Calif's Vibe Hacking: a compromised SSH host runs commands on your local terminal via VS Code/Cursor Remote-SSH. No CVE — Microsoft calls it by design. How to check and isolate instead.
Bun PR #30412 merged a Zig-to-Rust rewrite into main: 6,755 commits, 1M+ lines, binaries 3–8 MB smaller. Try via bun upgrade --canary, with notes on the claude/* branch workflow and why memory safety, not speed, drove it.
Tested Orbis in Docker: psf/requests (35 modules) makes a clean 3D graph, expressjs/express (98 modules) collapses into one giant sphere. Notes on what tree-sitter actually captures for code-review prep.
CVE-2026-26268, fixed in Cursor 2.5, allowed AI agents to rewrite insufficiently protected .git config and Git hooks, leading to out-of-sandbox RCE on the next Git operation.
VecLite is a Rust/WASM+SIMD library that accelerates vector search inside the browser. How far can you get with Transformers.js for embeddings, IndexedDB for storage, and no server at all?
APIs generated by Cursor and Claude Code often include authentication middleware but skip per-resource ownership checks. A look at IDOR/BOLA basics, typical patterns, and the fix of scoping DB queries by owner.
NVIDIA's build.nvidia.com serves a free inference API that covers 100+ models including MiniMax M2.7, GLM-5, Kimi K2.5, DeepSeek, GPT-OSS, and Sarvam-M. Because integrate.api.nvidia.com/v1 is OpenAI-compatible, OpenClaw, OpenCode, Zed, and Cursor can call it directly.
Bryan Cantrill's 'The Peril of Laziness Lost' argues that LLMs have zero cost to write code and no motivation to abstract. Humans must serve as the 'deletion engine' or systems will bloat endlessly.
On April 2 2026 OpenAI scrapped Codex's per-message credit model for per-token billing tied to API consumption. ChatGPT Business dropped to $20, a Codex-only seat appeared, and Copilot's premium-request model is no longer the reference.
Claude Code subscriptions no longer cover OpenClaw and other third-party tools. How this differs from the login-token issue, why the 'excessive usage' standard is opaque, and what it means that Anthropic is the only major vendor closing its ecosystem.
Five new features for Copilot coding agent — model selection, self-review, security scanning, custom agents, and CLI integration — plus bidirectional Figma-Codex integration via MCP. Also covers Copilot CLI GA and comparison with Claude Code Figma integration.
