Rebasing With Git
Deep dive into engineering primitives, architecture, and production workflows.
Neural command terminal for distributed systems, low-level tooling & cryptography.
Your daily dose of tech tutorial, machine learning and crypto. Bite-sized architectural breakdowns, pristine commits, and sovereign bare-metal engineering.
Deep dive into engineering primitives, architecture, and production workflows.
llama.cpp and ggml both shipped v1.0.0 on November 13 with a published semver table, and the first major version was spent deleting 35 deprecated functions. The promise covers libllama and libggml, not llama-server, and that distinction is the whole story.
Rust 1.100 stabilized the never type after ten years and five failed attempts. The change I actually turned on is a Cargo line that ignores any crate version younger than I tell it to, and the 86 minutes arrayref spent on crates.io is the argument for it.
llama.cpp and ggml both shipped v1.0.0 on November 13 with a published semver table, and the first major version was spent deleting 35 deprecated functions. The promise covers libllama and libggml, not llama-server, and that distinction is the whole story.
Rust 1.100 stabilized the never type after ten years and five failed attempts. The change I actually turned on is a Cargo line that ignores any crate version younger than I tell it to, and the 86 minutes arrayref spent on crates.io is the argument for it.
CVE-2026-119618 is a 9.8 race in mod_http2, fixed in httpd 2.4.71. The standalone mod_h2 repo was archived in June and never got a 2.0.43, so two vendors printed remediation advice that points at a version nobody can download.
Seven months into Project Glasswing, Anthropic's ledger shows 37,966 findings against 217 fixes. The discovery side got cheap and the validation side never moved, so the bill landed on volunteer maintainers, and curl rewrote its disclosure rules to survive it.
Fireworks AI's bulletins clear its zero data retention products and list what was actually accessed: datasets, incomplete models, secrets and billing. Those are the two different planes, and only one of them was designed not to keep anything.
Since November 5, Outlook.com has bounced mail from domains without a DMARC record with an NDR that blames SPF, DKIM and DMARC. Microsoft now calls it a service degradation, which means the error text was never a diagnosis.
Apiiro found 1,122 public copies of .claude/settings.local.json holding real secrets. The control meant to keep the file private lives in one developer's global git config, so it protects everything except the case that leaks.
The PwnEscape follow-up turns a 32-byte host memory leak into a call of the guest's choosing inside Firecracker's own process. The scope dispute is the useful part: the microVM was never the last boundary.