frank chu - DEV Community

frank chu

Oct 31

Applebee's shipped its database password inside its app. Anyone with the APK was an admin.

#bug #security #android #cybersecurity

4 min read

frank chu

Oct 30

Azure's cross-tenant hole got four fixes. The fourth fix reopened the third hole.

#azure #security #cloud #cybersecurity

4 min read

frank chu

Oct 30

A working Nintendo lives in 1GB of Qwen weights. I ran it and counted the nonzero ones.

#showdev #computerscience #llm #ai

4 min read

frank chu

Oct 30

Anthropic is about to be "junk"-rated with $112B in cash. I did the Project North Star math.

4 min read

frank chu

Oct 30

Binance lost $6.3B in about 20 minutes. I did the freeze math, and half the money is still moving.

#blockchain #cryptocurrency #crypto #security

5 min read

frank chu

Oct 30

The Claude Code backdoor's macOS bug broke its own SSH step. I re-ran the check.

6 min read

frank chu

Oct 30

The Nvidia spy story, split in two: a verified $4.8B equipment trail and an unverified allegation

#news #cybersecurity #security

4 min read

frank chu

Oct 29

25 firewalls rooted from 19,000 scanned. I did the funnel math.

#network #infosec #cybersecurity #security

3 min read

frank chu

Oct 29

Mistral's 1T model is 'open.' I priced what open actually costs.

4 min read

frank chu

Oct 29

DoorDash's $17B Instacart deal is priced like a two-year wait. I did the spread math.

3 min read

frank chu

Oct 29

I tested the new fast floor-division trick on 2,000,000 inputs. It's correct — and no faster here.

#algorithms #c #programming #performance

3 min read

frank chu

Oct 29

Stack Overflow now gets fewer than 1,000 questions a month. I counted via the API.

#discuss #softwaredevelopment #news #programming

1

3 min read

frank chu

Oct 29

Amazon just bet $200 that your phone can't replace a clock or a photo frame

#news #hardware #iot

4 min read

frank chu

Oct 29

The DOE's $5B nuclear loan isn't new power. It's cheaper financing for power already sold.

#news #infrastructure

4 min read

frank chu

Oct 28

Apple's git still trusts the compromised eMudhra certs. I ran the same checks on my machine.

4 min read

frank chu

Oct 28

MuPDF's AES-256 key had 9 bits of entropy. I reproduced it in 8.7 milliseconds.

#cybersecurity #programming #security

1

4 min read

frank chu

Oct 28

Tailscale SSH checked paths as you and dialed them as root. I read all four bulletins.

#cybersecurity #infosec #security

5 min read

frank chu

Oct 28

Someone built git blame for the US Code. I checked its numbers — 361 of 365 reconcile.

4 min read

frank chu

Oct 28

A Meta AI director left to rebuild Office. I checked if Ndoc is real.

#ai #productivity #startup

4 min read

frank chu

Oct 27

Ghostty 1.4 says scrollback compression saves 70-90%. I measured five kinds of text.

#performance #software #terminal

3 min read

frank chu

Oct 27

GoAhead's DH bug turns a 2048-bit prime into 255. I counted the 8 secrets left.

#c #cybersecurity #iot #security

4 min read

frank chu

Oct 27

Genie 4's real upgrade isn't the graphics. It's the second model watching them.

#ai #deeplearning #google #machinelearning

4 min read

frank chu

Oct 27

GPT-6.1 Terra costs half as much. I checked which halves OpenAI meant.

#ai #api #llm #openai

4 min read

frank chu

Oct 27

Python's JIT is being removed. I checked — my Python never had one.

#news #performance #python

1

4 min read

frank chu

Oct 26

Cohere caught Qwen3.8 trying to upload a probe file to Beijing. I ran the numbers in its report.

#agents #ai #llm #security

5 min read

frank chu

Oct 26

Cloudflare's GLM-5.3 leaked other users' prompts through its KV cache. I rebuilt the bug in 30 lines.

#cybersecurity #llm #python #security

5 min read

frank chu

Oct 26

SpaceX's $40B GPU deal is a lease, not a check. I did the payment math.

#hardware #infrastructure #startup

4 min read

frank chu

Oct 26

vLLM's Nemotron processor set one Pillow global to None. I measured what that global was holding back.

#cybersecurity #python #security

4 min read

frank chu

Oct 26

I parsed Anthropic's S-1 myself. The $80.7B loss is not the story.

#ai #claude #startup

4 min read

frank chu

Oct 26

I built Karpathy's LLM Wiki as a product — the hard part was stopping the LLM from writing

#showdev #ai #llm #tools

7 min read

frank chu

Oct 25

Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

#cybersecurity #github #infosec #security

4 min read

frank chu

Oct 25

Farol scores your PR's merge risk from the call graph. I fed it four PRs — and one invisible contract break.

#showdev #cli #opensource #softwaredevelopment

5 min read

frank chu

Oct 25

Reylo types .sql files by asking your database. I tried to fool it five ways.

#backend #database #sql #typescript

5 min read

frank chu

Oct 25

Goose claims a 29-byte record and 3.3x over C++. I measured both.

#computerscience #cpp #performance #programming

5 min read

frank chu

Oct 24

OpenAI shipped a php2shell checker. I ran it against 65 sites. All 65 said UNKNOWN.

#node #openai #php #security

1

4 min read

frank chu

Oct 24

HatchZip promises to extract an 839 MB archive in 839 MB of disk. I measured the blocks.

#github #opensource #performance #software

5 min read

frank chu

Oct 24

Astral wired ty into uv. I ran uv check on a project with four deliberate errors.

#programming #python #softwaredevelopment #tools

5 min read

frank chu

Oct 24

I scanned my machine for the Brotli RCE. Three stacks were exposed — and the patched one still reports the vulnerable version.

#cybersecurity #node #python #security

7 min read

frank chu

Oct 23

I generated 1,000,000 UUIDv7s. Python's are perfectly monotonic — in one process, with a behaving clock.

#programming #python #softwaredevelopment

1

6 min read

frank chu

Oct 23

I measured softmax's precision cliff. In fp32, cross-entropy returns exactly zero at margin 16.

#ai #computerscience #machinelearning #performance

7 min read

frank chu

Oct 23

Quad9 is leaving France on Nov 24. I probed its DoH — it's the only resolver here that requires HTTP/2 or nothing.

4 min read

frank chu

Oct 23

OpenSSL 4.1.0 shipped today. I built it and measured ML-KEM, ML-DSA, and DTLS 1.3.

#networking #opensource #performance #security

1

4 min read

frank chu

Oct 22

eMudhra quit the CA business today. I checked your trust store — its roots are still in it.

#cybersecurity #infosec #security

4 min read

frank chu

Oct 22

I built OpenShell's Z3 policy prover and ran 29 checks. It caught everything except the metadata address.

#agents #cli #opensource #security

5 min read

frank chu

Oct 22

Python 3.15's lazy imports cut my test CLI from 164 ms to 28 ms. The cost didn't disappear — it moved.

#cli #performance #python

4 min read

frank chu

Oct 22

I built FoxIO's 54 KB HTTP/3 accordion by hand. aioquic's decoder unfolded it to 200 MB.

#cybersecurity #networking #python #security

5 min read

frank chu

Oct 21

LiteLLM 1.107.0 stole credentials from every Python process. I checked PyPI and reproduced the mechanism with a canary

5 min read

frank chu

Oct 21

DuckDB 2.0 shipped today. I ran its headline features — triggers work, VARIANT has a silent-NULL trap

#cli #database #python #sql

5 min read

frank chu

Oct 21

I installed Google's TorchTPU wheel — 969MB — on a machine with no TPU and ran the README example

#news #ai #machinelearning #python

5 min read

frank chu

Oct 21

PHP's 9.2 RCE fix was public for three days before the release. I read all 11,747 lines of it.

1

5 min read

frank chu

Oct 21

Cloudflare says its Rust TypeScript port is 8x faster. I measured 5.3x — and 72% less memory.

#performance #programming #rust #typescript

5 min read

frank chu

Oct 21

Eight CA private keys were integers under 256. I recovered all eight in 11 milliseconds.

#cybersecurity #infosec #security

1

6 min read

frank chu

Oct 20

WhatsApp's help pages hid instructions for AI. I probed the live pages with 7 user-agents.

#ai #privacy #security

4 min read

frank chu

Oct 20

DeepSeek open-sourced its production inference engine today. I counted what's in it — and what's not.

#ai #llm #opensource #python

4 min read

frank chu

Oct 19

Mistral shipped a time-series foundation model today. I measured its latency — and its confidence.

#ai #datascience #machinelearning #performance

1

2

4 min read

frank chu

Oct 19

GhostAction now scans your git history for secrets. I deleted 30 keys and recovered all 30.

#cybersecurity #git #github #security

5 min read

frank chu

Oct 19

One hash is enough for a Bloom filter. I measured it — and the 52% cliff when you break its one rule.

4 min read

frank chu

Oct 19

Someone built a programming language to break LLMs. I ran it.

#ai #llm #programming

6

1

4 min read

frank chu

Oct 18

OpenCode's breach exposed provider keys for 1.4% of Console users. I checked what that number can and can't tell you.

#api #cybersecurity #llm #security

4 min read

frank chu

Oct 18

DeepSeek charges $0.75 per 1,000 searches. I probed what 'successful' means.

#ai #api #llm #tools

4 min read

1 Week Community Wellness Streak

Want to connect with frank chu?