- ↔
- →
to read (pdf)
- I don't want your PRs anymore
- JitterDropper | OALABS Research
- DomainTools Investigations | DPRK Malware Modularity: Diversity and Functional Specialization
- EXHIB: A Benchmark for Realistic and Diverse Evaluation of Function Similarity in the Wild
- Neobrutalism components - Start making neobrutalism layouts today
- May 15, 2026
-
🔗 r/Yorkshire Just love this view, Richmond, Yorkshire. rss
| submitted by /u/Still_Function_5428
[link] [comments]
---|--- -
🔗 r/Harrogate Builder recommendations rss
Can anyone recommend a builder for an extension? Cheers
submitted by /u/LurkishEmpire
[link] [comments] -
🔗 r/york Recommendation for local housing solicitor, surveyors etc rss
Hi all, had an offer accepted for a house in York. It will be my first time buying so I am learning as I go what you need. Looking for recommendations for local solicitors, surveyors, mortgage brokers and anything else that you need to buy a house.
Thanks!submitted by /u/bethisblue9
[link] [comments] -
🔗 r/Harrogate Anyone else noticed the shift towards pre-loved jewellery lately? rss
| okay so maybe it's just me but has anyone else noticed how differently people talk about pre-loved jewellery now compared to even a few years ago? there used to be this weird stigma around it. like second hand meant lesser somehow. and now it's completely flipped — people are actively hunting for it. pieces with a bit of history, unusual stones, settings you'd never see in a shopping centre. which honestly makes so much more sense to me. i think some of it is sustainability, people are more conscious about that stuff now. but honestly i just think it's taste. mass produced jewellery looks exactly like what it is. a pre-loved piece has a life to it. harrogate feels like a town that gets this — there's always been that appreciation for quality over fast anything. has anyone else gone down the pre-loved route? jewellery or otherwise? and if anyone's ever picked something up and wondered what the hallmarks mean — 750 is 18ct gold, 375 is 9ct — happy to help decode it, it's kind of my thing. submitted by /u/FogalandBarnes
[link] [comments]
---|--- -
🔗 r/Leeds My Child's Geography coursework rss
Hi, all! I was wondering if you could fill out this short survey for my child's geography coursework. It's only three questions and won't take that long at all. It would really help them get a high result and grade. They're counting on a good grade for their coursework to get into university. Thank you all that will take it!
Just copy this link into your web browser: https://www.smartsurvey.co.uk/t/HLQRVC/
submitted by /u/WaveSuspicious9062
[link] [comments] -
🔗 r/reverseengineering yarax_android: The first Android implementation of yara-x. Blazing fast pattern matching swiss knife running natively on Android. rss
submitted by /u/IndAnony
[link] [comments] -
🔗 r/york Participants needed 📚 rss
Hi everyone!
Mods approved post
I am currently recruiting participants for my MRes study exploring intimate partner violece and the influence on help-seeking behaviours.
What is involved?🤔
Two surveys about the experience of intimate partner violence. And An optional interview for individuals who identify as LGBTQIA+.Who can take part?💬
Part 1: Individuals 18+ and anyone with relevant lived experience. Participantion is voluntary, anonymous, and confidential.
Part 2: same as above, but identify as LGBTQIA+If you or someone you know might want to take part, please follow this link: https://yorksj.eu.qualtrics.com/jfe/form/SV\_3QWo1FZxZ87xBEG?fbclid=PARlRTSARvHGdleHRuA2FlbQIxMABzcnRjBmFwcF9pZA8xMjQwMjQ1NzQyODc0MTQAAacsbZt\_yhRpzkzZVOvdXS28h0SSL1DVZFwkhM4sNcdCUqz1IZ86X0DuYK2M0A\_aem\_WGPGWLn8pSvGcuTj1tMLhQ
submitted by /u/fattyfatsofatss
[link] [comments] -
🔗 r/reverseengineering GitHub - jetnoir/metis: Automated binary vulnerability triage for macOS, Linux, and Windows targets rss
submitted by /u/Prize-Unlucky
[link] [comments] -
🔗 r/reverseengineering GitHub - jetnoir/poppy: Dynamic XPC Observability & Fault Injection for macOS rss
submitted by /u/Prize-Unlucky
[link] [comments] -
🔗 r/wiesbaden Al Petra Restaurant wieder auf? rss
Hallo, google sagt zu, auf der Webseite steht sowas aber nicht, sollen am renovieren gewesen sein. Ist da jemand vor kurzem mal gewesen oder vorbei gekommen (Moritzstrasse 34) ?
Komme von weiter her mal vorbei und wollte da mal wieder hin.
Danke
.
submitted by /u/QRCodeART
[link] [comments] -
🔗 r/reverseengineering Trafexia V2 - Mobile Traffic Interceptor Toolkit rss
submitted by /u/danieldev23
[link] [comments] -
🔗 Drew DeVault's blog Add an LLM policy for rust-lang/rust rss
No comment on this PR may mention the following topics:
- Long-term social or economic impact of LLMs
- The environmental impact of LLMs
- Anything to do with the copyright status of LLM output
- Moral judgements about people who use LLMs
We have asked the moderation team to help us enforce these rules.
-
- May 14, 2026
-
🔗 IDA Plugin Updates IDA Plugin Updates on 2026-05-14 rss
IDA Plugin Updates on 2026-05-14
Activity:
- diaphora
- a5792684: Added requirements.txt
- ida-claude-plugins
- 5809d125: Add ida-codemode-mcp (private)
- IDA-FastAnalysis
- IDA-MCP
- ida-pro-mcp
- 47de01b1: Update installation instructions
- idac
- pharos
- plugin-ida
- 00b17b90: Merge pull request #115 from RevEngAI/feat/auto-bump-revengai-sdk
- bdd898c9: chore: update workflow
- d9bbb71f: Merge pull request #113 from RevEngAI/feat/auto-bump-revengai-sdk
- 6455cb2b: chore: fix worklow
- 4bc1b7cf: Merge pull request #112 from RevEngAI/feat/auto-bump-revengai-sdk
- 2c2f25fe: chore: bump python workflow version
- dd1b9d46: chore: product team as owners
- 67d138d2: chore: add scheduled workflow to bump revengai SDK pin
- tix-seven
- f4fc6d22: feat: add MOSIP request timeout and retry configuration
- a1acdf2c: Refactor hardware pins and add ultrasonic functionality
- ed26f96c: refactor: centralized demo loggings in one class (PLEASE TEST HUHU)
- 1b323f27: Merge branch 'main' of https://github.com/ark1tech/tix-seven
- diaphora
-
🔗 r/york Looking for people to attend pride with! rss
Hi! I really wanna go to York pride on May 30th, and I realise this may sound silly, but I'm hesitating a bit bc I have absolutely no one to attend with. I don't have any queer friends here and nobody really who would go with me. It would be the first pride I attend. So basically just wondering if anyone would be down to buddy up or group up etc to go to pride? I'm a lesbian in her late twenties, if that matters.
If anyone's interested, send a message or reply!
submitted by /u/meetmeinthewind
[link] [comments] -
🔗 r/LocalLLaMA NVIDIA Reportedly Prepares RTX 5090 Price Hike Amid Rising GDDR7 Costs (maybe RTX 50 and PRO series as well) rss
| submitted by /u/panchovix
[link] [comments]
---|--- -
🔗 r/york The destruction has begun rss
| Two days ago three beautiful elegant silver birch trees stood here, within the grounds of Bootham Park Hospital. This morning I was horrified to see they had been cut down. How many more trees will be destroyed as the developers’ bulldozers move in on the park?
The entire area is within a conservation area and as such permission should be sought before and work on trees. I have made a report to the council. submitted by /u/dawnriser
[link] [comments]
---|--- -
🔗 r/reverseengineering HyperVenom: Using Hyper-V for Ring -1 Control from Usermode rss
submitted by /u/MourningStare
[link] [comments] -
🔗 The Pragmatic Engineer The Pulse: Did capacity shortages turn Anthropic hostile to devs? rss
Hi, this is Gergely with a bonus, free issue of the Pragmatic Engineer Newsletter. In every issue, I cover Big Tech and startups through the lens of senior engineers and engineering leaders. Today, we cover one out of five topics from last week 's The Pulse issue. Full subscribers received the article below seven days ago. If you 've been forwarded this email, you can subscribe here .
Last week, we reported on Anthropic seemingly being on a speed run to break devs' goodwill by silently "nerfing" Claude Code, banning corporate accounts without warning, and a weird growth experiment involving revoking Claude Code and then restoring it. This week, a dev on the $20/month Pro plan had Claude Code removed just days into their subscription:
Claude
Code turned out to be a trial for seven days for some paying customers.
Source:Jaime
GeigerThis week, Anthropic announced a big data center expansion, and relaxing previous usage limitations, while**** Elon Musk's SpaceX / xAI ( a single company after a merger) is renting its complete Colossus 1 data center to Anthropic. From the announcement:
"Colossus 1 features over 220,000 NVIDIA GPUs, including dense deployments of H100, H200, and next-generation GB200 accelerators. The cluster delivers extreme parallel performance for large language models, multimodal systems, scientific simulations, and generative AI at frontier scale.
Anthropic plans to use this additional compute to directly improve capacity for Claude Pro and Claude Max subscribers."
In parallel with this release, Anthropic announced:
- Doubling Claude Code's current 5-hour limits for Pro, Max, Team, and seat-based Enterprise plans
- Removing peak hours limit reduction on Claude Code for Pro and Max plans
- Substantially raising API rate limits for Opus models
Is it possible that capacity issues are what led Anthropic to make Claude worse? It's confirmed the company has struggled with capacity for months. Conveniently, Claude Code being "nerfed" led to lower compute load, while removing Claude Code access from cheap plans could look like rate limiting. Even the banning of corporate accounts could be seen as scaling back at a time when the business has struggled to serve existing growth. Yesterday, (6 May), at the Code with Claude event hosted by Anthropic, CEO, Dario Amodei, said:
"We originally planned for 10x growth, and we've seen something more like 80x growth in revenue and usage over the last period of time."
SpaceX / xAI renting a good chunk of its capacity to Anthropic is ironic, considering that xAI (Musk's AI startup) builds Grok, a frontier model and direct rival of Claude, and also in January, Anthropic banned xAI developers from Claude. As covered at the time:
"It's common for an AI lab to not allow another AI lab to use its model, like at OpenAI, Anthropic, and Google. On the other side, there's also the pertinent question of why a leading AI lab would even want to use a rival for its own day-to-day work?
Turns out, xAI (Elon Musk's AI lab) was relying on Cursor to write code, which we know because they got cut off."
Anthropic likely banned xAI to stop Claude from being potentially distilled while it tried to improve Grok's coding capability. Meanwhile, Musk called Anthropic "misanthropic and evil" earlier this year, and said the new tenant "hates Western civilization". But both parties seem happy to put that behind them and strike a deal, so perhaps there's something else at play.
Could SpaceX / xAI be checking out of the frontier-AI model wars? Leasing a good chunk of its data center capacity might suggest that.**** SpaceX / xAI has two data centers: Colossus 1 and Colossus 2. Colossus 1 represents somewhere around 45% of current SpaceX / xAI capacity, and 20-25% of planned total capacity.
Giving up as much capacity as this might indicate a lack of demand, or capacity sitting idle. It also means Grok is losing out in market share to Claude, ChatGPT, and other leading models. In February 's AI tooling survey we found scarce mention of Grok, which lagged in usage behind open models like DeepSeek and Qwen.
To be fair, unlike Anthropic and OpenAI, Grok never had a B2C nor B2B business that took off. The biggest consumer use case for Grok seems to be its integration into the social media platform, X; at least, I don't know of any tech company using the model for serious work.
" The enemy of my enemy is my friend", says the maxim, and if there's one company Musk hates, it's OpenAI. He is currently suing OpenAI, claiming it betrayed its founding nonprofit mission to develop safe AGI for humanity's benefit by shifting to a profit-driven model backed by Microsoft. Musk also claims that despite investing about $40M, he has no ownership of the company.
He wants $150B in damages, the removal of Sam Altman and Greg Brockman, and for OpenAI to return to a full nonprofit, as per when he invested in the company. We covered more about OpenAI 's own ethical challenges between nonprofit and for-profit right after the firing of Sam Altman in 2023, in the deepdive What is OpenAI, really?
Similarly, Anthropic may well have an issue with OpenAI, if CEO Dario Amodei's failure to join hands with Sam Altman while sharing a stage with the Prime Minister of India earlier this year is anything to go by.
(Most)
AI leaders join hands at the AI Impact Summit with India 's Prime Minister.
Source: FortuneCapacity issues hurting Anthropic would benefit OpenAI, and so by offering significant capacity to Anthropic, Musk is making it harder for OpenAI to win the market. That would be ironic, given he's a former investor.
Read the full issue of last week 's The Pulse , or check out this week 's The Pulse . This week 's issue covers:
- Forward deployed engineering heats up again. Massive demand for the role at Google, OpenAI, and Anthropic. The latest version of the FDE role looks like the consultant / solution architect role done by many early-junior engineers.
- Why are layoffs spiking? Tech job cuts are higher than since early 2023 for various reasons: smaller teams prompt reorgs and reduce the need for middle management. Meanwhile, poorly performing companies make layoffs without the influence of AI.
- New trend: self-reporting 100% AI generated code at Microsoft. With mid-year performance reviews looming, some managers advise their reports to claim they use AI for everything.
- Industry Pulse. Tokenmaxxing at Amazon, too, SaaS companies grow faster than before - perhaps partly due to AI, Bun rewritten in Rust with AI works well, Anthropic overtakes OpenAI in enterprise spend, and more.
- Vibe coding & agentic engineering get uncomfortably close. A relatable observation by software engineer, Simon Willison, about reviewing AI agents' code less than would be ideal.
-
🔗 r/Leeds Dirt Dyke Dive - worth going??? rss
Hi all - I recently came out as lesbian, and i’m 25(late side i know). I don’t have any queer friends at all, so i don’t know much about queer spaces etc. I heard about the Dirt Dyke Dive events at wharf chambers and it looks like a great opportunity to meet people but the thought of going alone and standing in a corner is so scary lol. do people turn up alone? or is that really weird? I just wanna meet people whether it be friends or more but any advice is appreciated:)
submitted by /u/AggressiveWinner6401
[link] [comments] -
🔗 r/reverseengineering VELVET CHOLLIMA Infostealer Campaign Using Trading App as Lure rss
submitted by /u/CyberMasterV
[link] [comments] -
🔗 r/york Wondering what year is this? rss
| submitted by /u/ScrollAndThink
[link] [comments]
---|--- -
🔗 r/reverseengineering Ghidra 12.1 has been released! rss
submitted by /u/ryanmkurtz
[link] [comments] -
🔗 r/Yorkshire ‘Abandoned’ Yorkshire airport begins path to reopening after loan agreement rss
| submitted by /u/JOE_Media
[link] [comments]
---|--- -
🔗 r/LocalLLaMA Anyone actually using a local LLM as their daily knowledge base? Not for coding, for life stuff. What's your setup? rss
So I've been going down a rabbit hole lately and I can't find many people actually talking about this specific use case.
everyone here runs local LLMs for coding, chat, maybe some creative writing. cool. But what about using it as a proper personal knowledge base? like, dump your own notes, PDFs, random docs into it and actually query your own life privately, every day.
I tried looking into this seriously and hit a wall. Most resources either assume you're a developer building something, or they're 2 years old and recommend tools that have completely changed since.
So genuinely asking, is anyone here actually doing this day to day? Not as an experiment, but as a real workflow?
Things I keep running into that I can't figure out:
- What model are you running for this? RAG on consumer hardware seems finicky depending on quant
- Do you actually trust the retrieval or do you double check everything because hallucinations?
- LlamaIndex vs Ollama vs whatever else has anything actually made this less painful recently?
- Context length, how do you handle it when your personal docs start piling up?
Not looking for a tutorial or a GitHub repo. Just want to hear from someone who's made this work without it becoming a part time job to maintain.
submitted by /u/InformationSweet808
[link] [comments] -
🔗 r/Yorkshire A trip through Standedge Tunnel – the longest canal tunnel in the UK rss
| The trip takes around three hours, led by Canal & River Trust employees. Tickets start from £10 for 30 minute journeys and £50 per adult for the 3-hour through trip. submitted by /u/Yorkshire-List
[link] [comments]
---|--- -
🔗 r/Leeds I'm 16 I've applied for around 450 jobs I just need something rss
I've checked every damm website of the big chains and companies in Leeds (The fast food places mainly) and I've applied for 379 jobs on Indeed and I've only gotten 2 interviews which both failed
I just need something, anything I'll work any damm position for less than minimum wage if anyone knows of anything please god tell me
submitted by /u/SevenVoidDrills2
[link] [comments] -
🔗 r/reverseengineering Reverse Engineering Slither.io’s Network Protocol rss
submitted by /u/RevolutionarySalt370
[link] [comments] -
🔗 r/LocalLLaMA Multi-Token Prediction (MTP) for Qwen on LLaMA.cpp + TurboQuant rss
| Implemented Multi-Token Prediction for QWEN on LLaMA.cpp with TurboQuant. +40% performance! 90% acceptance rate. Running locally on a MacBook Pro M5 Max 64GB RAM. Outputs:
LLaMA.cpp + TurboQuant: 21 tokens/s
LLaMA.cpp + TurboQuant + MTP: 34 tokens/s Patched LLaMA.cpp with MTP and TurboQuant: https://github.com/AtomicBot-ai/atomic-llama-cpp-turboquant Quantized Qwen 3.6 27B (and 35B) into GGUF with MTP: https://huggingface.co/collections/AtomicChat/qwen-36-udt-mtp Local Ai Models App: Atomic.Chat submitted by /u/gladkos
[link] [comments]
---|--- -
🔗 matklad Catch Flakes On Main rss
Catch Flakes On Main
May 14, 2026
A small Mechanical Habit today:
When using not rocket science rule / merge queue, continue to redundantly run the full test suite on main. Maintain an easily accessible list of recent main failures — these are the flaky tests to eradicate.
For an example, see the “Flakes” link on https://devhub.tigerbeetle.com
Flaky tests are tests that fail intermittently, once in a thousand runs. This might be due to a genuine bug (assumptions about scheduling that mostly hold) or due to instability of underlying infrastructure (e.g., inability to download a release from GitHub, or to delete a folder on Windows). In either case, flaky tests are a huge productivity drain — as the size and complexity of test suite grows, more and more CI runs fail spuriously, even as each individual test almost always passes.
Flaky tests are challenging to deal with — if you are working on landing a PR and your CI fails due to an obvious flake, the temptation to just re-run the test suite is enormous, especially if there’s a certain background dissatisfaction with infrastructure stability.
If you are of a mind to do some flake squashing, then your PRs will be green just to spite you! And working off of others’ PRs would require first to separate flakes from genuine failures.
This is why the merge queue is powerful: if there’s a guarantee that every commit on the main branch passes the tests, then every failure on main is a flake, by definition. Collecting all such failures into a single list compresses time, allows to prioritize the most impactful sources of instability, and reveals correlations between failures.
-
🔗 Console.dev newsletter boring rss
Description: SSH tunnel manager.
What we like: Makes it easy to open, persist, and list SSH tunnels. No need to remember SSH argument ordering. Supports TCP and sockets, including a reverse SOCKS5 proxy. Configurable via TOML.
What we dislike: Nothing - does the job well.
-
🔗 Console.dev newsletter Datatype rss
Description: Charts as a font.
What we like: Render charts using a font so it doesn’t require any other dependencies (no JS, no images). Available via Google Fonts or as a self-hosted font. Font appears in-line with text. Variable font so you can configure density and weight - resizes like any normal font.
What we dislike: Only supports bar charts, sparklines, and pie charts.
-
🔗 Ampcode News npm Package Changes rss
We're now shipping the Amp CLI as a single-file executable (compiled by Bun) instead of as a JavaScript source package. This makes Amp faster and more compatible across platforms and runtimes, and it's necessary to support Amp plugins.
If you're using the recommended direct installation, nothing changes for you. You've been using this single-file executable for several months. You can stop reading here.
If you've installed Amp via npm, you should switch to direct installation:
npm uninstall -g @sourcegraph/amp curl -fsSL https://ampcode.com/install.sh | bash(See all installation methods.)
If you need to keep using npm to install Amp, usually because your company has an internal npm mirror/archive, be aware of some changes:
- The CLI's npm package will now contain the executable instead of sources.
- We're renaming 2 npm packages:
- The Amp CLI is now
@ampcode/cli(was@sourcegraph/amp) - The Amp TypeScript SDK is now
@ampcode/sdk(was@sourcegraph/amp-sdk)
- The Amp CLI is now
The old package names are aliases but will be removed on June 15, 2026.
-
- May 13, 2026
-
🔗 IDA Plugin Updates IDA Plugin Updates on 2026-05-13 rss
IDA Plugin Updates on 2026-05-13
New Releases:
Activity:
- capa
- claude-of-alexandria
- 8e935966: chore(deps-dev): bump the minor-and-patch group (#48)
- Deobfuscator
- 480dc78b: Update README.md
- diaphora
- ida-hcli
- 9f9b9e25: GitHub: Increase batch size repository retrieval
- IDA-MCP
- 3a48c818: refactor: split gateway registry, add chat agent runner, and improve …
- IDEA
- NyLib2
- dc203c00: Install Vulkan SDK support; conditional console
- 41440f49: fix(pyimgui2): default show_demo_window to False
- 9b3facea: fix(pyimgui2): provide Platform_CreateVkSurface for vk multi-viewport
- b4b38c04: feat(pyimgui2): wire gl3/vk frontends into build and dispatch
- 5101b05c: chore(pyimgui2): untrack generated pyimgui/ output directory
- d87f5b35: fix(pyimgui2): add gl3/vk frontends with InvalidateDeviceObjects hook
-
🔗 r/york Best Italian restaurant? rss
I'm having my Hen do in York (nothing crazy). Any recommendations for Italian restaurants? ☺️ Thanks!
submitted by /u/iamloubielou
[link] [comments] -
🔗 hyprwm/Hyprland v0.55.1 release
This is a standard patch release backporting some fixes from main onto 0.55.0.
Fixes backported
- groups: sync window monitor/workspace when added to a group (#14478)
- compositor: fix invalid capture in vectorToWindowUnified
- config/legacy: fix bad format log in handleSource
- config: fix plugin variables with dashes (#14379)
- monitor: fix top-layer bar visibility on workspace change with scrolling-layout fullscreen (#14425)
- pointer: fix cursor bounds not updating on monitor layout changes (#14393)
- render/cm: fix premult in shaders (#14403)
- render/gl/framebuffer: fix swizzle comparisons (#14481)
- algo/floating: do not alter pinned windows' state on ws move (#14513)
- config/lua: allow re-enabling monitors (#14447)
- config/lua: restrict package module loading to lua-only modules (#14526)
- config/propRefresher: avoid crash if event loop manager isn't loaded (#14423)
- gestures/scroll_move: guard col to avoid crash (#14394)
- helpers: include numbers header (#14406)
- input: properly make input-blocked windows inaccessible (#14517)
- meta/lua-stubs: overwrite scale to accept float and int (#14461)
- meta: update lua stubs for permissions (#14400)
- monitor: don't modeset on reserved changes (#14397)
- monitor: don't set back to 8 bit when applying rules (#14404)
- renderer: set proper image description in snapshots (#14398)
Special Thanks
As always, special thanks to these people / companies for supporting Hyprland's continued development:
Sponsors
Diamond
37Signals
Gold
Framework, Butterfly
Donators
Top Supporters:
Tonao Paneguini, Semtex, soy_3l.beantser, Seishin, Nox Æterna, Illyan, Snorezor, Bonsai, Joshua Weaver, ExBhal, DHH, Mikko_Nyman, Kay, iain, TyrHeimdal, miget.com, alexmanman5, Hunter Wesson, --, RaymondLC92, Theory_Lukas, Brandon Wang, Insprill, lzieniew, 3RM, johndoe42, Jas Singh, RayJameson, MadCatX, Xoores, d, Ammar Hossain, Ki☆, inittux111, Arkevius, John Shelburne, DeWattaUnk, ari-cake, gfunnymoney, alukortti, taigrr
New Monthly Supporters:
tubid2wenty, Uros Cotman, yafantik, Guy, goblin_engineer, Julius John Puno, Peter Buijs, mb, StellaBuckley, haikuolin, Antibaddy, sludge10123, C Money, Lipski, KampotKaca, Kazuhide Takahashi, Skeptomai, bombadurelli, Rebellen, Álan, StreamCyper, taras, Yury, Sherab, Filinto Delgado, Taddelladius
One-time Donators:
Quuton, Selvan, Tyler Adams, tonis, Sam, Dimitrios Liappis, Chivtar, Eric, aponsasan888, bkode, LonestarF1, Chris, Dogmatic Polack, Larry, maxx, MonolithImmortal, edrix, I like GameNative, take my money., nyxloom, Frederic Toemboel, Schmendiey, himes, brandonia, Xphelus, New user, Miguel Flores- Acton, R3dGh0st, Glen, Vitor Moura GUEDES, Anersyum, le_04, Dan, AT, chorr, Awesome, IdeaSpring, Jacobrale, anonymous, Elias Griffin, w00z4, Marcus Edvardsson, Gerhard, Bashmaks, Benjaneb, R4dicalEdward, Matýsek ^^, Michael, Gene Raymond, naivesheep, Neginja, anarchuser, Uta, Francois KERISIT, ay4, Lorenzo santacreu, Gitznik, Jure S, Oliver, Pipes, Mein, ironick, Nlight, Pfoid, DasCleverle, Jaf Endee, DIEBUSTER, senorBeard, alex, Mike, luxxa, JasonPettys, One, Daniel, Sven Eppler, L3rdy, Ilunn, Thorff, XurxoMF, Wonkhester, Brian, Doc O, Mortja, Spook, Miguel Cordero Collar, bennyzen, deah, Sean, Higor, nanea808, Torsten Schieber, I3lack5hield, Kevin Steffer, Zarenno, vfosterm, Nikola, EGB, Dietmar, KilahDentist, Wilf Lin, Rad, Yuza, Supporter, nooob, esseonline, Naresh, darquill, BrnPrs, Pani, BYK, Amaury, nythix, Mika, Patriarch, Gambit, GoatCedric, Adam, MirasM, bl4ckb1rd, Loon, KevOlek, AsciiWolf, Brian Barrow, Anon, Kilian, Cristian M., abhinavmishra094, Dejv78, LinoDB, Trofim, Konstantin, JoaquinCamposPlaza(Ximo), Gabo, Phil, dev2and0m, Neil Brown, zarilion, JavierArias(Javi), Thank you, Mystrasun, Skrazzo, MeguminLoli, revitalist, barcellos-pedro, Juh, Goldie, benabrig, mynus, Daniel Zudel, Grant, Jacob Felknor, Noah, e033x, Nick, Niklas, mkami, Slippy, joenu, Oleksandr, t.i.m., Joss001, M4CETO, Nighty, Donater, David N, Cameron, Ekoban, Kieran, brotiii, Doug, Hypruser#0224975, Shadesofastar, sonicbhoc, GKL, Damien, João Seixas, mothmashine, James Freiwirth, Mek, Krizzkrozz, Panzer, mika.dev, Franky Valley, Sycho sMILEz, Roy, Amundis, willibenmula ❤️, Justin, marvelousIT, pablo, Alex, Ryan, cito, Juergen, Eric Koslow, valerius21, jfk, Andrejs, tyforupdate, skwrl, DaintyFox
Full Changelog :
v0.55.0...v0.55.1 -
🔗 r/york Weird interaction at Monks Cross subway rss
So I ordered a pizza half and someone started making it. When it got passed to the second employee, i noticed him but just cheese on then put it in the oven. I thought I must have missed him putting on the sauce (surely?). But when I got it (a friend paid hence I didn’t get time to check first), I checked at the counter and there was visibly no sauce. I asked about the sauce and the guy lied and said they didn’t make it with sauce and it was just cheese and bread. My friend said “like a cheese toastie?” And he said yes?? When I pointed to the board and showed him that the menu said marinara sauce and I insisted at other subways they made it with sauce, he reluctantly admitted he lied because they had no sauce. I was confused why he lied. When I made the order, they could have just said they didn’t have any. Even half way through making it he could have said there was none and it would have been fine. It’s the fact that I (almost) argued back and forth about whether the pizza subs came with sauce. I thought I was going crazy. Like 1) he said it came with no sauce and that’s how subway makes them 2) that they are just cheese on bread 3) didn’t really respond when I insisted I’ve had them elsewhere with sauce and 4) only admitted it when I pointed at the menu. It was quite shocking that he just kept lying to our faces, i guess hoping we’d just leave. I wasn’t trying to be argumentative, I was just utterly confused as to what was happening. The guy offered us ketchup but at that point we didn’t want to eat there. And no other staff stepped in, even though they were among it. Kind of understandable in work place, but with no back up I felt crazy. We had to firmly refuse the food and ask for a refund (only on the pizzas btw). They luckily refunded us, but it was so weird. I have tried to contact subway twice about this but I’ve never had a response. I don’t want to complain about the lack of sauce (that’s fine) but having a fully grown (not a teenager) guy try to gaslight me into believing there was never sauce on the pizza subs is bizarre. Has anyone else had something like this happen?
TLDR: subway workers tried to gaslight me into thinking the Margherita pizza sub didn’t come with marinara sauce.
submitted by /u/A_hot_bowl_of_geedis
[link] [comments] -
🔗 r/reverseengineering I Reverse-engineering Need for Speed Underground 2 Server rss
submitted by /u/Ornery-Hat5252
[link] [comments] -
🔗 HexRaysSA/plugin-repository commits sync repo: +1 plugin, +2 releases rss
sync repo: +1 plugin, +2 releases ## New plugins - [diaphora](https://github.com/joxeankoret/diaphora) (3.4) ## New releases - [clang-include](https://github.com/oxikkk/ida-clang-include): 1.2.0 -
🔗 r/Leeds Abandoned Festival Foods in Osmondthorpe 🔥 rss
Festival House, located in Osmondthorpe, east Leeds, was built in the 1930s and has had many uses in its life. It was originally the laundry for the Leeds Industrial Cooperative Society (LICS) and was constructed in the early 1920s, later becoming Festival Foods Ltd in 1955 which produced food hampers and ice cream. The front was constructed in a striking red-brick Art Deco style. Festival Foods closed its doors in 2020 and since then the building has stood derelict, becoming a blight on the landscape in a mainly residential area. Plans to redevelop the site into a mix of 56 one and two-bed apartments has been put forward but as of May 2026 nothing has gone ahead.
submitted by /u/LostPlacesUK
[link] [comments] -
🔗 r/wiesbaden Teilnehmende gesucht (Familien mit Kindern 10-18J.): Studie zu Mobbing, Aggression und Psychischen Erkrankungen im Kindes- und Jugendalter -> Kostenloser IQ-Test, Diagnostik +75-200 Euro Aufwandsentschädigung rss
Link Im Flyer: https://redcap2.zi-mannheim.de/surveys/?
s=PYR8LAWC9J9M87X4Link zu mehr Infos: https://www.zi-mannheim.de/forschung/probanden- gesucht/mobbing-online-und-offline-deine-erfahrung-ist-wichtig.html
submitted by /u/Beginning-Demand-516
[link] [comments] -
🔗 r/LocalLLaMA Web-Search is coming to a screeching performance halt as Google shuts down their free search index, and traffic defenders like Cloudflare challenge AI at every gateway. What are our options? rss
Google is closing its free tier to just 50 domains for site-specific search, and an inheritance date of January 1st, 2027, with no public pricing being listed for advanced searches. Cloudflare's new site-default is to challenge all AI bots attempting to scrape web-information for all their customers, including now with a recent partnership all domains hosted by Go-Daddy.
Some of you may have felt it over the last few months, web searches that used to be more effective are now closing with 400 errors from every site your harness attempts to reach. Local models may lose efficacy as their internet pulling capabilities are crushed.
Make no mistake, Google is reinforcing their mote by pulling up the drawbridge for aggressive pricing. This is a direct attempt to close in on the open-host sphere by crippling reliance infrastructure.
As a community, what options do we have at our disposal? Are there any open- projects currently attacking this status quo? Filling this gap will likely be the next big "open" project to hit the market, as solutions to this issue will likely become dependencies as we progress down harness improvement.
submitted by /u/NetTechMan
[link] [comments] -
🔗 @HexRaysSA@infosec.exchange We'll be at [@offensivecon](https://mastodon.social/@offensivecon) Friday and mastodon
We'll be at @offensivecon Friday and Saturday! Stop our sponsor table to check out spotlights on new, in-beta and upcoming features.
We’ll also have swag for anyone who shares feedback on IDA.
See you soon!
-
🔗 r/reverseengineering I made a video explaining CPU registers for people learning binary exploitation — x86 vs x64 differences included rss
submitted by /u/riemspec
[link] [comments] -
🔗 r/Harrogate Is anybody on here in the Harrogate area a member of the Harrogate Spa at the Majestic hotel? What is it like? rss
I've been a member at the Harrogate David Lloyd now since 2021, but now I'm looking at leaving the club as I feel like its now becoming too expensive for what it is (jacuzzi, sauna and steam room breaking down a lot) and the gym area not being the best. I've had a shop around for new gym memberships basically. A colleague of mine has told me that the Majestic hotel is a good place to go for the spa, gym and the pool - and its also right near where I live too. Is it worth the money?
submitted by /u/thunderfart_99
[link] [comments] -
🔗 r/york Anyone else looking forward to Queen Street being finished? rss
I love the changes btw, makes York look even prettier :D
submitted by /u/B3ags
[link] [comments] -
🔗 sacha chua :: living an awesome life Trying out Kanata for one-shot modifiers and home row mods on Linux rss
Prot is a fan of one-shot modifiers. I started experimenting with them using keyd, but now I've moved to using kanata based on his recommendation. I also want to experiment with home row mods so that I can hold down:
forjfor shiftdorkfor controlsorlfor alt- or
aor;for super.
(Based on QWERTY home row, although Xmodmap translates it to Dvorak, where my home row keys are aoeu and htns.)
Here's my config:
(defcfg process-unmapped-keys yes ) (defsrc grv 1 2 3 4 5 6 7 8 9 0 - = bspc tab q w e r t y u i o p [ ] \ caps a s d f g h j k l ; ' ret lsft z x c v b n m , . / rsft lctl lmet lalt spc ralt rmet rctl ) ;; define values for tap time and hold time (defvar tap-time 100 hold-time 200 ) ;; alias definitions (defalias a (tap-hold $tap-time $hold-time a lmeta) s (tap-hold $tap-time $hold-time s lalt) d (tap-hold $tap-time $hold-time d lctrl) f (tap-hold $tap-time $hold-time f lshift) j (tap-hold $tap-time $hold-time j rshift) k (tap-hold $tap-time $hold-time k rctrl) l (tap-hold $tap-time $hold-time l ralt) ; (tap-hold $tap-time $hold-time ; rmeta) osshift (one-shot 60000 lshift) osctrl (one-shot 60000 lctrl) osalt (one-shot 60000 lalt) osralt (one-shot 60000 ralt) osmeta (one-shot 60000 lmet) ) (deflayer base grv 1 2 3 4 5 6 7 8 9 0 - = bspc tab q w e r t y u i o p [ ] \ @osctrl @a @s @d @f g h @j @k @l @; ' ret @osshift z x c v b n m , . / @osshift @osctrl @osmeta @osalt spc @osralt _ @osctrl )I followed the systemd instructions, so things should be loaded when I restart. To reload my config, I use
C-c C-v C-t(org-babel-tangle) and then callsystemctl --user restart kanata.service". Or actually, I have an Org Mode link of the form[[elisp:(progn (org-babel-tangle) (shell-command "systemctl --user restart kanata.service"))][Update config]]so I can just activate the link and have my new definitions loaded.
Resources:
You can e-mail me at sacha@sachachua.com.
-
🔗 r/Leeds Best isolated place? rss
I’m looking for somewhere I can go for a nice walk and not see anybody for an hour or two. I would go out to Filey but 1.5hr drive after work is a bit much. Parts of roundhay are nice too but so many kids (which is totally fair). Anybody have any recommendations that aren’t miles away? I am happy to drive for 30/45 mins
Edit: thanks so much for all the recs!! Got a good list to tick off now. I went to Hetchell Wood nature reserve this afternoon and didn’t see a soul. Absolutely gorgeous!!
submitted by /u/Euphoric_Evidence383
[link] [comments] -
🔗 sacha chua :: living an awesome life Du 4 mai au 10 mai rss
lundi 4
J'ai discuté des finances avec ma sœur qui habite aux Pays-Bas. Elle ne peut pas virer l'argent des Philippines aux Pays-Bas, donc je dois l'aider.
J'ai emmené ma fille à son cours de gymnastique. Ça lui a plu.
mardi 5
Ma fille était très fière d'avoir réussi à faire deux présentations alors que quelques camarades de classe n'étaient pas prêts à passer.
Nous avons commencé à travailler sur un maillot-robe pour ma fille. Il n'y avait pas de patron de couture pour son dessin, donc j'ai fait un prototype à partir des chutes de tissu de sa longue robe de bain d'il y a quelques années.
À mon grand soulagement, le virement bancaire a réussi. Il paraît que Wise peut m'aider à virer l'argent des Philippines au Canada.
mercredi 6
Mon mari, ma fille, et moi sommes allés chez la cardiologue, qui était très loin : à presque deux heures de métro et de bus pour le trajet aller. Ma fille s'ennuyait beaucoup, mais elle voulait traiter ses palpitations, donc elle a fait l'effort. Après cela, nous avons acheté des récompenses au supermarché à proximité. Elle a choisi une petite bouteille de yaourt à boire.
J'ai emmené ma fille et son amie au parc pour jouer. Il y avait un garçon qui les embêtait et qui était trop jeune pour qu'on puisse le raisonner, alors j'ai dû utiliser ma Voix de Maman pour qu'il arrête.
jeudi 7
J'ai été ravie de discuter d'Emacs avec Shae Erisson, qui a une expérience intéressante avec les claviers et la programmation sur Emacs.
J'ai travaillé sur la revue des captures d'écran de ma conversation avec John Wiegley et Karthik Chikmagalur. J'ai écrit des fonctions pour identifier les rectangles grâce à l'outil Tesseract OCR. J'ai aussi utilisé les expressions régulières pour masquer des coordonnées GPS et d'autres secrets.
Je suis allée chez une nouvelle hygiéniste pour un nettoyage. J'étais ravie que la réceptionniste et l'hygiéniste aient porté des masques N95 et que la salle de traitement ait une porte fermée.
J'ai discuté des finances de ma mère avec la responsable du studio. J'ai dû m'en occuper parce que ma mère n'est pas capable de gérer ses finances elle-même.
vendredi 8
Je viens de commencer à regarder Astérix et Obélix sur Netflix. J'aimais bien les bandes dessinées quand j'étais petite.
Après l'école, j'ai emmené ma fille au Stockyards pour acheter de l'élastique chez Fabric Fabric pour son maillot-robe. Nous avons aussi cherché des chaussures chez The Shoe Company, Children's Place, Old Navy et Walmart, mais elle n'a rien trouvé qui lui ait plu.
Ensuite, nous avons travaillé sur son maillot-robe.
Pendant que nous regardions Pokémon, j'ai remarqué que même Jessie a montré une belle évolution. Ma fille m'a demandé si je faisais pareil. Je n'ai pas compris, donc je lui ai demandé ce qu'elle voulait dire. Elle est partie grincheuse. Je ne sais pas, mais je ne peux pas lire dans ses pensées.
Sur Stardew, j'ai planté le reste des fraises et j'ai engagé le service Ridgeside Odd Jobs pour arroser toutes les plantes dehors. J'ai attendu l'amélioration de ma poêle pour terminer le dernier paquet parce que nous jouions avec les mods Stardew Valley Expanded (qui demande une friandise) et Love of Cooking (qui demande l'amélioration pour augmenter la limite du nombre d'aliments).
samedi 9
Mon mari, ma fille et moi sommes allés au centre-ville pour le Science Rendezvous, un festival scientifique. Ma fille s'est beaucoup amusée. Elle a aimé peindre avec des plantes en utilisant des peintures dérivées du curcuma, des betteraves, des épinards, et du chou rouge. Elle s'est aussi intéressée aux bulles qui contiennent du dioxyde de carbone provenant de la neige carbonique.
Sur le chemin du retour, ma fille et moi sommes passées à la pâtisserie chinoise pour des petits pains.
dimanche 10
Ma fille m'a réveillée et elle m'a donné une carte de fête des Mères. Elle a aussi préparé une omelette de 6 œufs pour que l'on se régale.
Mon mari a amélioré mon bureau. Il a coupé une autre étagère et il l'a attachée à mon bureau comme plateau. C'était très pratique. Maintenant je peux placer plus de choses sur mon bureau.
Sur Stardew Valley, ma fille et moi nous sommes amusées à explorer la Caverne du Crâne. Elle a oublié d'apporter de la nourriture, donc je lui ai donné plusieurs fromages.
You can e-mail me at sacha@sachachua.com.
-
🔗 r/LocalLLaMA TextGen is now a native desktop app. Open-source alternative to LM Studio (formerly text-generation-webui). rss
| Hi all, I have been making a lot of updates to my project, and I wanted to share them here. TextGen (previously text-generation-webui, also known as my username oobabooga or ooba) has been in development since December 2022, before LLaMa and llama.cpp existed. In the last two months, the project has evolved from a web UI to a no-install desktop app for Windows, Linux, and macOS with a polished UI. I have created a very minimal and elegant Electron integration for that. (Did you know LM Studio is also a web UI running over Electron? Not sure many people know that.) https://preview.redd.it/tk8oibhgjw0h1.png?width=1686&format=png&auto=webp&s=95c70f769766466885c8fdc6e7211525a371a920 It works like this:- You download a portable build from the releases page
- Unzip it
- Double-click textgen
- A window appears
There is no installation, and no files are ever created outside the extracted folder. It's fully self-contained. All your chat histories and settings are stored in a
user_datafolder shipped with the build. There are builds for CUDA, Vulkan, CPU-only, Mac (Apple Silicon and Intel), and ROCm. Some differentiating features:- Full privacy. Unlike LM Studio, it doesn't phone home on every launch with your OS, CPU architecture, app version, and inference backend choices. Zero outbound requests.
- ik_llama.cpp builds (LM Studio and Ollama only ship vanilla llama.cpp). ik_llama.cpp has new quant types like IQ4_KS and IQ5_KS with SOTA quantization accuracy.
- Built-in web search via the
ddgsPython library, either through tool-calling with the built-inweb_searchtool (works flawlessly with Qwen 3.6 and Gemma 4), or through an "Activate web search" checkbox that fetches search results as text attachments. - Tool-calling support through 3 options: single-file .py tools (very easy to create your own custom functions), HTTP MCP servers, and stdio MCP servers. You can enable confirmations so that each tool call shows up with approve/reject buttons before it executes. I have written a guide here.
- The ability to create custom characters for casual chats, in addition to regular instruction-following conversations:
- OpenAI and Anthropic compliant API with very strict spec compliance. It works with Claude Code : you can load a model and run
ANTHROPIC_BASE_URL=http://127.0.0.1:5000 claudeand it will work. - Accurate PDF text extraction using the
PyMuPDFPython library. trafilaturafor web page fetching, which strips navigation and boilerplate from pages, saving a lot of tokens on agentic tool loops.- Chat templates are rendered through Python's Jinja2 library, which works for templates where llama.cpp's C++ reimplementation of jinja sometimes crashes.
I write this as a passion project/hobby. It's free and open source (AGPLv3) as always: https://github.com/oobabooga/textgen submitted by /u/oobabooga4
[link] [comments]
---|--- -
🔗 r/Leeds Social Events/ Clubs/ General Meet-Ups as a relatively introverted person rss
Hi Guys!
My name is Lewis- I’m 23 and have relatively recently moved to Leeds for work! I am looking to meet some new people up here as I unfortunately do not yet know anybody up here but would really like to make some new friends!
A bit about me- I enjoy reading, F1 and gaming as well as playing with my cat Pirelli (pictured)! I am relatively introverted although I am always open to trying new things and stepping out of my comfort zone!
If anyone has any ideas or suggestions or just generally wants to chat- please comment/ message me! I would really appreciate it!
Thanks so much for reading- I hope to hear from some of you guys soon (apologies if this type of post seems silly or has been asked before it can be difficult to meet new people in a new place but I really appreciate your help!)
submitted by /u/toilettumour
[link] [comments] -
🔗 r/Harrogate Best tailors for suits? rss
There seems to be quite a few tailors in town, which are the best for getting a wool suit altered? The shop where I bought the suit from were quoting a lot for alterations so hoping I can get it cheaper at a tailors.
submitted by /u/ahewitt98
[link] [comments] -
🔗 r/Leeds Anyone dealing with this virus? rss
Started with this awful respiratory virus in last few days. Sore throat suddenly and then a terrible cough which has kept me up all night for 48 hours. Still no relief and a lot of crackling in chest. Anyone else dealing with it, and if so how long did it take to get better? Thanks!
submitted by /u/BillyAire
[link] [comments] -
🔗 r/Yorkshire Leeds University grad attacked in hotel room after 'faulty locks' let intruder gain access rss
| submitted by /u/Legitimate-Break-143
[link] [comments]
---|--- -
🔗 r/reverseengineering [Claude Code] Android Reverse engineering Skill being updated with tracker/AD neutralization features rss
submitted by /u/RealSimoneAvogadro
[link] [comments] -
🔗 r/Yorkshire Now and Then: Frenchgate 1945 and 2026 Richmond, Yorkshire. rss
submitted by /u/Still_Function_5428
[link] [comments] -
🔗 r/Leeds I feel like hyping up Leeds culture for some reason rss
I can never let an argument drop, don't worry I've already defended Leeds culture, but I feel like celebrating it here!
Museums: Royal Armouries is a world class museum, a national museum. Kirkstall Abbey museum, Thackray Museum of Medicine, Henry Moore Institute, Leeds Art Gallery, Leeds City Museum.
Leeds International Piano Competition: one of the top INTERNATIONAL piano competitions known for high standards and launching careers.
Opera North and Northern Ballet: internationally touring companies based in Leeds, very high standard of productions, barely any other cities have their own opera companies outside of national ones.
Cultural diversity: Big south Asian cultural influence also east Asian, Caribbean, African. Cultural events and institutions ran by these communtiies.
Tolerant society: big LGBTQ+ scene, both smaller and larger venues and Leeds Pride. Counter protests against nationalists, weekly pro palestine marches.
Food: diverse and good quality, most world cuisines are catered for. A lot of food events as well.
Music: honestly everyone just knows Leeds has a good music scene. Amazing venues including an Arena. We've managed to sustain a new venue with Project House, quite an achievement considering the struggles of the live music industry. Variety of music from Howard Assembly Room to Wardrobe, Attic, Brudenell, City Varieties, Belgrave. Millenial Square outdoors. Leeds festival.
Theatre: Playhouse and Leeds grand theatre both doing great stuff, also a comedy club.
Cinema: historic cinemas and Leeds International Film Festival is the biggest in the UK outside of London.
Carnival: Leeds West Indian Carnival is one of the longest running in all of Europe.
Industries: Fast growing tech sector which is already well established. UKs third largest manufacturing centre. Largest Legal and Financial sector in England outside of London. Big private sector presence.
Education: Leeds University is the 4th most popular in the UK. Specialist universities for Arts and Music
Sport: International Test Cricket. Football, Rugby and Hockey teams. Tour de France Grand Depart.
Leeds International Festival of Ideas, and Leeds Lit Fest
Tell me more things to love about Leeds please!
submitted by /u/shark-with-a-horn
[link] [comments] -
🔗 Textualize/textual The more selective release release
Improved text select logic. You can select text without first clicking on a content area.
May break snapshots without affecting appearance.
[8.2.6] - 2026-04-13
Fixed
- Fixed selection to the right of code fence blocks (may break some snapshots)
- Fixed Markdown code fences losing content when switching themes #6537
Added
- Added ability to select outside of text, so the user doesn't need to be quite so precise #6523
-
🔗 r/reverseengineering LAN-LOK: Living as a sysadmin at an isolated Antarctic research station in the early 90s [DOS game -- would like to collab to reverse engineer] rss
submitted by /u/XenonOfArcticus
[link] [comments] -
🔗 r/Yorkshire Near Malham cove in the heart of the Yorkshire dales ❤️❤️ rss
| submitted by /u/Spiritual_me_1770
[link] [comments]
---|--- -
🔗 r/Yorkshire Fish & chips with a view! Jackson's fisheries in bridlington, £12.50 rss
| submitted by /u/Wallabydoll
[link] [comments]
---|--- -
🔗 Project Zero A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens rss
We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. While we had an exploit chain for the Pixel 9, we wanted to see if it was possible to write a similar exploit chain for Pixel 10.
Updating the Dolby Exploit
Altering our exploit for CVE-2025-54957 was fairly straightforward. The majority of needed changes involved updating offsets calculated for the specific version of the library we targeted on the Pixel 9 to similar offsets in the library for Pixel 10. The only challenge (outside of wishing we’d better documented which syncframes contained offsets) was that the Pixel 10 uses RET PAC in the place of
-fstack-protector, which meant that__stack_chk_failwasn’t available to be overwritten by code. After a bit of trial and error, we useddap_cpdp_init, initialization code that can be overwritten without causing functional problems, as it is called once when the decoder is initialized and never again. The updated Dolby UDC exploit is available here. This exploit will only work on unpatched devices (SPL December 2025 or earlier).Removal of BigWave, Addition of VPU
Porting the local privilege escalation link of the chain to Pixel 10 was not feasible as the BigWave driver does not ship on this device. However, a new driver is visible in the mediacodec SELinux context at /dev/vpu. This driver is used for interacting with the Chips&Media Wave677DV silicon on the Tensor G5 chip meant for accelerating video decoding. Based on the comments within the open-source C files, this driver is developed and maintained by the same set of developers who built the BigWave driver. Working in collaboration with Jann Horn, we spent 2 hours auditing this VPU driver and discovered an exceptional vulnerability.
Unlike the upstream Linux driver for WAVE521C (which is an older Chips&Media chip), the Pixel driver for WAVE677DV does not integrate with V4L2 (the “Video for Linux API”); instead, it directly exposes the chip’s hardware interface to userspace, including letting userspace map the chip’s MMIO register interface. The driver mainly establishes device memory mappings, does power management, and allows userspace to wait for interrupts from the chip.
The Holy Grail of Kernel Vulnerabilities
This bug in particular caught our attention as exceptionally simple to exploit:
static int vpu_mmap(struct file *fp, struct vm_area_struct *vm) { unsigned long pfn; struct vpu_core *core = container_of(fp->f_inode->i_cdev, struct vpu_core, cdev); vm_flags_set(vm, VM_IO | VM_DONTEXPAND | VM_DONTDUMP); /* This is a CSRs mapping, use pgprot_device */ vm->vm_page_prot = pgprot_device(vm->vm_page_prot); pfn = core->paddr >> PAGE_SHIFT; return remap_pfn_range(vm, vm->vm_start, pfn, vm->vm_end-vm->vm_start, vm->vm_page_prot) ? -EAGAIN : 0; }This mmap handler is intended to be used in order to map the MMIO register region of the VPU hardware into the userland virtual address space - a region contained within a certain physical memory address range. In doing so, it makes a call to remap_pfn_range based purely on the size of the VMA and not at all bounded to the size of this register region. This means that, by specifying a size larger than the register region in an mmap syscall, the caller can map as much physical memory as they want into userland, starting at the physical address of the VPU register region. The entirety of the kernel image (including .text, and .data region) is located at a higher physical address than the VPU register region, and can therefore be accessed and modified by userspace with this bug.
At this point, one can simply overwrite any kernel function to gain kernel code execution - or indeed any primitive one might desire. This is rendered even easier by the fact that the kernel is always at the same physical address on Pixel and so the offset between the VPU memory region and the kernel is always a known value. Thus it is not even necessary to scan for the kernel in the mapped physical memory - you simply know exactly where it is relative to the address returned by mmap, presuming you make the VMA length large enough.
Achieving arbitrary read-write on the kernel with this vulnerability required 5 lines of code and writing a full exploit for this issue required less than a day of effort.
Patch Process
I reported this bug on November 24, 2025 and Android VRP rated the issue High severity. This is an improvement, given that the BigWave bug we used for privilege escalation on the Pixel 9 (which had identical security impact) was initially rated as Moderate severity. This represents a meaningful and positive change in posture regarding how these types of bugs are triaged and patched. The vulnerability was patched 71 days after its initial report, in the February Pixel security bulletin. This is notably fast given that this is the first time that an Android driver bug I reported was patched within 90 days of the vendor first learning about the vulnerability.
Conclusion
There are both positives and negatives to take from this research. A key goal of Project Zero is to drive systemic improvements that go beyond individual bug fixes, influencing better development processes and more resilient codebases that lead to improvements in security for end-users. The handling of this VPU vulnerability demonstrates clear progress in Android’s triage pipeline, as this bug had an initial remediation in a much shorter period of time than the previous BigWave issues. Android’s effort to ensure that serious vulnerabilities are patched efficiently will help protect many Android devices.
At the same time, this case underscores the ongoing need for more exhaustively robust and security-aware code in Android drivers. When I reported the bugs in BigWave, I hoped to spur its developers to evaluate their other drivers for obvious security issues, but 5 months later we nevertheless found a serious and extremely shallow vulnerability in their VPU driver that was instantly noticeable with even a cursory audit of the codebase. Strengthening driver security remains a crucial priority for ensuring a safe Android ecosystem, and we continue to strongly encourage vendors to improve software development practices in a proactive effort to prevent these sorts of vulnerabilities from ever reaching end-users.
Security reports often uncover complex issues missed by the product teams but it is important that software vendors take necessary steps to ensure software products, especially security-critical ones, launch in a reasonably vulnerability-free state and that software teams take a proactive approach to software security, code auditing, and vulnerability patching.
-
🔗 cristeigabriela/bb v0.3.1 release
What's Changed
- feat: SDK / PHNT coverage expansion + AST cache (combined) by @cristeigabriela in #21
Full Changelog :
v0.3.0...v0.3.1 -
🔗 cristeigabriela/bb v0.3.0 release
What's Changed
- refactor: touch up some ai generated code by @cristeigabriela in #12
- feat(bb-sparse): driver-docs support, uv build, dual lookup by @cristeigabriela in #18
Full Changelog :
v0.2.0...v0.3.0 -
🔗 r/reverseengineering r2garlic - The world's fastest Android/DEX decompiler meets radare2! rss
submitted by /u/IndAnony
[link] [comments]
-
- May 12, 2026
-
🔗 IDA Plugin Updates IDA Plugin Updates on 2026-05-12 rss
IDA Plugin Updates on 2026-05-12
Activity:
- ida-domain
- ida-mcp-in-vm
- 1cd2ef0b: feat: add MCP session handshake for streamable-HTTP VM endpoint
- IDEA
- b229f9de: Harden IDA MCP session lifecycle
- NyLib2
- quokka
- sharingan
- 3d5289dd: update README
- tix-seven
-
🔗 r/LocalLLaMA I got a real transformer language model running locally on a stock Game Boy Color! rss
| No phone, PC, Wi-Fi, link cable, or cloud inference. • The cartridge boots a ROM, and the GBC runs the model itself.
• The model is Andrej Karpathy’s TinyStories-260K, converted to INT8 weights with fixed-point math so it can run without floating point.
• Built with GBDK-2020 as an MBC5 Game Boy ROM.
• The model weights live in bank-switched cartridge ROM. Prompt entry happens on-device with the D-pad/buttons and an on-screen keyboard.
• The prompt is tokenized on the Game Boy, then the ROM runs transformer prefill + autoregressive generation. The KV cache is stored in cartridge SRAM, because the GBC’s work RAM is tiny. It is extremely slow, and the output is gibberish because the math is heavily quantized/approximated, but the core thing works! Hardware: stock Game Boy Color + EZ Flash Junior + microSD. Used Codex for a large portion of the building! https://github.com/maddiedreese/gbc-transformer submitted by /u/maddiedreese
[link] [comments]
---|--- -
🔗 r/wiesbaden Post kommt nicht in Mitte rss
Hat jmd. von euch auch das Problem, dass Briefe einfach nicht zugestellt werden in Mitte? Habe diese Briefankündigung und die Briefe von vor 7 Tagen sind immernoch nicht zugestellt.
submitted by /u/One-Toe-6222
[link] [comments] -
🔗 r/york Police presence at York railway station. rss
Any updates on what’s been happening at York railway station this afternoon?
submitted by /u/LesleeTheLego
[link] [comments] -
🔗 r/LocalLLaMA Dad why is my sisters name Lora? rss
| submitted by /u/rwitz4
[link] [comments]
---|--- -
🔗 r/Leeds Buses charging single tickets from Apple Pay despite scanning day ticket! rss
I realised that when I scan my day ticket I’m also getting charged a single ticket directly from my Apple Pay without my consent.
I got my day ticket today, scanned the QR code but I was being charged single tickets multiple times! I didn’t even open my Apple Pay I only had the day ticket open but the contactless is in the exact same place so I was charged without opening my Apple wallet.
Has anyone had the same experience? Where do I complain to get my money back 😭
submitted by /u/Ancient_Cook6424
[link] [comments] -
🔗 r/york Warhammer Gaming Community rss
Having just moved nearish York, I'm way too far from my usual gaming group (40k, Necromunda, Bloodbowl etc) and wondered if there were any other groups closer to home in York I could try.
Does anyone have any suggestions? I'd appreciate it very much 👏
submitted by /u/PointyEar96
[link] [comments] -
🔗 r/wiesbaden Mädels MTB trail rider rss
Gibt es in der Community Mädels, die Trails fahren? Möchte mich anschließen 🤘
submitted by /u/Ok-Okra-2704
[link] [comments] -
🔗 r/york Crowd Sourcing: Meringue Custard Roulade rss
| Anyone know best meringue custard roulade in York (or leeds) or any best ones you've tasted from supermarkets? Help a girl craving for it. 🙏🏼 submitted by /u/raegic
[link] [comments]
---|--- -
🔗 r/LocalLLaMA Needle: We Distilled Gemini Tool Calling Into a 26M Model rss
We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices.
We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and- assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention is the right primitive for this, and FFN parameters are wasted at this scale.
Simple Attention Networks: the entire model is just attention and gating, no MLPs anywhere. Needle is an experimental run for single-shot function calling for consumer devices (phones, watches, glasses...).
Training:
- Pretrained on 200B tokens across 16 TPU v6e (27 hours)
- Post-trained on 2B tokens of synthesized function-calling data (45 minutes)
- Dataset synthesized via Gemini with 15 tool categories (timers, messaging, navigation, smart home, etc.)
You can test it right now and finetune on your Mac/PC: https://github.com/cactus-compute/needle
The full writeup on the architecture is here: https://github.com/cactus- compute/needle/blob/main/docs/simple_attention_networks.md
We found that the "no FFN" finding generalizes beyond function calling to any task where the model has access to external structured knowledge (RAG, tool use, retrieval-augmented generation). The model doesn't need to memorize facts in FFN weights if the facts are provided in the input. Experimental results to be published.
While it beats FunctionGemma-270M, Qwen-0.6B, Granite-350M, LFM2.5-350M on single-shot function calling, those models have more scope/capacity and excel in conversational settings. We encourage you to test on your own tools via the playground and finetune accordingly.
Needle is part of a broader effort to make on-device AI practical. We also build Cactus (https://github.com/cactus-compute/cactus), an open-source inference engine for mobile and wearables.
Everything is MIT licensed. Weights: https://huggingface.co/Cactus- Compute/needle
GitHub: https://github.com/cactus-compute/needle
submitted by /u/Henrie_the_dreamer
[link] [comments] -
🔗 r/york An underrated lunch spot in the city centre rss
| submitted by /u/SavingsMap2506
[link] [comments]
---|--- -
🔗 HexRaysSA/plugin-repository commits sync repo: +1 release rss
sync repo: +1 release ## New releases - [unicorn-tracer-arm64](https://github.com/chenxvb/unicorn-trace): 0.4.0 -
🔗 r/reverseengineering GitHub - iss4cf0ng/OpenBootloader: A Proof-of-Concept of simple bootloader, written in Assembly (NASM) and C language. rss
submitted by /u/AcrobaticMonitor9992
[link] [comments] -
🔗 r/LocalLLaMA Let's build claude code from scratch! rss
| So, I made this video about how to create claude code from scratch. Here's the video: https://youtu.be/8pDfgBEy8bg and Github: https://github.com/CohleM/nanoclaude Feedback is extremely appreciated. submitted by /u/RoyalMaterial9614
[link] [comments]
---|--- -
🔗 The Pragmatic Engineer TechPays has been acquired by Levels.fyi rss
tl;dr:TechPays is joining Levels.fyi : so the leading tech salary site in Europe gets the love and care it deserves. Thanks to Zsombor for building this project with me for so many years.
Pay transparency has always been an issue in tech, especially in Europe. For a while, I assumed that the most that a senior+ software engineer could make in London or Amsterdam would be in the realm of £100K / €100K. Once you reach that level, you've made it. You're now at the very top of the market! Or are you?
So when I was making £93K in London, working as a principal engineer at Skyscanner in 2016, I was not expecting that I could be compensated meaningfully better. Pay surveys kept confirming that I'm well above the median, and into the 90th percentile of pay grades.
Imagine my surprise when I got an offer from Uber, in Amsterdam, that effectively doubled by compensation, into the realm of around €220-250K ($260-295K). By year four, I made €283K ($332K):
My
total compensation at Uber, per year, 2016-2019. Blue is base salary, yellow
is equity, green is cash bonus. Note how by year 5 (2020), my compensation
dropped to below year 2, thanks to hitting my 4-year vesting cliff for the
initial equity grant.It felt like I discovered a "secret, upper-tier" of the market that no one else knew about. When I became a manager at Uber, and started hiring for my team, several strong software engineers were hesitant to move forward with the process, because they assumed that they were at the very top of the market - but they still made ~half of what we would have offered! I had no way of telling them "your data is wrong, this place pays a lot more!" and so several of them just never bothered to interview, assuming the most raise they would get would be 5-10%. When they could have potentially doubled their compensation…
I saw first-hand that not having good compensation information works against us, developers, and decided to try and change this. I collected data points from closer to 200 engineers working in the Netherlands, and explained that there's a third, "hidden" tier of compensation in The Trimodal Nature of Software Engineering Salaries in the Netherlands and Europe.

After the success of the article, I decided to "open source" compensation data points I collected, and thus TechPays was born:
TechPaysI built this site together with Zsombor Erdődy- Nagy. We paid attention to support compensation anonymization, capture freelancer compensation, and break down how compensation packages were put together. We've received so many heart-warming stories on how you've been able to negotiate better compensation packages, thanks to having access to this information.
Knowing that we're making a difference kept us going for a few years, as a side project. However, over time, both Zsombor and I got busier with other projects. For me, it was The Pragmatic Engineer taking up more of my time. We wanted to find a way to keep TechPays running, and get the care it deserves.
Levels.fyi will be taking over operating TechPays - and taking learnings about European compensation packages, and integrating into their global pay transparency platform. I've known Levels.fyi founders Zuhayeer and Zaheer for years, and we share our drive to make compensation as transparent as possible, across the tech industry.
With TechPays, there are no changes: you get to browse the data, as before. And expect even more, high-quality data points on Levels.fyi, for Europe, and globally.
To get more details on compensation, check out Levels.fyi. And read the Trimodal nature of tech compensation in the US, UK and India, based on Levels.fyi data points:
From the deepdive The
trimodal nature of tech compensation in the US, UK and
India -
🔗 r/york Hundreds attend climate film screening and discussion in York rss
| submitted by /u/Caffe44
[link] [comments]
---|--- -
🔗 HexRaysSA/plugin-repository commits Document reason for disabling CheckPointSW repository rss
Document reason for disabling CheckPointSW repository Added comments explaining the reason for disabling the CheckPointSW repository. -
🔗 HexRaysSA/plugin-repository commits Disable checkpointsw/karta repository entry rss
Disable checkpointsw/karta repository entry Commented out the 'checkpointsw/karta' entry due to IP allow list issues. -
🔗 r/Yorkshire Now and Then: The Friary Richmond, Yorkshire. rss
submitted by /u/Still_Function_5428
[link] [comments] -
🔗 r/LocalLLaMA Stop wasting electricity rss
| Run on my rtx4090 llama.cpp params:llama-server -m ~/Projects/llm/models/Qwen3.6-27B-UD-Q4_K_XL.gguf --flash-attn on -ngl all -ctk q4_0 -ctv q4_0 -t 32 -c 262144Power limit was set using sudo nvidia-smi -pl N On my observation, GPU constantly hitting power limit, so its safe to say that it actual consumption. You can cut power consumption to 40% without losing performance(and also reduce noise, heat from pc, and extend lifespan of gpu). submitted by /u/OkFly3388
[link] [comments]
---|--- -
🔗 r/Harrogate I buy lucking for carbide any model...! rss
| submitted by /u/Ok-Maybe-5940
[link] [comments]
---|--- -
🔗 r/Leeds Leeds Job market sucks rss
I moved to Leeds 4 weeks ago and have been actively looking for jobs on every job website possible. Why is so much of it so scammy? I come from a smaller city so have never seen this before but a lot of the jobs market themselves as something they’re not and 9/10 times end up being door to door sales or cold calling. What happened to regular waitressing jobs/ retail work? I see very little of it anywhere and even when I apply to 100 jobs I hear back from maybe 3.
Just me?
submitted by /u/Senior_Conclusion_98
[link] [comments] -
🔗 r/Harrogate Best place to donate children's toys? rss
I'm clearing out my attic and have loads of my childhood toys I no longer want to keep. It'll be a shame to take them to the recycling centre.
I plan on taking them to Yorkshire cancer research in Hornbeam park, but is there any where I can donate them so they can be passed onto another child for free?
submitted by /u/Halbarad007
[link] [comments] -
🔗 r/Leeds Queue at Costco rss
Anyone know why there is a massive queue around the building at Costco this morning at 7am? I’m just nosy cos never seen that before.
submitted by /u/deniewibly
[link] [comments] -
🔗 r/Yorkshire Oh, my beautiful England! 😍❤️ rss
| video credit @ liolaliola submitted by /u/Wallabydoll
[link] [comments]
---|--- -
🔗 r/Leeds Korean BBQ Buffet opposite Weatherpsoons (Hadley Verity) in town rss
Is the Korean BBQ Buffet restaurant any good? Me and a friend looked at it the other day and we quite fancy going there since neither of us have had much Korean food.
Alternatively, any other places for decent, authentic Korean food?
submitted by /u/MidlifeCrisisCore98
[link] [comments] -
🔗 r/reverseengineering Lockbit Black Loader and Shellcode Analysis - Full Thought process, Technical Writeup and Blue Team perspective rss
submitted by /u/Flashy-Push-3341
[link] [comments] -
🔗 r/wiesbaden Moving Here rss
Hello, I’m an 18 year old American moving here with my family and I was wondering what I should know about the city or Germany in general as this will be my first time leaving the U.S. ever. Any advice is appreciated
submitted by /u/f3verrr_
[link] [comments] -
🔗 r/LocalLLaMA Found a way to cool the DGX rss
| Tap water keeps the temperature below 68 degree Celsius at 95% GPU utilization running Qwen3.5-122b-a10B Q6_K precision. 110 GB Memory usage, 80k context window, 18.77 tokens/second for continuous vision analyses. Not sure how often do I have to change the water but so far so good. submitted by /u/OldEffective9726
[link] [comments]
---|--- -
🔗 MetaBrainz MusicBrainz database schema change release, 2026-05-11 (with upgrade instructions) rss
We’re happy to announce the release of our May 2026 database schema change now! Thanks to all who were patient during Monday’s downtime as we released everything to our production servers.
This is a fairly small database schema change release which mostly improves things behind the scenes. Of the schema change tickets, the only one that affects users directly is you are most likely to notice while you browse and edit in MusicBrainz is MBS-14092 (which allows adding series of series, for example for award series for podcasts).
Thanks to chaban, UltimateRiff and yyb987 for having reported bugs and suggested improvements, and thanks to jmrr83, salo.rock and wileyfoxyx for updating the translations.
A new release of MusicBrainz Docker is also available that matches this update of MusicBrainz Server. See the release notes for update instructions.
Database Schema Change Upgrade Instructions
Note: As mentioned previously, if you're running MusicBrainz Docker, these instructions don't apply. See the instructions in the MusicBrainz Docker release notes instead.
Note: Importing the latest data dump is always a valid alternative to running
./upgrade.shon an existing database, if you’d prefer to also get new data in one go. Just follow the relevant instructions in INSTALL.md. The git tag is v-2026-05-11.1-schema-change. The rest of the instructions here assume an in-place upgrade.- Make sure
DB_SCHEMA_SEQUENCEis set to 30 inlib/DBDefs.pm. - If you’re using the live data feed (your
REPLICATION_TYPEis set toRT_MIRROR), ensure you’ve replicated up to the most recent replication packet available with the old schema. If you’re not sure, run./admin/replication/LoadReplicationChangesand see what it tells you; if you’re ready to upgrade, it should say “This replication packet matches schema sequence #30, but the database is currently at #30.” - Take down the web server running MusicBrainz, if you’re running a web server.
- Turn off cron jobs if you’re automatically updating the database via cron jobs.
- If you are running sir (for live search indexing), stop it and drop all existing sir functions and triggers via the
Drop*.sqlscripts found with v4.0.1 of sir:
./admin/psql < $SIR_PATH/sql/DropTriggers.sqland
./admin/psql < $SIR_PATH/sql/DropFunctions.sql. You should also drop the AMQP extension:echo 'DROP EXTENSION IF EXISTS amqp CASCADE;' | ./admin/psql --system. - Upgrade your database cluster to PostgreSQL version 18. Packages for Debian and Ubuntu are available from the PGDB, as usual. Refer to the documentation for pg_upgradecluster or pg_upgrade, whichever method you are using.
- Rebuild database indexes using collations via
./admin/RebuildIndexesUsingCollations.pl --database SYSTEM_MAINTENANCE --noconcurrently. - Install Perl 5.42 (perlbrew can be used if 5.42 isn't packaged for your system).
- Switch to the new code with
git fetch originfollowed bygit checkout v-2026-05-11.0-schema-change. - Run
cpanm --installdeps --notest .(note the dot at the end) to ensure your Perl-based dependencies are up to date. - Edit
lib/DBDefs.pmand replace all occurrences of (1)CacheWrapper::RediswithCacheWrapper::Valkey, and (2)DATASTORE_REDIS_ARGSwithDATASTORE_VALKEY_ARGS. - Run
./upgrade.sh(it may take a while to vacuum at the end). - Set
DB_SCHEMA_SEQUENCEto 31 inlib/DBDefs.pmas instructed by the output of./upgrade.sh. - Turn cron jobs back on, if applicable.
- Restart the MusicBrainz web server, if applicable. If you’re accessing your MusicBrainz server in a web browser, run
./script/compile_resources.sh. - If you were previously running sir, you may update it to the latest v5 release tag and set it up again via
python -m sir setup. Non-mirror standalone servers must additionally runpython -m sir setup_standalone_only.
That’s all for the upgrade instructions. Here’s the list of resolved tickets:
Fixed Bug
- [MBS-6551] - Database does not prevent a release from having duplicate label/catno pairs
- [MBS-14272] - OTOTOY URL cleanup breaks interview links
New Feature
- [MBS-14092] - Add support for series of series
Improvement
- [MBS-14268] - Allow filtering ModBot notes on /edit/notes-received
- [MBS-14271] - Warn if closing Event editor with changes made/pending
Task
- [MBS-14243] - Upgrade the required version of Perl to 5.42
- [MBS-14244] - Upgrade the required version of Node.js to 24
- [MBS-14245] - Switch from Redis to Valkey
- [MBS-14246] - Upgrade the required version of PostgreSQL to 18
- [MBS-14252] - Drop "source" column from iswc and isrc tables
- [MBS-14306] - Remove URL handling for Flattr
- Make sure
-
🔗 r/york Free 2x tickets to Pride and Prejudice But Funny on Satuday 16th May rss
~~I booked this for Saturday and now cannot get to York. Can't be refunded and empty seats are just sad. So, two free tickets for whoever wants them. I'll check back in the morning and give them based on whimsy.~~
And they're gone! 🥳
submitted by /u/happybakingface
[link] [comments] -
🔗 matklad Learning Software Architecture rss
Learning Software Architecture
May 12, 2026
In reply to an email asking about learning software design skills as a researcher physicist:
I was attached to a bioinformatics lab early in my career, so I think I understand what you are talking about, the phenomenon of “scientific code”! My thoughts:
First meta observation is that “software design” is something best learned by doing. While I had some formal “design” courses at the University, and I was even “an architect” for our course project, that stuff was mostly make- believe, kindergarteners playing fire-fighters. What really taught me how to do stuff was an accident of my career, where my second real project (IntelliJ Rust) propelled me to a position of software leadership, and made design my problem. I did make a few mistakes in IJ Rust, but nothing too horrible, and I learned a lot. So that’s good news — software engineering is simple enough that an inquisitive mind can figure it out from first principles (and reading random blog posts).
Second meta observation, the bad news: Conway’s law is important. Softwaregenesis repeats the social architecture of the organization producing software. Or, as put eloquently by neugierig,
If I were to summarize what I learned in a single sentence, it would be this: we talk about programming like it is about writing code, but the code ends up being less important than the architecture, and the architecture ends up being less important than social issues.
I suspect that the difference you perceive between industrial and scientific software is not so much about software-building knowledge, but rather about the field of incentives that compels people to produce the software. Something like “my PhD needs to publish a paper in three months” is perhaps a significant explainer?
Two things you can do here. One , at times you get a chance to design or nudge an incentive structure for a project. This happens once in a blue moon, but is very impactful. This is the secret sauce behind TIGER_STYLE, not the set of rules per se, but the social context that makes this set of rules a good idea.
Two , you can speedrun the four stages of grief to acceptance. Incentive structure is almost never what you want it to be, but, if you can’t change it, you can adapt to it. This is also true about most industrial software projects — there’s never a time to do a thing properly, you must do the best you can, given constraints.
Let me use rust-analyzer as an example. The physical reality of the project is that it’s simultaneously very deep (it’s a compiler! Yay!) and very wide (opposite to an LLM, a classical IDE is a lot of purpose-built special features). The social reality is that “deep compiler” can attract a few brilliant dedicated contributors, and that the “breadth features” can be a good fit for an army of weekend warriors, people who learn Rust, who don’t have sustained capacity to participate in the project, but who can sink an hour or two to scratch their own itch.
My insistence that
rust-analyzerdoesn’t require buildingrustc, that it builds on stable, that it doesn’t have any C dependencies, and that the entire test suite takes seconds, was in the service of the goal of attracting high- impact contributors. I was wrangling the build system to make sure people can work on the borrow checker without thinking about anything else.To attract weekend warriors, the internals of rust-analyzer are split into multiple independent features, where each feature is guarded by
catch_unwindat runtime. The thinking was that I explicitly don’t want to care too much about quality there, that the bar for getting a feature PR in is “happy path works & tested”. It’s fine if the code crashes, it will only attract further contributors, provided that:- the quality is isolated to a feature, and doesn’t spill over,
- at runtime, the crash is invisible to the user (it’s crucial that rust-analyzer features work with an immutable snapshot, and can’t poison the data).
In contrast, when working on the core spine which provided support for features, I was very relatively more pedantic about quality.
A word of caution about adapting to, rather than fixing incentive structure — the future is uncertain, and tends to happen in the least convenient manner. The original motivation behind rust-analyzer experiment was to avoid the need to write a parallel compiler (the one in IntelliJ Rust), and to prototype a better architecture for LSP, so that the learnings could be backported to
rustc. So, even in core (especially in core), the code was very experimental. Oh well. Stuck with one more compiler now, I guess?I might hazard a guess that something similar happened to uutils project, which started as the primary destination for people learning Rust, and ended up as Ubuntu coreutils implementation.
Third , now to some concrete recommendations. Sadly, I don’t know of a single book I can recommend which contains the truths. I suspect one can only find such a book in an apocryphal short story by Borges: practice seems to be an essential element here. But here are some things worth paying attention to:
Boundaries talk by Gary Bernhardt is all-time favorite. It contains solid object-level advice, and, for me, it triggered the meta inquiry.
How to Test is something I wish I had. I immediately understood the importance of testing, but it took me a long time to grow arrogant enough to admit that most widely- cited testing advice is shamanistic snake-oil, and to conceptualize what actually works.
∅MQ guide and, more generally, writings by Pieter Hintjens introduced me to Conway’s Law thinking. That “feature development” architecture of rust-analyzer? – optimistic merging, applied.
Reflections on a decade of coding by Jamii is excellent, goes very meta. It is intentionally the first of my links.
Ted Kaminski blog is the closest there is to a coherent theory of software development, appropriately framed as a set of notes to a non-existing book!
As for the actual books, Software Engineering at Google and Ousterhout’s The Philosophy of Software Design are often recommended. They are good. SWE, in particular, helped me with a couple of important names. But they weren’t ground breaking for me.
-