---
title: "Latest reads"
description: "The engineering internet, summarised so you can actually read it."
---

# Latest reads
> The engineering internet, summarised so you can actually read it.

## Articles

### [NTS: Authenticated Time at Meta](https://yomu.fyi/post/nts-authenticated-time-at-meta.md)
- Company: [Meta](https://yomu.fyi/company/meta.md)
- Author: By Oleg Obleukhov
- Published: Oct 6, 2026
- Type: Announcement

Meta launched NTS (RFC 8915) authentication for its public time service at nts.meta.com, enabling clients to verify the origin and integrity of time packets. The service separates key establishment over TLS 1.3 from authenticated NTP, with cookie keys derived daily from a shared secret so servers hold no per-client state. Shortening TLS certificate lifetimes to 100 days in 2027 and 47 days in 2029 makes automated certificate renewal increasingly essential, creating a dangerous circular dependency on an authenticated clock. Meta open-sourced its NTS implementation and encourages mobile OS vendors to add client support, as Android and iOS currently sync time over unauthenticated UDP. The protocol does not prevent delay attacks, and device bootstrapping remains circular since NTS-KE requires TLS validation that itself demands a correct clock.


### [Meta’s ads MCP server comes to Databricks: Put your customer intelligence to work in advertising campaigns](https://yomu.fyi/post/meta-s-ads-mcp-server-comes-to-databricks-put-your-customer-intelligen.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Katy Yuan, Jen McNamee, Rohith Bhatia
- Published: Oct 6, 2026
- Type: Announcement

Meta’s ads MCP server, now in Databricks Marketplace, connects Meta Ads Manager tools with enterprise data through Genie for natural language campaign management. The server uses the open MCP standard to expose over 25 tools across the campaign lifecycle including creating campaigns, adjusting budgets, defining audiences, and pulling performance data. Marketers can prompt Genie One to use business data like churn scores and gross margins, for example identifying high-value customers at risk of leaving and launching a retention campaign with an $8,000 daily budget. Governance is enforced server-side: Databricks administrators control access via Unity Catalog while Meta advertisers set rules in Business Settings that block actions like budget increases over 20%, with every tool call checked before execution. The integration builds on the Meta Conversions API partnership, letting agents combine signal diagnostics with Databricks models to put customer intelligence directly into campaign operations and execution.


### [Control How Your GPU Shares Work with Green Contexts](https://yomu.fyi/post/control-how-your-gpu-shares-work-with-green-contexts.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Elizabeth Goodman
- Published: Oct 6, 2026
- Type: Explainer

Green contexts, available in the CUDA Driver API since 12.4 and the Runtime API since 13.1, let applications explicitly partition GPU execution resources such as SMs and workqueues. They are lightweight to create and destroy, do not implicitly synchronize unrelated work, and allow provisioning workqueues to reduce false dependencies. Streams are created from a green context rather than relying on implicit device state, making targeting explicit. Benchmarks on a Blackwell GPU show a critical kernel completing in 0.007 ms with green context partitioning, compared to 0.140 ms with high-priority streams and 3.727 ms with equal priority. The tradeoff is fewer SMs for the bulk workload, but green contexts are opt-in and can be adopted incrementally alongside existing CUDA code.


### [The results of the 2026 Developer Survey are here!](https://yomu.fyi/post/the-results-of-the-2026-developer-survey-are-here.md)
- Company: [Stack Overflow](https://yomu.fyi/company/stack-overflow.md)
- Author: Ryan Donovan
- Published: Oct 6, 2026
- Type: Announcement

The 2026 Developer Survey gathered responses from over 30,000 developers over seven weeks, covering work patterns, technology usage, and AI adoption. Only 18% of developers work in an office daily, and the share of solo developers rose from 4% to 10%, possibly reflecting AI-enabled solopreneurship. In technology rankings, SQL surpassed HTML/CSS for the second spot, while Rust climbed to 12th most used language, potentially influenced by memory safety advocacy. AI usage is widespread: 73% of AI tool users employ them daily, with Claude Code (66%) and GitHub Copilot (59%) as leading agents, primarily for code generation (67%) and debugging (61%). Developers prioritize quality over cost (75% vs 38%) when using AI, and organizations implement cost controls like usage limits (38%) and model routing (27%), though 21% report increased spending.


### [Declarative clusters: GitOps deployment of hosted control planes on Red Hat OpenShift Virtualization](https://yomu.fyi/post/declarative-clusters-gitops-deployment-of-hosted-control-planes-on-red.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Serena Flocco
- Published: Oct 6, 2026
- Type: Tutorial

Hosted control planes for Red Hat OpenShift, based on the HyperShift project, decouple the cluster control plane from worker nodes by running control-plane components as pods inside a central management cluster. On bare-metal infrastructure, OpenShift Virtualization provisions worker nodes as virtual machines, enabling live migration and reducing hardware requirements. The article presents a declarative GitOps workflow using Helm templates and an Argo CD ApplicationSet that dynamically generates deployments from tenant-specific YAML configuration files in Git. Prerequisites include a bare-metal management cluster with OpenShift Virtualization, Red Hat Advanced Cluster Management, and OpenShift GitOps, plus networking configured with NMState, Multus CNI, and MetalLB. The approach achieves a “Cluster-as-a-Service” model where provisioning a production-grade cluster requires only a Git push.


### [Rossoctl for agent discoverability, security, and observability on Kubernetes](https://yomu.fyi/post/rossoctl-for-agent-discoverability-security-and-observability-on-kuber.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Shri Charan
- Published: Oct 6, 2026
- Type: Explainer

Agent sprawl arises when many AI agents on Red Hat OpenShift become redundant, insecure, and untraceable, using static API keys over HTTP and lacking visibility into reasoning failures. Rossoctl, a Kubernetes-native controller, automates discovery by declaring AgentRuntime resources that fetch metadata to create AgentCard custom resources, and uses a two-phase Helm deployment to resolve the URL dependency between routes and AgentCards. It adopts the A2A protocol, which standardizes agent interaction through a machine-readable AgentCard at /.well-known/agent-card.json and a JSON-RPC interface for consistent payloads. Security follows a six-layer zero-trust model: SPIRE issues short-lived certificates, Istio enforces mTLS, AgentCards are signed with JWS, and AuthBridge provides scoped OAuth2 tokens. Observability uses opt-in MLflow tracing that captures orchestration flow, tool calls, and model latency, enabling diagnosis of semantic failures such as hallucinations or data leaks that standard metrics miss.


### [Why Databricks can’t match ClickHouse Cloud for real-time analytics](https://yomu.fyi/post/why-databricks-can-t-match-clickhouse-cloud-for-real-time-analytics.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Published: Oct 6, 2026
- Type: Benchmark

The CostBench benchmark streamed 113.2 billion stock-market quotes at one million rows per second while running aggregate and drill-down queries to compare ClickHouse Cloud and Databricks for real-time analytics under continuous ingestion. ClickHouse Cloud delivered 752× better end-to-end performance per dollar than the Databricks stack using Serverless SQL, Zerobus Ingest, liquid clustering, and incremental materialized views. ClickHouse Cloud led in all three components: preparation cost ($28.69 versus 695.60), normalized query cost ( 0.05 versus $2.65), and accumulated query runtime (56.39 seconds versus 29.10 minutes). The gap stems from ClickHouse preparing ordered raw data and current summaries on the insert path, while Databricks requires separate clustering and refresh services that cost more and can leave queries with unfinished layout work. Databricks’ new Lakehouse//RT, still in beta, was not included in this comparison.


### [Our Framework for Reviewing AI-Generated Code](https://yomu.fyi/post/our-framework-for-reviewing-ai-generated-code.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Katie Fraser
- Published: Oct 6, 2026
- Type: Explainer

JetBrains Research, in collaboration with Lund University, studied how to review AI-generated code as AI agents produce thousands of lines across multiple files quickly. The core problem identified is trust calibration: developers cannot gauge an LLM’s confidence per line, making line-by-line review unscalable. The study proposes a three-level conceptual framework: overview for high-level hypotheses, file-level risk stratification, and code snippet-level chunk decomposition with chain-of-thought linkage. This framework was developed through participatory design with 17 practitioners and a follow-up survey of 43 professionals, and will be presented at ESEIW 2026. The paper argues that current diff viewers are inadequate for AI-generated code and that tools must surface risk and confidence signals at the granularity where developers allocate attention.


### [Scaling and Operating a Large dbt Project on Databricks: IFCO's Data Team on Performance, Visibility, and Debugging](https://yomu.fyi/post/scaling-and-operating-a-large-dbt-project-on-databricks-ifco-s-data-te.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Fernando Muñoz, Ludwig Brummer, Maxim Hammer
- Published: Oct 6, 2026
- Type: Problem & solution

IFCO’s data platform team, with Databricks Forward Deployed Engineering, optimized a large dbt project on Databricks to handle billions of daily tracking events for reusable packaging assets. The pipeline faces scale, unpredictable late-arriving data, and the need to reconcile history when late events change previously reported asset timelines. The team tuned incremental model settings to match Delta Lake write behaviors, including liquid clustering, deliberate merge vs. delete+insert strategies, and bounding writes to recent ingestion windows. Diagnosing performance from actual query plans rather than compiled SQL revealed that the consolidation model was scanning far more rows than necessary. These changes cut the core semantic layer job’s daily runtime by over 60 percent, retired a costly nightly full refresh, and reduced daily compute cost by 58 percent.


### [Java and Kotlin by IntelliJ IDEA: The LSP-Based Extension Reaches Release Candidate](https://yomu.fyi/post/java-and-kotlin-by-intellij-idea-the-lsp-based-extension-reaches-relea.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Maria Kosukhina
- Published: Oct 6, 2026
- Type: Announcement

JetBrains announced that Java and Kotlin by IntelliJ IDEA, an LSP-based extension, has reached Release Candidate stage. The extension brings IntelliJ IDEA’s Java and Kotlin language intelligence to third-party editors like VS Code and Cursor. Since the preview, it has been downloaded over 20,000 times and includes features such as smart code completion, navigation, inspections, quick-fixes, project-wide refactorings, DAP-based debugging, Maven, Gradle, and Bazel project support, built-in test running, and Spring tooling interoperability. The RC is the final EAP build and will be available for 30 days without a license; after the stable release, a 30-day free trial will be offered, then an IntelliJ IDEA Ultimate subscription is required. The extension also makes its intelligence available to coding agents in Cursor, enabling semantic code search and analysis.


### [Content and Community Basics for JetBrains Content Creators](https://yomu.fyi/post/content-and-community-basics-for-jetbrains-content-creators.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Boris Ageev
- Published: Oct 6, 2026
- Type: Explainer

The post covers community-building basics for JetBrains Content Creators in a golden age of digital creation with high demand and AI adoption, accepting new creators daily. Creators should include the JetBrains promotional discount code in video descriptions, with an example offering 20% off for new and existing subscriptions, and they can explore all JetBrains IDEs through the All Products Pack to diversify their workflow. Maintaining active social media is essential for distribution, and the program supplies news-worthy items like merch drops and IDE updates for creators to share with their audience. Staying in touch through communication, challenges, and giveaways is crucial, and the program provides up to twelve free IDE subscriptions per creator for giveaways. Even a simple subscription plus repost formula works effectively, and all new creators are welcome to join the program.


### [JetBrains Joins the Open Source Security Foundation](https://yomu.fyi/post/jetbrains-joins-the-open-source-security-foundation.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Katherine Druckman
- Published: Oct 6, 2026
- Type: Announcement

JetBrains has joined the Open Source Security Foundation (OpenSSF) as a general member. OpenSSF is a cross-industry Linux Foundation initiative that works to secure the software supply chain, hosting projects like Sigstore for signing and SLSA for supply chain integrity, and its AI/ML Security Working Group publishes guidance on signing ML models and safe instructions for AI code assistants. The foundation announced the membership at OpenSSF Community Day Europe in Prague. JetBrains cites the rise of coding agents and AI as creating new security challenges, making it more important for developers to understand and verify code and dependencies, and notes that its own product JetBrains Air addresses these questions. The company aims to collaborate with the industry through OpenSSF to help shape the future of secure software development, as stated by Katherine Druckman, Head of Community and Partnership Engagement.


### [Unreal MCP now speaks Sentry](https://yomu.fyi/post/unreal-mcp-now-speaks-sentry.md)
- Company: [Sentry](https://yomu.fyi/company/sentry.md)
- Author: Ivan Tustanivskyi
- Published: Oct 6, 2026
- Type: Announcement

Unreal Engine 5.8 introduces Unreal MCP, an experimental feature that runs a first-party MCP server inside the editor, allowing coding agents to drive the editor directly. The Sentry plugin registers tools and skills that agents can use to set up crash reporting, including DSN configuration, symbol upload, instrumentation, and crash debugging. Agents can discover and use these tools through the editor’s MCP interface, with skills that follow ground rules like asking before changing settings and never exposing secrets. The integration also supports connecting to Sentry MCP for server-side operations like fetching DSNs and looking up events. In a test with the Sentry Tower demo, an agent configured Sentry from scratch, enabled symbol upload, packaged a build, captured a crash, and identified the root cause as an empty projectile class in a level-up button.


### [Falcon-Emirati: When an LLM Learns the Dialect, the Culture, and the Nuance](https://yomu.fyi/post/falcon-emirati-when-an-llm-learns-the-dialect-the-culture-and-the-nuan.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Shaikha Alsuwaidi, Omar saif alkaabi, Maitha Alhammadi, Ahmed Alzubaidi, Mohammed Alyafeai, Leen AlQadi, Basma Boussaha, Hakim Hacid
- Published: Oct 6, 2026
- Type: Announcement

Falcon-Emirati-7B is a dialect-specialized language model built on Falcon-H1-Arabic to understand and generate Emirati Arabic, a Gulf dialect with distinct vocabulary and cultural context that Modern Standard Arabic models miss. The model uses a hybrid architecture combining Mamba state-space models and Transformer attention running in parallel inside every block, with fused outputs for efficient long-context processing. Training required a dedicated data pipeline of authentic Emirati web content, MSA material about Emirati culture, and synthetic data guided by strict glossaries and style rules to cover gaps in available dialectal text. On the Alyah benchmark, Falcon-Emirati-7B scored 84.83%, outperforming larger multilingual models, and achieved 85.57% on the UAE cultural understanding task in ArabCulture-Dialogue. The 7B parameter size was chosen as the best balance of quality against training and inference cost for dialect adaptation.


### [Smarter personalization: How property data helps us understand user price sensitivity](https://yomu.fyi/post/smarter-personalization-how-property-data-helps-us-understand-user-pri.md)
- Company: [Grab](https://yomu.fyi/company/grab.md)
- Author: Muqi Li
- Published: Oct 6, 2026
- Type: Problem & solution

Existing systems estimate user price sensitivity from spending behavior or demographic proxies, missing residential property values and creating one-dimensional profiles. This invention proposes a four-step method that combines public property data with LLM-assisted data structuring, building-level price estimation, hierarchical clustering, and user mapping. The method collects public property records, uses LLMs to standardize attributes such as postcode, transaction price, and property size, then aggregates transactions within buildings to calculate weighted average sale prices. A hierarchical clustering model groups buildings into affluence tiers based on estimated resale values, accounting for regional market differences, and users are mapped to these tiers via aggregated geographic signals. The approach remains unimplemented and untested in live markets, with potential applications in personalization, advertising, and operational planning subject to future technical validation and privacy approvals.


### [Data Modeling and Schema Design for MongoDB Search Part 1: Practical Considerations](https://yomu.fyi/post/data-modeling-and-schema-design-for-mongodb-search-part-1-practical-co.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Oct 6, 2026
- Type: Explainer

Data modeling for MongoDB Search requires balancing conceptual, logical, and physical schema decisions against workload demands and system constraints. The $search stage must be the first in an aggregation pipeline, queries a single Search index, and runs against a single collection, with results returned in relevancy order. The underlying Lucene engine supports two mappings for arrays of sub-documents: default document mapping flattens fields into one index object, while embeddedDocuments mapping creates separate Lucene index objects per sub-document. Embedded mapping enables cross-field matching within sub-documents but explodes the index object count and causes heavy reindexing on any update, as the entire block is deleted and re-added. This post establishes the foundational concepts and physical constraints that will inform schema patterns in Part 2.


### [Data Modeling and Schema Design for MongoDB Search Part 2: Use Cases and Patterns](https://yomu.fyi/post/data-modeling-and-schema-design-for-mongodb-search-part-2-use-cases-an.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Oct 6, 2026
- Type: Explainer

The post presents best practices for data modeling and schema design in MongoDB Search, covering use cases and patterns such as the Entity Pattern to guide developers in structuring collections for effective search. It emphasizes that searchable items, like movies, cast members, or genres, should be modeled as first-class documents in their own collections rather than as nested structures or ambiguous attributes. The Entity Pattern addresses ‘find anything anywhere’ and as-you-type suggestions by representing all domain entities as documents in a specialized collection with stable identifiers and a type field for filtering. The Attribute Pattern is explicitly discouraged for search because its key-value structure prevents type-sensitive field mapping, making it better to model attributes as straightforward fields. The post details a multi-indexing strategy on the name field that applies left-edge, phonetic, shingled, and language-agnostic analysis to enable flexible matching and relevancy scoring, with optional type-specific metadata nested in sub-documents.


### [My Voice AI Demo Was Hit by a $982 Traffic-Pumping Attack! Here’s What I Learned](https://yomu.fyi/post/my-voice-ai-demo-was-hit-by-a-982-traffic-pumping-attack-here-s-what-i.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Rishab Kumar
- Published: Oct 6, 2026
- Type: Incident / postmortem

A voice AI demo using Twilio Conversation Relay and FastAPI was exploited when automated clients repeatedly called its unauthenticated /api/call endpoint, generating 1,008 requests and 921 outbound calls to Israeli +972229 numbers. The incident cost $971.50 in Twilio voice usage and $10.58 in Google Gemini fees, matching International Revenue Sharing Fraud that keeps calls connected for per-minute revenue. The author used the Twilio CLI to group call records showing 920 of 921 calls targeted the same narrow Israeli range and correlated Azure Log Analytics to confirm the exploited endpoint. Calls were kept alive by automated scripts replaying conversation-extension prompts from only 541 distinct lines across 8,363 transcriptions, with some recordings mentioning happy trafficking. The post recommends authentication, duration limits, geographic permissions, signature validation, usage triggers, and demo isolation as essential controls for public voice AI apps.


### [How to design an AI agent for resolution instead of rapport](https://yomu.fyi/post/how-to-design-an-ai-agent-for-resolution-instead-of-rapport.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Jesse Sumrak
- Published: Oct 6, 2026
- Type: Problem & solution

Most conversation design guidance focuses on voice and tone, but consumers prioritize immediate issue resolution (40%), speed (40%), accuracy (38%), and 24/7 availability (38%) over rapport. The post recommends opening with capability, loading context before the first turn using persistent profiles, and designing a second option when the first fails. Escalation should be triggered by conversation rules like a second failed attempt or explicit request, not treated as an error condition. Confirmation turns should be cut except for irreversible actions, and agents should clearly state what they cannot do. An agent with customer history, a backup path, and a clean exit is more helpful than one with a carefully written persona but lacking those features.


### [RISED: Rubrics for Agentic Multi-Environment Selection and Self-Distillation](https://yomu.fyi/post/rised-rubrics-for-agentic-multi-environment-selection-and-self-distill.md)
- Company: [Apple](https://yomu.fyi/company/apple.md)
- Published: Oct 6, 2026
- Type: Problem & solution

Training a single LLM agent jointly across diverse interactive environments is challenged by scalar rewards that provide limited information about cross-environment relationships and no within-group reward contrast when rewards are identical. RISED addresses this by using rubrics—textual descriptions of rollout behaviors—to guide both online data selection and policy supervision. An LLM judge tags each rollout with a predefined rubric vocabulary shared across environments, and these profiles select data aligned with the batch’s behavioral composition while limiting overlap with already-selected data. Positive rubrics supply token-level supervision via an on-policy self-distillation teacher, while negative rubrics steer subsequent rollouts away from recurring failure modes. Across model backbones, RISED achieves the highest mean pass rate across environments and ranks first or second in every individual environment.


[Newer posts](https://yomu.fyi/posts/page/20.md) · [Older posts](https://yomu.fyi/posts/page/22.md)