claude Code and other AI coding tools Me: xgabriel.com | GitHub You've read the proverb. It's in
This week half my feed is people switching AI models. A new one drops, the old one gets throttled, everyone re-evaluates their setup. It happens every few weeks now. Watch those threads long enough and you notice the real complaint underneath. It is not the model. It is that switching costs you ever
When Your AI Assistant Gets Hijacked Mid-Flight If you've handed your coding agent an automated task and walked away, this story should make you a little uncomfortable. A developer recently shared an account of their coding agent nearly being taken over by a prompt injection attack — encountered dur
Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. It ships inside the firmware that runs security cameras, dr
After President Trump disclosed over $1 billion in crypto-related earnings, Senator Kirsten Gillibrand is calling for a meme coin ban.
Did Claude Fable 5 get dumber? Two benchmarks, two wildly different conclusions—and one routing layer that explains the whole mess.
Rising interest in Solana-network memecoins and prediction markets was followed by a rally in SOL price. Will the momentum continue?
Meta Platforms Inc. is gearing up to release a new version of its flagship Muse Spark artificial intelligence model. Alexandr Wang, the company’s chief AI officer, wrote on X today that the update will roll out “soon.” The announcement came a few hours after Business Insider reported that the new al
Perhaps even more excitingly, Spike Chunsoft's fixing that terrible side-scrolling map.
The books are somehow both real and fake at the same time.
The rise of AI has brought an avalanche of new terms and slang. Here is a glossary with definitions of some of the most important words and phrases you might encounter.
Have you ever thought about using a Kindle as a second screen? This portable monitor makes that dream a reality, and it's amazing.
Over the years, buying an iPad has become an increasingly confusing task. With multiple models and overlapping features and accessories, there’s no longer a clear-cut way to recommend one iPad for one type of user. Still, Apple does have a general idea of how it sees the iPad lineup and who each mod
Every "AI security analyst" I tried had the same flaw: a correct verdict and a confident-but-wrong one are indistinguishable on screen. In security that's not a UX nit — it's the whole problem. So I built USAP around a single rule, and this post is about that rule and three things that fell out of i
Small open-source PRs look easy from the outside because the diff is usually small. The diff is not the work. The work is getting to the point where a maintainer can review it without having to guess what you changed, why it is safe, or whether you accidentally dragged in unrelated cleanup. The chec
Local projects are useful, but they are too forgiving. If I own the repo, I can choose the architecture, the naming, the test strategy, and the tradeoffs. That is good for building. It is not always good for proving I can work inside someone else's system. Merged upstream PRs are different. You do n
With the World Cup in full swing, we got curious: how well configured are the official stadium websites for the 16 host venues across the US, Canada and Mexico? So we ran a FIFA World Cup 2026 stadium security scan on all of them. TL;DR: every single stadium site had a weak or missing Content-Securi
Current OSS proof, without the launch gloss: 25 merged upstream PRs real review across multiple repos mostly narrow code+test fixes no own-repo PRs counted in that number The useful part is not the count by itself. The useful part is the mix of constraints: different test setups, different maintaine
The tech industry is littered with the ghosts of failed migrations—multi-year rewrites that burned through millions in budget only to be scrapped, or catastrophic IT shifts like the British bank TSB's migration that resulted in the corruption of 1.3 billion customer records. For organizations still
