Tov, a TypeScript-like language for coding agents that compiles via C, claimed wins of over 10x against Rust. Fyra Labs found the Rust versions used dynamic dispatch and the slow default HashMap, and couldn't reproduce the bigint result. Fixed, Rust matched or beat Tov. After pgrust, another benchmark to distrust.
Fyra LabsThomas Habets shows GCC at -O1 turning a std::unreachable() into a write from a function that is never invoked, setting a device to the wrong value, and a null-pointer write that stores zero instead of 99. His point for anyone who shrugs off UB as just a segfault: it can do anything.
blog.habets.seMost programs are I/O-bound, so rewriting them in a faster language buys little. Rather than asking agents for wholesale rewrites, Goedecke suggests having them profile, find hotspots and redesign those to do less work: caching, background jobs, batched queries.
seangoedecke.comExploiting PHP2Shell needs precise timing against the same PHP worker and knowledge of the exact build, the author writes, making brute force slow, noisy and easy for WAFs to block. Patch quickly, but most reported activity is attempts that would never succeed.
blog.luitjes.it
CBP data obtained by CBC News shows device searches up 32% in the first three quarters of fiscal 2026, after a record 55,424 devices searched in fiscal 2025, including 4,564 advanced searches. Worth weighing before crossing with production credentials on your laptop.
GizmodoA developer describes receiving a bug report whose log held private information they never wanted to see. Their advice: users should assume that anything a log can capture, it does, and developers should ship safe defaults that collect only what debugging needs.
fireborn.mataroa.blog