2026-08-21
Top stories
- GitHub's CTO says the 7 hour 47 minute August 17 outage was a capacity failure, and reports Azure now serves 58 percent of platform load GitHub's CTO attributed the August 17 outage to capacity failure and disclosed that Azure now serves 58 percent of platform load.
- Bun 1.4 ships the Rust rewrite, adds 1,517 Node.js test-suite passes, and cuts HTTP server memory by 13 to 48 percent Bun 1.4 shipped the Rust rewrite with mimalloc replacing libpas, native streams, and HTTP server memory cuts of 13 to 48 percent.
- Linux 7.2 released with cache-aware scheduling and sched_ext sub-schedulers, and the DRM fair scheduler held back to opt-in after a late regression Linux 7.2 released with cache-aware scheduling and schedext, while the DRM fair scheduler stayed experimental after a late regression.
AI
ML research
Agentic coding
Security
- A fake recruiter's TypeScript coding challenge loads a second stage from jsonbin.io and pulls four modules from its command-and-control host A fake recruiter take-home loads a second stage from jsonbin.io and pulls a RAT, stealer, and clipboard monitor from the C2 host.
- Mailpit reintroduced the cross-site WebSocket hijack it patched in January, because the origin gate reads the raw URI while the router reads the decoded path Mailpit reintroduced a WebSocket hijack in 1.29.0 when the origin check read raw URIs while the router dispatched decoded paths.
Outages
Developer tools
Languages and runtimes
- Rust 1.98.0 stabilizes algebraic floating-point methods and buffered integer formatting Rust 1.98.0 stabilized algebraic float methods enabling compiler fast-math reordering and formatinto for buffered integer formatting.
- Rust enables the next-generation trait solver by default on nightly and calls it the largest compiler change since the initial release Rust enabled the next-generation trait solver on nightly, replacing where-clause proving and associated-type normalization throughout.
- Canonical funds a three-year Bristol PhD on automated C to Rust translation, with AppArmor and snap-confine as case studies it states will not be replaced Canonical funded a three-year PhD on C-to-Rust translation with AppArmor and snap-confine as case studies that will not be replaced.
Apple platforms
Linux and kernel
Infrastructure
- PgBouncer transaction mode leaks session state between clients, so one read-only transaction can make a whole pool reject writes PgBouncer transaction mode leaks session state across clients, so one read-only transaction makes the entire pool reject writes.
- DuckDB v2.0 replaces its PostgreSQL-derived SQL parser with a PEG parser that extensions can add grammar rules to at runtime DuckDB v2.0 replaced its PostgreSQL parser with a PEG parser, letting extensions register grammar rules and reuse existing transformers.
- Two Cassandra BATCH writes that tie on timestamp can leave a durable state neither batch wrote Cassandra BATCH writes that tie on timestamp break per-row atomicity, leaving sums that neither batch wrote due to per-cell tie breaks.
Engineering posts
- Lorin Hochstein reads the GitHub outage as an interaction failure and names the autoscaling policy that watched the service but not its Istio sidecar Hochstein frames the GitHub outage as interaction failure where the autoscaling policy watched service limits but not sidecar limits.
- HTML Can Do That collects native popover, invoker commands and hidden until-found, and its author adds warnings that several implementations fail accessibility HTML Can Do That collected native popover, invoker commands and hidden until-found, adding warnings on accessibility gaps in form controls.
- Cursor's Vicent Marti explains why distributed filesystems and object-level Git stores both failed, and what limits GitHub's Spokes replication today Marti traces distributed filesystems and object-level Git stores both failing to constraints on packfile reads and clone performance.