---
title: "Latest reads"
description: "The engineering internet, summarised so you can actually read it."
---

# Latest reads
> The engineering internet, summarised so you can actually read it.

## Articles

### [1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it](https://yomu.fyi/post/1-1-1-1-now-supports-post-quantum-dnssec-all-2-420-bytes-of-it.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Sebastiaan Neuteboom
- Published: Sep 10, 2026
- Type: Announcement

1.1.1.1 now validates DNSSEC signatures made with ML-DSA-44, a NIST-standardized post-quantum algorithm, as an initial step toward post-quantum DNSSEC. The operational problem is that each signature is 2,420 bytes—almost 38 times an ECDSA P-256 signature and larger than common DNS-over-UDP limits—while zones must continue publishing conventional signatures for older resolvers. Cloudflare’s resolver handles this by testing larger responses at Internet scale, relying on truncation and transport retries rather than fragmented UDP, and using authenticated DS records to require a valid post-quantum path when a zone advertises one, preventing downgrade to conventional validation. The change provides operational experience for an ecosystem migration that requires coordination across DNS participants; Cloudflare says it plans full post-quantum security by 2029.


### [Join Us at the Zephyr Project Meetup in Amsterdam](https://yomu.fyi/post/join-us-at-the-zephyr-project-meetup-in-amsterdam.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Maria Goldade
- Published: Sep 10, 2026
- Type: Announcement

The Zephyr community will meet in person at JetBrains Amsterdam on September 15, 2026, for a free evening focused on the open-source real-time operating system for resource-constrained and connected devices. The meetup brings together contributors, embedded developers, and others to exchange practical experience and discuss the ecosystem through talks on developer tooling, firmware testing, AI-assisted development, migration, and education. One session will show how AFL and the Renode simulator can fuzz Zephyr firmware without physical hardware, while another presents AI-assisted setup from environment configuration through compiling, flashing, and running an application on a board. The agenda also covers JetBrains’ collaboration with Zephyr and a migration from bare-metal and FreeRTOS code to a shared codebase targeting Renesas, STM32, and Nordic hardware. Registration is required, seats are limited, and presentations will be in English and Dutch.


### [From Wafer-Out to First Token: Codifying Supply Chain Expertise with Nemotron and Palantir Foundry](https://yomu.fyi/post/from-wafer-out-to-first-token-codifying-supply-chain-expertise-with-ne.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Elizabeth Goodman
- Published: Sep 10, 2026
- Type: Problem & solution

NVIDIA’s supply chain must compress time-to-rack, the interval from wafer-out to an assembled system on a data-center floor, amid millions of parts, thousands of suppliers, and changing component availability. The team built a Digital Supply Chain Intelligence command center in Palantir Foundry, whose Ontology connects materials, sites, commitments, capacity, allocations, outputs, and qualitative signals. NVIDIA cuOpt formulates weekly critical-material allocation as a mixed-integer linear program that minimizes Time of Ownership and exposes binding constraints, while planners can test tradeoffs around each solution. Historical back-testing showed that solver inputs missed expert context such as partner emails, weather, geopolitics, and supplier debriefs, so the workflow captures decisions, rationales, expected results, and outcomes for post-training. Post-trained Nemotron 3.5 Lightning reached 86.7% allocation-decision accuracy on the development benchmark, exceeding Nemotron 3 Ultra’s 55.5% and base Lightning’s 17.5%, though future production risk forecasting remained difficult.


### [Analyze MongoDB Atlas Data in OpenAI ChatGPT Work](https://yomu.fyi/post/analyze-mongodb-atlas-data-in-openai-chatgpt-work.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Sep 10, 2026
- Type: Announcement

MongoDB Atlas is now a connected data source in OpenAI’s Data Plugin, powered by the MongoDB Atlas Managed MCP Server. This integration lets analysts and business teams query real-time operational data in ChatGPT Work without leaving the conversation, such as monitoring conversion changes after a deployment, finding orders stuck in payment pending, comparing sales hours across regions, and reviewing customer activity before support calls. Insights can be turned into live charts and dashboards within the conversation. Access respects existing cluster controls via OAuth sign-in, with organization owners able to enable or restrict AI client access to read-only, and every query runs with the permissions of the connected user. Teams that trust MongoDB Atlas as their fully managed, real-time system of record can now question their data directly without waiting for ETL jobs.


### [Cursor Projects](https://yomu.fyi/post/cursor-projects.md)
- Company: [Cursor](https://yomu.fyi/company/cursor.md)
- Published: Sep 10, 2026
- Type: Announcement

Cursor is launching Projects, a beta feature for taking on larger bodies of work such as features, migrations, and full applications. Each Project preserves context over months, runs on its own cloud computer through Cloud Agents, and coordinates parallel subagents rather than having the coordinator write code itself. Shared files synchronize across agents’ cloud and local machines, storing research, artifacts, codebase knowledge, and preferred working practices so later agents can use them. Projects can also subscribe to Slack channels, schedules, or pull requests and delegate work when signals arrive, while local agents handle testing that requires the user’s machine. Projects are accessible from Cursor’s left-hand navigation and are rolling out to all users in beta starting today.


### [Introducing preemptible compute: the same compute, half the price](https://yomu.fyi/post/introducing-preemptible-compute-the-same-compute-half-the-price.md)
- Company: [Together AI](https://yomu.fyi/company/together-ai.md)
- Published: Sep 10, 2026
- Type: Announcement

Together GPU Clusters is introducing preemptible compute in public preview for Kubernetes clusters in all regions, offering interruptible GPU capacity at a flat 50% of the on-demand rate. Preemptible nodes use the same NVIDIA accelerated compute, can be reclaimed when unused capacity is needed, and receive a maximum five-minute drain window for checkpointing and graceful exit. Clusters retain the requested preemptible target and automatically refill as capacity returns, while usage is metered every one to two minutes and billed sub-hourly. The feature suits resumable, retryable, or requeueable work such as experiments, batch inference, and temporary bursts, but critical services, uncheckpointed multi-day runs, and strict-SLO serving should remain on standard nodes; users must schedule eligible pods with the together.ai/compute-class=preemptible label.


### [To Infinity and Beyond: ThunderKittens Now on NVIDIA Vera Rubin NVL72!](https://yomu.fyi/post/to-infinity-and-beyond-thunderkittens-now-on-nvidia-vera-rubin-nvl72.md)
- Company: [Together AI](https://yomu.fyi/company/together-ai.md)
- Published: Sep 10, 2026
- Type: Explainer

Together’s kernels team ported ThunderKittens to NVIDIA Vera Rubin NVL72 and investigated why existing Blackwell GEMMs underuse the platform. The work targets NVFP4 and FP8 GEMMs: although Rubin preserves Blackwell’s programming model, the original kernels reach only about 42.1% and 44.4% of roofline because tensor cores consume operands twice as fast as the old pipeline supplies them. The team integrates Rubin’s 64-byte K step, exclusive tensor memory extending to 576 columns, oversized shared memory up to 328 KiB, B-side collector buffers, and earlier A-release signaling into its NVFP4 kernel. The resulting kernel exceeds 22 PFLOPS and is described as competitive with cuBLAS and CuTe DSL, while the post also compares Rubin’s specifications with NVIDIA HGX B200.


### [Async GRPO with LoRA across HF Jobs: a bucket, a proxy, and no NCCL](https://yomu.fyi/post/async-grpo-with-lora-across-hf-jobs-a-bucket-a-proxy-and-no-nccl.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Amine Dirhoussi, Quentin Gallouédec, Kashif Rasul, Sergio Paniego
- Published: Sep 10, 2026
- Type: Explainer

An AsyncGRPO setup uses LoRA adapter-only synchronization to separate vLLM Jobs, rather than moving full model weights over NCCL. A Storage Bucket mounted at the same path lets the trainer publish versioned adapters that replicas load, while a proxy adds authentication, routes rollouts toward KV-cached prefixes, and broadcasts adapter updates. Versioned adapter names prevent cached prefixes from mixing policy versions, and max\_staleness=4 requires six LoRA slots during replacement. Five runs identify client-side concurrency, checkpointing, and packing as important throughput factors: raising in-flight requests to 384, disabling checkpointing, and packing improved median step time from 22.9 to 4.8 seconds. At 500 steps, the final run took 53 minutes instead of 3 hours 27 minutes, trained 31% more samples, and had basically the same reward curve.


### [Loading Parquet data into MySQL with ClickHouse](https://yomu.fyi/post/loading-parquet-data-into-mysql-with-clickhouse.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Published: Sep 10, 2026
- Type: Tutorial

The post demonstrates how to move Parquet data into MySQL and query the resulting table using ClickHouse table functions. It sets up MySQL 8.4 in Docker, runs clickhouse-local with a configuration file and named collection, and inspects StackOverflow votes stored in a 2024 Parquet file on S3. An INSERT INTO FUNCTION mysql statement loads the file into a MySQL InnoDB table with 12,296,977 rows, while subsequent examples query MySQL from ClickHouse using either translated ClickHouse syntax or an opaque MySQL SQL string. The post also shows named-collection credentials and a query that identifies posts with both upvotes and downvotes, returning ten ranked results. It concludes that this workflow stays within ClickHouse and notes that table functions also support Postgres, SQLite, and MongoDB.


### [ClickHouse release 26.8](https://yomu.fyi/post/clickhouse-release-26-8.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Published: Sep 10, 2026
- Type: Announcement

ClickHouse 26.8 is a long-term support release with 98 new features, 128 performance optimizations, and 556 bug fixes. It adds background queries, PostgreSQL-style regular-expression operators, array subscripting with multiple indices, expanded Parquet and data-lake integrations, and improvements for GROUP BY and joins. Background queries return immediately while continuing after client disconnection, with progress exposed through system.processes and completion details recorded in system.query\_log; the example exports 243,619,704 rows to Parquet. Performance work includes dictionary-filter pushdown for Parquet, adaptive parallel GROUP BY processing, smaller hash-table cells for single-string keys, parallel merge joins, IEJoin for two-inequality conditions, and a cost-based optimizer for distributed plans. The PostgreSQL wire protocol supports psql commands such as \\d, \\dt, and \\dv while the release adds text tokenizers.


### [What Is SMS Pumping Fraud and How to Stop It](https://yomu.fyi/post/what-is-sms-pumping-fraud-and-how-to-stop-it.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Twilio
- Published: Sep 10, 2026
- Type: Explainer

SMS pumping fraud, also called SMS toll fraud, uses bots and fake phone numbers to trigger automated text messages from public-facing endpoints, leaving businesses to pay for traffic that produces no genuine customers. The attack can target OTP requests, sign-up and lead forms, transactional notifications, marketing campaigns, and chatbot endpoints; it may appear as a sudden spike or as distributed low-volume traffic that accumulates over days or weeks. Suggested detection measures include monitoring traffic by use case and geography, reconciling spend with conversions, examining clustered phone-number patterns, and analyzing incomplete forms. The prevention guidance covers CAPTCHA, behavioral bot detection, rate limits, geographic controls, delayed OTP requests, alternative verification methods, and Twilio products including Verify Fraud Guard, SMS Pumping Protection, and Lookup SMS Pumping Risk Score.


### [How to Build a Voice AI Agent with OpenAI's GPT-Live, Twilio Agent Connect, and Python](https://yomu.fyi/post/how-to-build-a-voice-ai-agent-with-openai-s-gpt-live-twilio-agent-conn.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Xinghao Huang
- Published: Sep 10, 2026
- Type: Tutorial

This tutorial shows how to build a phone-based voice AI agent with OpenAI's GPT-Live, Twilio Agent Connect, and Python. It configures TAC's GPTLiveProvider to bridge Twilio Programmable Voice Media Streams to GPT-Live-1 in the OpenAI API, using 8kHz mu-law audio and avoiding custom WebSocket plumbing. The tutorial sets a proactive greeting, exposes a Python weather function through Responses delegation, and runs the function outside the real-time voice loop so a simulated three-second backend delay does not block the conversation. The resulting setup handles inbound calls through a Twilio webhook and outbound calls with an E.164 number, while the tutorial also notes per-call customization and alternative voice providers.


### [Build Voice AI Experiences with Twilio and GPT-Live-1 in the OpenAI API](https://yomu.fyi/post/build-voice-ai-experiences-with-twilio-and-gpt-live-1-in-the-openai-ap.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Lenore Files
- Published: Sep 10, 2026
- Type: Announcement

The post introduces a Twilio Agent Connect integration for building production-ready voice AI experiences with OpenAI’s GPT-Live-1 speech-to-speech model. It addresses the gap between real-time speech intelligence and customer-facing communications by connecting GPT-Live-1 to Twilio Voice and Conversations while preserving context across channels and supporting reliable scale. The SDK supplies a native GPTLiveProvider that links Twilio Voice Media Streams directly to the OpenAI API without custom WebSocket plumbing, and handles turn-taking, audio streaming, interruption handling, and tool delegation. Tutorials, documentation, and example repositories cover inbound and outbound agents implemented with Python and Node.js, giving developers materials to build, test, and deploy voice applications.


### [Native is now the future of mobile at Shopify](https://yomu.fyi/post/native-is-now-the-future-of-mobile-at-shopify.md)
- Company: [Shopify](https://yomu.fyi/company/shopify.md)
- Author: 2023-10-18
- Published: Sep 10, 2026
- Type: Announcement

Shopify is moving its mobile apps from React Native to Swift and Kotlin after reevaluating the assumptions behind its 2020 decision as coding models improved. React Native had reduced duplicated implementation and feature-parity work, but agents now handle much of the cross-platform implementation, translation, testing, and review work. Shopify is choosing greenfield rebuilds, with Helix breaking migrations into reviewed checkpoints that require tests, visual comparison, adversarial code review, and human approval. The Shop app reached the app stores as a fully native rebuild in 12 weeks, while the Shopify app migration is underway. The company will continue selected React Native library support while migrating all its apps, and will judge success by product velocity, app quality, and autonomous agent work.


### [121+ Cyber Monday email subject line examples in 2026](https://yomu.fyi/post/121-cyber-monday-email-subject-line-examples-in-2026.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Jesse Sumrak
- Published: Sep 10, 2026
- Type: Tutorial

Cyber Monday email marketing depends on subject lines to help messages stand out in a crowded inbox, even when designs and discounts are strong. The guide recommends pairing subject lines with preview text, emphasizing exclusivity and urgency, stating discount amounts, using emojis selectively, and keeping copy concise. It also covers personalization, segmentation, pre-event notices, abandoned-cart messages, and reminders. More than 121 examples and templates are organized into Cyber Monday, pre-event, FOMO, abandoned-cart, and emoji-heavy categories, with additional seasonal resources. The post positions Twilio SendGrid for campaign execution and reports 75.1 billion emails processed during Cyber Week in 2025, a 14.6% increase over the previous record-breaking sending, but provides no comparative performance results for the example lines.


### [Migrating Shop app from React Native to native](https://yomu.fyi/post/migrating-shop-app-from-react-native-to-native.md)
- Company: [Shopify](https://yomu.fyi/company/shopify.md)
- Author: 2023-10-18
- Published: Sep 10, 2026
- Type: Problem & solution

Shop migrated its React Native app to native iOS and Android implementations in SwiftUI and Jetpack Compose after coding-agent advances changed the economics of a shared mobile codebase. A one-week proof of concept showed that one engineer using agents could recreate screens, interactions, and flows closely enough to make a full migration feasible although the result was not production-ready. Six engineers then built the native foundations and main journeys with feature teams validating edge cases; they preserved sign-in state, push notifications, analytics events, and behavior while simplifying some screens. Compared with React Native, native startup was 23% faster on iOS and 50% on Android, stability rose from 99.5%+ to 99.95%+, Android size dropped 109 MB, release builds fell about 75%, and scrolling reached 120 FPS. The migration’s workflow combined specialized agents, plan approval, Tardis live-app feedback, screenshot and event comparisons, and human review while feature parity remained a release requirement.


### [Build an AI Voice Assistant with Twilio Voice and Media Streams, OpenAI's GPT-Live API, and Node.js](https://yomu.fyi/post/build-an-ai-voice-assistant-with-twilio-voice-and-media-streams-openai.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Paul Kamp
- Published: Sep 10, 2026
- Type: Tutorial

This tutorial shows how to build an AI voice assistant that answers phone calls using Twilio Programmable Voice, Twilio Media Streams, OpenAI's GPT-Live-1, and Node.js. GPT-Live-1 acts as the speech-to-speech model for listening, talking, and handling interruptions, while the delegated gpt-5.6-terra model handles deeper reasoning and tool use. The implementation uses a Fastify server with WebSocket support, dotenv configuration, a marin voice, and separate prompts for the voice and backend roles. Callers can request a city's top headline through the custom get\_top\_headline function or ask factual questions through OpenAI's hosted web\_search tool. The guide exposes port 5050 with ngrok, points a Twilio number at an /incoming-call webhook, and concludes that the working example fits in under 200 lines.


### [Make Outbound Calls with Twilio Voice and Media Streams, GPT-Live-1 in the OpenAI API, and Node.js](https://yomu.fyi/post/make-outbound-calls-with-twilio-voice-and-media-streams-gpt-live-1-in.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Paul Kamp
- Published: Sep 10, 2026
- Type: Tutorial

This tutorial shows how to build an outbound AI voice agent that uses Twilio Programmable Voice and Media Streams to call a permitted phone number, rather than waiting for inbound calls. It connects the call to GPT-Live-1 in the OpenAI API through a Node.js server, with Fastify, ws, dotenv, and the Twilio helper library handling the application and relay. The implementation reads the destination from a --call flag, validates E.164 formatting, exposes the server through a public tunnel, and uses environment variables for credentials and the calling number. Owlie identifies itself as an AI assistant, retrieves a callback note with get\_callback\_reason, delegates factual questions to hosted web\_search, and can be interrupted during speech. The completed demo rings the chosen number, explains why it is calling, and can return random callback notes or web-searched answers, while the tutorial stresses verified numbers, model access, and outbound-calling compliance.


### [Why You're Getting 429s in Production Using Auth0 and How to Stop Them](https://yomu.fyi/post/why-you-re-getting-429s-in-production-using-auth0-and-how-to-stop-them.md)
- Company: [Auth0](https://yomu.fyi/company/auth0.md)
- Author: Carla Urrea Stabile
- Published: Sep 10, 2026
- Type: Problem & solution

Auth0 429 responses in production are tied to rate limits, commonly when applications call the Management API for every request or obtain a new machine-to-machine (M2M) token for every request. Because limits are per tenant and vary by plan, logging x-ratelimit-limit, x-ratelimit-remaining, and x-ratelimit-reset headers exposes approaching exhaustion. User roles, permissions, and metadata that can be treated as access-token snapshots should be added as custom claims by a Post-Login Action, while APIs read them from the JWT. M2M tokens, valid for 24 hours by default, should be cached and refreshed with a 60-second expiry buffer; data requiring freshness should sit behind a server-side cache with a 30-to-60-second TTL. When a 429 occurs, retry at the Unix timestamp in x-ratelimit-reset rather than applying exponential backoff, because the reset time is deterministic.


### [Rebuilding AUTOMATIC1111 with Gradio Workflow](https://yomu.fyi/post/rebuilding-automatic1111-with-gradio-workflow.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: yuvraj sharma, Abubakar Abid
- Published: Sep 10, 2026
- Type: Tutorial

Workflow1111 rebuilds most of AUTOMATIC1111’s stable-diffusion-webui feature set as a single Gradio Workflow canvas. It combines eleven media pipelines and 73 nodes for text-to-image, refinement, image-to-image, prompting, interrogation, detection masks, annotators, upscaling, background removal, PNG metadata, and image-to-video. The implementation uses four operator kinds—Python fn functions, model calls through InferenceClient, Space calls, and Hub dataset rows—with parallel branches for independent work; 32 of 36 operator nodes are fn nodes, and 22 run in-process without network calls. Models can run through Inference Providers, Spaces, or a local GPU, while output nodes automatically become REST endpoints and MCP tools. The result is a browser-accessible, OAuth-enabled workflow that can also be duplicated, rewired, deployed, and called from code.


[Newer posts](https://yomu.fyi/posts/page/49.md) · [Older posts](https://yomu.fyi/posts/page/51.md)