Hi there!

Besides the best links that I find each week I will start to share the new concepts that I learned at the end of each month. Most probably they will be programming/tech oriented, but who knows how it will evolve in the future. Let’s start small:

• BPF_MAP_TYPE_TASK_STORAGE - an eBPF map that stores whatever data, keyed by a task. The beauty is that the kernel will erase the entry related to a task automatically when that specific task is deleted.
• BPF_MAP_TYPE_LPM_TRIE - basically, a Longest Prefix Match map that can be used for different types of filtering
• inode generation - this is more complex and maybe deserves a full article, but, for short, Linux inodes IDs can be reused. A logic that assumes the inodes are unique for system’s lifetime is wrong. The kernel comes in help with inode generation, which tracks the “generation” for each inode ID. inode id + inode generation is unique.
• git unborn branch - it’s a branch that HEAD points to, but it has no commits yet.
• FIPS kernel - Federal Information Processing Standards mode: enforces cryptographic standards and algorithms that are used. Doesn’t affect eBPF functionality directly.

🛡️ Security & Privacy

• OpenAI confirmed that an internal, guardrail-free model broke out of its test sandbox, exploited a zero-day, and hacked into Hugging Face's production systems just to cheat on a cybersecurity benchmark. More More More
• Qualys disclosed RefluxFS (CVE-2026-64600), a nine-year-old XFS race condition letting local users gain root on RHEL, Fedora, and Amazon Linux, affecting over 16 million systems. More
• Google now lets users sign into their accounts with an encrypted, liveness-checked selfie video instead of a password, aimed at deepfake-resistant account recovery. More
• A Claude Code flaw lets a repo's CLAUDE.md file import a symlink to silently exfiltrate files outside the project; Anthropic closed the report as informative. More
• Federal prosecutors are charging an Atlanta man after his GrapheneOS phone auto-wiped during an airport search, raising fears that privacy tools themselves are being criminalized. More
• EU civil society groups launched a campaign for browser-level privacy signals to kill cookie banners, after industry lobbying stalled the Commission's original proposal. More

🛸 Tech

• Free Ink launched an open-source ecosystem — firmware, software, and hardware — for e-paper readers, positioned as an alternative to closed Kindle and Kobo platforms. More
• Mitchell Hashimoto argues SIMD is simpler than its reputation suggests, breaking it into a 5-step pattern that delivered a 5x real-world speedup in Ghostty. More

🤖 AI

• Google introduced Gemini 3.6 Flash, 3.5 Flash-Lite, and a specialized 3.5 Flash Cyber model built into its CodeMender vulnerability-fixing agent. More
• Alibaba released Qwen-Image-3.0, prioritizing dense, text-heavy layouts and 10px legible text over pure aesthetics, though it shipped without benchmarks or open weights. More
• Fireworks AI found that routing tasks between open Kimi K3 and closed Fable 5 beats either model alone, hitting 93% accuracy at up to 50x lower cost. More
• Google's new ATLAS report on 15 million AI interactions finds workplace AI use is broad but shallow — under 10% of tasks are fully automated. More
• A Stanford SIEPR policy brief finds AI's overall job impact is still small, though it may be quietly worsening the market for new graduates. More
• Andrew Ng open-sourced OpenWorker, a local, model-agnostic desktop agent that delivers finished documents, Slack replies, and calendar updates instead of just chatting. More

🛠️ Tools

• Kimi Work is Moonshot AI's desktop agent that automates local files, browser tasks via WebBridge, and scheduled workflows for knowledge workers. More
• Nativ is a free, open-source Mac app for running open LLMs locally via MLX, integrating with Claude Code and other coding agents. More
• late.sh is a free SSH-based terminal clubhouse offering chat, music, games, and a collaborative ASCII artboard, no accounts needed. More
• Gigatoken is a Rust-based tokenizer claiming up to ~1000x faster throughput than Hugging Face's tokenizers, as a drop-in replacement. More

🗺️ Misc

• Castle Map is a free interactive atlas of nearly 5,800 castles, fortresses, and palaces across 138 countries, built entirely from open Wikidata. More
• Neal Stephenson shares practical tips for writing longhand with a fountain pen, arguing it engages more of the brain than typing or a stylus. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan