A
clean-slate GPU API for modern hardware: drop the legacy complexity
A detailed design proposal argues that Vulkan, DirectX 12, and Metal
were designed to accommodate GPU architectures from 13+ years ago —
fragmented memory models, separate cache hierarchies, incompatible
hardware paths. Modern GPUs have converged on unified cache-coherent
memory, bindless access, and native 64-bit pointers. The proposed API
reduces the entire binding model to a single 64-bit pointer to a
user-defined root struct in persistently mapped GPU memory; texture
access uses 32-bit indices into a GPU-side descriptor heap; pipelines
become stateless, eliminating the PSO permutation explosion. An
accompanying video explores the design in depth.
Mojo
1.0: Python-compatible systems language commits to stability
Mojo 1.0 marks the transition from active language design to
stability: during the 1.x period, breaking changes will be managed
conservatively, like a mature language. The release unifies variable
declaration under var, consolidates closure syntax to
support Python-style lambdas, streamlines the type lexicon, and
stabilizes the LSP server. Mojo now anchors Modular’s commercial
infrastructure (MAX inference engine, Modular Cloud) and has crossed 200
community contributors and 1,100+ merged PRs. The bet:
systems-performance Python-compatible code has a real audience, and
stability is what turns early adopters into production users.
YY-DTOA:
the fastest float-to-string algorithm you’ve never heard of, hiding in a
JSON library
The yy algorithm, embedded in the yyjson library, is one
of the fastest dtoa implementations — but has no published
paper and is virtually unknown outside JSON performance circles. It
belongs to the Schubfach family (shortest decimal round-trip
representation) but needs only one multiplication by a precomputed
power-of-10 table entry where classic Schubfach needs two or three,
reusing the same table entry with bit-shifts for upper and lower
rounding bounds. Victor Zverovich (author of {fmt}) walks
through the algorithm’s mechanics and benchmarks it against Ryu and
other well-known implementations.
Signal
deploys key transparency: automatic detection of directory-level MITM
attacks
Signal’s new automatic key verification uses a key transparency
system — a log tree (the ledger) plus prefix trees (index books) — to
guarantee every user sees a globally consistent mapping of phone numbers
to public keys. If Signal’s central directory were ever compromised to
substitute a key, the discrepancy would be cryptographically detectable.
Cloudflare and Trail of Bits serve as independent auditors who sign
ledger entries; users and contacts periodically check their own keys
automatically. The system closes a theoretical but meaningful gap in
Signal’s trust model.
Unprivileged
Linux container escape via AF_Unix garbage collector race
(CVE-2026-53361)
A use-after-free in the Linux kernel’s AF_Unix socket garbage
collector allows an unprivileged user to escape container isolation. The
race: a MSG_PEEK on an in-flight file descriptor takes a
reference the GC’s census never counts, so the collector can free a live
socket and leave a dangling sk_buff. Affected: kernel 6.12
up to 6.12.94, Ubuntu 24.04 with kernels 6.17 and 6.14 HWE, RHEL 10, and
Debian trixie. Fixed in 6.12.95. A PoC is available.
GNOME
Shell design wishlist: search overlay, mosaic tiling, customizable quick
settings
The GNOME Shell design team has published a detailed roadmap of
intended UX improvements. Search results would become an overlay
spawning from the search entry, preserving GNOME 40’s spatial model
rather than replacing the whole overview. Quick settings get a
user-editable toggle list; notifications move into quick settings; the
calendar popover gets simplified. A “Mosaic” tiling mode would
auto-resize windows to share space, and drag-and-drop workspace
management would let users organize windows against scaled workspace
thumbnails. Implementation timeline depends on contributor
availability.