Weekly news | 2025-07-09

news

• Sleeping beauty bitcoin wallets wake up after 14 years to the tune of $2 billion
• Google can now read your WhatsApp messages, here's how to stop it
• Linda Yaccarino is leaving X
• Helm local code execution via a malicious chart
• Figma Files Registration Statement for Proposed IPO: $750mm in revenue and spend $110mm in AWS! (300k/day)

• AWS:
  • Amazon Q AWS Connect +7 languages for proactive recommendations
  • Aurora PostgreSQL up to 256 TiB of storage volume
  • B2B Data Interchange
    • configuration capabilities for generated EDI documents
    • splitting of inbound EDI documents
  • Bedrock Citations API and PDF support
  • Clean Rooms incremental and distributed training for custom modeling
  • CloudFront support for HTTPS DNS records
  • CloudWatch PutMetricData API now supports CloudTrail data event logging
  • Config rules add classifications from Control Tower Control Catalog
  • Connect
    • additional APIs to update and delete cases
    • audio treatment while customers wait in queue
    • custom work labels for agent schedules
    • enhanced flow designer UI editing features
    • include agent activities from third-party applications when evaluating agent performance
    • segment creation from imported files
  • Control Tower support for AWS PrivateLink
  • EBS gp3 volumes for second-generation Outposts racks
  • ECS
    • Optimized Windows Server 2025 AMIs
    • Task ID in unhealthy service events
  • Fargate SOCI Index Manifest v2 for greater deployment consistency
  • HealthImaging
    • DICOMweb BulkData
    • DICOMweb STOW-RS data imports
  • Keyspaces Change Data Capture (CDC) Streams
  • Neptune Graph Explorer Native Query Support for Gremlin and openCypher
  • Nova Canvas virtual try-on and style options for image generation
  • Q Business ability to customize responses
  • Q-Index seamless application-level authentication
  • QuickSight
    • 2B row SPICE dataset
    • Trusted Identity Propagation (TIP) for Athena Direct Query
  • RDS Custom for Oracle Multi-AZ deployments
  • Redshift Serverless 4 RPU Minimum Capacity Option
  • Rekognition Face Liveness accuracy improvements and new challenge setting for improved UX
  • Route 53 capacity utilization metric for Resolver endpoints
  • S3 Express One Zone tags for cost allocation and attribute-based access control
  • SageMaker Catalog AI recommendations for descriptions of custom assets
  • SageMaker
    • HyperPod training operator
    • integration with Aurora MySQL, RDS for MySQL
  • SNS delivery to Data Firehose +3 regions
  • Textract accuracy and feature updates to DetectDocumentText and AnalyzeDocument APIs
  • Transfer Family support for IPv6 endpoints
  • Transform EBS costs, .NET complexity and expands chat guidance

tooling

• aws-cloudformation-terraform-backend: Cloudformation for Terraform Backends on AWS
• N-Back Test - Free Online Training
• pennybase: Poor Man's Back End-as-a-Service (BaaS), Similar to Firebase/Supabase/Pocketbase
• gmailtail: Command-line tool to monitor Gmail messages and output them as JSON
• kepler.gl
• postcard: Personal website + newsletter as an alternative to social media
• opencode: AI coding agent, built for the terminal
• Backlog.md: Markdown‑native Task Manager and Kanban visualizer for any Git repo
• bitchat: decentralized messaging app that works over Bluetooth mesh networks
• Crypto 101 course
• Brut: A New Web Framework for Ruby
• Jukebox: Free, Open Source Group Playlist with Fair Queueing
• annas-mcp: MCP server and CLI tool for searching and downloading documents from Anna's Archive
• MCP-B: Model Context Protocolfor the Browser
• context7 MCP Server: Up-to-date code documentation for LLMs and AI code editors

blogs

• Most RESTful APIs aren't really RESTful
• Taking over 60k spyware user accounts with SQL injection
• CVE-2025-48384: Breaking Git with a carriage return and cloning RCE
• Supabase MCP can leak your entire SQL database
• Solving Wordle with uv's dependency resolver
• I used o3 to profile myself from my saved Pocket links
• Async Queue – One of My Favorite Programming Interviews (Can AI Break It?)
• How to Network as an Introvert
• Behind the scenes: Speeding up pgstream snapshots for PostgreSQL
• Context Engineering for Agents
• MCPs are Boring (or: Why we are losing the Sparkle of LLMs)
• Tools: Code Is All You Need
• Caching is an Abstraction, not an Optimization
• Writing Code Was Never The Bottleneck
• Introducing tmux-rs