April 30, 2025

The Leaderboard Illusion

“We find that undisclosed private testing practices benefit a handful of providers who are able to test multiple variants before public release and retract scores if desired.”

April 29, 2025

Amazon RDS for PostgreSQL 17.4

“We show that Amazon RDS for PostgreSQL multi-AZ clusters violate Snapshot Isolation, the strongest consistency model supported across all endpoints.”

Indian court orders blocking of Proton Mail

“On Tuesday, the Karnataka High Court directed the Indian government to block Proton Mail, a popular email service known for its enhanced security, following a legal complaint filed by New Delhi-based M Moser Design Associates.”

Qwen3: Think Deeper, Act Faster

“While Qwen2.5 was pre-trained on 18 trillion tokens, Qwen3 uses nearly twice that amount, with approximately 36 trillion tokens covering 119 languages and dialects.”

April 28, 2025

April 27, 2025

How a Single Line Of Code Could Brick Your iPhone

“With that widget extension in place, as soon as I installed the VeryEvilNotify app on my security research device, the ‘Restore in Progress’ UI was shown, then failed with a prompt to restart the system.”

April 26, 2025

April 25, 2025

Large Language Models, Small Labor Market Effects

“Using difference-in-differences and employer policies as quasi-experimental variation, we estimate precise zeros: AI chatbots have had no significant impact on earnings or recorded hours in any occupation, with confidence intervals ruling out effects larger than 1%.”

Google Maps Doesn't Know How Street Addresses Work

“I dutifully submitted feedback for “Wrong pin location or address”: And I got an email the next day saying that my edit was accepted: But it’s been 14 days and the address still maps incorrectly.”

April 24, 2025

April 23, 2025

You wouldn't steal a font

“So I chucked it into FontForge and yep, turns out the campaign used a pirated font the entire time!”

April 22, 2025

Attacking My Landlord's Boiler

“Replay attacks can be pretty easily thwarted by using an incrementing counter in the communications to nullify previous signals, ignoring signals with a counter value you’ve already seen.”

April 21, 2025

Getting Forked by Microsoft

“Digging deeper I found test cases referencing Spegel and my previous employer, test cases that have been taken directly from my project.”

How Big Tech hides its outsourced African workforce

“When poor labor practices come to light — whether it’s wage theft, unsafe working conditions, or psychological harm, the intermediaries are the ones held responsible, not the tech giants who ultimately benefit from the labor…”

April 20, 2025

April 19, 2025

Botnet Part 2: The Web is Broken

“So if you as an app developer include such a 3rd party SDK in your app to make some money — you are part of the problem and I think you should be held responsible for delivering malware to your users, making them botnet members.”

April 18, 2025

Walled Gardens Can Kill

“Normally this would be a simple problem to fix, just go to your Apple account settings and switch the region, but this too was denied, as I had the yearly Apple Music subscription.”

April 17, 2025

Issue with multiple Zoom Services (incident report)

“This block was the result of a communication error between Zoom’s domain registrar, Markmonitor, and GoDaddy Registry, which resulted in GoDaddy Registry mistakenly shutting down the zoom.us domain.”

April 16, 2025

A Postmortem Of A Startup

“After nearly two years without revenue or committed paying customers, we realised we lacked a clear path to the necessary scale and returns.”

April 15, 2025

You cannot have our user's data

“The serious costs and widespread performance issues and outages caused by reckless scrapers has been on everyone’s mind in the sysadmin community as of late, and has been the subject of much discussion online.”

April 2025 4chan Sharty Hack And Janitor Email Leak

“The attackers reportedly exploited outdated PHP code and deprecated MySQL functions in 4chan’s backend, particularly in a core script named yotsuba.php, which manages post submissions and moderation.”

April 14, 2025

April 13, 2025

Everything Wrong with MCP

“Obviously getting hacked from downloading and running third-party code isn’t a novel vulnerability but the protocol has effectively created a low-friction path for less technical users to get exploited on their local machines.”

A Reddit Bot Drove Me Insane

“An AI-powered bot pretending to be a human, lamenting AI-powered bots who pretend to be human, to gain human trust, so that it can covertly market AI-illustrated books.”

BPS is a GPS alternative that nobody's heard of

“Because accurate timing is critical in many areas, from media, to the power grid, to 5G and communications, having a reliable terrestrial backup to GPS—especially one that can be hardened against different types of jamming attempts—may be important to our economy, communications and power grid.”

April 12, 2025

Anubis works

“Anubis has been deployed by the United Nations.”

April 11, 2025

April 10, 2025

The 2025 AI Index Report

“AI-related incidents are rising sharply, yet standardized RAI evaluations remain rare among major industrial model developers.”

PHP Core Security Audit Results

“Due to budget constraints, the recent security audit focused on the most critical components of the PHP source code rather than the entire codebase.”

April 9, 2025

Basic Income Pilot Project | Study results

“The pilot project followed 122 people for three years who received an unconditional sum of €1,200 every month. The control group included a further 1,580 people who did not receive any money.”

April 8, 2025

Government fails to keep Apple legal battle secret

“In a judgment handed down today, tribunal president Lord Justice Singh and Mr Justice Johnson said preventing disclosure even of the fact that a hearing was taking place would have represented ’the most fundamental interference with the principle of open justice’.”

Cyc

“After 40 years, 30 million rules, 200 million dollars, 2000 person-years, and many promises, Cyc has failed to reach intellectual maturity, and may never will.”

April 7, 2025

What was Quartz?

“The end came on Friday, when G/O fired the few remaining writers at Quartz and sold the carcass to a Canadian firm that appears mostly interested in the email list.”

Europe preparing to 'ease the burden' of landmark data privacy law

“The European Commission is now finalizing a plan to simplify and potentially remove many of the regulatory requirements imposed by the continent’s complex and far-reaching General Data Protection Regulation, particularly those impacting small and medium-sized businesses.”

April 6, 2025

April 5, 2025

April 4, 2025

April 3, 2025

AI 2027

“We predict that the impact of superhuman AI over the next decade will be enormous, exceeding that of the Industrial Revolution.”

April 2, 2025

Restructuring Announcement

“While our revenue continues to grow, Automattic operates in a highly competitive market, and technology is evolving at unprecedented levels.”

April 1, 2025

In loving memory of Dave Täht

“Because of Dave’s persistence and advocacy, millions of devices worldwide now ship algorithms like FQ-CoDel by default, to smooth connectivity.”