Loading…
Latest reads
Every post, summarised
Grounded summaries of engineering blogs, newest first. Each links to the original.
- 4,671 posts
- 20 companies
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
Latest posts
Boost Your Pipeline: Top 6 CI/CD Integrations for Qodana
Qodana brings IntelliJ IDEA’s inspection engine into CI/CD pipelines, automating code quality checks on every commit to catch issues before they reach production. The tutorial covers six integrations—GitHub Actions with its v2025.2 marketplace action and pull request integration, GitLab’s native CI/CD component that removes Docker complexity, TeamCity’s GUI-based native build runner with no YAML required, Jenkins via Docker-based Jenkinsfile for complex workflows, Azure Pipelines’ QodanaScan@2025 task displaying results in the Extensions tab, and CircleCI with a container-optimized orb. Each integration supports quality gates, baseline comparisons, and automated feedback, enabling teams to enforce consistent coding standards without disrupting existing workflows. Teams can select the integration that matches their current platform without requiring new tools or retraining. This shift-left approach reduces rework by catching defects early and transforms the pipeline into a quality guardian.
How Cloud-Based Agent Sandboxing Works in Air
AI agents require sandboxing to restrict file, network, and system access, preventing unintended modifications and data leakage. The post categorizes five agent execution modes into local (workspace, git worktree) and remote (SSH, Docker, Cloud), with remote modes providing stronger isolation by default. In JetBrains Air, each cloud agent task runs in its own VM with the agent inside a Docker container, and all network connections are routed through a proxy that allows only trusted domains by default. Secrets are stored encrypted and exposed as environment variables, and the agent operates within the developer’s repository permissions. Cloud-based execution reduces local setup requirements and gives organizations control over network access policies, with cloud agents currently available to organizational users via Air in IDEs and Air Teams.
Sizing Lakebase Search: lessons from a real app and 4 million passages
Slide Hub, an internal Databricks app for slide search, uses Lakebase Postgres with Lakebase Search extensions (lakebase_vector and lakebase_text) to run hybrid vector and BM25 search on the same database as application data. The app stores 23k slides and indexes up to 4M passages from the MIRACL English corpus. Benchmarking shows that below 8 Compute Units (CU), Lakebase Postgres is the bottleneck; above 8 CU, the app’s worker count limits throughput. Candidate pool size significantly affects cold-start latency: 200 candidates preserves 90.5% of top-10 results while touching a third of the pages of 1,000 candidates. A 14-minute load test cost 0.13, with Lakebase compute billing only while active. For production, a 0.5 CU minimum costs ~ 31-40/month and avoids cold-start delays.
KotlinConf Recap: Lessons from Verifone’s Architect on Kotlin in Mission-Critical Payments
Verifone architect Yuri Geronimus presented at KotlinConf 2026 on using Kotlin’s type system to enforce payment specifications at compile time. He described six incident patterns where a single misused word caused outages, compliance failures, or financial loss, including a terminal fleet outage from a nullable mandatory field. His method uses value classes for spec nouns, validate factories at boundaries, non-null types, masked sensitive data by default, and state-specific classes to make illegal states unrepresentable. Geronimus advocates incremental migration from legacy Java and C++ systems using four parallel tracks rather than a rewrite, noting that payment terminals must operate offline for up to 40 days by regulation. The approach shifts reliability from developer discipline to compiler enforcement, enabling engineers to speak the business language and propose regulatory changes.
Lauterbach and JetBrains Announce TRACE32 Integration in CLion IDE
Lauterbach and JetBrains have integrated TRACE32 debugging tools with CLion, enabling embedded developers to debug applications on target hardware directly from the IDE. The integration uses the Debug Adapter Protocol (DAP) to connect CLion to TRACE32 through the TRACE32 Debug Adapter, allowing developers to control execution, step through code, and inspect variables while TRACE32 handles target hardware communication. Two workflows are supported: launching a new TRACE32 PowerView session from CLion with scripts to configure the connection, or attaching to an existing TRACE32 instance. The integration requires CLion 2026.2.4 or later, TRACE32 PowerView 09.2026 (or build 195402), and TRACE32 Debug Adapter version 0.1.2 or later, with detailed configuration examples in the Lauterbach knowledge base. This brings code editing, navigation, and hardware debugging into one workflow, and a free webinar on October 27, 2026 will demonstrate the integration in action.
Why Redshift Serverless can’t match ClickHouse Cloud for real-time analytics
CostBench streamed 113.2 billion stock-market quotes into both systems while four aggregate queries ran every ten minutes and two drill-down queries ran every hour. ClickHouse asynchronous inserts order raw data and build pre-aggregations during ingestion, while Redshift relies on separate background sorting and materialized view refreshes. ClickHouse Cloud led in preparation cost ($28.69 versus 522.03), normalized query cost ( 0.05 versus $24.97), and accumulated query runtime (58.12 seconds versus 1.69 hours). The combined score shows ClickHouse Cloud delivered 1,996× better end-to-end performance per dollar in this continuous-ingestion comparison. The difference originates in the preparation path: ClickHouse makes data query-ready during inserts, whereas Redshift’s streaming, sorting, and refresh steps advance independently.
Introducing Private Network Gateway
Databricks announced Private Network Gateway (PNG) in public preview on Azure and private preview on AWS, addressing the networking friction that prevented teams from moving workloads to serverless compute. PNG provides a single managed gateway from serverless compute into a customer’s virtual network, eliminating the need for per-resource private endpoints, load balancers, and proxy VMs. Customers configure the gateway via a Network Connectivity Configuration (NCC) and delegate one subnet, with Databricks managing the gateway infrastructure while customers retain control over routing and security. PNG supports use cases such as ingesting from private databases via Lakeflow Connect, connecting AI agents to private MCP servers, using private package repositories, and routing egress through customer firewalls. The gateway offers two traffic modes for precise control or broad egress inspection and works alongside existing private connectivity without disruption.
Sentry's Flutter SDK 10.0: Streaming Traces and More Accurate Crash-Free Rates
Sentry released Flutter SDK 10.0, making streaming traces the default so spans reach Sentry as they finish, using Sentry.startSpan for custom work. Unhandled Flutter errors no longer mark the session as crashed, improving crash-free rate accuracy by keeping the session running until a real crash occurs. App startup on Android and iOS now has its own trace with breakdowns such as root-widget attachment and first-frame rasterization, and can be extended with SentryFlutter.extendAppStart. The release simplifies logs and metrics setup by removing separate enable flags, expands Dio network error capture to failures without HTTP responses, and respects Flutter’s SensitiveContent widgets in Replay and screenshots. Upgrading requires Dart 3.12, Flutter 3.44, Android API 26, and iOS 15, with native SDK installation via Swift Package Manager on iOS and macOS.
Anthropic opens Singapore office and signs MOU with the Government of Singapore
Anthropic opened a new office in Singapore, its fifth in Asia-Pacific, and signed an MOU with the Singapore Ministry of Digital Development and Information on AI safety, security, and model evaluation. The MOU, signed by co-founder Ben Mann and Permanent Secretary Kai Fong Chng, also covers research on AI adoption and responsible use across public and private sectors. Claude already powers services used by millions daily through organizations like GovTech, DBS, Grab, and Sea; Grab’s BriX assistant saves 40,000 hours quarterly. Singapore ranks second globally in Claude.ai usage relative to population, at nearly six times expected levels, and over 1,500 GovTech engineers use Claude Code. The office is hiring and plans technical exchanges, AI skills strengthening, and support for small and medium businesses.
How we made the Supabase Select 2026 badge
Supabase gave every Select 2026 attendee a programmable badge based on the Pimoroni Tufty 2350, with an RP2350 microcontroller, color screen, rechargeable battery, Wi-Fi, Bluetooth, and five buttons. A firmware bug drained all batteries during shipping, requiring bulk charging with 30-port USB hubs in 14 batches over 56 hours and individual firmware updates. The venue Wi-Fi failed, so the schedule was synced via a hotspot, two badges at a time, one minute each, totaling seven hours. Attendees have since repurposed the badge into projects including a live flight tracker, an arcade game about database vacuuming, a food finder app, a music note collection game, and a tiny on-device language model. The post provides resources for hacking the badge: a first-app guide, a Claude Code project kit, a virtual badge, guides for C or Rust firmware, and a contest with Supabase credits and conference passes.
Inside Minerva: building scalable observability for eBay’s monetization platform
eBay’s Monetization Team lacked a dedicated observability platform, causing fee behavior issues to often be discovered through customer complaints or post-transaction analysis. Data warehouse data arrived with delays, and engineers and business teams had to manually query multiple sources. Minerva solves this with an asynchronous observability pipeline: the fee-processing service places a small record on a local queue, a background producer publishes it to an event stream, and a consumer enriches the data before storing it in ClickHouse. ClickHouse’s columnar storage and MergeTree engine allow fast aggregation queries on records with nearly 250 columns; a proof of concept on 1.1 billion rows returned queries in 0.11 to 0.72 seconds. The design keeps observability off the critical fee path, prioritizing fee-processing availability while providing configurable, context-aware monitoring.
Design Email for Humans and Agents
Apple Mail and Gmail now generate AI summaries of emails, while agents read messages to automate tasks like logging receipts or tracking deadlines. Summarizers focus on the first 100 to 150 characters, so the main point and call to action must lead the email. Semantic HTML with h1 headings, a descriptive title, lang attributes, and role=‘presentation’ on tables creates a machine-readable outline, yet the Email Markup Consortium found 74% of emails lack an h1 and 96% lack lang. Hidden text styled to be invisible can hijack summaries, as Forcepoint demonstrated, and similar attacks have targeted Gemini in Google Workspace; such practices also trigger security flags. Testing in Gmail, Apple Mail, and Outlook, along with verifying the plain text version, confirms that both humans and agents interpret the email correctly.
The Design Space of Tri-Modal Masked Diffusion Models
Discrete diffusion models have emerged as strong alternatives to autoregressive language models, but prior approaches typically initialize a unimodal model and fine-tune for bimodal generation. This work diverges from that paradigm by introducing the first tri-modal Masked Diffusion Model pretrained from scratch jointly on text, image-text, and audio-text data, and systematically analyzing multimodal scaling laws, modality mixing ratios, noise schedules, and batch-size effects. A key contribution is a stochastic differential equation reparameterization that decouples physical and logical batch sizes, removing the need for batch size tuning reported in recent work. The authors pretrain a 3B-parameter model on 6.4 trillion tokens and provide optimized inference sampling defaults, achieving strong results on text generation, text-to-image, and text-to-speech tasks. This work represents the largest open systematic study of multimodal discrete diffusion models conducted to date.
Code-Switching Detection via Language-Selective Dimensions in Speech Foundation Models
Code-switching, the alternation between languages in a single utterance, is common in multilingual speech but underrepresented in training corpora for speech models. To address this, a lightweight method detects code-switching directly from speech without requiring multilingual transcriptions. The approach leverages language-selective dimensions in pretrained speech encoders by identifying hidden-state dimensions selective to each language from monolingual recordings and aggregating frame-level activations to predict code-switching. On the CS-FLEURS dataset covering 14 language pairs, the Whisper-small encoder achieves a mean F1 of 0.798, outperforming a CNN baseline (0.776) and a HuBERT linear baseline (0.751). These results show that pretrained speech encoders inherently encode the information necessary for code-switching detection, offering a scalable tool for building more representative multilingual corpora.
Modal crosses $1B in Annualized Run Rate and raises $750M Series D
Modal crossed $1B in annualized run rate and raised $750M in Series D funding at a $15.75B post-money valuation, led by Accel. Usage has tripled since the Series C five months ago, with year-over-year growth exceeding 15x, and the company now powers applications from companies including DoorDash, Cognition, and Runway. To avoid the friction of the old stack, Modal built its own file system, container runtime, scheduler, and networking from scratch on a capacity pool spanning over 20 clouds. Sandboxes, launched in 2023 for running LLM-generated code, now represent a $300M run rate product with nearly 3 billion sandboxes spun up and scaling to a million concurrent. New products include multi-node training with a single decorator giving a fully RDMA-connected cluster, Modal servers for HTTP serving, Endpoint Candidates for LLM serving, and generally available virtual machines.
One SDK, Multiple Platforms: Introducing the Auth0 SDK for Kotlin Multiplatform
Auth0 released its official Kotlin Multiplatform SDK for Android and iOS, enabling unified authentication logic in shared common code. Developers write login, logout, token management, and direct API calls once in commonMain using Kotlin suspend functions and a sealed Result type for exhaustive error handling. Native security is maintained through platform-specific implementations: Android uses Keystore-backed DataStore and Custom Tabs, iOS uses Keychain and ASWebAuthenticationSession, with Swift async/await interop via SKIE. The SDK is available on Maven Central as com.auth0.kmp:auth0:1.0.0-beta.1 as a single artifact or separate modules, requiring Kotlin 2.3.21, Android minSdk 24, and iOS 14.0+. It includes a Credentials Manager for token storage and automatic renewal, and supports advanced features including WebAuthn passkeys, DPoP token binding, custom storage, and configurable retry with fixed or exponential backoff.
How to Retrieve a Phone Number's SMS Pumping Score in Rust
SMS Pumping Fraud exploits phone number input fields to generate revenue from SMS messages sent to numbers controlled by a specific mobile network operator. Twilio’s Lookup v2 API provides an SMS Pumping Risk Score from 0 to 100, based on a proprietary model using network data including Verify Fraud Guard signals and unusual traffic patterns. This Rust tutorial uses the rustlio crate, dotenvy, serde, and tokio to call the API and retrieve the score along with carrier risk category and block status. Canadian numbers do not return carrier information, and Twilio advises against using the score for US or Canadian numbers. Guidelines recommend sending messages for scores 0-60, adding friction for 60-75, treating as suspicious for 75-90, and blocking for 90-100.
How to Rewrite Apache Spark UDFs for GPU Acceleration with AI Agents
User-defined functions (UDFs) in Apache Spark break the declarative abstraction, forcing GPU-accelerated pipelines to fall back to CPU execution and incur data transfer overhead. NVIDIA cuDF addresses this with GPU parallelism, but UDFs remain a bottleneck due to their opaque code. The post describes three approaches to rewrite UDFs into GPU-accelerable forms: SQL expressions, the RapidsUDF interface using cuDF columnar operations, or custom CUDA kernels via JNI. The cuDF skills for Apache Spark automate this process with four agent-guided feedback loops for testing, conversion, benchmarking, and optimization, providing a project template and best practices. A production deployment converted over 30 UDFs, achieving a 22x speedup on a 600-billion-row workload, reducing operator time from 274.55 to 12.78 hours.
Scope workloads and share resilience policies with AWS Resilience Hub
AWS Resilience Hub’s Next generation, announced September 18, 2026, adds three capabilities to align workload scope and resilience requirements with running environments. Amazon EKS label support selects Kubernetes resources using existing labels with AND logic, establishing precise resource boundaries without reorganizing namespaces. Generative AI-powered Dependency Insights summarizes discovered dependencies and highlights patterns warranting resilience review, such as cross-Region dependencies questioning recovery design. Resilience policy sharing through AWS Organizations lets a central team define requirements once and make them available to member accounts, with policy events tracking adoption. The post walks through scoping a checkout service on EKS using labels, examining dependencies via synthetic traffic, and applying a shared tier-1-critical policy with a 99.9% availability SLO, 5-minute multi-AZ RTO, 1-minute RPO, 15-minute multi-Region RTO, and 60-minute backup intervals.
Databricks is a Visionary the Gartner® Magic Quadrant™ for Analytics and Business Intelligence Platforms
Databricks debuted as a Visionary in the 2026 Gartner Magic Quadrant for Analytics and Business Intelligence Platforms, achieving the highest debut performance in the report’s 20+ year history. The company also received one of the highest Completeness of Vision scores among all vendors evaluated. Databricks attributes this recognition to its ability to deliver on three major trends reshaping businesses: data and AI platform convergence, agentic analytics, and semantics at the core. The Databricks lakehouse integrates BI directly, eliminating data silos and the need for extracts, so agents can reason over complete, governed context. With Genie and AI/BI, the platform automates complex workflows and provides a unified semantic layer through Unity Catalog Business Semantics and Genie Ontology.
Top topics
- Architecture834
- Performance816
- LLMs660
- Machine Learning622
- Open Source563
- AI Agents553
- AI470
- Developer Experience448
Weekly digest
The best engineering reads, once a week.