Developer Tools

Articles for developers: JSON, JWT, regex, Git, encoding, API debugging, and the online tools that speed them up. Practical write-ups focused on everyday engineering problems.

All AI Tutorials Claude Guides Developer Tools Document Processing Utility Guides Pitfall Notes AI Prompts

The Sound of Zero Gain: A WebAudio Fingerprinting Investigation, and an Overstated Conclusion

Someone noticed their multipoint Bluetooth headphones stopped switching back to their phone whenever an AliExpress page was open. The cause: two hidden AudioContexts with gain set to zero but still wired to the system audio destination, so the browser kept genuinely processing audio and pinned the Bluetooth path open. The investigation is worth learning from. The conclusion that traveled with it — that WebAudio fingerprinting is the next big threat — was shot down by Firefox's fingerprinting protection lead.

privacywebaudio+4

developerAug 21, 20267 min

250

86 Minutes: A Rust Supply Chain Attack Weaponized the Yank Mechanism

On August 20, 2026, arrayref was poisoned. The interesting part isn't the malware — it's that the attacker turned cargo's own yank warning into the delivery vector. Yank every good version, and the toolchain itself tells users to upgrade into the backdoor. The whole thing was live for 86 minutes, and it landed squarely on the hardest problem in Rust's dependency model: build.rs is arbitrary code execution at compile time.

rustcargo+4

developerAug 21, 20268 min

202

Go 1.27 Finally Closes the Generics Gap — Library Authors, Get to Work

Go 1.27 lands with generic methods, closing the four-year gap that let functions but not methods be generic. How the standard library uses it, the three walls you'll hit, why the toolchain (not the syntax) is the real upgrade risk, and what library authors vs app code should each do.

developerAug 21, 20263 min

116

Bun's Rust Rewrite: 15,800 AI Commits for What, Exactly?

Bun's Rust rewrite saw 15,800 commits from AI agents in the past month — human code is under 4%, open PRs have piled up past 5,000, and the memory-safety pitch is undermined by unsafe blocks. It's the biggest public test of AI taking over a production codebase, and the answer so far: commit volume isn't code quality.

developerAug 20, 20263 min

127

Mojo Open-Sourced Its Compiler — and Quietly Dropped the Phrase "Superset of Python"

On 2026-08-18, Modular open-sourced the Mojo compiler and full toolchain under Apache 2.0 with LLVM exceptions. But the two most-repeated selling points both need correcting: the "68,000x faster than Python" figure comes from a 2023 Mandelbrot blog series whose baseline is a single-threaded pure-CPython loop — Modular itself explained that 35,000x became 68,000x only because they switched to an 88-core machine — and the "superset of Python" positioning now reads, in the official roadmap, "may or may not... and it's okay if it doesn't." There's also something the announcement didn't headline: Qualcomm completed its acquisition of Modular on July 29. Here's the exact scope of the release, the conditions the benchmark holds under, the real cost of interop, and whether to pick it up now.

open-sourcepython+7

developerAug 19, 202611 min

233

Claude Just Doubled Protein Binder Success Rates — and Open-Sourced the Whole Recipe

Anthropic published data showing Claude-designed protein binders hit 22–35% success — more than double the 10–15% traditional average — with no fine-tuning, just prompts and public data, and open-sourced the prompts, data, and evaluation pipeline. A binder isn't a drug, but open-sourcing makes the method reproducible and portable.

developerAug 19, 20263 min

123

The Day GitHub Went Down for 7.5 Hours, Cursor Launched Its Own Code Host

On August 17, GitHub suffered a 7-hour-35-minute critical incident — its 9th critical in two months. The same day, Cursor launched Origin, a git forge 'designed for agent scale,' three days after SpaceX closed its $60B acquisition. Is the moat cracking? We fact-checked both stories.

developer-toolsgithub+4

developerAug 18, 20266 min

231

DuckDB v2.0 Preview: The Embedded Database Grows a Server Mode

DuckDB previewed v2.0: a CONNECT statement gives the in-process engine its first client/server mode, VARIANT becomes a first-class type, and the SQL parser was replaced wholesale. The viral '40x faster' claim is real — but it's about recursive CTEs, not aggregates. We checked every number against the source.

open-sourcedatabase+4

developerAug 18, 20265 min

153

Copilot Said "All Clear." Five Days Later, It Was Exploited.

A PR co-authored by Copilot introduced a textbook shell injection, the AI review marked it all-clear, and five days later Wiz's AI agent exploited it to breach Snowflake's Jira. The problem isn't AI writing bad code — it's teams treating an AI review as a security guarantee.

developerAug 18, 20263 min

Protobuf LSP Setup Guide: VS Code & Neovim with Buf

Buf ships a production-grade Protobuf LSP inside the buf CLI: go-to-definition, completion, find references, rename, and diagnostics that match buf lint. Setup paths for VS Code, Neovim (0.11 native + lspconfig), and JetBrains, a minimal two-file test project, and the known pitfalls—every command verified with buf v1.72.0.

developerAug 17, 20265 min

101

Stripe's $7B OpenRouter Deal: Buying the Right to Route

Stripe has finalized a deal to buy OpenRouter for more than $7 billion. The money isn't for the code that forwards requests — it's for the power to decide which provider serves them. But Stripe bought Amazon's position without Amazon's lock-in.

developerAug 17, 202610 min

121

Debian's Vote on AI Code: All 8 Ballot Options Explained

From August 15–28, 2026, Debian developers vote on GR 2026-002: whether LLM-generated contributions are allowed in Debian. The ballot spans eight proposals, from a full ban written into the Social Contract (requiring a 3:1 supermajority) to no restrictions at all. This guide explains each option, the core arguments on both sides, and compares AI contribution policies across Gentoo, Fedora, QEMU, curl, the Linux kernel, and more.

developerAug 16, 20269 min

290

Try these free online tools

JSON FormatterFormat, minify, validate, escape and unescape JSON with syntax highlighting, code folding, in-editor search, and precise error locations.Regex TesterTest regular expressions in real time with match highlighting, group details, and flag controls.JWT DecoderDecode JWT tokens and inspect Header, Payload, Signature, and expiry status. 100% local — nothing transmitted.Hash GeneratorGenerate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text. All processing is local — nothing sent to servers.Base64 Encode/DecodeBase64 encoding and decoding with UTF-8 support. One-click copy and download.SQL FormatterFormat and beautify SQL with keyword casing, custom indentation, and syntax highlighting. Also minify SQL to one line.