
IANA explains example.com change, warns off uptime checks
IANA split example.com into HTML plus a JavaScript file to cut bandwidth, says an email published September 30, and warns off using it for uptime checks.
Languages, practices, and engineering stories that change how you code.

IANA split example.com into HTML plus a JavaScript file to cut bandwidth, says an email published September 30, and warns off using it for uptime checks.

Rust 1.99.0, out October 1, 2026, lets stable Rust define C-variadic functions like printf, moves to LLVM 23 and makes no_mangle on generics an error.

Python 3.10.22 is the last 3.10 release: the branch reached end of life on October 1, 2026, as 3.11 to 3.14 shipped fixes for up to eight CVEs.

The Python Language Summit 2026 reports are out: 47 core developers weighed Rust in CPython, a new garbage collector, a std namespace and faster startup.

Archinstall 4.5, out September 29, 2026, sets up 64-bit ARM machines with GRUB or Limine, adds real-time kernels and turns on TLS verification.

ShinyHunters is mass-exploiting Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8) again, dodging WAF rules by writing one letter of the path as %50.

postmarketOS, the phone Linux distribution started in 2017, is now Nura. The name won an 18-month search that drew more than 300 suggestions.

CISA added a Microsoft SharePoint Server bug and a MikroTik RouterOS exploit chain to its exploited-vulnerability list, with a patch deadline of September 28 for U.S. federal agencies.

CISA added two Citrix NetScaler flaws, both scoring 9.5 of 10 on the CVSS severity scale, to its exploited-vulnerability list on September 27, giving federal agencies until September 30 to patch.

A 9-patch series moves the kernel's 2017-2018 LZ4 code to upstream v1.10.0, adds bounds checks and speeds 16K-block decompression by 21%.

LINBIT posted 7 patches on September 23 that reshape the kernel's DRBD 8.4 code toward DRBD 9, which supports up to 31 peers per volume.

The Python docs now have a German edition at docs.python.org/de/3/. The core pages are 100% translated; the full set stands at 9.17%.

DHH says he wrote 150,000 lines of code in August 2026 alone, versus 30,000 a year by hand, as 37signals rewrites Hey's mail server in Rust.

Igalia posted v7 of the set_robust_list2 futex syscalls on September 25, 2026, 10 months after v6, to help FEX-Emu run 32-bit x86 code on Arm64.

Go 1.27's experimental simd package runs one vector code path on AVX-512, NEON, wasm and RISC-V, and emulates it where hardware SIMD is missing.

WordPress 7.1.2 patches CVE-2026-87902, a remote code execution bug in get_page_template() that reaches back to 4.7. Update now, the project says.

Fearless SIMD 1.0, released September 21, gives Rust safe SIMD from SSE2 to AVX-512, NEON and WebAssembly, with a stable API and 3 years of security fixes.

Linux 7.3-rc4 landed on September 20, 2026, its fixes split in thirds across drivers, filesystems and architecture code. Torvalds credits LLMs.

A 43-line Linux 7.4 patch drops two redundant dentry references when opening a file, lifting a 20-core benchmark by 39%.

Vulkan 1.4.363 ships VK_INTEL_device_info, an Intel extension that reports a GPU's graphics IP version as three plain numbers.

A Btrfs change in Linux 7.2-rc1 made filesystem IDs unstable and broke OpenConnect key derivation. The fix touches 10 files.

The first jemalloc release since Meta renewed its investment carries over 160 commits, a new OS abstraction layer and per-CPU arena selection.

Rust's security team says attackers are booking video calls with crate owners under fake job offers, then asking them to install a missing codec.

Shopify is rebuilding its apps in Swift and Kotlin 6 years after going all-in on React Native. Coding agents did enough of the porting to change the math.
One email every Friday with the week's top stories from all six desks: AI, dev tools, coding, the tech industry, startups and what's next. Free, no spam.