SDL_GP is a minimal single-header C library that leverages SDL3's GPU API to deliver high‑performance 2D graphics painting. It adds lightweight resource management akin to sokol_gp, letting developers draw rectangles, sprites, and images with minimal setup and no heavy dependencies.
turbopuffer builds a vector and full‑text search engine directly on object storage, adding an intelligent cache layer to hit in‑memory speeds while slashing costs. It already indexes over 4 TB of documents for leading AI firms, promising fast, cheap, and massive scalability for unstructured data.
Chipbuilder is an interactive web game where you start with basic AND, OR, NOT gates, assemble them into adders and multiplexers, design a full CPU, then write assembly programs that actually run on your creation. It turns abstract hardware concepts into hands‑on puzzles, making CPU architecture approachable for anyone with a browser.
Wiz researchers discovered CosmosEscape, a vulnerability in Azure Cosmos DB’s Gremlin API that exposes a platform‑wide master key. An attacker could enumerate all databases and steal any primary key, effectively taking over every Cosmos DB instance, including Microsoft’s own services. Microsoft has now patched the flaw.
New bioRxiv preprint finds >50% of AI unicorns (valued >$1B) have never authored a paper or preprint, contributing to just 0.1% of AI papers in 2025. This gap hampers validation, reproducibility, and assessment of social impacts, while firms like OpenAI dominate citations. The study highlights the tension between commercial incentives and scientific norms.
Inside Anthropic, AI-driven code review and testing let engineers prototype fluidly while a Rust rewrite of the 500k‑line Bun project finished in 11 days, down from a year. Teams stay small, two‑pizza squads, but shift focus to verification and AI‑assisted tooling, reshaping engineering practices across the lab.
Brandur measured pgtestdb’s Postgres template‑database cloning against River’s schema‑based test setup. Both hit around 100 ms per test, debunking the myth that new databases are slow, though the schema approach still runs the full suite about 3.5× faster thanks to pooling. Use pgtestdb for quick end‑to‑end tests.
The author (antirez) argues that the greatest AI danger comes from accidents or leaks within frontier labs during testing, not from releasing open-weight models. He calls for a shared safety framework and an international oversight body to prevent catastrophic misuse.
Elastic Security Labs uncovered a DPRK‑aligned campaign that lures developers into running fake coding‑challenge repos. The repos hide a four‑stage payload, credential stealer, file thief, Socket.IO RAT, and clipboard hijacker, inside SVG files using steganography. Compromising a single developer can jump‑start supply‑chain attacks on downstream projects.
You’re caught up.
That was all 9 stories in the 30 July issue.