2026-07-03
Top stories
- LUKS suspend stopped wiping disk-encryption keys from memory since Linux 6.9 Linux kernel refactoring disabled LUKS suspend key-wiping for two years, leaving full-disk-encryption keys in RAM if a laptop is seized.
- Podman v6.0.0 moves rootless networking to Netavark, Pasta, and nftables Podman 6.0.0 switches default rootless networking from slirp4netns to Netavark and Pasta, requiring testing of connectivity and port forwarding.
- Alibaba to ban Claude Code at work over alleged backdoor risk after Anthropic confirms a proxy check Alibaba bans Claude Code from July 10 after alleged backdoor discovery; Anthropic acknowledges undisclosed proxy checks to detect account resale.
- crustc translates the Rust compiler to about 46 million lines of C crustc, a proof of concept, compiles rustc 1.98.0-nightly into 46 million lines of C that build with GCC and make, portability without LLVM.
Conferences and events
ML research
Agentic coding
- Cursor publishes CursorBench 3.1 coding-agent evaluation Cursor published CursorBench 3.1, an evaluation of 36 coding-agent configurations on ambiguous real-world tasks without public rubrics.
- Practitioner argues for a short-leash workflow when coding with AI agents Slepak describes a short-leash coding-agent workflow for security-critical software: review and approve each diff, commit after each step.
- WebKit ships a Safari MCP server for autonomous web debugging WebKit published a Safari MCP server that lets any Model Context Protocol client drive a Safari window for debugging and inspection.
Security
Developer tools
- Immich 3.0 ships workflows, mobile editing, and breaking API changes Immich 3.0 adds drag-and-drop Workflows automation, mobile non-destructive editing, and breaking changes to pgvecto.rs support and API schemas.
- ProseMirror creator releases Wordgard, an MIT semantic rich-text editor Marijn Haverbeke released Wordgard, an MIT in-browser rich-text editor with semantic structure, collaborative editing, and accessibility.
Languages and runtimes
Infrastructure
Engineering posts
- Co-locating workflow state with data in Postgres for exactly-once execution Storing workflow state in Postgres with application data lets checkpoints and updates commit together, replacing transactional-outbox pattern.
- Ubicloud runs PostgreSQL with strict memory overcommit to avoid OOM-killer cascades Ubicloud sets vm.overcommitmemory=2 for PostgreSQL so one over-allocating query fails locally rather than triggering a cascade of backend kills.
- git-annex maintainer spends about 100 hours excluding LLM-generated dependency code Joey Hess spent roughly 100 hours ensuring git-annex builds without AI-generated code in dependencies, citing copyright risks and review burden.
New videos
Markets and companies
Hacker News
- Discussion: the primary purpose of code review A HN thread debated whether code review's main value is catching bugs or steering away from hard-to-maintain patterns that persist later.
- Show HN: ZeroFS presents S3 as POSIX filesystems and block devices ZeroFS, a Show HN, exposes S3-compatible storage as POSIX filesystems over NFS/9P and block devices over NBD with encryption and compression.
- Show HN: claude-real-video feeds videos to any LLM by selecting key frames claude-real-video selects video frames on scene change rather than at fixed intervals, reducing token usage while preserving video comprehension.
- Show HN and Ask HN signal PeerTube, the federated video platform, reached the HN front page; the monthly Ask HN: Who is quitting? thread surfaced labor-sentiment accounts.