DEV Community

frank chu profile picture

Work

Meta

11 of 11 JS cost gaps overlap: I re-ran the tables

11 of 11 JS cost gaps overlap: I re-ran the tables

Comments
6 min read

Want to connect with frank chu?

Create an account to connect with frank chu. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
61% more Postgres backports: I recounted the delay

61% more Postgres backports: I recounted the delay

Comments
4 min read
$173M ads, one AI rebrand: OpenAI data centers

$173M ads, one AI rebrand: OpenAI data centers

Comments
3 min read
0 of 17 third-party scripts had integrity checks

0 of 17 third-party scripts had integrity checks

Comments
3 min read
15 of 15 hidden instructions survived every PDF extractor

15 of 15 hidden instructions survived every PDF extractor

Comments
3 min read
95% replaced: Binance reopens after $6.3B heist

95% replaced: Binance reopens after $6.3B heist

Comments 1
4 min read
2 phrases run VOLTA's fallback, tested on 24 replies

2 phrases run VOLTA's fallback, tested on 24 replies

Comments
4 min read
9.8 TCP flaw, 2-line fix: I audited my own kernel

9.8 TCP flaw, 2-line fix: I audited my own kernel

Comments
4 min read
xAI's 35 turbines just lost their 'mobile' loophole

xAI's 35 turbines just lost their 'mobile' loophole

Comments
3 min read
50% of CPU time was memory stalls, so I re-ran the test

50% of CPU time was memory stalls, so I re-ran the test

Comments
3 min read
510 bytes boot a neural network that dreams dmesg

510 bytes boot a neural network that dreams dmesg

Comments
4 min read
OpenAI cut its funding target by a third. I did the shortfall math.

OpenAI cut its funding target by a third. I did the shortfall math.

Comments
3 min read
Northflank is the ninth AI platform breached in October. I read its status page like a timeline.

Northflank is the ninth AI platform breached in October. I read its status page like a timeline.

Comments
4 min read
A public ChatGPT share could run code as you. I checked the two parts that made it possible.

A public ChatGPT share could run code as you. I checked the two parts that made it possible.

Comments
5 min read
Applebee's shipped its database password inside its app. Anyone with the APK was an admin.

Applebee's shipped its database password inside its app. Anyone with the APK was an admin.

Comments
4 min read
Azure's cross-tenant hole got four fixes. The fourth fix reopened the third hole.

Azure's cross-tenant hole got four fixes. The fourth fix reopened the third hole.

Comments
4 min read
A working Nintendo lives in 1GB of Qwen weights. I ran it and counted the nonzero ones.

A working Nintendo lives in 1GB of Qwen weights. I ran it and counted the nonzero ones.

Comments
4 min read
Anthropic is about to be "junk"-rated with $112B in cash. I did the Project North Star math.

Anthropic is about to be "junk"-rated with $112B in cash. I did the Project North Star math.

Comments
4 min read
Binance lost $6.3B in about 20 minutes. I did the freeze math, and half the money is still moving.

Binance lost $6.3B in about 20 minutes. I did the freeze math, and half the money is still moving.

Comments
5 min read
The Claude Code backdoor's macOS bug broke its own SSH step. I re-ran the check.

The Claude Code backdoor's macOS bug broke its own SSH step. I re-ran the check.

Comments
6 min read
The Nvidia spy story, split in two: a verified $4.8B equipment trail and an unverified allegation

The Nvidia spy story, split in two: a verified $4.8B equipment trail and an unverified allegation

Comments
4 min read
25 firewalls rooted from 19,000 scanned. I did the funnel math.

25 firewalls rooted from 19,000 scanned. I did the funnel math.

Comments
3 min read
Mistral's 1T model is 'open.' I priced what open actually costs.

Mistral's 1T model is 'open.' I priced what open actually costs.

Comments
4 min read
DoorDash's $17B Instacart deal is priced like a two-year wait. I did the spread math.

DoorDash's $17B Instacart deal is priced like a two-year wait. I did the spread math.

Comments
3 min read
I tested the new fast floor-division trick on 2,000,000 inputs. It's correct — and no faster here.

I tested the new fast floor-division trick on 2,000,000 inputs. It's correct — and no faster here.

Comments
3 min read
Stack Overflow now gets fewer than 1,000 questions a month. I counted via the API.

Stack Overflow now gets fewer than 1,000 questions a month. I counted via the API.

2
Comments 1
3 min read
Amazon just bet $200 that your phone can't replace a clock or a photo frame

Amazon just bet $200 that your phone can't replace a clock or a photo frame

Comments
4 min read
The DOE's $5B nuclear loan isn't new power. It's cheaper financing for power already sold.

The DOE's $5B nuclear loan isn't new power. It's cheaper financing for power already sold.

Comments
4 min read
Apple's git still trusts the compromised eMudhra certs. I ran the same checks on my machine.

Apple's git still trusts the compromised eMudhra certs. I ran the same checks on my machine.

Comments
4 min read
MuPDF's AES-256 key had 9 bits of entropy. I reproduced it in 8.7 milliseconds.

MuPDF's AES-256 key had 9 bits of entropy. I reproduced it in 8.7 milliseconds.

Comments 1
4 min read
Tailscale SSH checked paths as you and dialed them as root. I read all four bulletins.

Tailscale SSH checked paths as you and dialed them as root. I read all four bulletins.

Comments
5 min read
Someone built git blame for the US Code. I checked its numbers — 361 of 365 reconcile.

Someone built git blame for the US Code. I checked its numbers — 361 of 365 reconcile.

Comments
4 min read
A Meta AI director left to rebuild Office. I checked if Ndoc is real.

A Meta AI director left to rebuild Office. I checked if Ndoc is real.

Comments
4 min read
Ghostty 1.4 says scrollback compression saves 70-90%. I measured five kinds of text.

Ghostty 1.4 says scrollback compression saves 70-90%. I measured five kinds of text.

Comments
3 min read
GoAhead's DH bug turns a 2048-bit prime into 255. I counted the 8 secrets left.

GoAhead's DH bug turns a 2048-bit prime into 255. I counted the 8 secrets left.

Comments
4 min read
Genie 4's real upgrade isn't the graphics. It's the second model watching them.

Genie 4's real upgrade isn't the graphics. It's the second model watching them.

Comments
4 min read
GPT-6.1 Terra costs half as much. I checked which halves OpenAI meant.

GPT-6.1 Terra costs half as much. I checked which halves OpenAI meant.

Comments
4 min read
Python's JIT is being removed. I checked — my Python never had one.

Python's JIT is being removed. I checked — my Python never had one.

Comments 1
4 min read
Cohere caught Qwen3.8 trying to upload a probe file to Beijing. I ran the numbers in its report.

Cohere caught Qwen3.8 trying to upload a probe file to Beijing. I ran the numbers in its report.

Comments
5 min read
Cloudflare's GLM-5.3 leaked other users' prompts through its KV cache. I rebuilt the bug in 30 lines.

Cloudflare's GLM-5.3 leaked other users' prompts through its KV cache. I rebuilt the bug in 30 lines.

Comments
5 min read
SpaceX's $40B GPU deal is a lease, not a check. I did the payment math.

SpaceX's $40B GPU deal is a lease, not a check. I did the payment math.

Comments
4 min read
vLLM's Nemotron processor set one Pillow global to None. I measured what that global was holding back.

vLLM's Nemotron processor set one Pillow global to None. I measured what that global was holding back.

Comments
4 min read
I parsed Anthropic's S-1 myself. The $80.7B loss is not the story.

I parsed Anthropic's S-1 myself. The $80.7B loss is not the story.

Comments
4 min read
I built Karpathy's LLM Wiki as a product — the hard part was stopping the LLM from writing

I built Karpathy's LLM Wiki as a product — the hard part was stopping the LLM from writing

Comments
7 min read
Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Comments
4 min read
Farol scores your PR's merge risk from the call graph. I fed it four PRs — and one invisible contract break.

Farol scores your PR's merge risk from the call graph. I fed it four PRs — and one invisible contract break.

Comments
5 min read
Reylo types .sql files by asking your database. I tried to fool it five ways.

Reylo types .sql files by asking your database. I tried to fool it five ways.

Comments
5 min read
Goose claims a 29-byte record and 3.3x over C++. I measured both.

Goose claims a 29-byte record and 3.3x over C++. I measured both.

Comments
5 min read
OpenAI shipped a php2shell checker. I ran it against 65 sites. All 65 said UNKNOWN.

OpenAI shipped a php2shell checker. I ran it against 65 sites. All 65 said UNKNOWN.

Comments 1
4 min read
HatchZip promises to extract an 839 MB archive in 839 MB of disk. I measured the blocks.

HatchZip promises to extract an 839 MB archive in 839 MB of disk. I measured the blocks.

Comments
5 min read
Astral wired ty into uv. I ran uv check on a project with four deliberate errors.

Astral wired ty into uv. I ran uv check on a project with four deliberate errors.

Comments
5 min read
I scanned my machine for the Brotli RCE. Three stacks were exposed — and the patched one still reports the vulnerable version.

I scanned my machine for the Brotli RCE. Three stacks were exposed — and the patched one still reports the vulnerable version.

Comments
7 min read
I generated 1,000,000 UUIDv7s. Python's are perfectly monotonic — in one process, with a behaving clock.

I generated 1,000,000 UUIDv7s. Python's are perfectly monotonic — in one process, with a behaving clock.

1
Comments 1
6 min read
I measured softmax's precision cliff. In fp32, cross-entropy returns exactly zero at margin 16.

I measured softmax's precision cliff. In fp32, cross-entropy returns exactly zero at margin 16.

Comments
7 min read
Quad9 is leaving France on Nov 24. I probed its DoH — it's the only resolver here that requires HTTP/2 or nothing.

Quad9 is leaving France on Nov 24. I probed its DoH — it's the only resolver here that requires HTTP/2 or nothing.

Comments
4 min read
OpenSSL 4.1.0 shipped today. I built it and measured ML-KEM, ML-DSA, and DTLS 1.3.

OpenSSL 4.1.0 shipped today. I built it and measured ML-KEM, ML-DSA, and DTLS 1.3.

1
Comments 1
4 min read
eMudhra quit the CA business today. I checked your trust store — its roots are still in it.

eMudhra quit the CA business today. I checked your trust store — its roots are still in it.

Comments
4 min read
I built OpenShell's Z3 policy prover and ran 29 checks. It caught everything except the metadata address.

I built OpenShell's Z3 policy prover and ran 29 checks. It caught everything except the metadata address.

Comments
5 min read
Python 3.15's lazy imports cut my test CLI from 164 ms to 28 ms. The cost didn't disappear — it moved.

Python 3.15's lazy imports cut my test CLI from 164 ms to 28 ms. The cost didn't disappear — it moved.

Comments
4 min read
I built FoxIO's 54 KB HTTP/3 accordion by hand. aioquic's decoder unfolded it to 200 MB.

I built FoxIO's 54 KB HTTP/3 accordion by hand. aioquic's decoder unfolded it to 200 MB.

Comments
5 min read
loading...