TLDR Dev

TLDR DEV 2026-09-08

6 sections22 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

LIVE CODING WORKSHOP: STOP BAD ACTORS FROM SPINNING UP "NEW" ACCOUNTS

Someone just created their fiftieth "new" account to grab another free trial. Your email check, phone verification, and IP rate limits won't stop them. On Sept 16, join Fingerprint's Keshia Rose for a free, live, hands-on workshop [5] and build signup protection that actually works: → Add a few lines of JavaScript to a signup page and read the device data server-side. → Check for bots and assess device risk before an account is ever created. → Enforce one account per device, even from incognito windows or behind a VPN. This is a guided build [6], not a demo. Code alongside Keshia and walk away with working signup protection for your website or app.

fingerprint.comSponsor

02ARTICLES & TUTORIALS

HOW WELL DO AGENTS USE TEST AND VERIFICATION TECHNIQUES?

Across 26 testing conditions for a Rust Zstd task, no technique dramatically outperformed the others, and the default prompt performed above average. Fuzzing and property-based testing helped slightly in some high-effort runs, while TDD and several testing skills underperformed. Agents often followed the requested framework superficially, writing ordinary tests inside new tools or proving properties that did not improve correctness.

danluu.com58 min read

EXPLORING SPECULATIVE DECODING IN VLLM ON AMD GPUS

Speculative decoding lets vLLM verify multiple draft tokens in one target-model pass while preserving the target model's output behavior. Tests on AMD MI300X and MI355X GPUs show that throughput depends heavily on the drafting method, proposal length, model family, workload, and token acceptance rate, with setup and tuning guidance for MTP, EAGLE-3, DFlash, and DSpark.

vllm.ai242 min read

FROM S3 TO GPU IN ONE COPY

Vortex streams compressed columnar data from S3 through host memory to the GPU with a single copy, avoiding disk staging and CPU decompression bottlenecks. Its layouts prune data before transfer, and its encodings support GPU-side decompression and computation, producing scans around 30 times faster than Parquet in the demo.

spiraldb.com25 min read

03OPINIONS & ADVICE

SIMPLE IS NOT SMALL

Small programs can still be tightly coupled, while large systems can present a simple interface. Simplicity comes from separating concerns and choosing representations that do not braid unrelated behavior together, not just minimizing lines of code.

jyn.dev9 min read

PROGRAMMING IS ART

Some developers value programming as a creative practice, not just a means to ship products or earn money. Even if AI can generate code faster, people who love the process will keep writing code by hand because the act itself is the reward.

orchidfiles.com4 min read

MAKING SOFTWARE HURTS NOW

AI adoption is eroding trust in open source, where maintainers now face suspicion over how contributions were produced while many workers cannot afford to opt out of mandated tools. The essay calls for more solidarity with people sharing public goods instead of directing justified anger at fellow developers.

notes.erlend.sh4 min read

04LAUNCHES & TOOLS

Sponsored

O'REILLY EARLY RELEASE: SCALING AI ADOPTION IN ENGINEERING

In this new O'Reilly book, author and CTO community leader Peter Bell presents a clear, pragmatic framework for adopting and scaling AI in engineering organizations. Available in early release compliments of Antithesis [15], and includes hands-on guidance for navigating the

pages.antithesis.comSponsor

OPENSCREEN

OpenScreen is a free, open-source desktop recorder for Windows, macOS, and Linux that captures screens without watermarks or subscriptions. It uses GPU-accelerated recording and is designed for quickly producing product demos and shareable videos.

github.comGitHub repository

CVE MCP SERVER

CVE MCP Server gives Claude 27 security-intelligence tools backed by 21 APIs, including CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, and VirusTotal. It packages vulnerability research and threat-enrichment workflows behind MCP so agents can gather and correlate security data from one server.

github.comGitHub repository

CLAUDE ADS

Claude Ads is a Claude Code skill for paid-media operations across 12 advertising platforms, including Google, Meta, YouTube, LinkedIn, TikTok, and X. It supports source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.

github.comGitHub repository

05MISCELLANEOUS

HAVE THE FRONTIER LABS MIXED UP AI SAFETY AND SECURITY?

Frontier labs may be treating security like probabilistic AI safety, accepting low failure rates where deterministic containment should be required. Recent agent escapes show that weak sandbox rules and ignored alerts can defeat otherwise useful monitoring, so known controls must work every time and trigger real intervention.

martinalderson.com8 min read

USING GPT-6 ASTRA INSIDE CLAUDE CODE IS THE NEW META

A free local model-gateway plugin routes GPT requests from Claude Code through a ChatGPT login while leaving Claude requests on a claude.ai account. The workflow uses Astra to orchestrate, cheaper GPT-5.6 models to execute, and Opus to review, with setup notes for the context-window suffix, finite allowances, and proxy breakage.

eigenwise.io11 min read