25 newsletters today.
Abandoned Futures
2026-07-05
In 1953, Stanley Miller ran an electric spark through methane, ammonia, hydrogen, and water in a sealed glass loop at the University of Chicago. A week later, the walls were coated in amino acids. Everyone remembers that experiment. Almost nobody remembers what came next.
Between 1957 and 1970, Sidney W. Fox at Florida State University ran a very different rig. He dry-heated mixtures of the 20 biological amino acids to 150β180Β°C for a few hours, dissolved the resulting glassy solid in warm salt water, and got something extraordinary: proteinoid microspheres. These were 1β2 micron spherules with an osmotically active bilayer-like boundary, they budded, they divided when brought into contact with fresh proteinoid, they showed a resting membrane potential of ~20 mV, and they catalyzed reactions (decarboxylation, ATP hydrolysis, weak esterase activity) without any enzymes present.
Fox published this in Science in 1959, in Nature in 1967, and in a 1972 monograph Molecular Evolution and the Origin of Life. Miller himself, meanwhile, had built a continuous-flow apparatus at UC San Diego in 1958 that could run for months, cycling condensates through a simulated tidal zone. Combined, the two lines of work were sketching a testable roadmap from rocks and lightning to something that looked disturbingly like a proto-cell.
Then it died. Three reasons:
Why 2026 makes this viable again. Everything that killed the program has been undone:
A modern reconstruction of Fox's rig would cost about $400,000 β less than one postdoc-year at NASA. It would answer, definitively, whether a peptide-first path to compartmentalized proto-metabolism exists. Instead, the microspheres sit in Fox's archived slides at Southern Illinois University, and origin-of-life funding still flows almost entirely to RNA.
ArXiv Paper Digest
2026-07-05
Imagine you just hired 500 junior engineers overnight. They're fast, tireless, and eager β but they'll happily rm -rf your production database if you ask the wrong way. How do you keep them productive without a senior engineer reviewing every single keystroke? That's roughly the situation companies are in right now with coding agents, and this paper argues we've been overcomplicating the answer.
The dominant approach today is what the author calls "agentic scaffolding": layer more AI on top of your AI. Add a critic model to review the coder's work, add a planner to decompose tasks, add a verifier to double-check the critic. Each layer burns tokens, adds latency, and β crucially β still relies on probabilistic judgment that can be wrong.
Winninger's argument is refreshingly boring: we already solved this problem for humans decades ago. When you onboard a new engineer, you don't assign a manager to watch every commit. Instead, you use structural constraints:
These same guardrails, the paper argues, transfer directly to coding agents β and they're dramatically cheaper than the AI-watching-AI approach. A firewall rule costs zero tokens per request. A pre-commit hook costs zero tokens per commit. Contrast that with an LLM critic that has to re-read the diff every time.
The key insight is a reframing: steerability is not primarily a model-training problem, it's a systems problem. Instead of asking "how do we make the agent want to behave?", ask "what can we make it structurally incapable of doing wrong?" The former is a research frontier; the latter is standard sysadmin work with 40 years of tooling behind it.
The paper sketches an end-to-end system built on this principle β presumably wiring together sandboxes, scoped credentials, network egress rules, and tool-enforced conventions β as an alternative substrate for what the AI safety community calls "scalable oversight." The pitch to practitioners: you don't need a novel research breakthrough to deploy agents safely. You need to treat them like the powerful, occasionally reckless coworkers they are, and apply the boring controls you already know how to configure.
Daily Automotive Engines
2026-07-05
V-band clamps solve the sealing and quick-disconnect problem beautifully, but they introduce a subtle new headache: the two flanges can rotate relative to each other during assembly. On a header collector-to-downpipe joint, that rotational freedom means an O2 sensor bung, wastegate dump tube, or exhaust hanger can end up pointing 15Β° off from where it needs to be. Alignment features fix this.
Why rotation matters: A V-band clamp is essentially a circular wedge that squeezes two matching grooved flanges together axially. Nothing in that geometry prevents the flanges from spinning around the pipe's centerline before the clamp is torqued. On a bench, that seems trivial. On a car with a wastegate screamer pipe that must clear the frame rail, or an O2 sensor whose wiring harness routes to a specific location, rotational alignment is not optional.
Common anti-rotation solutions:
Real-world example: The Garrett GTX3582R turbine housing to downpipe joint on a Subaru EJ257 build. Builders discovered that without an alignment pin, the downpipe could rotate enough to put the O2 sensor bung directly against the transmission bellhousing β no clearance for the sensor body. Aftermarket downpipe vendors now machine a 4mm dowel pin into the V-band flange to lock rotation at the correct 22Β° offset from vertical.
Rule of thumb for dowel pin sizing: Pin diameter should be roughly 0.15 Γ flange thickness, with engagement depth of 1.5 Γ pin diameter in each flange. A 10mm-thick flange wants a ~1.5mm pin engaged 2.5mm deep on each side. Too large a pin weakens the flange section between the pin bore and the V-band groove; too small and the pin shears under thermal expansion loads.
Thermal consideration: The pin material must match or exceed the flange's thermal expansion, or it will loosen when hot and fret the bore. 17-4 PH stainless pins in 304 stainless flanges is the standard combination.
Daily Debugging Puzzle
Array.map(parseInt) Radix Trap: The Number Parser That Reads Index as Base2026-07-05
This function is supposed to take an array of numeric strings from a config file and convert them to integers. It works perfectly in the developer's manual tests. Ship it, and watch the metrics dashboard fill with mystery values.
// Parse a list of numeric strings into integers.
// Used to load rate limits from a config file.
function parseLimits(raw) {
return raw.map(parseInt);
}
const config = ["1", "2", "3", "10", "11", "15", "20"];
const limits = parseLimits(config);
console.log(limits);
// Developer expects: [1, 2, 3, 10, 11, 15, 20]
// Actually prints: [1, NaN, NaN, 3, 4, 1, NaN]
// Downstream: rate limiter now allows exactly 1 req/sec on
// endpoint #0, blocks endpoint #1 entirely (NaN comparisons
// are always false), and lets endpoint #5 through at 1/sec.
Array.prototype.map invokes its callback with three arguments: (element, index, array). And parseInt accepts two arguments: (string, radix). So map(parseInt) silently becomes parseInt(element, index) β the array index is interpreted as the numeric base.
Walking through the example:
parseInt("1", 0) β 1. Radix 0 is treated as "guess" (defaults to 10 for plain digits).parseInt("2", 1) β NaN. Base 1 isn't a valid radix.parseInt("3", 2) β NaN. Digit "3" isn't valid in binary.parseInt("10", 3) β 3. Base 3: 1Γ3 + 0 = 3.parseInt("11", 4) β 5. Base 4: 1Γ4 + 1 = 5.parseInt("15", 5) β 1. Base 5 parses "1", stops at "5" (invalid digit), returns 1.parseInt("20", 6) β NaN? No β 2Γ6 + 0 = 12. Wait, let me recount: index 6, "20" in base 6 β 12.The failure is insidious because some values parse to plausible-looking numbers. If your test suite happens to use ["10", "20", "30"], they'll parse as [10, NaN, NaN] β you'll catch the NaN. But ["100", "50", "25"]? Those become [100, NaN, NaN] too. Try ["1", "10", "100"]: [1, NaN, 4]. The corruption pattern shifts with array content, so a "working" dev test tells you nothing.
parseInt's partial-parse behavior compounds the damage: it consumes as many valid digits as it can and returns silently, so "15" in base 5 becomes 1 with no error. Combined with JavaScript's rule that any comparison involving NaN is false (including NaN === NaN), the corrupted config flows downstream and quietly breaks conditionals you'd never think to audit.
Never pass a variadic callback to map. Wrap it, or use Number(), which accepts exactly one argument:
// Option 1: explicit arrow, discard extra args
return raw.map(s => parseInt(s, 10));
// Option 2: Number() ignores extras and rejects partial parses
// ("15abc" β NaN, unlike parseInt("15abc", 10) β 15)
return raw.map(Number);
// Option 3: unary plus, same semantics as Number()
return raw.map(s => +s);
The same trap ambushes forEach, filter, and reduce whenever you pass a bare function reference that quietly accepts more arguments than you realized. A lint rule for unicorn/no-callback-reference (or ESLint's array-callback-return family) will catch it before code review does.
map passes three arguments to its callback, so any function whose second parameter changes meaning β like parseInt's radix β will silently produce garbage; always wrap it in an arrow that discards the extras.
Daily Digital Circuits
2026-07-05
When a software engineer imports a library, the compiler figures out how it fits. When a hardware engineer imports an IP block β say, a USB PHY, a PCIe controller, or a DDR4 memory interface β the block arrives pre-placed, pre-routed, pre-timed, and pre-characterized for a specific process node. That process is called hardening, and it's the reason a $2M PCIe Gen5 controller license is cheaper than designing one yourself.
A soft IP is delivered as synthesizable RTL (Verilog/VHDL). You get flexibility β retarget to any process, tune parameters, integrate freely β but you also inherit all the risk: synthesis, place-and-route, timing closure, and silicon verification are on you. A hard IP is delivered as a GDSII layout: transistors, wires, and vias frozen in geometry, characterized on a specific foundry process (e.g., TSMC N5). You get guaranteed timing and area, but zero flexibility β it's a black box with fixed pinout and power ports.
Firm IP sits in between: gate-level netlist plus placement guidance, letting the integrator do final routing.
Hardening a block involves:
Real-world example: Synopsys DesignWare USB 3.2 PHY is delivered as a hard macro for TSMC N7. It's a ~1.5mmΒ² rectangle with fixed pin locations on all four sides, characterized across -40Β°C to 125Β°C and 0.72Vβ0.88V core supply. You drop it into your floorplan, connect the digital ports, route the analog reference pins per the integration guide, and it just works. Apple, Qualcomm, and Nvidia all license the same PHY β the silicon is proven across thousands of tapeouts, which is why nobody rolls their own.
Rule of thumb: If a block requires analog design, uses more than ~50k gates of tightly-timed logic, or must hit a standardized interface spec (PCIe, USB, DDR, Ethernet SerDes), license hard IP. The NRE savings versus in-house design typically pay back the license fee within one tapeout β plus you avoid a 6-month schedule slip when your custom PLL fails at hot-slow corner.
The trade-off: hard IP locks you to one foundry and one node. Porting to a new process means relicensing (and often a 12+ month wait while the vendor re-hardens).
Daily Electrical Circuits
2026-07-05
An LDO's output noise and PSRR are largely set by the feedback divider network. A tiny capacitor placed across the top feedback resistor β the feedforward capacitor (C_FF) β is one of the highest-leverage tricks in linear regulator design. It costs pennies, occupies one 0402 footprint, and can improve noise, PSRR, and transient response simultaneously.
Here's the mechanism: the LDO's error amplifier sees a divided-down version of V_OUT through R1 (top) and R2 (bottom). At DC, the divider ratio sets V_OUT. But if you shunt R1 with C_FF, at high frequencies the divider ratio approaches unity β the error amplifier sees the full V_OUT, not the attenuated version. This means the loop gain at those frequencies effectively increases by (1 + R1/R2), the same factor as the DC gain. More loop gain means better PSRR and lower noise in that band.
The feedforward network introduces a zero at f_z = 1/(2ΟΒ·R1Β·C_FF) and a pole at f_p = 1/(2ΟΒ·(R1||R2)Β·C_FF). You want the zero placed inside the loop bandwidth to buy back gain that the divider stole, while keeping the pole well below the unity-gain crossover to avoid stability trouble.
Real-world example: The TI TPS7A47 (a low-noise LDO popular for driving ADC references and RF PLLs) spec sheet actually plots noise and PSRR versus C_FF. On a 3.3 V output with R1 = 40.2 kΞ©, R2 = 10 kΞ©, adding a 10 nF C_FF drops integrated output noise from ~15 ΞΌV_RMS to ~4 ΞΌV_RMS (10 Hzβ100 kHz), and improves PSRR at 1 kHz from ~55 dB to ~75 dB. That 20 dB is the difference between a barely-usable rail and a genuinely quiet one for a 16-bit ADC.
Rule of thumb: Place the zero roughly a decade below the LDO's loop crossover frequency. If your LDO has ~100 kHz bandwidth, target f_z β 10 kHz. With a typical R1 of 40 kΞ©:
Caveats:
Daily Engineering Lesson
2026-07-05
A cross-roller bearing is a single-row bearing where cylindrical rollers alternate at 90Β° to each other along a V-shaped raceway. Every other roller handles load from the opposite direction, so one thin ring can carry radial, axial (both directions), and moment loads simultaneously. This is what makes them the go-to bearing for robot joints, rotary tables, medical imaging gantries, and satellite gimbals β anywhere you need stiffness in every direction but can't afford the stacked height of angular contact pairs.
Why the alternating rollers matter: A standard cylindrical roller bearing takes radial load only. An angular contact ball bearing takes radial + one-direction axial, so you need two of them back-to-back (a "duplex pair") to handle a shaft that pushes both ways. A cross-roller does the job of a duplex pair in about one-third the axial length, and because rollers (not balls) carry the load, contact area is a line instead of a point β stiffness goes up roughly 3β4Γ for the same envelope.
Real-world example β the SCARA robot elbow: A typical SCARA robot's second axis carries a payload at the end of a 400 mm forearm. If the payload is 5 kg, the moment at the joint is roughly 5 Γ 9.81 Γ 0.4 β 20 NΒ·m, plus dynamic loads from acceleration. Using two deep-groove ball bearings requires ~60 mm of stack height and still deflects noticeably under moment. A single THK RB or IKO CRB cross-roller (say, 100 mm bore) handles the same moment in a 15 mm-tall ring with under 10 Β΅m of tilt.
Preload rule of thumb: Cross-rollers are almost always sold with a specified preload class (light, medium, heavy). Light preload gives you ~0.001 mm of internal clearance eliminated β good for smooth motion at the cost of slight play. Medium preload negates clearance and adds ~5β10% of dynamic load rating as internal force, doubling stiffness but roughly halving rated life. Rule: use light preload for indexing tables and inspection stages; medium for robot joints; heavy only when zero deflection matters more than bearing life.
Forgotten Books
2026-07-05
Book: CIA Reading Room cia-rdp80-00809a000600210015-2: ECONOMIC - COOPERATIVES by CIA Reading Room (1948)
Read it: Internet Archive
Buried in a sanitized 1948 CIA intelligence digest β a compilation of translated clippings from Yugoslav newspapers, gathered by American analysts trying to understand what Tito's cooperatives were actually doing β is a throwaway sentence about rural electrification that reads like a manifesto for a movement we're only now rediscovering.
Cooperatives in villages of the Leskovac district are introducing electric lighting. The villages of Mratane and Mir already have it, while Veliki Trnjani and Rodari have set up power plants. The cooperatives in Pecejevo and Dinarac have begun preparations for electrifying their villages.
Read that again. Villages β not utilities, not the state β set up power plants. In 1948, in a war-shattered corner of the Balkans, farming cooperatives were building their own generation infrastructure. The same report notes that "14 cooperative brickyards in the Osijek district made bricks for building cooperative houses" and that "the cooperative oil factory in Vela Luka processed 193 carloads of olive oil." An entire vertically-integrated village economy β bricks, oil, electricity β owned by the people who used it.
What the book was: Not a book at all, but a declassified CIA "Foreign Documents or Radio Broadcasts" report. American intelligence officers scanned Yugoslav newspapers like Politika, translated the relevant bits, and filed them for policymakers. What we have is essentially raw source material: what Yugoslav peasants were being told about themselves by their own press, preserved because Washington wanted to know.
Was it ahead of its time? Wildly so. The dominant 20th-century model that eventually crushed this vision was the giant centralized grid β massive coal plants, transmission lines fanning out, one utility monopoly per region. Village power plants seemed quaint, inefficient, obsolete. But look at 2026:
The Yugoslav model failed for political reasons β collectivization was coercive, the state absorbed the cooperatives, and the whole federation eventually dissolved in war. But the technical insight buried in that CIA report β that a village of a few hundred people can generate, distribute, and consume its own electricity without needing a national utility β was correct. We spent 70 years forgetting it, then rediscovered it as "distributed energy resources" and started charging consulting fees.
The peasants of Mratane and Mir figured it out with 1948 technology and no PowerPoint decks.
Forgotten Darkroom
2026-07-05
Book: U.S. COAST AND GEODETIC SURVEY RESULTS WITH COLOR AERIAL PHOTOGRAPHY by CIA Reading Room (1963)
Read it: Internet Archive
In November 1963, a National Photographic Interpretation Center (NPIC) analyst filed a slightly envious memo about how the U.S. Coast and Geodetic Survey was pulling off color aerial photography β a feat NPIC found impressive enough to investigate in detail. What the memo captures is a workflow so hand-crafted it reads more like darkroom sorcery than government surveying.
The star of the operation was a man named Smith, who apparently did everything himself:
"In flight the camera is operated by an experienced photographer, oftentimes Smith, himself... Smith does his own processing with, of all things, the Zeiss F.E. 120 processors; (these are the same gadgets NPIC representatives used overseas in 1956)."
But the truly forgotten piece of craft is buried in item (i):
"Smith uses Anscochrome taking film and makes his prints on Printon paper: this is a direct positive-to-positive procedure. (We can do this at NPIC)."
Ansco's Printon was a color reversal print material β you exposed a positive color transparency directly onto the paper and developed a positive print, skipping the negative entirely. No orange-mask color negative, no internegative step, no color correction between stages. What you shot was what you printed. Ansco (the American arm of Agfa) discontinued the process by the late 1960s, and with it went one of the only true direct positive-to-positive color print workflows ever commercialized. Modern color photography β even in the film revival era β is almost universally negative-to-positive (C-41/RA-4). To get anything comparable today, you'd have to hunt down expired Ilfochrome/Cibachrome stock, itself discontinued in 2011.
The memo also preserves one gloriously human detail about the survey's working conditions:
"Smith is able to process 400' per day under normal conditions, however, should he foul up, he just goes back and flies again another day."
For NPIC β reading overflight film of Cuba and the USSR where a "foul up" meant losing the only chance at a target β this must have read like a description of paradise. The CIA analyst's list of "wonderful cooperation between ANSCO," "ample time to develop the complete system through trial and error," and "ideal weather conditions" was a polite way of noting that no intelligence agency ever gets those luxuries.
Modern readers who love the "look" of vintage Kodachrome slides are chasing an echo of what Smith was routinely printing on paper β a physical color print made without ever passing through a negative, with dye couplers built into the emulsion itself. It's a chemistry we simply don't manufacture anymore.
Forgotten Patent
2026-07-05
On March 25, 1857, a Parisian bookseller and printer named Γdouard-LΓ©on Scott de Martinville filed French patent #31,470 for a device he called the Phonautographe. Its purpose sounds impossibly modern: to capture the shape of a spoken voice as a picture. Its blind spot is what makes the story unforgettable β Scott never figured out how to play the recordings back. He didn't even try.
The machine was elegant. A horn funneled sound onto a thin membrane. Attached to the membrane was a stiff pig-bristle stylus. As you spoke or sang into the horn, the stylus vibrated and scratched a wavy line onto a rotating cylinder coated in lampblack (candle soot). Scott's goal was visual: he was a printer, obsessed with the idea that speech could be transcribed the way a stenographer transcribes shorthand. He imagined scientists learning to read waveforms the way they read sheet music.
Between 1857 and 1860, Scott produced dozens of paper "phonautograms." The most famous, dated April 9, 1860, captures someone (probably Scott himself) singing "Au Clair de la Lune." That's 17 years before Thomas Edison's phonograph patent (US 200,521, 1877). It is the oldest known recording of a human voice β and for nearly a century and a half, nobody had heard it.
The reason: soot on paper cannot be dragged under a needle without destroying the trace. There was no reverse. The recordings sat in the archives of the AcadΓ©mie des Sciences and the French patent office as historical curiosities β pretty squiggles, mute.
Then, in 2008, a group of American audio historians called the First Sounds project (David Giovannoni, Patrick Feaster, and colleagues) collaborated with the Lawrence Berkeley National Laboratory. They scanned the phonautograms at extreme resolution, converted the ink traces into digital waveforms, corrected for the uneven hand-cranked cylinder speed, and β for the first time β played the sound. A ghostly voice from 1860 emerged, warbling a French folk song.
The technique Berkeley used was descended from a system originally built to read broken and shattered 78-rpm records optically, without a needle. That system, in turn, is the direct ancestor of:
The deeper idea Scott stumbled into is one modern engineers now take for granted: a signal, once captured in any medium, is media-independent. A waveform scratched in soot in 1860 is just data. Give it the right decoder and it becomes sound, spectrograms, a training example for a speech model, or a Fourier decomposition. Scott's phonautograms have since been fed into pitch-detection algorithms to identify the singer's tempo, and researchers have argued about whether the voice belongs to Scott or to his daughter.
What makes the patent genuinely startling is the inversion of the usual story. Most old patents describe an invention that worked but was superseded. Scott's invention didn't work β not until the tools of 21st-century imaging arrived to complete it. He filed a patent for a recording device before the concept of playback existed. The engineers of 2008 supplied the missing half of his invention, 148 years late.
Daily GitHub Zero Stars
2026-07-05
Language: C#
Ciderfy is a terminal user interface (TUI) application written in C# that solves a genuinely annoying problem: migrating your carefully curated Spotify playlists over to Apple Music. What makes this project stand out among the sea of playlist-transfer tools is the "no developer account required" approach β you don't need to register an app with Spotify's developer portal, wrangle OAuth callback URLs, or provision Apple Music API keys.
Most playlist migration tools fall into two frustrating camps: web services that require you to hand over account credentials to a third party, or self-hosted tools that demand you jump through developer-registration hoops before you can transfer a single song. Ciderfy sidesteps both by running as a local TUI, keeping your data on your machine and eliminating the API-key setup friction.
Who might find this useful:
The topic tags (apple-music, csharp, dotnet, playlist-manager, spotify, tui) suggest a focused, well-scoped project rather than a bloated everything-tool. It's exactly the kind of pragmatic, single-purpose utility that thrives as a small open-source project β and worth a star if you've ever cursed at a "please create a Spotify developer app" prompt.
Daily Hardware Architecture
2026-07-05
Every floating-point instruction on x86 has a dirty secret: it doesn't just produce a result. It also updates a shared status word β MXCSR on x86, FPCR/FPSR on ARM β that records whether the operation was inexact, underflowed, overflowed, divided by zero, or hit an invalid operand. That status word is a single architectural resource, and every FP op in flight is a potential writer to it. That's a serialization hazard hiding inside code that looks embarrassingly parallel.
Naively, this would kill out-of-order execution. If instruction N+1 has to see the flags produced by instruction N, you've just serialized the entire FP pipeline through a one-bit-wide bottleneck. So CPUs cheat, hard:
The cheat breaks down when software actually reads MXCSR. A STMXCSR or fetestexcept() call forces the CPU to drain every in-flight FP op, merge all their exception bits, and hand you a coherent snapshot. On Skylake this is roughly a 20β30 cycle stall, and worse on wider cores where more FP ops are in flight.
Concrete example: a numerical library that calls fetestexcept(FE_INEXACT) after every batch of operations to check for precision loss. Author saw a 4Γ slowdown vs. the version that only checked once at the end. The per-batch check drained the FP pipeline over and over β the actual math was fine, the flag read was the killer. Removing it and checking only at loop exit restored full throughput.
Rule of thumb: touching MXCSR (reading it, writing it, changing rounding mode) costs roughly 1 full FP pipeline drain β call it 20β50 cycles depending on core width. Changing rounding modes inside a hot loop is one of the classic ways to accidentally serialize floating-point code. If you need directed rounding, use the AVX-512 {rn-sae}-style embedded rounding hints instead β they're per-instruction and don't touch MXCSR at all.
Hacker News Deep Cuts
2026-07-05
HN Discussion: 2 points, 0 comments
A PEP that could quietly reshape the next decade of Python performance work is sitting at two upvotes. PEP 836 is the formal proposal to promote CPython's copy-and-patch JIT β an experiment that landed as an opt-in build flag in 3.13 β into a supported, first-class component of the interpreter. The cheeky "Go Brrr" title undersells what this actually represents: the moment CPython stops apologizing for the JIT and starts treating it as part of the shipped runtime.
Why this matters:
If you write Python at scale, maintain a distribution, ship a C extension, or just want to understand what "Python is getting fast" actually means at the implementation level, this thread is the primary source. The absence of comments on HN isn't a signal about quality β it's a signal that everyone who cares is reading discuss.python.org directly.
HN Jobs Teardown
2026-07-05
Source: HN Who is Hiring
Posted by: epage
Of the ten postings in this thread, Duo Security's is the most strategically revealing because it's a rare artifact: a company hiring into a crisis rather than despite one. The pandemic context (this is a March 2020 thread) reframes everything.
Duo lists Python, Docker, Ansible, and AWS on the DevOps side, with Python on the backend and native mobile clients (iOS, Android, Windows) plus Chrome extensions. This is a boring, mature stack β and that's the point. Security infrastructure customers do not want cutting-edge experimentation on their auth path. Ansible over Kubernetes suggests a pragmatic ops culture that predates the container-orchestration hype cycle and hasn't felt the need to migrate. The multi-client surface area (mobile, desktop, browser) reveals the actual product shape: MFA lives wherever the user does, which is a much harder engineering problem than the backend suggests.
Two phrases do enormous work here: "not slowing down its hiring during all of this" and "recently acquired by Cisco." The first is a recruiting flex aimed at engineers watching layoff announcements roll across their timelines. The second signals financial insulation β a post-acquisition budget backed by Cisco means Duo can hire counter-cyclically while independent startups freeze. The explicit callout of "Zero Trust / Beyond Corp" and "transition to remote" shows they've already repositioned their pitch around the pandemic β MFA became a compliance nice-to-have overnight into a business-continuity requirement.
Green: Remote-friendly (Ann Arbor, Austin, Remote) before that was table stakes; a Cisco acquisition removes runway risk; a poster who works there (epage) writing in first person rather than an HR template.
Yellow: "I know our backend is written in Python" is a tell that epage is DevOps and doesn't own the backend β the posting is one engineer's honest take, not a coordinated recruiting effort. Also, no salary band, no team-size numbers, no specific role level. It's more of a "we exist and we're open" flag than a targeted req.
Daily Low-Level Programming
2026-07-05
When a core has no runnable task, the kernel doesn't just spin β it executes MWAIT with a hint telling the CPU how deeply to sleep. That hint is a C-state: C0 is running, C1 halts the clock, C1E adds voltage reduction, C6 flushes and powers off the core's L1/L2 caches and saves architectural state to package RAM, C7/C8/C9/C10 progressively power off more of the uncore, LLC, and PLLs.
Deeper C-states save more power but cost more exit latency. Typical numbers on a Xeon or modern desktop part:
The menu governor (default on Linux) decides which state to enter by predicting how long the idle period will last. It multiplies the expected sleep time (from the next scheduled timer, adjusted by a decaying average of past idle durations) by a correction factor based on recent I/O wait, then picks the deepest state whose target residency (break-even point) fits. If the prediction was wrong and you exit early, the energy spent entering the state was wasted.
Real example β the 99.9th percentile problem. An HFT firm ran a UDP echo server averaging 5 Β΅s response time. Under light load it suddenly showed 80 Β΅s tail spikes. turbostat revealed cores dropping into C6 between packets. Every packet arriving after >600 Β΅s of idle paid the C6 exit penalty plus a warm-cache reload. Fix: boot with intel_idle.max_cstate=1 processor.max_cstate=1, or write 1 to /sys/devices/system/cpu/cpu*/cpuidle/state[2..N]/disable. Tail latency dropped to 8 Β΅s. Power draw per idle core rose from 3W to 12W β the cost of trading watts for microseconds.
Rule of thumb: a C-state is worth entering only if you'll stay there at least twice the target residency. For latency-sensitive threads, pin them to cores where you've disabled anything past C1, or use PM_QOS_CPU_DMA_LATENCY β writing a microsecond value to /dev/cpu_dma_latency caps the deepest state the governor will pick, system-wide, for as long as your fd stays open.
Also watch for package C-states: a single busy core keeps the whole package in PC0. But once all cores idle, the package can enter PC6/PC10, and now waking any core requires re-powering shared resources β the LLC, the ring bus, the memory controller PLL. This is why the first packet after quiescence is always the slowest.
/dev/cpu_dma_latency open with a low value.
RFC Deep Dive
2026-07-05
RFC 6520 is one of the most infamous RFCs in modern computing history β not because of what it says, but because a single implementation bug against its message format became the vulnerability the world knows as Heartbleed. Understanding the RFC illuminates how a well-intentioned three-page extension caused an internet-wide catastrophe in April 2014.
The problem it solves: DTLS runs TLS-like security over unreliable datagram transports (UDP, SCTP). Unlike TCP, there's no built-in liveness signal. If a peer disappears, you might not notice until your next application write fails β potentially minutes later. Worse, DTLS uses expensive rekeying and path MTU discovery that need a way to probe the peer. Traditional TLS solved this with full renegotiation, which is heavy. The Heartbeat extension introduces a lightweight keep-alive and PMTU discovery mechanism inside the encrypted channel.
The design: A new TLS content type (24 = heartbeat) carries two message types: HeartbeatRequest and HeartbeatResponse. The wire format is elegant in its simplicity:
type (1 byte) β request or responsepayload_length (2 bytes) β length of the payload the sender chosepayload β arbitrary bytes the responder must echo backpadding β at least 16 random bytesThe receiver echoes the payload verbatim, generates fresh padding, and sends it back. This confirms liveness and β critically β discovers PMTU: if a large heartbeat gets through, so will other datagrams of that size.
The bug that ate the internet: OpenSSL's implementation trusted the payload_length field without checking it against the actual received record size. An attacker could send a heartbeat with a 1-byte payload but claim payload_length = 65535. OpenSSL would memcpy 65535 bytes from its heap into the response β leaking whatever happened to be adjacent in memory: session keys, private keys, passwords, tokens. Two lines of missing bounds-checking. The RFC itself said in Β§4: "If the payload_length of a received HeartbeatMessage is too large, the received HeartbeatMessage MUST be discarded silently." The words were there. The check wasn't.
Interesting history: Robin Seggelmann, then a PhD student at MΓΌnster, wrote both the RFC and the OpenSSL patch, submitted on New Year's Eve 2011. Reviewer Stephen Henson merged it. Neither caught the bounds error. It shipped in OpenSSL 1.0.1 in March 2012 and lay dormant for two years until Neel Mehta at Google and Codenomicon independently found it. The subsequent fallout drove the creation of the Core Infrastructure Initiative, which funded critical open-source security work, and directly motivated LibreSSL's fork of OpenSSL.
Why it matters today: Heartbeat is now disabled by default in most TLS libraries, and TLS 1.3 dropped the extension entirely. But the lesson persists β length fields provided by an attacker must never be trusted against a separate buffer size. This pattern (declared length β actual length) still causes vulnerabilities in QUIC, protobuf, and countless custom protocols. RFC 6520 is required reading not for its protocol design, but as a case study in how a semantically clear spec, implemented by a competent author, can still produce a catastrophic bug when a bounds check is skipped.
Daily Software Engineering
2026-07-05
Fixed window rate limiting is the algorithm every engineer implements first: count requests per user in a time bucket, reject when the count exceeds the limit, reset the counter when the bucket rolls over. It's the "hello world" of rate limiting β trivial to build, cheap to run, and hiding a nasty edge case that will bite you in production.
The mechanism. Divide time into fixed windows (say, 60-second buckets aligned to the wall clock). For each user, keep a counter keyed by user_id:window_start. On each request, increment the counter and check if it exceeds the limit. When the window rolls over, the counter is either explicitly reset or naturally expires via TTL.
In Redis, this is three lines:
key = f"rl:{user_id}:{now // 60}"count = INCR keyEXPIRE key 60 (only needed on first increment)The burst problem. Suppose your limit is 100 requests per minute. A client who sends 100 requests at 12:00:59 and another 100 at 12:01:00 has just done 200 requests in one second β and your rate limiter says both windows are within limits. The window boundary is a cliff, not a slope. Attackers who know your window alignment can double their effective rate by clock-syncing their bursts.
Real-world example. An early GitHub API rate limiter used fixed windows aligned to the top of the hour. Users learned to schedule cron jobs at :00 and :30, effectively getting 10,000 requests in seconds instead of over an hour. GitHub eventually moved to sliding windows precisely to eliminate this abuse vector.
The math. With a limit of N per window of W seconds, the worst-case burst is 2N requests in W seconds β occurring across the boundary. Your downstream must handle 2Γ your advertised rate, or you must set your limit at half of what your capacity actually supports. That 50% headroom tax is the hidden cost of fixed windows.
When to use it anyway. Fixed windows are fine when: (1) the limit is generous relative to legitimate usage, (2) downstream capacity has 2Γ headroom, (3) the resource being protected is cheap to serve, or (4) you need a rate limiter now and will replace it later. For a public API where clients actively probe boundaries, upgrade to sliding window log or sliding window counter β both eliminate the boundary burst at modest additional cost.
Don't let its simplicity fool you into shipping it as your final answer for high-stakes endpoints.
Tool Nobody Knows
2026-07-05
You run SELECT * FROM users WHERE ... in psql, the result is 40 columns wide, less wraps every row into unreadable spaghetti, and the header disappears the moment you press space. So you type \pset pager off and squint at 200-line dumps like it's 1994. There is a better answer that predates every fashionable TUI: pspg, the "Postgres Pager" β despite the name it happily eats MySQL, SQLite, CSV, TSV, JSON-lines, and plain aligned text.
Install it (apt install pspg, brew install pspg, dnf install pspg) and wire it into psql:
cat >> ~/.psqlrc <<'EOF'
\pset border 2
\pset linestyle unicode
\setenv PAGER 'pspg --no-mouse -X -b'
EOF
Now every query lands in a pager that understands the table. The header row freezes. The first column freezes. Rows never wrap; you scroll horizontally with the arrow keys. Vim bindings work: / searches, n/N jump, g/G top/bottom, m sets a bookmark you can revisit with '.
Point it at anything tabular:
# CSV with a real header
pspg -f sales.csv --csv
# Tab-separated with custom delimiter
pspg -f logs.tsv --csv --csv-separator=$'\t'
# JSON lines from an API
curl -s https://api.example.com/events | pspg --querystream --format=json
# Live: watch a query result refresh every 2s
pspg --query='SELECT pid,state,query FROM pg_stat_activity' \
--host=db.internal --dbname=prod --watch 2
That last one is quietly amazing β pspg becomes a mini-dashboard, and you can freeze the view with p to inspect without the refresh yanking your cursor away.
Interactive superpowers most people never discover:
a (ascending) or d (descending) β pspg re-sorts in memory, no re-running the query.0-9 sets how many left columns stay pinned as you scroll right. Vital for wide fact tables.c then a substring jumps the horizontal scroll to the matching column. Great for SELECT * against 80-column tables.Alt-v highlights the current column so your eyes stop tracking the wrong number.Alt-k cycles ~20 built-in color themes. The Solarized ones are readable through a projector.Alt-l saves the current (possibly sorted, filtered) buffer to a file.Where does it beat the alternatives?
less -S: less has zero idea what a column is. No frozen header, no sort, no per-column search.mysql -e '...' | pspg Just Works with no plugin, no wrapper, no editor.One trick worth stealing: set it as the pager for mycli, litecli, and even kubectl get -o wide:
alias kwide='kubectl get pods -o wide | pspg --no-mouse -X -b --csv-header=on'
Suddenly a 20-node pod listing is navigable instead of terminal soup.
What If Engineering
2026-07-05
Municipal recycling is a mess. Single-stream facilities use eddy currents, air classifiers, optical sorters, and armies of underpaid humans to separate PET from HDPE from aluminum from glass. What if we skipped the mechanical circus and used standing acoustic waves β the same physics that levitates styrofoam beads in physics demos β but scaled up to a 200-meter tower?
Acoustic levitation works because a standing wave creates pressure nodes (low pressure) and antinodes (high pressure). Small objects get pushed toward nodes with a force that depends on the object's acoustic contrast factor, which is a function of density and compressibility relative to the medium. Denser particles feel stronger forces. If you tune the frequency and geometry, particles of different densities settle at different node positions β a density spectrograph made of sound.
The Gor'kov potential governing the force on a small sphere of radius r in a standing wave scales as:
F β (rΒ³ Β· Ο_particle Β· vΒ²) / Ξ»
where v is the acoustic particle velocity and Ξ» is the wavelength. To levitate a chunk of aluminum shard (say 5 mm, ~0.3 g), against gravity (0.003 N), we need enough acoustic radiation pressure. Levitating water droplets requires ~155 dB SPL. Aluminum is 2700Γ denser than air but only ~2.7Γ denser than water β so call it ~170 dB, roughly a Saturn V at 100 meters. Continuously. Inside a building.
Now for the tower. To sort meaningfully sized shredded fragments (~1 cm), we need wavelengths around 3β10 cm, meaning frequencies of 3β10 kHz β deeply within the "eardrum destruction" range. Building a 200 m resonant cavity at 5 kHz gives us Ξ» β 6.8 cm, so ~2,940 pressure nodes stacked vertically. Each node becomes a density bin. PET (1.38 g/cmΒ³), HDPE (0.95), aluminum (2.7), glass (2.5), copper (8.96) all sort into distinct floors of a giant sonic filing cabinet.
Power budget. 170 dB SPL is 100 kW/mΒ² of acoustic intensity. A 10 m Γ 10 m cross-section tower needs 10 MW of acoustic power. Piezoelectric transducer efficiency tops out around 60%, so ~17 MW electrical draw β a small town's worth of electricity, running continuously. Feed rate: at 10 kg/mΒ³ of suspended material and a 30-second settling time, we process ~2 tonnes/hour. A modern MRF (materials recovery facility) does 30 tonnes/hour on 1 MW. We are worse by a factor of 500.
The showstopper isn't power β it's nonlinear acoustics. Above ~140 dB, air stops behaving linearly. Shock waves form, harmonics bleed energy into heat, and the medium itself starts streaming (acoustic streaming β bulk airflow driven by sound). At 170 dB, you're not levitating in air anymore; you're levitating in a hot, turbulent, weakly ionized plasma of your own making. The standing wave you carefully designed decoheres into chaos within meters of the transducer.
Fixes exist. Use a denser medium β pressurize the tower to 10 atm and required SPL drops ~20 dB. Or sort underwater, where acoustic contrast is huge and 155 dB is routine (ultrasonic microfluidic sorters already do this at lab scale). A water-filled 200 m tower running at 100 kHz could sort millimeter-scale plastics beautifully β but now you're pumping and drying wet trash, which was the whole problem eddy-current sorters were meant to avoid.
Wikipedia Rabbit Hole
2026-07-05
Wikipedia: Read the full article
Imagine a flat pane of glass, thin as a windowpane, that can display a perfect three-dimensional scene indistinguishable from looking through a window at a real object. Not a hologram that shimmers when you tilt your head. Not a stereoscopic trick that gives half your family a headache. A genuine reconstruction of the light field itself β every photon leaving that pane traveling in exactly the direction it would have traveled if the object were really there. This is the promise of phased-array optics, and the physics is already proven. The engineering is just ludicrously hard.
You probably know phased arrays from radar. The AEGIS ships, the PAVE PAWS early-warning stations, the AESA radar in an F-35 β they all work by controlling the phase of thousands of tiny emitters so that their wavefronts interfere constructively in a chosen direction. No spinning dish required. Steer the beam electronically, in microseconds, in any direction you like. Phased-array optics is exactly this idea, scaled down by a factor of about a hundred thousand β because visible light has a wavelength of ~500 nanometers, not the centimeters of microwave radar.
That scaling is where it gets absurd. To reconstruct an arbitrary light field over a display the size of a laptop screen, you need emitters spaced roughly a half-wavelength apart. Do the math:
And yet β nothing about it is impossible. It's not fighting quantum mechanics or thermodynamics. It's fighting manufacturing. Optical phased arrays already exist at smaller scales: they're how solid-state lidar in self-driving cars steers its beam without moving parts, and DARPA has funded chip-scale versions with thousands of elements. The gap between "thousands" and "trillions" is enormous, but it's the same gap Moore's Law has repeatedly closed for transistors.
Here's what makes it delicious: a working phased-array optical display would obsolete essentially every other display technology in a single stroke. VR headsets? Unnecessary β the flat screen already produces the light your eyes would receive in VR. Holograms? A weak subset of what this does. Windows in submarines and windowless offices? Just show the view. Telescopes? A phased-array receiver could synthesize an aperture the size of its entire surface without any curved mirror at all.
The theory dates back to the 1970s. The first optical phased-array beam steering was demonstrated in the 1990s. Progress since has been steady but grinding β and mostly happening in labs you've never heard of, funded by agencies that want to point lasers at things.
Daily YT Documentary
2026-07-05
Channel: Lex Capital (0 subscribers)
This documentary tackles one of the most quietly transformative economic shifts of our era: the systematic replacement of ownership with subscription and licensing models. What used to be a one-time purchase β software, a car, a tractor, even a household appliance β is increasingly a perpetual rental relationship with a corporation that retains ultimate control over the product you paid for.
The film explores how this shift touches nearly every domain of modern life: John Deere farmers locked out of repairing their own equipment, BMW charging monthly fees for heated seats already installed in the car, Adobe's transition from perpetual licenses to Creative Cloud, smart appliances bricked when manufacturers sunset servers, and games disappearing from digital libraries. It connects these individual frustrations into a broader thesis β that ownership itself is being redefined into a form of ongoing corporate taxation on daily life.
What makes it worth watching is the framing: rather than a rant, it treats the shift as a structural economic phenomenon with clear winners and losers, and traces the legal and technological mechanisms (EULAs, DRM, forced connectivity, right-to-repair battles) that make it enforceable. Whether or not you agree with every conclusion, understanding the machinery behind "you'll own nothing" is genuinely useful literacy for anyone navigating modern consumer contracts.
Note: Lex Capital has 0 subscribers, so this is a brand-new channel β quality is unverified, but the topic is substantive and increasingly urgent.
Daily YT Electronics
2026-07-05
Channel: BoardRev (4290 subscribers)
Board-level repair videos are one of the best ways to see practical electronics diagnosis in action, and this one from BoardRev tackles a genuinely tricky case: an iPhone 14 Pro Max with a completely unresponsive touchscreen that another shop couldn't fix.
What makes this video worth watching is the direct comparison of two diagnostic techniques: using a multimeter's diode mode versus using an oscilloscope to hunt down a short circuit on a dense, multilayer PCB. Diode mode is the go-to first pass for most repair techs β quick, cheap, and effective for finding dead shorts β but it has real limitations when a fault is intermittent, partial, or hidden behind active components. Seeing when and why to reach for the scope instead is the kind of practical knowledge that's hard to get outside of an apprenticeship.
You'll pick up transferable skills here even if you never touch an iPhone: probing techniques on tiny 0201 components, interpreting waveforms from touch controller lines, and the general logic of narrowing down a short from a whole rail to a single component. The channel is small (~4.3k subs) but the production and technical depth punch well above that.
Daily YT Engineering
2026-07-05
Channel: Civil Test & Build (749 subscribers)
Undisturbed soil sampling is one of those geotechnical fundamentals that gets discussed in textbooks but rarely shown in the field. This video demonstrates the Mazier Sampler β a triple-tube core barrel used to recover intact samples from stiff clays, weathered rock, and mixed soil profiles where a conventional Shelby tube would fail.
The Mazier design uses an inner liner that shields the core from the drilling fluid and the rotating outer barrel, so the sample reaches the lab with its fabric, moisture content, and shear strength preserved. That matters because parameters like undrained shear strength (Su), oedometer compressibility, and effective stress friction angle can only be trusted if the sample hasn't been remoulded during extraction. A disturbed sample gives you a disturbed answer, and foundation design built on disturbed answers is how buildings end up on unexpected settlement curves.
For anyone doing site investigation work β or specifying it β seeing the actual mechanics of how the inner tube retracts, how the shoe protects the core, and how the assembly is broken down at surface is genuinely useful. It's the kind of hands-on knowledge that closes the gap between spec-writing engineers and the drillers who actually deliver the samples.
Daily YT Maker
2026-07-05
Channel: PrintmakersMatrix (6 subscribers)
A proofing press is the workhorse of relief printmaking β it applies the even, high pressure needed to transfer ink from a carved block (lino, wood, or metal type) onto paper. Traditional presses are expensive cast-iron beasts with a fixed bed size, which caps the dimensions of any print you can make. This video tackles that constraint head-on by walking through a DIY build for an endless proofing press: a design where the bed can extend indefinitely, letting a printmaker pull prints far larger than the press itself.
What makes this worth watching is the mechanical problem-solving involved. Achieving consistent, uniform pressure across an arbitrarily long bed is genuinely tricky β it requires careful thought about roller alignment, frame rigidity, bearing choice, and how the paper and blanket travel through the system. The creator is releasing the files free through picapressofficial.com, which suggests this is a considered design rather than a one-off hack.
For makers, this sits at a nice crossroads of woodworking/metalworking fabrication, mechanical engineering, and traditional craft. Even if you never plan to pull a relief print, the roller-press geometry is applicable to pasta rollers, jewelry mills, and anything else that needs even squeeze across a moving bed. A tiny channel (6 subscribers) sharing open files for a well-thought-out tool is exactly the kind of small-maker generosity worth boosting.
Daily YT Welding
2026-07-05
Channel: METALLUM Studio (10 subscribers)
This is a genuinely useful pick from a tiny channel (just 10 subscribers) that shows a complete CNC plasma project from digital design through to a weld-ready set of panels. The maker cuts every side of a decorative fire cube from 4mm mild steel on their home CNC plasma table β a material thickness that sits in a practical sweet spot for hobbyist tables, where cut quality, dross, and pierce timing all really matter.
What makes this worth watching over the flood of "plasma porn" clips is that it's a project video, not a montage. Viewers get to see how a multi-panel enclosure is laid out so the tabs, slots, and edges align when assembled, which is one of the trickier parts of designing for plasma β kerf compensation and panel fitment are things you only learn by watching someone else's mistakes and fixes. The "ready for welding" framing also implies a follow-up on tacking and welding thin-ish steel panels without warping, which is a common pain point for beginners moving up from cardboard mockups to steel.
For anyone with a Langmuir, CrossFire, or similar entry-level CNC plasma table, this is the kind of end-to-end build content that's hard to find outside of the big channels.
