apfel - Your Mac Already Has AI Your Mac already has AI. Apple ships a language model with macOS -apfel unlocks it with one brew install. No downloads, no API keys, no config. The fastest path to local AI.

apfel - The free AI already on your Mac

CLI. Fully local using apple foundation model. Needs macos tahoe and a silicon apple. 4k token context

apfel.franzai.com

... distributed systems, blob storage with a dose of Lucene, latest Java and down to the ops level in between.

Feel free to ping me in case of questions about the position or check the more verbose job description and apply

jobs.elastic.co/jobs/enginee...

Interested in bringing Elasticsearch search capabilities to the next level? We're searching for an experienced colleague to join the team I am in as well. Fully distributed, nicest and most humble colleagues you can ask for (and me admittedly), plus fun problems at the edge of search...

SQL Has Problems. We Can Fix Them: Pipe Syntax In SQL We strive to create an environment conducive to many different types of research across many different time scales and levels of risk.

SQL Has Problems. We Can Fix Them: Pipe Syntax In SQL

Not a new paper, but still some interesting tidbits in there. Like the LOG operator, especially when you deal with page long queries and joins. You also find a bit of criticism when googling...

research.google/pubs/sql-has...

CrackArmor: Multiple vulnerabilities in AppArmor

A bunch of vulnerabilities in AppArmor, dating back up to 2017. Security is a game of adding layers...

cdn2.qualys.com/advisory/202...

DuckDB with HNSW, ACORN & RaBitQ

nice blogpost about implementing ACORN in a DuckDB plugin and why it makes so much sense.

cigrainger.com/blog/duckdb-...

GitHub - kepano/defuddle: Get the main content of any page as Markdown. Get the main content of any page as Markdown. Contribute to kepano/defuddle development by creating an account on GitHub.

defuddle - Get the main content of any page as Markdown

With agents on the rise these kind of tools will become an absolute standard and improve a lot in the next months.

github.com/kepano/defud...

Capsicum vs seccomp: Process Sandboxing — Vivian Voss A compromised process inherits the full authority of the user who launched it. Two operating systems fixed this with opposite philosophies. One removed the doors. The other posted a bouncer.

Capsicum vs seccomp: Process Sandboxing

Nice comparison between FreeBSD & Linux implementations. "Elegant, certainly. Also almost completely unusable for anything that needed to do actual work." about the initial seccomp impl...

vivianvoss.net/blog/capsicu...

How we caught the Axios supply chain attack — Elastic Security Labs Joe Desimone shares the story of how he caught the Axios supply chain attack with a proof of concept tool built in an afternoon.

How we caught the Axios supply chain attack

trivy, litellm, axios.. guess this will hit dependencies across even more languages soon. Great post how this was detected with a prototype tool running on a engineers laptop.

www.elastic.co/security-lab...

Parents, who have kids playing Nintendo switch: I am searching for a bit of a logic/puzzle/brainteaser/adventure game for a 10 year old. As I don't play myself, I am happy for recommendations :-)

I Decompiled the White House's New App The official White House Android app has a cookie/paywall bypass injector, tracks your GPS every 4.5 minutes, and loads JavaScript from some guy's GitHub Pages.

Decompiled the White House's New App

Nice blog post about reverse engineering the white house app. If you are not too interested just scroll to the recap at the end. It's pretty wild.

blog.thereallo.dev/blog/decompi...

Monaspace An innovative superfamily of fonts for code

Monaspace is a new type system that advances the state of the art for the display of code on screen.

As a consumer it's often so hard to overlook all the work that goes into fonts, and I am happy for these kind of explanations. Nice read!

monaspace.githubnext.com

The Claude Code Source Leak: fake tools, frustration regexes, undercover mode, and more

Interesting peak into the source leak showing potential product features and some shortcuts taken.

alex000kim.com/posts/2026-0...

pg_plan_alternatives: Tracing PostgreSQL’s Query Plan Alternatives using eBPF PostgreSQL uses a cost-based optimizer (CBO) to determine the best execution plan for a given query. The optimizer considers multiple alternative plans during the planning phase. Using the EXPLAIN…

pg_plan_alternatives: Tracing PostgreSQL's Query Plan Alternatives using eBPF

capturing execution plans, visualizing via SVGs. Check out the whole blog for other great postgres performance posts.

jnidzwetzki.github.io/2026/03/04/p...

Landdown - Simple shell script sandbox

Nice idea of just prepending scripts with a few statements utilizing landdown to lock down read/write permissions and network connecton ability. Similar to landrun.

git.sr.ht/~marcc/landd...

GitHub - glommer/pgmicro: An in-process reimplementation of PostgreSQL, backed by a SQLite-compatible storage engine An in-process reimplementation of PostgreSQL, backed by a SQLite-compatible storage engine - glommer/pgmicro

pgmicro - in-process reimplementation of PostgreSQL, backed by SQLite

Postgres compatibility remains the USP for any database tool. And sqlite remains the USP for anything database in the agentic era[tm]. Just a PoC at the moment though.

github.com/glommer/pgmi...

GitHub - elastic/agent-skills: Official Elastic Skills Official Elastic Skills. Contribute to elastic/agent-skills development by creating an account on GitHub.

Official Elastic Skills

a list of skills with various that will grow over time, allowing you to basically have a list of local files and automatically create visualizations out of that. A nice benchmark to test agents and different visualization tools against my CDN data

github.com/elastic/agen...

yes 🤦‍♀️

Sqitch: Sensible database change management Sqitch is the developer-friendly, confidence-inducing, platform-neutral database change management system.

Due to the flyway license change there is now a search for replacements in many projects (i.e. KeyCloak). Following the issue I heard for the first time about sqitch, which seems to be more of a maintenance mode. Anyone using this?

sqitch.org

Linux kernel czar says AI bug reports aren't slop anymore Interview: Greg Kroah-Hartman can't explain the inflection point, but it's not slowing down or going away

AI bug reports went from junk to legit overnight, says Linux kernel czar

From low quality to medium quality, that still requires some work outside the code, but the rate of change is interesting to see.

www.theregister.com/2026/03/26/g...

Where did 400 MiB go? I restarted all 60+ pods of a Node.js websocket app earlier today. Every single pod sitting at ~330 MiB of memory. Except one, which was double the rest - at 640 MiB.

Where did 400 MiB go?

Nice investigation where 400MB of a node.js app went. V8, glibc, app, GC.. so many candidates to exclude and include.

frn.sh/pmem/

ZOR filters: fast and smaller than fuse filters Probabilistic membership filters support fast approximate membership queries with a controlled false-positive probability $\varepsilon$ and are widely used across storage, analytics, networking, and…

Paper of the day: ZOR filters: fast and smaller than fuse filters

"ZOR filters can achieve overhead within of the information-theoretic lower bound while retaining fuse-like query performance"

arxiv.org/abs/2602.03525

Ghostty Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

Noticed that my wezterm brew package had not been updated for more than a year I also followed the herd and switched to ghostty. Not too much of a difference to me. Managed to get my keyboard shortcuts transferred pretty quickly and do not have a lot of custom configurations otherwise.

ghostty.org

GitHub - zerobootdev/zeroboot: Sub-millisecond VM sandboxes for AI agents via copy-on-write forking Sub-millisecond VM sandboxes for AI agents via copy-on-write forking - zerobootdev/zeroboot

zeroboot - sub-millisecond VM sandboxes for AI agents via copy-on-write forking

sandboxes will be created until the all CLI coding agents have added native per-default access to their solution. Same for all the claws of the world.

github.com/zerobootdev/...

GitHub - justrach/turboAPI: FastAPI-compatible Python framework with Zig HTTP core; 7x faster, free-threading native FastAPI-compatible Python framework with Zig HTTP core; 7x faster, free-threading native - justrach/turboAPI

turboAPI - FastAPI compatible python framework, but written in Zig

Apparently a drop-in replacement with a much better performance footprint by removing GIL and more handlers written in Zig.

github.com/justrach/tur...

Welcome to Shaper Shaper is an open source, minimal data platform to create analytics dashboards and embed them into your software.

Shaper - a a duckdb powered dashboarding tool

Interesting approach of extending SQL with dashboarding instructions. Slight difference to evidence with using SQL in markdown and then custom tags.

taleshape.com/shaper/docs/

GitHub - carlos7ags/folio: Modern PDF library for Go: layout engine, HTML to PDF, forms, signatures, barcodes, and PDF/A. Apache 2.0. Modern PDF library for Go: layout engine, HTML to PDF, forms, signatures, barcodes, and PDF/A. Apache 2.0. - carlos7ags/folio

Seems that there is a trend for PDF rendering engines in programming languages at the moment. This time a go variant, the demo features a nice HTML to PDF rendering example. No tex or typst needed.

github.com/carlos7ags/f...

Learning Retrieval Models with Sparse Autoencoders Sparse autoencoders (SAEs) provide a powerful mechanism for decomposing the dense representations produced by Large Language Models (LLMs) into interpretable latent features. We posit that SAEs…

Paper of the day: Learning Retrieval Models with Sparse Autoencoders

SPLARE from the same folks who published SPLADE it seems. For now it seems just a paper, not a model yet. Also seems multilingual.

arxiv.org/abs/2603.13277

Alexander Reelsen Backend developer, productivity fan, likes the JVM, full text search, distributed databases & systems

Revamped my little website a little. Still focused on text content, but now with a dark mode and published all my presentations on my personal website as well instead of leaving them spread across slideshare, speakerdeck and notion - who knows how long those stick around.

spinscale.de

GitHub - charmbracelet/vhs: Your CLI home video recorder 📼 Your CLI home video recorder 📼. Contribute to charmbracelet/vhs development by creating an account on GitHub.

vhs - record CLI demos

allows to create and configure demos and to save them into a GIF afterwards. I've often used node tools that broke during upgrades for this, cause I was lazy and installed packages globally, so let's see if this works better.

github.com/charmbracele...