Ideas for building
better software.

Chicken Scheme 6.0

Article URL: https://code.call-cc.org/releases/6.0.0/NEWS Comments URL: https://news.ycombinator.com/item?id=49251702 Points: 294 # Comments: 50

A sandbox without a network boundary is only half a sandbox

Running untrusted code safely requires more than separating it from the host. You also have to control what that code can reach. This matters more as AI agents gain the ability to read files, execute commands, install packages, and generate programs of their own. A microVM can prevent that code from accessing the host or another workload. By itself, it cannot stop the code from exfiltrating data, probing internal services, attacking systems elsewhere on the internet, or using credentials availab

Cloudflare Tunnel, Cloudflare Tunnel for SASE, Cloudflare Mesh, Gateway, Cloudflare One - Hostname routing is now generally available, with a new public IP range for initial resolved IPs

Hostname routing ↗ is now generally available. Instead of managing static IP lists and routes, you can route traffic by hostname across multiple Cloudflare One connectors: Cloudflare Tunnel: route a private hostname (for example, wiki.internal.local) to a private application behind your tunnel, or a public hostname (for example, bank.example.com) to egress through a specific tunnel and anchor traffic to a dedicated exit node. Cloudflare Mesh: attract a private or public hostname's traffic to a M

WAF - WAF Release - 2026-08-11

This release introduces new protection for a remote code execution vulnerability in vBulletin and improves two existing detections. Key Findings A new detection provides protection against vBulletin CVE-2026-61511. Two existing detections have been improved to strengthen coverage. Impact Successful exploitation of CVE-2026-61511 may lead to remote code execution on affected vBulletin systems, potentially resulting in unauthorized access, data exposure, service disruption, and broader compromise

This Week in Spring - August 11th, 2026

LaunchDarkly is now available on the Vercel Marketplace

is now available on the , allowing you to quickly get started with feature flags without additional setup. You can:LaunchDarklyVercel Marketplace To get started, run , add the adapter, and declare a flag with the :vercel install launchdarkly@flags-sdk/launchdarklyFlags SDK Using a coding agent? Hand it this prompt: Add from the Vercel Marketplace, or read the . LaunchDarklyadapter docs Read more Sync flags into and evaluate them locallyGlobal Config Target releases by user, attribute, or se

The dangers of Postgres subtransactions

A single transaction that accumulates numerous subtransaction IDs can significantly reduce throughput across an entire PostgreSQL cluster. It can also stop a new read replica from accepting queries, even as the replica continues to replay WAL. If you add read replicas on demand during a load spike, a replica that cannot open for reads provides no extra capacity. Let’s look at how PostgreSQL keeps a replica in sync and determines when it can safely serve reads. How replicas stay in sync Read repl

React Native 0.87 - Strict TypeScript API, Metro Update, Swift Package Manager, AGP 9 Support

Today we are excited to release React Native 0.87!