Category: Development

arXivLabs: Community-Driven Experiments on arXiv

2025-06-10
arXivLabs: Community-Driven Experiments on arXiv

arXivLabs is a platform enabling collaborators to build and share new features directly on the arXiv website. Participants, both individuals and organizations, uphold arXiv's values of openness, community, excellence, and user data privacy. arXiv is committed to these principles and only partners with those who share them. Got an idea to enhance the arXiv community? Explore arXivLabs.

Development

XenevaOS: A Ground-Up Open-Source Operating System

2025-06-10
XenevaOS: A Ground-Up Open-Source Operating System

XenevaOS is a brand new operating system built from scratch, supporting both x86_64 and ARM64 architectures. Its kernel, 'Aurora', features a hybrid design. This open-source project welcomes contributions from developers. Current features include: ACPI support, x64 and arm64 kernels, full higher-half memory, DLL driver loading, USB3, high-definition audio, multiprocessor support (multiprocessor scheduler not yet ready), Chitralekha graphics library, Deodhai window manager, Namdapha desktop environment, various storage support, networking (IPv4, UDP/IP, TCP/IP, ICMP), and basic applications (music player, file browser, etc.). The project is currently built on a Windows environment.

Development

Remembering Mikeal Rogers: A Beacon of the Open Source Community

2025-06-10
Remembering Mikeal Rogers: A Beacon of the Open Source Community

This heartfelt tribute remembers Mikeal Rogers, a key contributor to Node.js, who passed away from aggressive cancer. The author recounts their shared journey and Mikeal's profound impact on the open-source community. Mikeal's technical brilliance, clear thinking, and genuine humanity shone through, emphasizing the human connection at the heart of code. He championed open source as a promise, not just a license, mentoring others and fostering growth. The author commits to carrying on Mikeal's legacy of building inclusive and open communities.

Development Tribute

Ubuntu 25.10 Drops Xorg Support for GNOME, Embraces Wayland Exclusively

2025-06-10
Ubuntu 25.10 Drops Xorg Support for GNOME, Embraces Wayland Exclusively

Ubuntu 25.10, codenamed "Questing Quokka," is making a significant change: the default GNOME desktop will exclusively use Wayland, dropping support for Xorg. This isn't a sudden decision; GNOME is phasing out Xorg support, and Canonical is proactively adapting. This allows users and developers a full release cycle to adjust before the next LTS, Ubuntu 26.04, arrives next year. The move is driven by Wayland's maturity, improved Nvidia driver support, better touchscreen and high-DPI display handling, and a simplification of development by avoiding maintaining two display servers. While some users rely on Xorg, it won't disappear entirely; it can still be installed and used with other desktop environments. Most X11 applications will continue to function via XWayland.

Development

Rust Concurrency Pitfalls: An Atomic Counter Bottleneck

2025-06-10
Rust Concurrency Pitfalls: An Atomic Counter Bottleneck

Conviva's streaming analytics platform experienced a performance bottleneck due to a seemingly innocuous atomic counter in a globally shared type registry using a concurrent hash map (Flashmap). Under high concurrency, updates to the atomic counter caused cache line bouncing and excessive context switching, leading to a spike in P99 latency. Replacing Flashmap with Dashmap failed to resolve the issue. The problem was ultimately solved using ArcSwap, which employs a read-copy-update (RCU) mechanism to avoid cache contention. This case highlights the importance of choosing the right data structure for high-concurrency scenarios, particularly in read-heavy situations where ArcSwap's efficiency excels.

Development

Malleable Software: The Future of Computing is User-Driven

2025-06-10
Malleable Software: The Future of Computing is User-Driven

This essay explores the concept of "malleable software," a software ecosystem where users can easily adapt tools to their needs. The authors argue that the rigidity of current software hinders user agency and creativity, illustrating the negative impact with examples from the medical profession. They contrast the malleability of physical environments with the inflexibility of digital ones, proposing three design patterns for achieving malleable software: a gentle slope of customizability, composable tools, and community creation. The authors detail several prototype systems their team has built, showcasing the potential of malleable software while acknowledging the challenges ahead, such as privacy, security, and business models. Ultimately, the essay calls for a more user-centric computing ecosystem.

Development

arXivLabs: Experimenting with Community Collaboration

2025-06-10
arXivLabs: Experimenting with Community Collaboration

arXivLabs is a platform enabling collaborators to build and share new arXiv features directly on the site. Participants, individuals and organizations alike, embrace arXiv's values of openness, community, excellence, and user data privacy. arXiv is committed to these values and partners only with those who share them. Got an idea for a project that will benefit the arXiv community? Learn more about arXivLabs.

Development

arXivLabs: Experimenting with Community Collaboration

2025-06-10
arXivLabs: Experimenting with Community Collaboration

arXivLabs is a framework for collaborating on and deploying new arXiv features directly on the website. Participants must embrace arXiv's values of openness, community, excellence, and user data privacy. Got an idea to enhance the arXiv community? Explore arXivLabs!

Development

Stanford Integrates AI to Supercharge National Security Policy Learning

2025-06-10
Stanford Integrates AI to Supercharge National Security Policy Learning

Stanford's international policy class, "Technology, Innovation, and Great Power Competition," integrated AI tools to significantly enhance student learning. Students leveraged ChatGPT, Claude, Perplexity, and other AI tools to summarize documents, identify key themes, analyze critical content, and apply these insights to real-world national security challenges. Team projects revealed innovative uses of AI, including generating interview questions, simulating interviews, and creating presentations. The class demonstrates AI's potential as a powerful learning tool, accelerating learning and deepening understanding.

Shell Injection Vulnerabilities Lurking in Unix Utilities

2025-06-10
Shell Injection Vulnerabilities Lurking in Unix Utilities

Many Unix utilities use the `system(3)` function to execute external commands, leading to potential shell injection vulnerabilities. This article delves into this issue, analyzing the behavior of `system(3)`, `sh -c`, and various tools like `watch`, `ssh`, and `i3`, demonstrating how shell metacharacters can be used to bypass security measures. The author advocates for avoiding `system(3)` and provides mitigation techniques, such as using `exec --` and proper quoting and escaping. Ultimately, the article calls for developers to address these security flaws in their tools.

Development shell injection

Pydoll: WebDriver-less Browser Automation

2025-06-10
Pydoll: WebDriver-less Browser Automation

Say goodbye to webdriver compatibility nightmares! Pydoll is a revolutionary Python library that connects directly to the Chrome DevTools Protocol, eliminating the need for external drivers for browser automation. It features native captcha bypass (Cloudflare Turnstile and reCAPTCHA v3), asynchronous performance, human-like interactions, and a powerful event system. Its simplicity, power, and ability to handle modern website protections make it ideal for automated testing, web scraping, and automating repetitive tasks.

Development captcha bypass

Critical OpenPGP.js Vulnerability Allows Signature Spoofing

2025-06-10
Critical OpenPGP.js Vulnerability Allows Signature Spoofing

Codean Labs discovered a critical vulnerability (CVE-2025-47934) in the OpenPGP.js library that allows attackers to spoof arbitrary signatures. By leveraging a valid signature and appending a malicious data packet, attackers can trick OpenPGP.js verifiers into accepting the malicious data as signed, effectively forging signatures. This vulnerability impacts several web-based email clients, posing a critical risk. Versions 5.11.3 and 6.1.1 patch this vulnerability; immediate updates are recommended.

Development signature spoofing

C++ Template Inheritance and Copy Construction: A Puzzling static_assert

2025-06-10
C++ Template Inheritance and Copy Construction: A Puzzling static_assert

This article explores a puzzling issue regarding copy constructors in C++ template inheritance. The `Derived` class inherits from `Base`, where `Base`'s copy constructor is deleted. However, `Derived` defines its own copy constructor. Even though this constructor attempts to copy the uncopyable `Base` object, `std::is_copy_constructible` still returns true. This is because the compiler only checks for the presence of a non-deleted copy constructor, not its instantiability. The author further discusses the differences between explicitly defined and implicitly defined copy constructors, and the implications of moving the copy constructor definition out of line.

Development Copy Construction

patolette: A PCA-Based Color Quantization and Dithering Library

2025-06-10
patolette: A PCA-Based Color Quantization and Dithering Library

patolette is a C/Python library for color quantization and dithering, implementing a weighted variant of Xiaolin Wu's PCA-based quantizer. Key features include support for CIEL*u*v* and ICtCp color spaces, optional saliency map weighting for visually prominent areas, and optional KMeans refinement. While still under development and lacking a PyPI package, it's usable now. Manual installation is required, with AVX instruction set support for performance boosts. The library doesn't handle image decoding/encoding; users must handle that themselves.

Development color quantization

3D Spherical Path Calculation Algorithm

2025-06-10
3D Spherical Path Calculation Algorithm

This code implements an algorithm for calculating the path between two points on a 3D sphere. It first converts the start and end vectors to a local coordinate system, then uses quaternion interpolation to calculate multiple points on the path, and finally generates a curve connecting the two points. The algorithm cleverly utilizes the properties of 3D vectors and quaternions to efficiently compute a smooth spherical path, suitable for path planning and animation in 3D scenes.

Paws-on-MCP: A Production-Ready Unified MCP Server

2025-06-10
Paws-on-MCP: A Production-Ready Unified MCP Server

Paws-on-MCP is a comprehensive Model Context Protocol (MCP) server implementing the latest MCP 2025-03-26 specification. It showcases MCP capabilities including tools, resources, prompts, roots, and enhanced sampling with model preferences. The project features HackerNews and GitHub API integrations with AI-powered analysis through advanced MCP sampling. While the core MCP functionality is production-ready, some tests failed due to framework concurrency limitations.

Development

Beyond Promises: Exploring the Power of Thenables in JavaScript Async Operations

2025-06-10

This article delves into the power of Thenables in JavaScript, objects with a `.then()` method that can be awaited using the `await` keyword, even if they aren't Promise objects. The article demonstrates creating a Thenable simulating asynchronous operations and compares it to Prisma's lazy execution. While highlighting the lightweight nature of Thenables for async operations, the author cautions that complex Thenables can be harder to debug, recommending native Promises when appropriate.

Development

Elastic Cloud Serverless: Unstable Throughput and Packet Loss on Azure AKS

2025-06-10
Elastic Cloud Serverless: Unstable Throughput and Packet Loss on Azure AKS

Elastic's SRE team observed unstable throughput and packet loss in Elastic Cloud Serverless running on Azure Kubernetes Service (AKS). Investigation revealed RX ring buffer overflows and kernel input queue saturation on SR-IOV interfaces as the root cause. Increasing RX buffer sizes and adjusting the netdev backlog significantly improved network stability. The experience highlights that even with high-performance hardware, OS-level network parameter tuning is crucial for optimal performance.

Development

Unraveling the Mystery of Forth's DOES>

2025-06-10

This article delves into the intricate implementation of the `DOES>` word in the Forth programming language. `DOES>` enables the creation of 'smart data structures' capable of executing custom actions. The author meticulously explains the three temporal aspects of `DOES>`: compile time, definition time, and runtime. Using the examples of `SHAPE` and `MAN`, the article illustrates how `DOES>` modifies the execution address of newly created words to achieve its functionality, ultimately executing the code following `DOES>` at runtime. The complexity of implementing `DOES>` and potential conflicts with modern OS memory management are also discussed.

Development

Why AI Pair Programmers Are Currently a Bad Idea

2025-06-10
Why AI Pair Programmers Are Currently a Bad Idea

The author shares their experience using AI pair programming, finding that the AI's speed surpasses human comprehension, leading to inefficiencies. The solution proposed is to break down tasks into smaller, independent components, utilize asynchronous workflows, and reduce the AI's autonomy. This includes using turn-based editing modes, increasing communication and confirmation steps, and aiming for a better balance between speed and quality. The ultimate goal is to make the AI assistant more like a human collaborator rather than a high-speed code generator.

Development

container: Lightweight Container Tool for Apple Silicon Macs

2025-06-09
container: Lightweight Container Tool for Apple Silicon Macs

container is a Swift-based tool for creating and running Linux containers on macOS as lightweight virtual machines. It's OCI-compliant, allowing you to pull and run images from any standard container registry and push built images. It leverages new features in macOS 26 Beta 1 and has networking limitations on macOS 15; upgrading is recommended. Download the installer from the GitHub releases page and use uninstall-container.sh for removal. User data can be preserved during uninstallation.

Development

Prototyping a CodeCAD Language: The Pursuit of Software Hygge

2025-06-09

The author spent a month prototyping a CodeCAD language, aiming not for flashy demos, but for a feeling of "software hygge": instant loading, stability, and ease of use. The post focuses on the prototyping challenges of a "bidirectional editing" feature, synchronizing a graphical UI with a textual code editor in real-time. Numerous technical hurdles are discussed, including code rewriting, editor-UI synchronization, and code formatting. The author shares learning resources and reflections on building an integrated language implementation and editor tooling, as well as discussions on related existing projects.

Development bidirectional editing

Apple Unveils Offline AI Framework at WWDC2025

2025-06-09
Apple Unveils Offline AI Framework at WWDC2025

Apple announced its new "Foundation Models" framework at WWDC2025, enabling developers to leverage Apple's on-device AI models offline. This eliminates cloud API costs and enhances user privacy. Using Swift, developers can access Apple Intelligence models with minimal code, creating personalized experiences. For example, Kahoot can generate custom quizzes from user notes. The framework is currently in developer testing, with a public beta launching early next month.

Development offline AI

Running Linux Containers on Apple Silicon: Introducing Containerization

2025-06-09
Running Linux Containers on Apple Silicon: Introducing Containerization

Containerization is a Swift-based project enabling Linux container usage on Apple Silicon. Leveraging virtualization, it offers comprehensive APIs for managing OCI images, interacting with remote registries, creating filesystems, configuring networking, managing lightweight VMs, and running containerized processes. A miniature init system, vminitd, manages in-VM processes. Building requires an Apple Silicon Mac, macOS 15+, and Xcode 26 Beta+. An optimized Linux kernel configuration ensures fast boot times. Version 0.1.0 is released, with community contributions welcomed.

Development

Somo: A Human-Friendly Netstat Alternative for Linux

2025-06-09
Somo: A Human-Friendly Netstat Alternative for Linux

Tired of the complexities of netstat? Somo is a more user-friendly socket and port monitoring tool for Linux. It displays information in a clean table view, supports various filter options (protocol, port, IP address, program name, etc.), and offers interactive process killing. Installation is easy, supporting .deb packages for Debian and Cargo installation. Using sudo allows viewing all processes and ports. In short: Somo makes Linux port monitoring simpler, more efficient, and user-friendly.

Development

Munal OS: An Experimental Unikernel OS in Rust

2025-06-09
Munal OS: An Experimental Unikernel OS in Rust

Munal OS is an experimental operating system written entirely in Rust, featuring a unikernel design, cooperative scheduling, and a security model based on WASM sandboxing. It forgoes traditional components like a bootloader, page mapping, virtual address space, and interrupts. Instead, the entire OS is compiled into a single EFI binary, embedding the kernel, WASM engine, and all applications. Communication with QEMU is handled via VirtIO drivers, enabling a graphical interface, network driver, and TCP stack. While currently limited to QEMU and lacking multi-core support and interrupts, its minimalist design and WASM-based sandboxing offer a fresh perspective on OS design.

Development

Apple WWDC2025: Supercharging Developer Tools for the Future of Apps

2025-06-09
Apple WWDC2025: Supercharging Developer Tools for the Future of Apps

Apple's WWDC2025 keynote unveiled significant updates empowering developers to build smarter, more beautiful, and engaging apps. Xcode 26 integrates large language models like ChatGPT, boosting coding efficiency. The new Foundation Models framework allows developers to leverage on-device AI for offline, privacy-preserving intelligent apps. A refined 'Liquid Glass' design language brings a fresh visual experience. Further enhancements include upgraded game development tools, improved child online safety features, and increased App Store accessibility. These powerful tools and resources are designed to help developers create the next generation of exceptional apps.

Development Apple Developers

Why Go is the Perfect Language for Building AI Agents

2025-06-09

This article explores the advantages of Go for building AI agents. The author argues that the rise of AI agents necessitates high concurrency, long-running processes, and efficient resource management. Go excels in these areas due to its lightweight goroutines, efficient concurrency model, robust standard library, and convenient cancellation mechanisms. The article compares Go to other languages like Python and Node.js, highlighting Go's superior handling of concurrency, memory management, and error handling. A code example illustrates Go's elegant approach to inter-agent communication and state management. While acknowledging Go's relative lack of machine learning libraries, the article strongly advocates for Go as the ideal choice for building high-performance, scalable AI agents.

Development

Glowstick: Safe and Efficient Tensor Operations in Rust

2025-06-09
Glowstick: Safe and Efficient Tensor Operations in Rust

Glowstick is a Rust crate that makes working with tensors safe, easy, and fun by tracking tensor shapes within the type system. It offers a variety of tensor operations including matrix multiplication, convolution, reshaping, squeezing, flattening, and more. Integrating seamlessly with popular Rust ML frameworks like Candle and Burn, Glowstick empowers Rust developers with powerful tensor computation capabilities, significantly simplifying the development of deep learning models. Note that the project is currently pre-1.0 and subject to breaking changes.

Development Tensor

The Modern Guide to OAuth 2.0: Beyond the Specs

2025-06-09
The Modern Guide to OAuth 2.0: Beyond the Specs

This isn't just another OAuth 2.0 guide; it's a deep dive into real-world OAuth usage based on the experience of building FusionAuth, an OAuth server with over a million downloads. The guide details eight common OAuth modes, including local login, third-party login, enterprise login, service authorization, and machine-to-machine authentication, explaining each mode's workflow and security considerations. It also delves into the authorization code grant, PKCE, JWTs, token refresh, and user info retrieval, offering practical implementation advice.

Development
1 2 4 6 7 8 9 150 151