Who can beat my implementation for unescape_html?
calculated.world/submissions…
TIL how <title> and <textarea> child text is defined to be different: fluffyandflakey.blog/2026/07…
Here’s lynn. It combines a shell with agents. Spawning an agent is like spawning a process. You can pipe between agents and different models. You can write `git status` without burning any tokens. Agents are read-only by default and only get write privileges when you decide.
cargo install lynn
Patrick Smith retweeted
LLMs make it easier than ever for normal software to get down to zero allocations.
Is this really a public company then?

ALT Anthropic admits its “novel” corporate governance structure “differs significantly” from most other public companies. It gives ordinary shareholders virtually no control over the company’s decisions. At the top of the structure sits a “Long-Term Benefit Trust”, which appoints its own members and generally has the power to elect and remove four out of the seven directors on Anthropic’s board. https://www.ft.com/content/a6c43402-719e-4295-ae5f-541edb0aeb29 ‘Bold but sane’: what we learnt from Anthropic’s 240,000-word IPO filing
We should think about what Hyrum’s law teaches us about security in the age of AI.
Hyrum’s law states:
With a sufficient number of users of an API,
it does not matter what you promise in the contract:
all observable behaviors of your system
will be depended on by somebody.
We can restate this for AI attacks:
With a sufficient number of attacks of an API,
it does not matter what you verify in behavior:
all potential vulnerabilities of your system
will be discovered by somebody.
Apple’s official guide for removing eMudhra root certificates: support.apple.com/en-us/1495…
Patrick Smith retweeted
Got a cheap embroidery machine off amazon for $300 where the biggest complaint is the mandatory $12/mo app that you’re forced to use. Had ChatGPT create its own app that communicates with the machine. Generative art patches incoming!
Patrick Smith retweeted
Corrupt autocracies prefer to do business with other corrupt autocracies because the profits are personal on both sides, not for the state or the country. No oversight, no investigations.
Patrick Smith retweeted
Yesterday, someone posted a task runner claimed to be 39x faster than Turborepo.
I got really excited, thinking they found some edge case in Turborepo and that I could make something way faster.
I open the benchmark repo, and its just straight up, flat out incorrect. Like, not even sorta useful. Not only was it not measuring the task runner parts of the script, it was overfit to a highly specific, completely unrealistic workload. 💀 The entire project is obviously Opus 5.5 vibe coded and Opus cheated the goal. Easy to miss if you're not experienced in build systems. Forgivable!
So, I open a PR to show that the algorithm being used can also make scheduling slower, by any arbitrary factor, with only a tiny adjustment. I chose 100x slower than Turborepo for demonstrative purposes.
The author fixed some of the problems but there are still grave issues. They're still comparing on an overfit bench that doesn't hold up when you insert the slightest variable, and *insisting* that its right. It is very obviously incorrect, but oh, well.
After revision, Turborepo is only 1.36x slower. Down from 39x, but a more realistic number nonetheless. So I figure: "Great! There must be something I can learn to make Turborepo faster."
I go digging, and it turns out the other tool is only faster still because it has correctness bugs. Once they correct those, they'll be roughly on par with Turborepo.
On top of that, the numbers they post now report with a mix of "% faster" and "✗ faster", using "% faster" whenever the difference isn't big enough to make their tool look good. 1.36x gets turned into "36%", which looks like more than it is to a casual observer.
This is a story of how I thought I was going to speed up Turborepo by 39x, and got nothing out of it.
I'm not mad; I'm just disappointed. 😄
Patrick Smith retweeted
Actual expertise is the most important thing right now in tech. Knowing how things work, and how they are implemented on a deep level is more important than ever.
I just picked up my iPhone Duo, let’s look at the quirky hardware and software. xitter.cf/i/broadcasts/1qKDzWkdv…
If you are interested in zero-network, memory-safe, self-contained WebAssembly modules that plug in into your existing stack check out qip.dev
Perhaps we need a system where we only download code that we know the sha256 ahead of time. Working on it.
I read this and I'm terrified, the situation seems intractable.
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/informa…

















