June 1, 2026

# Nightly Librarian — Newsletter draft

Run: ef644f8c-04b0-4134-86c2-db79faac5378
Started: 2026-06-01T11:03:11.467Z
Completed: 2026-06-01T11:11:31.086Z

## Worth attention

- **Websites have a new way to spy on visitors: analyzing their SSD activity**
  https://arstechnica.com/security/2026/05/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity/
  Ars summarizes a new browser-only SSD timing side-channel (FROST) that times OPFS reads to infer other tabs/apps via SSD contention. Not reported in the wild; scaling requires ~GB-sized per-origin files and the paper proposes browser mitigations.
- **Show HN: Streambed – Stream Postgres to Iceberg on S3, Supports Postgres Wire**
  https://github.com/viggy28/streambed
  Streambed is a Go Postgres-to-Iceberg CDC tool: streams logical replication/WAL into Parquet on S3, commits Iceberg metadata, and exposes a DuckDB-backed query server over the Postgres wire protocol.
- **Cloudflare Turnstile requiring fingerprintable WebGL**
  https://hacktivis.me/articles/cloudflare-turnstile-webgl-fingerprinting
  A report claims Cloudflare Turnstile now requires WebGL renderer info, causing endless verification loops in WebKitGTK and potentially blocking privacy-hardened browsers.
- **Concurrent device registration without Redis**
  https://seg6.space/posts/concurrent-registration/
  A detailed write-up on preventing device-limit races in a multi-instance backend without Redis by using DB row-level locks (`SELECT ... FOR UPDATE`) and careful isolation-level choices.
- **zsh 5.9.1 released**
  https://www.zsh.org/mla/announce/msg00135.html
  zsh 5.9.1 was released as a stable maintenance update (bug fixes/build improvements, minor features).

## Full digest

- [P] [hn-top] Websites have a new way to spy on visitors: analyzing their SSD activity — https://arstechnica.com/security/2026/05/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity/ — Ars summarizes a new browser-only SSD timing side-channel (FROST) that times OPFS reads to infer other tabs/apps via SSD contention. Not reported in the wild; scaling requires ~GB-sized per-origin files and the paper proposes browser mitigations.
- [R] [hn-top] Restartable Sequences — https://justine.lol/rseq/ — Restartable Sequences (not opened); title-level only.
- [R] [hn-top] Linux/M68k — http://www.linux-m68k.org/ — Linux/M68k (not opened); title-level only.
- [R] [hn-top] New Beam Spring Keyboards — https://www.modelfkeyboards.com/product/beam-spring-b104-keyboard/ — New Beam Spring Keyboards (not opened); title-level only.
- [R] [hn-top] Codex just found a "workaround" of not having sudo on my PC — https://twitter.com/i/status/2060746160558543217 — Codex just found a "workaround" of not having sudo on my PC (not opened); title-level only.
- [P] [hn-top] Show HN: Streambed – Stream Postgres to Iceberg on S3, Supports Postgres Wire — https://github.com/viggy28/streambed — Streambed is a Go Postgres-to-Iceberg CDC tool: streams logical replication/WAL into Parquet on S3, commits Iceberg metadata, and exposes a DuckDB-backed query server over the Postgres wire protocol.
- [R] [hn-top] Having your insulin pump die while you're on vacation — https://blog.lauramichet.com/what-its-like-to-have-the-machine-that-keeps-you-alive-die-while-youre-on-vacation/ — Having your insulin pump die while you're on vacation (not opened); title-level only.
- [R] [lobsters] Unlawful by design: Exposing the human rights costs of generative AI — https://www.amnesty.org/en/documents/pol40/0996/2026/en/ — Unlawful by design: Exposing the human rights costs of generative AI (not opened); title-level only.
- [R] [lobsters] vibecoding as adhd multiplier — https://thoughts.hmmz.org/2026-05-31.html — vibecoding as adhd multiplier (not opened); title-level only.
- [R] [lobsters] It's Not Just X. It's Y — https://mail.cyberneticforests.com/its-not-just-data-its-post-training/ — It's Not Just X. It's Y (not opened); title-level only.
- [R] [lobsters] You Must Fix Your Asserts — https://kristoff.it/blog/fix-your-asserts/ — You Must Fix Your Asserts (not opened); title-level only.
- [P] [lobsters] Cloudflare Turnstile requiring fingerprintable WebGL — https://hacktivis.me/articles/cloudflare-turnstile-webgl-fingerprinting — A report claims Cloudflare Turnstile now requires WebGL renderer info, causing endless verification loops in WebKitGTK and potentially blocking privacy-hardened browsers.
- [R] [lobsters] I found a seashell in the middle of the desert — https://github.com/Hawzen/I-found-a-seashell-in-the-middle-of-the-desert#i-found-a-seashell-in-the-middle-of-the-desert — I found a seashell in the middle of the desert (not opened); title-level only.
- [R] [lobsters] Five Years of Trying to Add Recursion to lychee — https://endler.dev/2026/lychee-recursion/ — Five Years of Trying to Add Recursion to lychee (not opened); title-level only.
- [R] [lobsters] The software industry: annealing, but wrong — https://apenwarr.ca/log/20260531 — The software industry: annealing, but wrong (not opened); title-level only.
- [M] [lobsters] zsh 5.9.1 released — https://www.zsh.org/mla/announce/msg00135.html — zsh 5.9.1 was released as a stable maintenance update (bug fixes/build improvements, minor features).
- [R] [lobsters] Adding Offline Mode and Custom Servers to an MMORPG — https://plantbasedgames.io/blog/posts/09-adding-offline-mode-and-custom-servers-to-an-mmorpg/ — Adding Offline Mode and Custom Servers to an MMORPG (not opened); title-level only.
- [R] [lobsters] UTF8 email with DMA: DragonFly Mail Agent — https://www.vincentdelft.be/post/post_20260530 — UTF8 email with DMA: DragonFly Mail Agent (not opened); title-level only.
- [P] [lobsters] Concurrent device registration without Redis — https://seg6.space/posts/concurrent-registration/ — A detailed write-up on preventing device-limit races in a multi-instance backend without Redis by using DB row-level locks (`SELECT ... FOR UPDATE`) and careful isolation-level choices.
- [R] [lobsters] Why does ASTC use ISE when almost nothing else does? — https://fgiesen.wordpress.com/2026/05/29/why-does-astc-use-ise-when-almost-nothing-else-does/ — Why does ASTC use ISE when almost nothing else does? (not opened); title-level only.
- [R] [lobsters] Croft - TUI VSCode Clone — https://codeberg.org/vitali87/croft — Croft - TUI VSCode Clone (not opened); title-level only.
- [R] [lobsters] Homomorphic static analysis — http://marcosh.github.io/post/2026/05/21/homomorphic-static-analysis.html — Homomorphic static analysis (not opened); title-level only.
- [R] [lobsters] A pragmatic set of modern colour space transforms for the Odin language — https://github.com/heavyrain266/colourspace — A pragmatic set of modern colour space transforms for the Odin language (not opened); title-level only.
- [R] [reddit-localllama] MiniMax M3 - Coding & Agentic Frontier, 1M Context, Multimodal — https://www.reddit.com/r/LocalLLaMA/comments/1ttdiq0/minimax_m3_coding_agentic_frontier_1m_context/ — MiniMax M3 - Coding & Agentic Frontier, 1M Context, Multimodal (not opened); title-level only.
- [R] [reddit-localllama] NVIDIA announces Nemotron 3 Ultra — https://www.reddit.com/r/LocalLLaMA/comments/1tthkh5/nvidia_announces_nemotron_3_ultra/ — NVIDIA announces Nemotron 3 Ultra (not opened); title-level only.
- [R] [reddit-localllama] (YT) PewDiePie released his harness/webui — https://www.reddit.com/r/LocalLLaMA/comments/1tsz4ji/yt_pewdiepie_released_his_harnesswebui/ — (YT) PewDiePie released his harness/webui (not opened); title-level only.
- [R] [reddit-localllama] I was a Data Scientist for 10 years before becoming a quadriplegic. For the past 3 months, I built VibeETL from scratch: A lightning-fast, visual Alteryx alternative powered by Polars & React Flow. — https://www.reddit.com/r/LocalLLaMA/comments/1tthxl4/i_was_a_data_scientist_for_10_years_before/ — I was a Data Scientist for 10 years before becoming a quadriplegic. For the past 3 months, I built VibeETL from scratch: A lightning-fast, visual Alteryx alternative powered by Polars & React Flow. (not opened); title-level only.
- [R] [reddit-localllama] God dammit Qwen — https://www.reddit.com/r/LocalLLaMA/comments/1tt7bf4/god_dammit_qwen/ — God dammit Qwen (not opened); title-level only.
- [R] [reddit-localllama] I ported NVIDIA Parakeet (speech-to-text) to ggml: same output as NeMo, faster, GGUF-quantized, no Python — https://www.reddit.com/r/LocalLLaMA/comments/1tt6oja/i_ported_nvidia_parakeet_speechtotext_to_ggml/ — I ported NVIDIA Parakeet (speech-to-text) to ggml: same output as NeMo, faster, GGUF-quantized, no Python (not opened); title-level only.
- [R] [reddit-localllama] Use HTML as the primary chat language of your LLM's so they can make interactive content — https://www.reddit.com/r/LocalLLaMA/comments/1tter4t/use_html_as_the_primary_chat_language_of_your/ — Use HTML as the primary chat language of your LLM's so they can make interactive content (not opened); title-level only.
- [R] [reddit-localllama] I Time-Traveled to 2038 to Buy DDR7 RAM So I Could Finally Run Local LLMs Without Selling My Kidney for VRAM — https://www.reddit.com/r/LocalLLaMA/comments/1ttl4xl/i_timetraveled_to_2038_to_buy_ddr7_ram_so_i_could/ — I Time-Traveled to 2038 to Buy DDR7 RAM So I Could Finally Run Local LLMs Without Selling My Kidney for VRAM (not opened); title-level only.
- [R] [reddit-localllama] next MiniMax will be released in ~10 Days — https://www.reddit.com/r/LocalLLaMA/comments/1ttkz1c/next_minimax_will_be_released_in_10_days/ — next MiniMax will be released in ~10 Days (not opened); title-level only.
- [R] [reddit-localllama] Get you some GPUs, it's not worth the hacks around lack of RAM — https://www.reddit.com/r/LocalLLaMA/comments/1ttboo2/get_you_some_gpus_its_not_worth_the_hacks_around/ — Get you some GPUs, it's not worth the hacks around lack of RAM (not opened); title-level only.
- [R] [reddit-localllama] 100 Trillion+ Pretraining data??? This is the largest data I've see a model being trained on. — https://www.reddit.com/r/LocalLLaMA/comments/1tthnru/100_trillion_pretraining_data_this_is_the_largest/ — 100 Trillion+ Pretraining data??? This is the largest data I've see a model being trained on. (not opened); title-level only.
- [R] [reddit-localllama] NVIDIA RTX Spark — Slim Laptops & Small Desktops — https://www.reddit.com/r/LocalLLaMA/comments/1ttji8b/nvidia_rtx_spark_slim_laptops_small_desktops/ — NVIDIA RTX Spark — Slim Laptops & Small Desktops (not opened); title-level only.
- [R] [reddit-localllama] GPU Prices. Buy now, or buy later? — https://www.reddit.com/r/LocalLLaMA/comments/1tt9r8j/gpu_prices_buy_now_or_buy_later/ — GPU Prices. Buy now, or buy later? (not opened); title-level only.
- [R] [reddit-localllama] Stepfun 3.7 Flash is very good — https://www.reddit.com/r/LocalLLaMA/comments/1tss9nq/stepfun_37_flash_is_very_good/ — Stepfun 3.7 Flash is very good (not opened); title-level only.
- [R] [reddit-localllama] Built a fun weekend project: An MCP server for generating Mandelbrot visualizations — https://www.reddit.com/r/LocalLLaMA/comments/1tte2cu/built_a_fun_weekend_project_an_mcp_server_for/ — Built a fun weekend project: An MCP server for generating Mandelbrot visualizations (not opened); title-level only.
- [R] [reddit-localllama] Open Models - May 2026 — https://www.reddit.com/r/LocalLLaMA/comments/1ttl45v/open_models_may_2026/ — Open Models - May 2026 (not opened); title-level only.
- [R] [reddit-localllama] What are some cool little things you guys are doing with < 10b models? — https://www.reddit.com/r/LocalLLaMA/comments/1ttgqk6/what_are_some_cool_little_things_you_guys_are/ — What are some cool little things you guys are doing with < 10b models? (not opened); title-level only.