TLDR Dev 2026-09-08

Someone just created their fiftieth "new" account to grab another free trial. Your email check, phone verification, and IP rate limits won't stop them.

On Sept 16, join Fingerprint's Keshia Rose for a free, live, hands-on workshop and build signup protection that actually works:

→ Add a few lines of JavaScript to a signup page and read the device data server-side.

→ Check for bots and assess device risk before an account is ever created.

→ Enforce one account per device, even from incognito windows or behind a VPN.

This is a guided build, not a demo. Code alongside Keshia and walk away with working signup protection for your website or app.

🗓️ Save your spot — Sept 16, 9AM PT / 12PM ET

Vortex streams compressed columnar data from S3 through host memory to the GPU with a single copy, avoiding disk staging and CPU decompression bottlenecks. Its layouts prune data before transfer, and its encodings support GPU-side decompression and computation, producing scans around 30 times faster than Parquet in the demo.

Across 26 testing conditions for a Rust Zstd task, no technique dramatically outperformed the others, and the default prompt performed above average. Fuzzing and property-based testing helped slightly in some high-effort runs, while TDD and several testing skills underperformed. Agents often followed the requested framework superficially, writing ordinary tests inside new tools or proving properties that did not improve correctness.

Speculative decoding lets vLLM verify multiple draft tokens in one target-model pass while preserving the target model's output behavior. Tests on AMD MI300X and MI355X GPUs show that throughput depends heavily on the drafting method, proposal length, model family, workload, and token acceptance rate, with setup and tuning guidance for MTP, EAGLE-3, DFlash, and DSpark.

AI adoption is eroding trust in open source, where maintainers now face suspicion over how contributions were produced while many workers cannot afford to opt out of mandated tools. The essay calls for more solidarity with people sharing public goods instead of directing justified anger at fellow developers.

Small programs can still be tightly coupled, while large systems can present a simple interface. Simplicity comes from separating concerns and choosing representations that do not braid unrelated behavior together, not just minimizing lines of code.

Some developers value programming as a creative practice, not just a means to ship products or earn money. Even if AI can generate code faster, people who love the process will keep writing code by hand because the act itself is the reward.

In this new O'Reilly book, author and CTO community leader Peter Bell presents a clear, pragmatic framework for adopting and scaling AI in engineering organizations. Available in early release compliments of Antithesis, and includes hands-on guidance for navigating the challenges of AI adoption. Claim your free copy ›

CVE MCP Server gives Claude 27 security-intelligence tools backed by 21 APIs, including CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, and VirusTotal. It packages vulnerability research and threat-enrichment workflows behind MCP so agents can gather and correlate security data from one server.

OpenScreen is a free, open-source desktop recorder for Windows, macOS, and Linux that captures screens without watermarks or subscriptions. It uses GPU-accelerated recording and is designed for quickly producing product demos and shareable videos.

Claude Ads is a Claude Code skill for paid-media operations across 12 advertising platforms, including Google, Meta, YouTube, LinkedIn, TikTok, and X. It supports source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.

Frontier labs may be treating security like probabilistic AI safety, accepting low failure rates where deterministic containment should be required. Recent agent escapes show that weak sandbox rules and ignored alerts can defeat otherwise useful monitoring, so known controls must work every time and trigger real intervention.

Seven frontier models received $300, an unlocked Mac mini, business tools, and 72 hours to make money. They generated no revenue while spending nearly $3,200, sending 2,797 emails, and issuing $12,431 in unsolicited invoices, exposing risky behavior and weak business judgment.

A free local model-gateway plugin routes GPT requests from Claude Code through a ChatGPT login while leaving Claude requests on a claude.ai account. The workflow uses Astra to orchestrate, cheaper GPT-5.6 models to execute, and Opus to review, with setup notes for the context-window suffix, finite allowances, and proxy breakage.

This Google Cloud session dives into the open Agent-to-Agent (A2A) protocol, MCPs, the Agent Development Kit (ADK), and frameworks related to payment authorization and UI. Watch now.

PAIR routes independent local-inference requests across compatible computers on the same network, exposing Ollama- and OpenAI-compatible endpoints while keeping prompts and responses local when every configured component is local.

A comparison of Fable 5.0 and 5.1 system prompts shows how changing model quirks, product policies, and tool-use guidance can create prompt debt unless instructions evolve with the model.

Anthropic's machine-generated Lean proof of Fermat's Last Theorem is mechanically verified, but its 13 million lines are too large for most consumer hardware and too opaque to serve as reusable mathematics.

Experiments on hidden Django bugs show cheaper models can follow detailed instructions and reproduce known failures, but struggle to invent the questions and adversarial inputs required to discover defects independently.