Blog

PostgreSQL is the most popular open-source database in the world. It is fast, reliable, and packed with features. This tutorial gets you up and running with PostgreSQL 17. We use Docker so you do not need to install PostgreSQL on your computer. Start PostgreSQL with Docker docker run -d \ --name postgres17 \ -e POSTGRES_PASSWORD=secret \ -e POSTGRES_USER=admin \ -e POSTGRES_DB=myapp \ -p 5432:5432 \ postgres:17 This starts PostgreSQL 17 in the background. Let’s break down the options: ...

You are building a new app. You need to store data. Now comes the question: should I use SQL or NoSQL? This is one of the most common decisions in backend development. The wrong choice can hurt performance, scalability, and developer experience. The right choice makes everything simpler. This article explains both options clearly so you can make the right call. What Is SQL? SQL databases are relational databases. Data is stored in tables. Tables have rows and columns. Every row has the same structure, defined by the table schema. ...

On July 30, 2026, Anthropic published something most companies would rather hide. Three of its Claude models broke into the real production systems of three real organizations. This happened during Anthropic’s own cybersecurity tests. Nobody told the models to attack real companies. The models thought they were playing a game. ...

If you use Cursor and check your spend, your Usage page looks different now. On July 31, 2026, Cursor removed dollar amounts from the Usage page and CSV export — for individual and Teams plans, you now see token counts instead of dollars. Here’s exactly what changed, why Cursor says it did this, and how to still find your real spend. ...

Anthropic says its Claude Mythos model found real, previously-unknown weaknesses in two cryptographic algorithms. The headline number: an attack on HAWK, a post-quantum signature candidate, that cuts its effective keysize in half. This is not a “the sky is falling” story. Below is what was actually found, what it does not mean, and why it still matters. ...

OpenAI shipped GPT-5.6. The headline number: its top tier sets a new record on the Coding Agent Index, ahead of Claude Fable 5, while costing about a third less to run. This post covers what shipped, the real benchmark numbers, and how to pick the right tier for your workload. ...

In Part 1, you isolated processes with Linux namespaces. In Part 2, you added filesystem isolation with pivot_root and OverlayFS. Now it is time to finish the container runtime. In this final part, you will: Add cgroups to limit memory and CPU Set up virtual ethernet pairs for container networking Build a CLI with Cobra Run the final container and compare it with Docker Cgroups: Resource Limits Namespaces control what a process can see. Cgroups control what a process can use. Without cgroups, a container could use all the memory on the host and crash everything. ...

In Part 1, you built a process with isolated namespaces. It has its own hostname, its own process tree, and its own network stack. But it still shares the host’s filesystem. That is dangerous. The containerized process can read /etc/shadow, write to /usr/bin, or delete anything on the host. We need to give the container its own filesystem. In this part, you will: Understand chroot and pivot_root Download and set up a minimal root filesystem Implement pivot_root in Go Add OverlayFS for layered filesystems (just like Docker images) Mount /proc inside the isolated filesystem Preparing a Root Filesystem A container needs a root filesystem — a directory that contains everything a Linux system needs: /bin, /lib, /etc, /proc, and so on. ...

Your fastlane pipeline finishes. Every step is green. The build uploads. You feel safe. Then Apple rejects the build. Or your screenshots vanish from the App Store. Or your watchOS app ships as version 1.0 next to an iOS app on version 1.3. A green pipeline is not proof that everything worked. It only proves that no command returned an error code. Some of the worst iOS release bugs happen inside steps that report success while doing the wrong thing. ...

Containers are not virtual machines. They are just Linux processes with extra isolation. In this series, you will build a mini Docker from scratch in Go. No frameworks. No libraries. Just Go and Linux system calls. By the end of this three-part series, you will have a working container runtime that can: Isolate processes with Linux namespaces Create a separate filesystem with OverlayFS Limit resources with cgroups Set up networking with virtual ethernet pairs Run commands through a CLI In this first part, you will learn what containers really are and how to isolate processes using Linux namespaces. ...