Postgres isn't slow, your storage is: how to find disk waits with pg_stat_io
How to tell if PostgreSQL is waiting on storage with wait events, pg_stat_io and iostat, and what moving to local NVMe costs.
Archive
All articles
53 articles on software, infrastructure, security and AI,newest first. Filter by topic or search inside the list.
October 2026
10 articlesSupermarket fridge hack: how exposed Danfoss controllers were pushed to 50°C, and how to find yours
How the French supermarket fridge attack reached Danfoss controllers, what the known CVEs allow, and how to find and close the same exposure.
GhostAction is back: how a GitHub Actions workflow steals secrets from your git history
How the GhostAction GitHub Actions workflow steals secrets from git history, how to check your repos, what to rotate, and what stops it.
Python 3.15 is out: lazy imports, UTF-8 by default, and what to test before you upgrade
What Python 3.15 changes for working code: how lazy imports work and fail, the UTF-8 default, frozendict, Tachyon, and an upgrade checklist.
DuckDB 2.0 alpha: where the speed-ups come from, and what to test before it ships
Why DuckDB 2.0 reads S3 up to 3x faster, runs recursive queries in a tenth of a second, and where VARIANT is still slower than JSON.
Deno Deploy shuts down in six months: where to move your apps, and what to rewrite
Deno's team is joining Cloudflare and Deploy closes in six months. What ends, what stays, and how to move an app to Workers or Node.
Node 26 LTS won't turn on npm 12's protections for you
Node 26 goes LTS on 28 October still bundling npm 11. How to install npm 12 yourself and switch to its install-script allowlist.
Coding agents don't go rogue. They inherit your access.
Real coding-agent incidents show the damage comes from access, not intent. Scope credentials, gate irreversible commands, keep backups out of reach.
Where AI agents break MongoDB, and the guards that hold
Four ways an AI agent corrupts a MongoDB database duplicate retries, lost updates, injected filters, admin credentials and the guard for each.
Temporal in Node.js 26: what happens when a date leaves your process
Temporal is on by default in Node.js 26. At JSON, BullMQ, worker-thread and database boundaries it becomes a string, an error, or possibly nothing.