Barayuda

巴宇达  👋 Check out my GitHub: Sharing insights and research updates while relocating from Kallang to Batam.

[Evan You @evanyou]

I've left most of what I want to say in the VoidZero blog post. But worth repeating:

Thank you @voidzerodev team for trusting me and joining me on this wild ride. I am very proud to have assembled such a talented team and even prouder of what we have built together.

Thank you all our investors for believing in my vision, in particular @caseyaylward from @Accel who led both our Seed and Series A.

Thank you the @vite_js community. Vite and VoidZero wouldn’t have come this far without your trust and support. We will continue building with all of you, together, in the open.

And thank you to everyone that made this happen at @Cloudflare. Looking forward to working with you all!

https://t.co/0ly53VCOSr

[VoidZero @voidzerodev]

VoidZero is joining Cloudflare.

Our mission stays the same: to make JavaScript developers more productive than ever before. Vite, Vitest, Rolldown, Oxc, and Vite+ remain MIT-licensed. Evan and the VoidZero team will continue leading them.

Cloudflare shares our commitment to open source. Together, we can keep investing in the tooling developers rely on every day, while bringing the Vite ecosystem and Cloudflare’s platform even closer together.

[Jeff Wang @jeffwsurf]

Today we are saying goodbye to Windsurf

…and we are transforming it to Devin Desktop

Windsurf has been an absolutely amazing experience for me and the team. Though it has been rocky at times, we have seen every phase of AI coding and we want to keep embracing where things are going. That means we need to once again reorient ourselves towards a more focused goal and remove the Windsurf branding.

Believe it or not, the Windsurf brand has been around less than a year and a half, and before that, the previous name Codeium was only around a similar timeframe as well. I’ve actually had to change my email every year all the way to the eventual acquisition to Cognition. In AI, most products only have a 1 year lifespan before you need to drastically change it to the next.

Devin now encompasses all our form factors, whether it’s the cloud agent, the agent command center (with IDE), CLI, review, or our other products. This way we can really focus our efforts around one name. We are doubling down on our neutrality and making Devin Desktop compatible with other agents via ACP. We may be the only “Switzerland” of AI left and we embrace this role.

As for me, I’ll be transitioning from CEO of Windsurf to Cognition’s President of New Enterprise, helping open new regions and verticals, accelerating velocity, and filling in gaps as usual.

The story of Windsurf doesn’t end here, it continues on as part of Devin’s journey.

[Devin Desktop @devindesktop]

Introducing Devin Desktop: the next generation of Windsurf

Manage fleets of local and cloud agents from one surface

Support for any ACP-compatible agent

With a full IDE for when you need to jump into the code

[Barayuda @barayuda]

@danveloper @antirez could you please share how to setup?

since compare with the pi5 hardware, can running 284B params?

[shadcn @shadcn]

You can now turn any GitHub repo into a registry.

Drop in a registry.json. Define your items. Install with the CLI.

Distribute components, utilities, config, docs, rules, design systems, workflows, agents, skills and more.

[Alex Sabri making → OpenPaw🐾 & namo @alexandr_sabri]

I've been locked out of my ChatGPT Pro account for more than 12 hours and I'm still waiting for access to be restored.

@OpenAI decided to re-verify my phone number, failed to deliver the verification code, then invalidated all my active sessions and Codex credentials.

The result: a paid subscriber who cannot use the product at all.

More than 12 hours later, I'm still locked out and still waiting.

At this point I'm seriously considering moving back to Claude Code. At least there, when something breaks, support doesn't leave you hanging for days.

Thanks, @OpenAIDevs, @sama, @thsottiaux for one of the worst customer experiences I've had with a paid developer tool.

[Ubuntu @ubuntu]

Today we announced Workshop – a solution for launching sandboxed development environments in Ubuntu with a single command.

Spend less time on configuring your environment: with just a few lines of YAML, you’ve got a reproducible environment you can use across machines.

Find out how it works at: https://t.co/ItDsCVb34O

[Barayuda @barayuda]

@gedearyarp klo dari figma, pakai figma desktop dengan design sudah di grouping by frame by per-section design dan tidak pakai image dgn size besar.

lalu combine dengan playwright mcp dan headless browser, semoga cocok bli

[Zed @zeddotdev]

Terminal Threads are live in Zed v1.3.5!

You can now run claude, amp, pi, or any terminal-based workflow as a managed thread in the Threads Sidebar, right next to your other agent threads.

[Barayuda @barayuda]

@ClaudeDevs help please https://t.co/FmX0XPkU3d

[Andrej Karpathy @karpathy]

Personal update: I've joined Anthropic. I think the next few years at the frontier of LLMs will be especially formative. I am very excited to join the team here and get back to R&D. I remain deeply passionate about education and plan to resume my work on it in time.

[Barayuda @barayuda]

@karpathy Congrats! 🎉

[Microsoft Learn @MicrosoftLearn]

We’re introducing a new GitHub Certified: Agentic AI Developer (GH-600).
As AI agents become part of modern development workflows, this role-based certification focuses on how developers and teams operate, supervise, and integrate agents across the SDLC.

If you’re already working with tools like GitHub Copilot or exploring agent-driven workflows, we’d love your input.

Learn more and get involved. https://t.co/ruiYtlsYnj

[Barayuda @barayuda]

@zeddotdev @OpenAIDevs thanks! 🎉

[Kun Chen @kunchenguid]

ok @steipete's acpx is a godsend https://t.co/jFuIzg7WWm

just added it in gnhf v0.1.31, and boom - gnhf now supports almost any agent harness you can name

for anyone building bring-your-own-agent apps, highly recommend calling acpx instead of building your own abstraction

[Allen Braden @allen_explains]

🚨 A junior at Jane Street reportedly landed a $220K–$600K role because he used AI to analyze trillions of data points faster than most teams ever could.

In this 1-hour lecture, he breaks down the exact system behind it:

• how he researches massive datasets
• how AI finds patterns humans miss
• how his machine turns raw data into decisions
• how you can apply the same thinking yourself

Skip Netflix tonight.

Watch this instead.

One hour could completely change how you think about research, AI, and opportunity.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP.

The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed today by Theori. It has been sitting quietly in the Linux kernel for nine years.

Most Linux privilege-escalation bugs are picky. They need a precise timing window (a "race"), or specific kernel addresses leaked from somewhere, or careful tuning per distribution. Copy Fail needs none of that. It is a straight-line logic mistake that works on the first try, every time, on every mainstream Linux box.

The attacker just needs a normal user account on the machine. From there, the script asks the kernel to do some encryption work, abuses how that work is wired up, and ends up writing 4 bytes into a memory area called the "page cache" (Linux's high-speed copy of files in RAM). Those 4 bytes can be aimed at any program the system trusts, like /usr/bin/su, the shortcut to becoming root.

Result: the next time anyone runs that program, it lets the attacker in as root.

What should worry most: the corruption never touches the file on disk. It only exists in Linux's in-memory copy of that file. If you imaged the hard drive afterwards, the on-disk file would match the official package hash exactly. Reboot the machine, or just put it under memory pressure (any normal system load that needs the RAM), and the cached copy reloads fresh from disk.

Containers do not help either. The page cache is shared across the whole host, so a process inside a container can use this bug to compromise the underlying server and reach into other tenants.

The original sin was a 2017 "in-place optimization" in a kernel crypto module called algif_aead. It was meant to make encryption slightly faster. The change broke a critical safety assumption, and nobody noticed for nine years. That bug then rode every kernel update from 2017 to today.

This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root

Timeline:
🔴 March 23, 2026: reported to the Linux kernel security team
🔴 April 1: patch committed to mainline (commit a664bf3d603d)
🔴 April 22: CVE assigned
🔴 April 29: public disclosure

Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:

echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

For environments that run untrusted code (containers, sandboxes, CI runners), block access to the kernel's AF_ALG crypto interface entirely, even after patching. Almost nothing legitimate needs it, and blocking it shuts the door on this whole class of bug...

[Ainun Najib 🇮🇩@🇸🇬 @ainunnajib]

pak @prabowo 🙏

mewakili kami semua anak-anak teknologi 🇮🇩

ibam adalah representasi terbaik dari kami

ikhlas mengabdi untuk negeri

melepaskan tawaran milyaran gaji dari luar negeri

jika tiada keadilan & betapa kejamnya ia didholimi

niscaya tiada lagi dari kami mau mengabdi

[SpaceX @SpaceX]

SpaceXAI and @cursor_ai are now working closely together to create the world’s best coding and knowledge work AI.

The combination of Cursor’s leading product and distribution to expert software engineers with SpaceX’s million H100 equivalent Colossus training supercomputer will allow us to build the world’s most useful models.

Cursor has also given SpaceX the right to acquire Cursor later this year for $60 billion or pay $10 billion for our work together.