Terminal-based coding assistants for AI-curious developers are hot these days, and the most popular choice appears to be Claude Code. But Anthropic’s commercial offering has a new open source rival: MiMo Code, released under an MIT license by Chinese smartphone giant Xiaomi. Unlike Claude Code, MiMo Code is not restricted to a specific LLM provider. It was also optimized for “long-horizon automated programming tasks,” according to the introductory blog entry. The software aims to “maintain decision quality and state continuity over dozens or even hundreds of execution steps.”The AI community has taken notice of this release. Since its v0.1 release last…
Author: drweb
AI coding agents can create a new code execution risk when they treat externally influenced error data as trusted guidance and have access to command line tools, according to new research from Tenet Security.The security company demonstrated an indirect prompt injection technique it calls “Agentjacking” in a recent report. In its proof of concept, an attacker planted malicious instructions inside a fake Sentry error report, causing an AI coding agent to execute an attacker-supplied command during a routine debugging task.The attack began with a Sentry Data Source Name (DSN), a credential commonly embedded in a website’s frontend JavaScript. Sentry treats…
You paste a slow Redshift query plan into PlanTrace and one of the tuning insights reads “SORTKEY optimization candidate”, pointing at an explicit sort step that’s adding cost you don’t need to pay. A sort step runs at query time, every time, and on a wide table with millions of rows it can dominate the total cost. The fix is usually a SORTKEY that matches what the query is sorting on.What an explicit sort step actually isWhen your query has an ORDER BY, a window function, or a merge join that needs ordered input, Redshift has two options. If the data is…
May 12, 2026 Docker AI Governance: Unlock Agent Autonomy, Safely Introducing Docker AI Governance: centralized control over how agents execute, what they can reach on the network, which credentials they can use, and which MCP tools they can call, so every developer in your company can run AI agents safely, wherever they work. Your laptop is the new prod Agents are the biggest productivity unlock… Read now
As part of my running the SQL Saturday charitable foundation, I get sponsorship money from vendors. Primarily Microsoft and AMD, but I hope to change that in the future. In any case, I recently got a payment notification that my invoice had been paid.I knew I had a few invoices outstanding, so I wasn’t sure what was included. MS tries to bundle payments, but I don’t get an email for each one. For this one, I didn’t see an email, so I suspected I’d put the wrong one in or typo’d it.The Usual ProcessWhen I get payments, I have to…
Moonshot AI shipped Kimi K2.7-Code on June 12, 2026 — the fifth major release in the Kimi series in under a year, and arguably the most developer-friendly yet. The model is open-source, available on Hugging Face under a Modified MIT license, and accessible via the Kimi API and the company’s Kimi Code CLI.The headline claim: a 21.8% improvement on Moonshot’s own Kimi Code Bench v2 over its predecessor, K2.6. But the story that matters more for DevOps teams is efficiency, not just capability.Fewer Tokens, Less WasteMoonshot says K2.7-Code cuts reasoning token usage by 30% compared to K2.6. In practical terms,…
Uptime monitoring is the practice of regularly checking that a website is reachable and alerting you when it stops responding. Python makes this easy to build yourself with the requests library and a few dozen lines of code. In this article, you’ll build a small but reliable uptime monitor step by step. It will check a site, measure how fast it responds, retry the failures worth retrying, run on a schedule, and notify you on Slack when something breaks. At the end, we’ll look at where a hand-rolled monitor is enough and where a dedicated service makes more sense. How…
Web development has moved on significantly since the era of static HTML pages. Countless programming languages have come and gone as the pressure to build scalable, complex applications intensified. Yet Python has not just survived this constant churn; it has cemented itself as a cornerstone of modern backend architecture. What began life as a straightforward scripting tool is now the engine powering some of the most robust platforms on the internet. Let us look at the practical reasons why this language remains an indispensable tool for developers tasked with building everything from lightweight microservices to massive enterprise systems. Where simplicity…
A developer pushes one file. It contains an AWS access key left in a configuration block. Five minutes later, CI catches it. By then, the secret is in the remote repository, cached by mirrors and potentially forked. The developer rotates the key, scrubs the commit history and spends the rest of the afternoon on incident response. The real question isn’t how to clean up faster — it’s why the secret left the developer’s machine in the first place. The Five-Minute Gap Most engineering teams have invested in CI-based secret scanning. Tools such as GitHub Advanced Security, GitGuardian and TruffleHog’s CI integration catch leaked credentials…
Digital transformation has never been short of ambition. Enterprises have invested billions in AI initiatives, cloud migrations, agile programs, and customer success platforms—yet many still find themselves stuck: Pilots that never scale, software that sits unused, teams that move fast in isolation but grind to a halt when they collide. The question isn’t whether organizations want to transform. It’s whether they know how to make value actually flow. That question sits at the heart of conversations happening across the world’s most complex organizations. From aerospace and defense to aviation, industrial software to telecom infrastructure, leaders are learning the same hard lesson: Transformation is less a technology problem than a systems problem — and solving it requires aligning…