Software Tech News

VoidZero, the team behind popular web tools like Vite, Vitest, and Rolldown, is officially joining Cloudflare. Despite the acquisition, the team confirmed that Vite will remain completely open source and vendor-agnostic for the broader community.

Anthropic has released an open-source framework designed to enhance AI-powered vulnerability discovery and software defense. The customizable autonomous harness provides essential skills for threat modeling, automated scanning, triage, and patching. Developers can leverage this reference tool to significantly streamline the identification and resolution of code vulnerabilities.

A security researcher built a deliberately vulnerable book review app and spent $1,500 to test if Large Language Models could successfully hack it. The experiment aimed to determine if AI can reproduce common classes of software exploits typically found in real-world applications.

Huawei has introduced KVarN, a new native vLLM backend designed for KV-cache quantization. This calibration-free enhancement allows developers to achieve three to five times more context length while maintaining FP16-level accuracy and exceeding standard throughput. The improved performance can be easily enabled for AI agents using just a single flag.

Gaussian splatting is an advanced 3D rendering technique that leverages modern GPUs to create highly detailed visual representations, though experts caution its lack of physical surfaces and high processing costs currently limit its use in real-time AAA gaming. Consequently, the technology is primarily being adopted for visual-only applications, such as generating realistic digital environments to train computer vision models for autonomous vehicles and drones.

Uruky, an EU-based alternative to Kagi, has expanded its ad-free private search platform with new image search and URL rewrite features. These updates enhance the search engine's capabilities while maintaining its core focus on user privacy.

SQL has maintained its industry relevance for decades because it is fundamentally built on mathematics rather than fleeting technological trends. This enduring stability makes learning the language a valuable, long-term investment for developers looking to future-proof their technical skill sets.

An analysis of the Stella companion app reveals that Meta has shipped a complete on-device facial recognition stack for its smart glasses. The recent software build includes embedded face models, a local database schema, and a vector index to process facial data directly on the device. This indicates that Meta's wearables are now fully equipped to identify faces locally without relying on cloud processing.

Readers discussing persistent live images for Debian and Fedora explore various methods for retaining state changes, comparing immutable technologies like rpm-ostree and bootc against traditional overlay filesystems and dedicated persistent partitions. While immutable approaches provide highly robust and reproducible environments, users warn they can cause significant performance overhead for everyday development tasks compared to standard live USB setups. Ultimately, the community suggests that while advanced tools offer deep system reliability, simpler solutions like overlay configurations or specialized partition scripts remain highly effective for general persistence.

Building on previous hardware modifications, a developer has established JLink JTAG access on the Pinecil smart soldering iron for advanced debugging. This renewed exploration of the device was prompted by the recent addition of upstream support for its Bouffalo Lab BL706 microcontroller in the Zephyr operating system.

A decade of open-source experimentation in psychovisual modeling and compression has paved the way for JPEG XL, the next-generation image coding standard. These collaborative technical advancements shape the future of digital imaging by delivering superior visual quality and efficiency.

A recent write-up on reverse engineering and patching the firmware of a guitar amp sparked a detailed community discussion about the complexities of hardware hacking. Readers shared their own experiences and practical advice on mastering embedded engineering skills, such as deciphering datasheets, using logic analyzers, and brute-forcing hardware interfaces. The conversation highlighted the steep learning curve of the field, emphasizing that persistence and comprehensive beginner tutorials are essential for demystifying hardware modification.

CERN's legacy CASTOR storage system was officially replaced in 2020 by the CERN Tape Array after its automated disk-to-tape abstraction caused unpredictable performance issues. The shift to the new tape array, along with their in-house EOS disk storage solution, resolved operational bottlenecks and eliminated random staging delays. Additionally, the organization continues to engage the public by selling retired LHC data tapes as souvenirs and hosting petabytes of open-access physics data.

Elixir version 1.20 is now a gradually typed language, marking a significant shift in how code is validated. This update ensures that every program is automatically type-checked to detect verified bugs and typing violations.

Uber implemented a $1,500 monthly spending limit on internal AI tools after exhausting its entire 2026 AI budget in just four months. This sudden cap highlights the rapid escalation of enterprise AI costs and serves as a valuable benchmark for how companies are currently managing and pricing their AI usage.

DaVinci Resolve 21 offers professional video editing, color correction, visual effects, and audio post production tools within a single application. The comprehensive software suite is available in both free and paid versions for Mac, Windows, and Linux users.

Let's Encrypt plans to implement Merkle Tree Certificates to add post-quantum authentication to the web without sacrificing the speed and reliability of TLS. This proactive shift addresses the growing urgency of securing web traffic against future quantum computers capable of forging digital signatures in real time.

A newly discovered vulnerability in Visual Studio Code allows attackers to steal GitHub authentication tokens with a single click. This security flaw puts developers at risk of having their repositories and sensitive source code compromised if the exploit is triggered.

Meta is introducing new workplace tracking controls that allow employees to temporarily pause data collection. According to an internal memo, workers can now opt out of being monitored for up to 30 minutes at a time.

A newly discovered exploit called Pwnd Blaster allows attackers to compromise a PC remotely through its built-in speaker. The vulnerability abuses an unauthenticated Bluetooth protocol to turn the audio hardware into a malicious input device. This enables hackers to silently inject harmful keystrokes into the system without ever physically touching the computer.

Gooey is a new hybrid immediate and retained mode UI framework for the Zig programming language designed to build fast, GPU-rendered applications. It supports cross-platform development by leveraging graphics APIs such as Metal, WebGPU, and Vulkan across macOS, WebAssembly, and Wayland environments.

A recent article highlights how Java developers frequently add numerous fields to large classes without considering the resulting memory overhead. Instead of evaluating the byte-level impact of these additions, programmers typically rely on asymptotic algorithmic analysis to measure performance. The author argues that true optimization requires recognizing that the memory cost of every single field matters in class design.

Ableton has introduced the Extensions SDK, an open JavaScript toolkit designed to expand the capabilities of its Live 12 Suite. This framework empowers developers and users to build custom tools that introduce fresh functionalities directly into the music production software.

After six years of development, the reactive notebook environment Pluto.jl has reached its official 1.0 release. This milestone celebrates the project's significant progress and signifies that the platform is fully mature and ready for widespread use.

Roku has released the operating system for its Roku LT devices as an open source distribution. The platform is widely recognized for providing simple access to thousands of streaming entertainment channels directly to your television. This new release gives developers the ability to modify and adapt the underlying software for custom applications.

Edsger is a newly launched handwritten Clojure REPL designed specifically for the reMarkable 2 e-ink tablet, allowing developers to write and execute functional code by hand. To demonstrate the tool's capabilities, the creator also published a companion blog post written entirely by hand.

Y Combinator-backed startup Hyper is launching an AI-powered company brain that uses knowledge graphs and large language models to structure enterprise domain knowledge for agentic workflows. The platform stores facts as interconnected subject-predicate-object records in a Postgres database, enabling AI agents to perform dynamic graph traversals to maintain deep business context. Addressing community questions during the launch, founders clarified their strict no-training data privacy policy and explained how the system uses supplementary tool calls to mitigate potential context loss.

A developer has reverse-engineered the classic 1990 DOS game Test Drive 3 to extract and map its complete world routing data. This open-source project is now available on GitHub, allowing fans to explore the retro game environment and contribute to further development.

Capstone is a multi-platform and multi-architecture disassembly framework designed for comprehensive binary analysis. Dubbed the ultimate disassembler, the tool offers versatile capabilities for developers and security researchers. It serves as a highly adaptable solution for reverse engineering across diverse hardware and software environments.

The new open-source tool sandboxd allows developers to self-host an AI app builder that constructs real applications within isolated Docker and Go environments. It generates live preview URLs for each project without requiring Kubernetes and can be deployed on your own server with a single command.