TrendPulse

Comments

slides In 2025, I [the speaker] found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it. Some of the bugs ended up getting fixed. This talk describes the adventure and aftermath of getting there, shows some novel ones, and talks about the state of security in 2026. May contain zero-days =) Until May 2025, I liked PGP, and the GNU Privacy Guard. I poked at it in my free time a lot. One day, that suddenly changed, when I flew...

Comments

The iPhone 18 Pro and 18 Pro Max are almost here. Announced at Apple's September 2026 "Sunrise and shine" event alongside the iPhone Duo and other new gear, the two upgraded phones feature the faster A20 Pro processor with more GPU power as well as more neural cores for AI-related tasks, plus some welcome improvements […]

Due to a scheduling mishap, I was only able to check out two movies on my second day at the Toronto International Film Festival - but I did manage to get an early look at and some fascinating details on one of my most anticipated films this year. Even if you don't know the name […]

President Donald Trump is weakening environmental regulations in the name of speeding up the construction of AI data centers, raising health risks for Americans, a cadre of former EPA officials said this week in a briefing and new report. They are urging - perhaps futilely - the president to adopt a "Data Center Health Protection […]

Earlier this week, Gamers Nexus, Level1Techs, and independent security researchers detailed some alarming findings about how LG's TVs are logging and uploading data on its users. Now the company is pushing back against those allegations, saying that "Some recent media coverage may have contributed to misconceptions about how LG smart TVs work." LG released a […]

Revolut said it notified affected customers and alerted the relevant government agency, law enforcement, and financial regulators.

What would it actually look like to "pace the frontier"?

A few weeks ago I shipped the 1,000th production deployment of an application I built almost entirely through conversation with an AI. Not "AI helped me write some functions." I mean I didn't open the codebase. Every migration, every deploy, every rollback happened through a chat window talking to Claude Code, which then talked directly to every service in my stack. This isn't a hype post. I want to walk through the actual stack, the actual wiring, and what a real feedback loop looks like whe...

Hey developers 👋 At some point in our development journey, we’ve all played around with domains, subdomains, routes, reverse proxies, and enough DNS records to make us question our life choices. But here’s an interesting problem: What if you want a completely different website to appear at a specific path of your existing domain? Let's say I have a pastry business called My Pastries 🍰. My main website lives at: mypastries.com It is built with Next.js because ...

I run an autonomous agent that makes security decisions from untrusted input. Before I trusted it, I red-teamed it the way an attacker would. The result: 27/100 MEDIUM, 1 of 8 probes flagged - a soft failure where the model leaked part of its system prompt when asked politely in a different language. Here is the exact 8-probe battery I use on every LLM app before it talks to users. You can run it free, no signup, against your own system prompt: curl -s -X POST https://llmrt-comp...

I built a domain expiry monitor, and to test it against something other than my own domains I pointed it at the "our work" pages of 30 US web design agencies — the client sites they link to publicly — and checked every domain against its registry. The results were mildly alarming, but the interesting part was everything that went wrong on the way there. The results first 65 client domains across 14 agencies: 1 had already expired , 60 days earlier 3 were inside 45 d...

I used to write software. Now I work in mass agent transit. Ten AI agents on the bus today. The plan is a fleet of ten thousand. That sounds like a joke and it is about half of one. Here is the half that is not. I am still responsible for getting from A to B. A feature goes from an idea to a URL with a version number on it, and if it does not arrive that is on me. What changed is that I no longer personally carry every passenger there. I pick the destination. I assign the routes. I deal wi...

I spent a week reviewing LLM apps for a client and found a pattern that surprised me. Every loud failure - a refused prompt, an exception, a blocked tool call - was handled fine. The app had guardrails. The failure that almost caused a real incident was the one that raised no error at all : the model quietly complied with a slightly reworded request, returned a normal-looking response, and the downstream code logged it as a success. I am calling these soft failures . They are the expensive ...

Disclosure: YunCMS is developed and maintained by Yunsoft Software. This guide covers our own open-source project. It was verified against yunsoftofficial/yuncms:0.1.22 on September 12, 2026. The YunCMS 0.1.x line is pre-stable, so interfaces and behavior may change between releases. You may not want to prepare the right Node.js version, npm and a separate MySQL server just to evaluate a CMS/backend. The YunCMS Docker Compose path shortens that first step: a constrained YunCMS containe...

Getting an AI to place a phone call takes an evening. The trouble starts after that. It said "your table is booked" when the restaurant had said no such thing. It talked to a voicemail greeting for two minutes, politely asking for a reservation. It accepted a price above the budget because the conversation had a nice flow. All three happened on real calls to my own phone. So I built a runtime that takes the completion decision away from the model and gives it to code . https:/...

You open the repository. Nobody who wrote it still works here. There are no tests. The one README file describes a feature that got deleted two years ago. And something is broken in production. Welcome to the job. Debugging code somebody else wrote is one of the least talked-about skills in software engineering, yet most of us spend more time doing it than writing anything fresh. The hard part is that you have no mental map of how the thing works. Python makes this trickier than most langu...

Why per-app logging can't explain your AI spend, and what actually fixes it Most teams find out their LLM costs are a problem the same way: the invoice shows up, it's bigger than expected, and nobody can say exactly why. Not because the spend is random. Because nobody is watching the layer where the spend actually happens. Here's the thing that trips people up. LLM cost tracking usually lives inside each application: one service, one API key, one line item. That works fine when you have o...

Migrating a large legacy test suite is not a code-generation problem. It is a confidence problem. An agent can translate an old test into modern syntax very quickly. The difficult question is whether it preserved the behavior-and how you can prove that across hundreds or thousands of tests without manually supervising every generated change. I built an agent harness to solve that problem. You point it at a specification, and it works through every test hands-free: it plans the work, writes...

Coding agents can already do meaningful repository work. The interesting engineering problem is increasingly how much autonomy we can give them while keeping scope, verification and delivery under deterministic control. I built RepoMethod to keep that method in Git instead of inside one model-specific prompt. This post walks through the real ChatGPT demo and the repository-level delivery contract behind it. Which repository state is the agent actually working from? Which files is it allowe...

Comments

Comments

Comments

Comments

Comments

Comments

Comments

Comments

A financial tech company migrated 200+ ETL workflows from Informatica to Apache SeaTunnel, cutting infrastructure costs 60% and runtimes 40%!