James Hartig
@jameshartig.com
Why ‘Aliro’, The New Smart Lock Standard, Matters For The Smart Home
www.forbes.com
December 31, 2025 at 8:22 PM
Why ‘Aliro’, The New Smart Lock Standard, Matters For The Smart Home
MongoBleed explained
MongoBleed explained simply
CVE-2025-14847 allows attackers to read any arbitrary data from the database's heap memory. It affects all MongoDB versions since 2017, here's a simple explanation:
bigdata.2minutestreaming.com
December 29, 2025 at 1:54 AM
MongoBleed explained
Your Supabase is public if you turn off RLS
Your Supabase Is Public
I was chatting with a close friend of mine and he sent me a link to his new SaaS that he's developing.
skilldeliver.com
December 23, 2025 at 2:55 PM
Your Supabase is public if you turn off RLS
YouTube Will Stop Submitting Data to U.S. Billboard Charts in 2026
YouTube Will Stop Submitting Data to U.S. Billboard Charts in 2026
YouTube will stop submitting its data to the U.S. Billboard charts next month due to a dispute over how streams are counted.
variety.com
December 21, 2025 at 11:13 PM
YouTube Will Stop Submitting Data to U.S. Billboard Charts in 2026
Public Incident Report of Insurance Error of /24 IP Block
Public Incident Report – 4.10 Issuance Error
Executive Summary On 2 December 2025, an IPv4 block 23.150.164.0/24, correctly allocated to the Original Customer, was inadvertently removed and reissued to the …
www.arin.net
December 21, 2025 at 7:35 PM
Public Incident Report of Insurance Error of /24 IP Block
The pitfalls of partitioning Postgres yourself
Hatchet
Deploy More Resilient Apps. Hatchet is a platform for building distributed web apps that solves scaling problems like concurrency, fairness, and rate limiting.
hatchet.run
December 20, 2025 at 2:55 PM
The pitfalls of partitioning Postgres yourself
Vulnerability in Mintlify affected X, Vercel, Cursor, and Discord
How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack
How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack - writeup.md
gist.github.com
December 19, 2025 at 2:55 PM
Vulnerability in Mintlify affected X, Vercel, Cursor, and Discord
GitHub reduces the price of hosted runners but will begin charging for self-hosted action runners on March 2026
Coming soon: Simpler pricing and a better experience for GitHub Actions - GitHub Changelog
On January 1, 2026, GitHub will reduce the price of GitHub-hosted runners by up to 39% depending on the machine type used. The free usage minute quotas will remain the…
github.blog
December 16, 2025 at 9:22 PM
GitHub reduces the price of hosted runners but will begin charging for self-hosted action runners on March 2026
VPN providers misrepresent the underlying location of their servers
Should You Trust Your VPN Location?
17 out of 20 popular VPNs exit traffic from different countries than they claim. Dig into what that means and why it matters in our VPN report.
ipinfo.io
December 14, 2025 at 7:35 PM
VPN providers misrepresent the underlying location of their servers
Go proposal: Secret mode
Go proposal: Secret mode
Automatically erase memory to prevent secret leaks.
antonz.org
December 10, 2025 at 3:10 PM
Go proposal: Secret mode
Atomic time source failure at NIST Gaithersburg campus
Atomic time source failure at NIST Gaithersburg campus
Internet-time-service
groups.google.com
December 10, 2025 at 2:55 PM
Atomic time source failure at NIST Gaithersburg campus
Why Sourcegraph and Amp Are Becoming Independent Companies
Why Sourcegraph and Amp Are Becoming Independent Companies | Sourcegraph Blog
Sourcegraph and Amp are becoming two separate companies, with Dan Adler stepping up as CEO of the code search business while co-founders Quinn Slack and Beyang Liu launch Amp Inc. to focus on frontier...
sourcegraph.com
December 9, 2025 at 12:39 AM
Why Sourcegraph and Amp Are Becoming Independent Companies
Jepsen: NATS 2.12.1 Analysis
Jepsen: NATS 2.12.1
NATS is a distributed streaming system. Regular NATS streams offer only best-effort delivery, but a subsystem, called JetStream, guarantees messages are delivered at least once. We tested NATS…
jepsen.io
December 8, 2025 at 11:13 PM
Jepsen: NATS 2.12.1 Analysis
Cloudflare outage on December 5, 2025
Cloudflare outage on December 5, 2025
Cloudflare experienced a significant traffic outage on December 5, 2025, starting approximately at 8:47 UTC. The incident lasted approximately 25 minutes before resolution. We are sorry for the impact...
blog.cloudflare.com
December 6, 2025 at 2:55 PM
Cloudflare outage on December 5, 2025
Introducing UniFi 5G Devices
Introducing UniFi 5G
Discover the U5G Max and UniFi’s next generation 5G lineup featuring effortless setup, ultra fast speeds, rugged outdoor options, and advanced UniFi integration for unmatched performance.
blog.ui.com
December 5, 2025 at 3:10 PM
Introducing UniFi 5G Devices
AV1 — Now Powering 30% of Netflix Streaming
AV1 — Now Powering 30% of Netflix Streaming
Liwei Guo, Zhi Li, Sheldon Radford, Jeff Watts
netflixtechblog.com
December 5, 2025 at 2:55 PM
AV1 — Now Powering 30% of Netflix Streaming
Ignorjng The Spotlight as a Staff Engineer
Why I Ignore The Spotlight as a Staff Engineer
Lately I’ve been reading Sean Goedecke’s essays on being a Staff+ engineer. His work (particularly Software engineering under the spotlight and It’s Not Your Codebase) is razor-sharp and feels painfully...
lalitm.com
December 4, 2025 at 2:55 PM
Ignorjng The Spotlight as a Staff Engineer
Critical Security Vulnerability in React Server Components react.dev/blog/2025/12...
Critical Security Vulnerability in React Server Components – React
The library for web and native user interfaces
react.dev
December 3, 2025 at 5:28 PM
Critical Security Vulnerability in React Server Components react.dev/blog/2025/12...
Critical RCE Vulnerabilities Discovered in React & NextJS
Critical RCE Vulnerabilities Discovered in React & Next.js | Wiz Blog
React and Next.js are exposed to critical unauthenticated RCE via CVE-2025-55182 and CVE-2025-66478. Learn which versions are impacted and how to mitigate.
www.wiz.io
December 3, 2025 at 5:04 PM
Critical RCE Vulnerabilities Discovered in React & NextJS
BigQuery Table Sampling and considerations before blindly using it jameshartig.dev/2025-bigquer...
BigQuery Table Sampling · James Hartig
BigQuery table sampling introduction and bias
jameshartig.dev
November 25, 2025 at 8:22 PM
BigQuery Table Sampling and considerations before blindly using it jameshartig.dev/2025-bigquer...
Google tells employees it must double capacity every 6 months to meet AI demand
Google tells employees it must double capacity every 6 months to meet AI demand
Google’s AI infrastructure chief tells staff it needs thousandfold capacity increase in 5 years.
arstechnica.com
November 23, 2025 at 2:55 PM
Google tells employees it must double capacity every 6 months to meet AI demand
How Google built a 130,000-node GKE cluster
How we built a 130,000-node GKE cluster | Google Cloud Blog
Learn about the architectural innovations we used to build a 130,000-node Kubernetes cluster, and the trends driving demand for these environments.
cloud.google.com
November 22, 2025 at 9:22 PM
How Google built a 130,000-node GKE cluster
Valkey 9.0: innovation, features, and improvements
Valkey: Valkey 9.0: innovation, features, and improvements.
For Valkey's second major release, Valkey 9.0 brings innovation, long-requested features, and improvements to classic features updated for today’s workloads. Read on to find out all the team packed...
valkey.io
November 22, 2025 at 8:22 PM
Valkey 9.0: innovation, features, and improvements
Cloudflare outage on November 18, 2025
Cloudflare outage on November 18, 2025
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
blog.cloudflare.com
November 21, 2025 at 1:54 AM
Cloudflare outage on November 18, 2025