dreamreal

110 articles

The Wrong Boundary

Junior programmers mess up paradigms because they think they're more experienced than they actually are. They end up blaming the system for not working the way they think it should. I trusted the wrong thing, just like a junior programmer: I assumed my tests were wrong, my results were wrong, that I was wrong, and I was - but the error was in the location of the problem.

AIs Onboard, too

Yury Selivanov recently released lat.md, a knowledge graph for your codebase, stored as user-editable markdown. The tool itself sounds useful enough, but checking it out and working out what it provides for your code was more useful than the tool's existence itself: effective agent management means going through an onboarding process.

Miasma - a Poison Pill for Scrapers

Miasma is a new project in Rust that creates a maze of twisty passages, all alike, for AI scrapers. It's got documentation to protect "good" scrapers, and creates nonsense for "bad" scrapers, but the problem isn't as simple as "punish AI for existing."

Why Control Rooms Are Green - and Why That Matters

You've probably never thought about why your IDE's default theme uses the colors it does, or why every hospital, factory, and control room built between 1944 and 1980 looked the same. Beth Mathews' piece on Faber Birren answers the second question - and the answer has more to say about developer tooling than you might expect.

Kafka Offset Commit with Spring Boot

Piotr Minkowski's new article on Spring Kafka offset behavior ("Deep Dive into Kafka Offset Commit with Spring Boot") goes into how Spring's Kafka reader commits read offsets: it treats the read operation as a committable transaction, which means your code needs to be aware of the offset write semantics to make sure you don't lose messages. Kafka is powerful precisely because it's not a simple queue - messages can be replayed via offset manipulation - but that same model means offset commit semantics matter in ways they never would with a fire-and-forget message broker.

Building a RAG System: There's No Recipe, But Here's a Map

Andros Fenollosa had never built a RAG system before he was handed a 1TB corpus of proprietary engineering documents and told to make it queryable in natural language - locally, with no external APIs, a problem many users of AI would like to solve for themselves. His writeup is an honest record of what broke and why. No complete recipe for RAG exists yet, but practitioner records like this one are how the field is actually being built.

Bruce: A Wrapper Around Java Cryptography

Mirko Caserta has released Bruce 2.0, a library that wraps JCA with a clean API. Bruce takes the agony of all the nuts and bolts of security and, well, fixes it. Security libraries earn trust slowly and should - this is not the domain where "looks good to me" is sufficient due diligence, but the reduced API surface might be a good thing for the normative case.

The AI Dilemma

The software industry has a short memory. Every generation of tooling has made the same promise: let the machine handle implementation so humans can focus on the problem, in mostly disappointing ways. Now LLMs are making the same pitch, and the instinct is to either panic or sneer. Both responses miss the point. What changed isn't the promise - it's how much of it is actually being kept. The question worth asking isn't whether to adopt, but how to do it without hollowing out the understanding that makes the tools useful in the first place.

Java 26 released: HTTP/3, GC improvements, final finally means final

The OpenJDK team has released Java 26 - a non-LTS release, but one that supports some important language and API updates, along with some potentially useful ahead-of-time updates for garbage collection and runtime caching. Language updates include progress towards making final mean final - at last - and adding HTTP3 and QUIC support.

Manyana - a new VCS from the author of BitTorrent

Bram Cohen, creator of BitTorrent, has released "Manyana," a version control system with a new way of tracking changes that reduces the impact of merges to something more manageable and coherent. It's only a proof-of-concept as a VCS, not a replacement of Git, but looks interesting.

sonar: a command line tool to inspect port usage

RasKrebs' sonar is a CLI tool for inspecting and managing everything listening on localhost ports. The name is overloaded, and badly, but the tool works well. So they built something more suitable for their purposes. sonar list gives you ports, process names, Docker container names, Compose projects, CPU/memory usage, and clickable URLs in one shot.

Tela: A userspace private cloud

Tela is a remote-access fabric built around encrypted WireGuard tunnels relayed over WebSocket, with no TUN device and no admin privileges required on either end. That implies that spinning up a Tela network has a relatively light administrative burden in terms of system permissions. The access levels required makes it interesting: Tela is not "just another tunnel,” but a userspace tunnel that would be appropriate for all kinds of constrained access deployments.

Comprehension Debt: the Cost of Relying on AI Code

Addy Osmani put out an essay called "Comprehension Debt - the hidden cost of AI generated code." The problem is that AI can indeed generate code incredibly quickly - but it's more quickly than humans can integrate or understand, or evaluate. The result is a codebase that "works" - code created with "just make the tests pass, please" - but that humans don't understand, and cannot or do not review.

Kotauth: a Self-hosted Authentication Platform

Anderson Fariña tagged a release candidate of Kotauth, a "docker-oriented full authentication service inspired by keycloak." It could fulfill a very real gap: authorization and authentication services tend to be very low-ceiling until they're not. If you've had to wrestle with Keycloak or are dreading the Auth0 renewal quote, this project might be very interesting.