The daily ledger

Wednesday, October 21, 2026 Security Releases

How to harden Rust servers?

Your daily reminder that, while Rust's safe APIs are memory-safe, that doesn't extend to /proc/self/mem and so, if there is a path traversal to that, secrets could still leak. So, what hardening approaches are there for…

Today's PHP Security Release, and How We're Strengthening PHP Security

Today's PHP Security Release, and How We're Strengthening PHP Security If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP 8.x line) address two remote code execution holes,…

Fragments: October 21

Gergely Orosz is frustrated at those that entered his explicitly “No AI” essay competition and used AI. He goes on to say: When I start to suspect some part is AI about someone I don’t know: how can I tell how much of…

Panache — RTS Belle Époque pour mobile

Panache — RTS Belle Époque pour mobile Well this is delightful: I released Battle Drones yesterday under an Apache 2.0 License and there's already a French language fork by Gabriel Turpin which reskins the game to take…

Node.js 26.12.1 (Current)

Node.js 24.22.1 (LTS)

Node.js 22.23.4 (LTS)

Python 3.15.1, 3.14.9 and 3.13.17 are out

Three certified security releases for 3.15, 3.14 and 3.13.

JEP targeted to JDK 28: 543: Structured Concurrency

The following JEP is targeted to JDK 28: 543: Structured Concurrency

Help set Go's priorities for next year

Share your experience with Go in the 2026 Go Developer Survey, open through November 3.

@durable: compile generators into picklable state machines

I want to pitch a @durable decorator. It takes a generator function and rewrites it into a generated class. Any local that’s still needed after a yield becomes an instance attribute, and a match on a program-counter…

One Text Amount in getValues() Breaks the Whole Commission Total

A commission statement is the sum of a rep's deal amounts times the rate. The loop that computes it is four lines long, and it can return a figure wrong by millions without raising an error. In my comparison of…

Release a microphone stream that arrives after the recording dialog closes

A user clicks Record. The browser asks for microphone permission. The user closes the recording dialog, then answers the browser prompt a few seconds later. If the application only stops a stream that already exists…

Why face index 2 is not a stable ID across detectors

A group-photo editor can use one face detector in the browser and another on a worker. The browser returns three boxes; the worker returns four. A user selects the second thumbnail. What should the worker edit? Sending…

How I Built a Zero-Dependency, 100% Client-Side 50-State US LLC vs. S-Corp Tax Calculator (2026 IRS Rules)

Most financial calculators on the web are bloated with third-party tracking scripts, require email signups to view results, or oversimplify the US Internal Revenue Code by ignoring the Section 199A QBI deduction and…

Cloudflare's Rust TypeScript (tsrs) vs tsgo: The 8x Claim Is Closer to 3x

Microsoft spent most of 2025 explaining why the native TypeScript compiler would be written in Go and not Rust. TypeScript 7.0 (tsgo) shipped on July 8, 2026. On October 20, Cloudflare published tsrs, a port of…

Building a Fast Estimate Calculator for Local Service Websites

Hey, I am Kaleb. I build sites and run automations out of my setup here in Pompano Beach, Florida. When local trade businesses—like plumbers, electricians, or HVAC contractors—reach out or when I am refining my own…

Julian Date Conversion in Code: YYDDD, CYYDDD, JD and MJD in Python, JavaScript, SQL and Excel

"Julian date" means two different things, and both show up in real code. A batch code on a food carton, a mainframe file or a JD Edwards table usually means an ordinal date: the year plus the day of the year (26294 =…

How I Convert PDF to Markdown in the Browser

I built a browser-based PDF to Markdown converter. I expected parsing the PDF to be the hard part. It wasn't: PDF.js handles that. The hard part is that a PDF has no paragraphs, headings or lists. Word stores "this is…