Speaker 0: Alright. Let's do this. Geek News Central, episode
Speaker 0: eighteen forty five. Leading story today is gonna
Speaker 0: be Apple working on all new operating system,
Speaker 0: which I think we've talked about before on
Speaker 0: the show. At least not me, but my
Speaker 0: dad. Todd's talked about it in the show
Speaker 0: before. And a little bit more information kinda
Speaker 0: coming out on this story. Apple is developing
Speaker 0: an all new operating system code named Charismatic
Speaker 0: according to Bloomberg's Mark Gurman. This is likely
Speaker 0: Apple's long rumored home OS operating system. In
Speaker 0: a report last month, Gurman said both Apple's
Speaker 0: rumored smart home hub in twenty twenty six
Speaker 0: and a tabletop robot in twenty twenty seven
Speaker 0: will run the new operating system. He said
Speaker 0: the software platform will blend elements of tvOS
Speaker 0: and watchOS. For example, he he expects there
Speaker 0: to be hexagonal grid of apps just like
Speaker 0: on the Apple Watch. I know you guys
Speaker 0: know my dad's a big fan of the
Speaker 0: Apple community. He had a plethora of Apple
Speaker 0: devices, and one of his features he used
Speaker 0: to talk about all the time was being
Speaker 0: able to move your mouse across the different
Speaker 0: devices and grab things from across them. So
Speaker 0: I'm sure a lot of this is gonna
Speaker 0: be leading to, you know, a super integrated
Speaker 0: home, that's exclusive to Apple. I mean, Apple,
Speaker 0: for a long time, has closed off their,
Speaker 0: APIs to things like their, what do you
Speaker 0: call it there? The AirPods to the phone,
Speaker 0: to, like, the public. So, you know, it's
Speaker 0: gonna be very close ended, I assume. But
Speaker 0: really cool stuff. They've always developed cool new
Speaker 0: stuff and really interesting kinda how we're leading
Speaker 0: back into the, smart home. I'm thinking back
Speaker 0: to Nest and, Tony Fidel. If you guys
Speaker 0: have ever read his book, Build, phenomenal phenomenal
Speaker 0: read. It talks about the well, he goes
Speaker 0: to the creation of the iPod and then
Speaker 0: going on to building out Nest before being
Speaker 0: bought out by Google. So really awesome read
Speaker 0: if you haven't checked that out, but, kinda
Speaker 0: reminds me of that. You know? Just going
Speaker 0: back into that, smart home era. See what
Speaker 0: we'll do here. All these companies will start
Speaker 0: releasing new home devices, I'm sure. But the
Speaker 0: platform was really revolves around clock faces and
Speaker 0: widgets, and it'll have multi user support. Berman
Speaker 0: said, users will primarily interact with it using
Speaker 0: Siri voice commands, but touch will also be
Speaker 0: an option. Some of the preinstalled apps from
Speaker 0: Apple will apparently include calendar, camera, music reminder,
Speaker 0: and notes. So this device is meant to
Speaker 0: be easily shared. They include a front facing
Speaker 0: camera that can scan users' faces as they
Speaker 0: walk toward it and automatically change the layout,
Speaker 0: features, and content to the preferences of that
Speaker 0: person. So the camera is always recording. It's
Speaker 0: always on. And it kinda goes for the
Speaker 0: the the microphone too with the it being
Speaker 0: largely driven by Siri. Kinda interesting. We all
Speaker 0: know the Apple's big privacy. We wanna do
Speaker 0: a little shout out to our incredible sponsors
Speaker 0: at GoDaddy. Score exclusive deals and discounts at
Speaker 0: GoDaddy or, actually, at Geek News Central dot
Speaker 0: com forward slash GoDaddy. And to you, all
Speaker 0: of our listeners, as you know, you are
Speaker 0: the heartbeat of this show. If you wanna
Speaker 0: support GNC, head to Geek News Central dot
Speaker 0: com forward slash insider and become a GNC
Speaker 0: insider. We are not living live. I know
Speaker 0: he used to always be living live, but
Speaker 0: we are not living live. This is prerecorded.
Speaker 0: But, that doesn't mean you can't grab yourself
Speaker 0: a modern podcast app at podcast apps dot
Speaker 0: com. Definitely will open you up to the
Speaker 0: full podcast listening experience. Streaming stats is a
Speaker 0: really, really cool feature. Of course, you can
Speaker 0: check out the full Geek News Central universe
Speaker 0: at geek news central dot com, where you'll
Speaker 0: find all of our partner shows and, of
Speaker 0: course, tons of great content produced on a
Speaker 0: weekly basis. Stay in the loop, follow or
Speaker 0: subscribe to the podcast via your favorite podcast
Speaker 0: apps, and and don't forget to sign up
Speaker 0: for our newsletter for insider scoops. So email
Speaker 0: us directly at geek news central dot com
Speaker 0: or geek news central or geek news at
Speaker 0: g mail dot com. Geek news at g
Speaker 0: mail dot com. We do wanna continue to
Speaker 0: thank our long term sponsor of the podcast,
Speaker 0: GoDaddy, and thank them for their support. They've
Speaker 0: been a long time support of the show.
Speaker 0: Much as long as I can remember, as
Speaker 0: long as he's been doing the podcast. So,
Speaker 0: still got the codes. They're still ready to
Speaker 0: rock and roll. You can start yourself a
Speaker 0: website today. I recently started my own, little
Speaker 0: website that I've been playing with, and it's
Speaker 0: been cool. GoDaddy makes it really easy to
Speaker 0: get a word WordPress site built up. We
Speaker 0: typically offer two really big deals, I will
Speaker 0: say. They do codes that make it easier.
Speaker 0: It could be new central. Grad GoDaddy's economy
Speaker 0: hosting for just six ninety nine a month.
Speaker 0: That's a full year of hosting with free
Speaker 0: domain name, professional email, and an SSL certificate.
Speaker 0: If in if you're interested in WordPress, like
Speaker 0: I was talking about, it's just twelve ninety
Speaker 0: nine. Twelve ninety nine a month. And includes
Speaker 0: a free domain name, professional email, and an
Speaker 0: SSL certificate, which is kinda sweet. Because I
Speaker 0: think if you don't go through the codes,
Speaker 0: you the email's like an add on. The
Speaker 0: SSL certificate's an add on. So you get
Speaker 0: you get all this for a year with
Speaker 0: the codes, and it really is gonna save
Speaker 0: you a lot of money upfront, with setting
Speaker 0: up your website. If you just need a
Speaker 0: don't domain name all all all by itself,
Speaker 0: just eleven ninety nine. Just, head over to
Speaker 0: the codes at, geek news central dot com
Speaker 0: slash godaddy. And, list of codes we got
Speaker 0: all set up there. If you're not technically
Speaker 0: inclined, GoDaddy also does a little website builder.
Speaker 0: You can do a three thirty thirty day
Speaker 0: trial, and, really, mhmm, you only have to
Speaker 0: build the website once. Right? And then we
Speaker 0: use GoDaddy products and services here at Geek
Speaker 0: News Central. All the websites are run off
Speaker 0: GoDaddy and, WordPress. So it's, it's really, really
Speaker 0: convenient. Makes it really easy to update and
Speaker 0: share. Start your own podcast today. Come on
Speaker 0: over to our codes. Actually, I have it
Speaker 0: in the header now. It's linked, for anyone
Speaker 0: to, click on. Thanks for keeping us online,
Speaker 0: and we think, GoDaddy for their ongoing support
Speaker 0: of the podcast. And of course, you and
Speaker 0: your families and your friends share the codes
Speaker 0: with them if they're trying to build a
Speaker 0: website so that they can get a nice
Speaker 0: deal and get that, really easily. Onto my
Speaker 0: next little piece of news today. We, got
Speaker 0: malicious Rust Crates steal Solana and Ethereum keys.
Speaker 0: Eighty four twenty four. Downloads confirmed. Cybersecurity researchers
Speaker 0: have discovered two malicious Rust Crates impersonating a
Speaker 0: legitimate library called Fastlog to steal Solana and
Speaker 0: Ethereum wallet keys from source code. The crates
Speaker 0: named Faster Log and Async Print l n
Speaker 0: were published by the threat actor under the
Speaker 0: alias Rust Guru Man and Dumb and Based
Speaker 0: on May twenty fifth twenty twenty five, amassing
Speaker 0: eighty four twenty four downloads in total. According
Speaker 0: to software supply chain, security company, Socket. I
Speaker 0: know you guys all know I mean, or
Speaker 0: you may not know that Rust is, highly
Speaker 0: praised for security and memory safety. But, you
Speaker 0: know, this kind of proves that, even supply
Speaker 0: chain attacks can still happen and cause, you
Speaker 0: know, someone just includes that that cargo package,
Speaker 0: and it starts doing its work silently in
Speaker 0: the background. So in it so the crates
Speaker 0: include working login code for cover and embedded
Speaker 0: routines that scan source files for Solana and
Speaker 0: Ethereum private keys, then exfiltrate matches via h
Speaker 0: g p HTTP post to a hard coded
Speaker 0: command and control c two endpoint. Following responsible
Speaker 0: disclosure, the maintainers of crate IO have taken
Speaker 0: steps to remove Rust packages and disable the
Speaker 0: two accounts. It has also preserved logs of
Speaker 0: a threat actor operator. The threat actor operate
Speaker 0: act the threat actor operated users along with
Speaker 0: the malicious crates for further analysis. Oh, malicious
Speaker 0: code was executed at runtime when running or
Speaker 0: testing a project depending on them. So apparently,
Speaker 0: they didn't do anything malicious at build time.
Speaker 0: So people could have downloaded it and never
Speaker 0: ran it, you know, for a project that
Speaker 0: they were working on. So a lot of
Speaker 0: these may may have been short short lived
Speaker 0: downloads. But, it's kinda funny they say. It's
Speaker 0: called a typosquatting attack. Involve the threat actor
Speaker 0: retaining the logging functionality of the actual library
Speaker 0: while introducing malicious code changes during a log
Speaker 0: packing operation that recursively search Rust files in
Speaker 0: a directory for Ethereum Solana private keys. It's
Speaker 0: very crazy how clever people can get with
Speaker 0: some of these, you know, like, misdirection almost.
Speaker 0: And there's a picture here that says, you
Speaker 0: know, the the real one's called Fast Log.
Speaker 0: The fake one's called Fast Log. And then
Speaker 0: there's another one that's malicious called Async Print
Speaker 0: l n, which I don't know how you
Speaker 0: got that from Fast Log. Oh, I guess
Speaker 0: it comes up when you type in Fast
Speaker 0: Log as the third result. That's rough. Oh,
Speaker 0: it's I guess it's because fast logs are
Speaker 0: rust async log, high performance asynchronous logging. Okay.
Speaker 0: Well, that makes sense. So as of, today
Speaker 0: at least as of this article being written,
Speaker 0: both the Git of accounts linked to the
Speaker 0: Rust traits are no longer available. Wojcenco told
Speaker 0: the Hacker News that the malicious code does
Speaker 0: not get triggered during compilation or when the
Speaker 0: crates are downloaded. So, yeah, it's so at
Speaker 0: only at run time. It It only kicks
Speaker 0: in when the program executes and hits the
Speaker 0: relevant code paths. Yeah. I mean, there's still
Speaker 0: some people who probably ran that and probably
Speaker 0: ended up leaking their, their keys. So, you
Speaker 0: know, I I wish them the best. That's
Speaker 0: all I can say. That's that's stuff. A
Speaker 0: little bit more on Rust and kinda maybe
Speaker 0: leaning into this dependency on open source, the,
Speaker 0: you know, the cargo, system. Rust has, the
Speaker 0: Rust Foundation signs joint statement on open source
Speaker 0: infrastructure stewardship. So today, the Rust Foundation joined
Speaker 0: other open source infrastructure stewards in publishing a
Speaker 0: joint statement on sustainable stewardship. In this play
Speaker 0: in this post works, we'd like to explain
Speaker 0: why we chose to sign this statement, why
Speaker 0: it matters for Rust, and how we can
Speaker 0: move forward as a community. It's kinda related
Speaker 0: to that previous one. You know, this this
Speaker 0: this document is, to me, reads as Rust's
Speaker 0: pledge to kinda, like, treat open sources, you
Speaker 0: know, something that's as important as, you know,
Speaker 0: the roads and water and electricity. A lot
Speaker 0: of, systems depend on open source software that
Speaker 0: are under licenses that allow them for commercial
Speaker 0: use, and and they're maintained by, you know,
Speaker 0: small teams or individuals, you know. You know,
Speaker 0: it's it's a lot of packages too. It's
Speaker 0: like curl, if anyone's used curl before, SQLite,
Speaker 0: Zlib, LibreOffice is also, open source. So it
Speaker 0: is important to treat those, software as critical
Speaker 0: infrastructure because I I I I use curl
Speaker 0: in a a lot of my projects just,
Speaker 0: you know, doing API calls. So, yeah, that
Speaker 0: you know, I would I would want to
Speaker 0: make sure that the the maintainer of curl
Speaker 0: kept maintaining it, which, I think his name's
Speaker 0: Daniel Steinberg. I think he I follow him
Speaker 0: on Mastodon. He is very active about, Kroll
Speaker 0: and keeping AI out of the the package
Speaker 0: and or the, the library. So it's it's
Speaker 0: pretty cool. He he he's done a lot
Speaker 0: of, hard work maintaining that system. So I'll
Speaker 0: I'll check him out if you guys have,
Speaker 0: time on Mastodon. He's like Daniel Steinberg. I
Speaker 0: have to double check that. Yeah. Because I
Speaker 0: I I would feel horrible if that's his
Speaker 0: name. I'll put it in the show notes.
Speaker 0: But so back to the article. Why we're
Speaker 0: having this conversation. Every piece of Rust software
Speaker 0: from personal projects to large scale pro production
Speaker 0: systems depend on common infrastructure. For Rust, that
Speaker 0: means crates. Io for package distribution, docs. Rs
Speaker 0: for documentation hosting, and broader e e ecosystem
Speaker 0: of registries, CI services, and content delivery networks
Speaker 0: that keep everything running smoothly. So, yeah, crates.
Speaker 0: Io is all open source, I guess. So
Speaker 0: thanks to our incredible community, crates has crates.
Speaker 0: Io has grown exponentially, now serving billions of
Speaker 0: downloads per month and supporting millions of developers
Speaker 0: worldwide. This growth is a testament to Rust's
Speaker 0: vibrant ecosystem and expanding adoption across industries. Excuse
Speaker 0: me. Rust infrastructure, though, relies on bandwidth, compute
Speaker 0: power, storage staff, and volunteer time. The expectations
Speaker 0: around open source software have also evolved substantially,
Speaker 0: with governments and enterprises demanding reliability, security, and
Speaker 0: speed. And this is often a conversation that
Speaker 0: a lot of developers talk about is, well,
Speaker 0: you guys are all using these packages. We
Speaker 0: have these big corporate companies that are using
Speaker 0: these packages, but offer no support to these
Speaker 0: open source, you know, libraries to continue actually
Speaker 0: developing even though their infrastructure critically depends on
Speaker 0: it. So, you know, kind of an interesting
Speaker 0: thought there. The joint statement highlights that these
Speaker 0: expectations come with real and rising costs and
Speaker 0: that most of this is currently born by
Speaker 0: a small group of organizations and individuals. Meanwhile,
Speaker 0: many large scale users, including commercial enterprises that
Speaker 0: generate enormous value from Rust, use crates. Io
Speaker 0: without contributing back to its sustainability. With the
Speaker 0: exponential increase in usage we are experiencing, we
Speaker 0: need to find a more sustainable way to
Speaker 0: run our services that is fair for the
Speaker 0: developers who are contributing to the e Rust
Speaker 0: ecosystem and the enterprise companies that are building
Speaker 0: the tools and systems so many of us
Speaker 0: rely on today. So we've got another session
Speaker 0: called the path forward. The Rust Foundation exists
Speaker 0: to ensure the long term sustainability of the
Speaker 0: Rust programming language and ecosystem. We feel that
Speaker 0: it's right that we take a proactive approach
Speaker 0: to this topic. So, yeah, they they're going
Speaker 0: public saying that they're gonna be working to
Speaker 0: support open source projects, you know? And, yeah,
Speaker 0: they're inviting everyone to benefit from Rust, whether
Speaker 0: as a hobbyist, researcher, or small business, or
Speaker 0: global enterprise to be part of this effort
Speaker 0: as well. You know, over the coming six
Speaker 0: to twelve months, we'll be hosting community forums
Speaker 0: and discussions, consulting with project maintainers and ecosystem
Speaker 0: leaders, working closely with other package registries to
Speaker 0: learn from different approaches, and researching solutions that
Speaker 0: maintain Rust's open and accessible nature. These steps
Speaker 0: will inform our approach to ensure long term
Speaker 0: sustainability. You know, I am you guys will
Speaker 0: learn as you listen to the show, with
Speaker 0: Chris and I doing some of the podcast
Speaker 0: that I am a huge fan of Rust.
Speaker 0: I think it's awesome. I'm hardly at all
Speaker 0: experienced with it. I've played with it a
Speaker 0: little bit as from time to time, but
Speaker 0: it it is fun to work with. The
Speaker 0: bar checker system is cool. It's fresh. So
Speaker 0: if you're a developer and you've never touched
Speaker 0: Rust, it's a fun it's a fun route
Speaker 0: to to to go down and and try
Speaker 0: out if you if you like to try
Speaker 0: some system stuff. You know? And so in
Speaker 0: on the other hand, if you if you're
Speaker 0: in a position where you're at a company,
Speaker 0: where that makes big decisions for, like, IT
Speaker 0: budgets and you rely on open source tools,
Speaker 0: like Libra Office or PostgreSQL, Rust, you you
Speaker 0: should definitely consider setting aside some funding or
Speaker 0: sponsorships for those projects. It's equivalent in importance
Speaker 0: to paying for a bit of insurance. You
Speaker 0: know, your support gives you communication line, helps
Speaker 0: prevent future security breaches and supply chain messes
Speaker 0: like this just this previous one just now,
Speaker 0: the Fast Log, by moving these projects into
Speaker 0: a position where they can consider be bringing
Speaker 0: more team members onto work in these critical
Speaker 0: areas that, like, they require a lot of
Speaker 0: time and attention. You know? It's it's not
Speaker 0: easy to to develop critical infrastructure that is
Speaker 0: reliable and works very fast all the time.
Speaker 0: You know, if you ask these, open source
Speaker 0: maintainers to to put in extra time and
Speaker 0: effort for, you know, no funding, stuff to
Speaker 0: work their day job. You know? Some are
Speaker 0: lucky enough to be able to actually be
Speaker 0: supported by the package, you know, public support,
Speaker 0: but, you know, that's not everyone. So, yeah,
Speaker 0: just just a cool initiative by the Rust
Speaker 0: Foundation. I I really, really, send my kudos
Speaker 0: out to them. Amazing, amazing, statement. And I
Speaker 0: hope to see more of this from the
Speaker 0: community, and from corporations worldwide. You know? Here's
Speaker 0: a fun, little open source tool while we're
Speaker 0: talking about it. If you, are a was
Speaker 0: that DocuSign user? Well, there's a, package called
Speaker 0: DocuSeal on GitHub that allows you to self
Speaker 0: host, your own version of DocuSign. Don't let
Speaker 0: the your contracts and your company files get
Speaker 0: into the, other people's hands. You do not
Speaker 0: wanna save your important documents on someone else's
Speaker 0: server. You've seen time and time again all
Speaker 0: these data breaches. Keep it local. You know,
Speaker 0: it's it's not like you're gonna need a
Speaker 0: whole server to do that. You could just
Speaker 0: probably host it on a little machine. So,
Speaker 0: you know, talk to your IT team about
Speaker 0: switching over to DocuSeal instead of DocuSign. I
Speaker 0: tried out well, I attempted to try out
Speaker 0: a new email client on Linux. If any
Speaker 0: of you are running Linux and are trying
Speaker 0: not to use Thunderbird anymore, there's a cool
Speaker 0: new or I maybe not new, but a
Speaker 0: cool app called MailSpring. It's got a lot
Speaker 0: of sweet features. I got this article from
Speaker 0: I don't wanna butcher his name. Jivakar Gosh.
Speaker 0: So he loves this client, and, I think
Speaker 0: it was pretty cool too. So let me
Speaker 0: share with you, what his experience was, and
Speaker 0: then I'll share it with you my experience,
Speaker 0: just launching the app. But think email clients
Speaker 0: can't find a balance between aesthetic aesthetics and
Speaker 0: functionality? Want a professional looking email client with
Speaker 0: professional features? Well, MailSpring is my go to
Speaker 0: free and open source email client that combines
Speaker 0: sleek design with powerful features. So another open
Speaker 0: source tool here. We love open source. When
Speaker 0: I say Mailspring is my favorite email app
Speaker 0: and not Thunderbird, I'm not claiming Mailspring is
Speaker 0: better than Thunderbird because better would mean Mailspring
Speaker 0: can do everything Thunderbird can and then some
Speaker 0: more. That's not the case. And Thunderbird is
Speaker 0: more feature rich is the is the more
Speaker 0: feature rich alternative. However, Mailspring can do a
Speaker 0: few things that Thunderbird can't. It brings a
Speaker 0: different set of features and priorities to the
Speaker 0: table and I personally just align better with
Speaker 0: what it has to offer, which essentially boils
Speaker 0: down to the five following features. And before
Speaker 0: I talk about the features, I feel like
Speaker 0: I really resonate with this kind of this
Speaker 0: idea. There are some, you know, like, especially
Speaker 0: with, like, note taking apps. You know, we
Speaker 0: have Evernote, Obsidian, Notion. I personally use an
Speaker 0: app called Logsec. There's so many different options,
Speaker 0: and and what it comes down to is
Speaker 0: what it works for you. What what do
Speaker 0: you what do you think looks the nicest
Speaker 0: or what makes it you what what what
Speaker 0: how do you find it easy to navigate?
Speaker 0: I like Logitech. I don't know why I
Speaker 0: like Logitech. I just I just it provides
Speaker 0: a daily journal. I write, kinda keeps track
Speaker 0: of, like, what I've been going on through
Speaker 0: the last few months. Or, and then my
Speaker 0: notes are kinda organized in that time scheme
Speaker 0: as well. But I also kinda like the
Speaker 0: linking feature where you you you can link
Speaker 0: a document, and then within that document, it's,
Speaker 0: like, links to several other documents. It it's
Speaker 0: it's a beautiful thing. And then it it
Speaker 0: all comes with graph views. So, you know,
Speaker 0: you get to see how your all your
Speaker 0: information kinda ties together as well as long
Speaker 0: as you're linking correctly. But back to Mailspring.
Speaker 0: So, modern design with theming support. Mailspring is
Speaker 0: hands down one of the most sleek looking
Speaker 0: FOSS email clients out there for an open
Speaker 0: source. Offering a clean, polished design that looks
Speaker 0: modern. Everything from the padding and the margins
Speaker 0: sorry. I'm just like I don't know why
Speaker 0: I'm blanking on this. Every everything from the
Speaker 0: paddings and the margins to the font styles
Speaker 0: look thoughtfully crafted. It lays out a lot
Speaker 0: of information, but it does that with a
Speaker 0: level of minimalism that I just can't help
Speaker 0: but love. So I I guess he it
Speaker 0: and it does have a very sleek, easy
Speaker 0: to approach look. It the the screen's not
Speaker 0: too cluttered. You know, the mailboxes are nice
Speaker 0: and neat. The font looks pretty sweet, but
Speaker 0: that might just be his personal font. But,
Speaker 0: you know, if you run a custom font
Speaker 0: on your machine, that probably would just automatically
Speaker 0: apply. So he talks a lot about the
Speaker 0: theme customization, link tracking, and pixel tracking is
Speaker 0: a thing apparently. These are the main features
Speaker 0: that set MailSpring apart from other desktop email
Speaker 0: clients. Usually, these functionalities are reserved for professional
Speaker 0: email marketing software. The fact that we're getting
Speaker 0: them in a consumer level tool is just
Speaker 0: brilliant. When writing an email, you can simply
Speaker 0: press a button to enable link tracking or
Speaker 0: pixel tracking or both for that specific email.
Speaker 0: Link tracking does exactly what it sounds like.
Speaker 0: If you include a link in your email
Speaker 0: and a recipient clicks it, you'll get a
Speaker 0: notification. Oh, this is it. That's what that's
Speaker 0: kinda crazy. Meanwhile, pixel tracking is essentially stealthy
Speaker 0: read receipts. You'll get a notification when someone
Speaker 0: opens your email. Wow. You know? And this
Speaker 0: is just built into some of the tools
Speaker 0: we use every day, you know, just made
Speaker 0: by these large companies. And obviously, not for
Speaker 0: us to see. They're the ones tracking, you
Speaker 0: know, how long it takes us to open
Speaker 0: emails, you know, especially Google. I mean, I'm
Speaker 0: sure you've heard my dad talk about de
Speaker 0: googling your life, but, yeah, they they track
Speaker 0: track everything here. You do. I was just
Speaker 0: listening to the show. He was talking about
Speaker 0: the DS ID or something DS ID cache,
Speaker 0: which automatically applies to follow your content, ad.
Speaker 0: It's almost like your your content ad rights
Speaker 0: or something, which I'm just like, just another
Speaker 0: layer of tracking. Right? But sending an email
Speaker 0: for job interviews, knowing when they saw your
Speaker 0: message can give you actionable information about when
Speaker 0: to send a follow-up. Okay. That's a clever
Speaker 0: thing. Same same applies to sending support emails.
Speaker 0: You can gauge whether your message was received
Speaker 0: and act accordingly. So, yeah, I could kinda
Speaker 0: see that. Like, if you're trying to set
Speaker 0: something up, I mean, I don't know. This
Speaker 0: this I I feel like that's still kinda
Speaker 0: niche to kind of a business application or
Speaker 0: something. You didn't wanna pay for, one of
Speaker 0: those business accounts or whatever. That's cool. I
Speaker 0: think that's pretty sweet. Next up, you get
Speaker 0: the email analytics. Wow. Okay. So this is
Speaker 0: definitely like some open source business email type
Speaker 0: of thing. This is awesome. Mailspring provides a
Speaker 0: comprehensive analytics dashboard that gives you insight into
Speaker 0: your email performance. You can not only see
Speaker 0: how many emails you receive, but want deep
Speaker 0: detailed metrics about your sent emails. How many
Speaker 0: you sent, how many of them were open,
Speaker 0: and how many got replies. If you're sending
Speaker 0: a significant volume of emails, the analytics can
Speaker 0: even show you which subject lines and templates
Speaker 0: perform better. Wow. Giving you giving you data
Speaker 0: driven insights into what gets read more often.
Speaker 0: While these features are technically geared towards marketing
Speaker 0: use cases, yes. It's like a little more
Speaker 0: business, they're valuable for non marketers too. Okay?
Speaker 0: So tell me how. If you're job hunting,
Speaker 0: you get data on how many of your
Speaker 0: emails are being opened and replied to, helping
Speaker 0: you understand if the problem is your subject
Speaker 0: lines or the message count content. I don't
Speaker 0: know. Tell us what you think. Other than
Speaker 0: that, snooze emails, set reminders, send later, in
Speaker 0: app email translations. Oh, that's kinda cool. Do
Speaker 0: the I mean, I feel like if you
Speaker 0: just use, you know, your email app in
Speaker 0: the browser, you're gonna get the auto translation
Speaker 0: anyway. So this is if you're using a
Speaker 0: dedicated email app too. So that's that's another
Speaker 0: thing. Obviously, this is a GitHub package. So
Speaker 0: I'm not sure how you go about, installing
Speaker 0: that on something like a Windows, but, on
Speaker 0: Linux, you can get the snap flat pack.
Speaker 0: I'm sure there's a way to just directly,
Speaker 0: compile it from the the GitHub. You know,
Speaker 0: that's probably what you do on Windows. So
Speaker 0: you probably directly compile it from the GitHub.
Speaker 0: Download that, zip. Compile it right there. They
Speaker 0: might even have just a EXE on their
Speaker 0: site. So I would I would check them
Speaker 0: out. Mailspring. Up next. Let's see. I found
Speaker 0: three point one, three point five patch release
Speaker 0: patch release packed with fixes instability boost. I
Speaker 0: hope you guys don't mind a little bit
Speaker 0: more of the, the dev lane leaning articles.
Speaker 0: That's kinda what I get in my feeds.
Speaker 0: And we already talked about some Linux stuff.
Speaker 0: I already I know we talked about some
Speaker 0: Rust stuff. But here we have some Python
Speaker 0: stuff. And if you are working in data,
Speaker 0: these are gonna be some great fixes for
Speaker 0: you. So, several significant enhancements over three point
Speaker 0: one two, apparently. So it it revamped interactive
Speaker 0: shell, experimental support for running without a global
Speaker 0: interpreter lock. So I was reading about this.
Speaker 0: It was something about, being able to use
Speaker 0: threads or something. So I would be more
Speaker 0: interested in reading a a little bit more
Speaker 0: about that, what that means. So that was
Speaker 0: three point one three. So release this is
Speaker 0: the release context. Sorry. I am skipping ahead.
Speaker 0: I'm getting ahead of myself. Let's just start
Speaker 0: that section over. What led to three point
Speaker 0: one three point five release context? Python three
Speaker 0: point one three released on October seventh twenty
Speaker 0: twenty four introduced several oh, excuse me. Several
Speaker 0: significant enhancements over three point one two, including
Speaker 0: revamped interactive shell, experimental experimental support running without
Speaker 0: a global interpreter lock and global interpreter lock
Speaker 0: and preliminary JIT infrastructure. However, three point one
Speaker 0: three point four, the main tainers discovered several
Speaker 0: serious regressions. Plus three point one, three point
Speaker 0: five was accelerated to correct these before the
Speaker 0: impact of a broader use space. Okay. So,
Speaker 0: and it's just a nice little patch. So
Speaker 0: a little repair release is what they're calling
Speaker 0: it. So they fixed a Windows extension build
Speaker 0: failure. Generator expression type error delay. And random
Speaker 0: dot get ran bits, if you're a user
Speaker 0: of that function, is broken for int like
Speaker 0: types. Okay. So these are still these are
Speaker 0: the one what really drove the update. The
Speaker 0: Windows extension build failure, generator expression type error
Speaker 0: delay, and random dot get random bits broken
Speaker 0: for inline types. Sorry. I didn't get to
Speaker 0: read this article too in-depth at a time.
Speaker 0: So broader enhancements and underlying improvements in the
Speaker 0: three point one three line. Because three point
Speaker 0: one five or three point one three five
Speaker 0: is a maintenance release, it doesn't introduce brand
Speaker 0: new features. But it does carry forward and
Speaker 0: solidify many of the enhancements that distinguish Python
Speaker 0: three point one three from three point one
Speaker 0: two. Here are the most noteworthy. So the
Speaker 0: Repl Shell experience, Python now ships with a
Speaker 0: more capable interactive interpreter inspired part by PyPy.
Speaker 0: The experience includes multiline editing rather than line
Speaker 0: by line, colorized prompts, trace backs, doc test,
Speaker 0: output by default, handy built in commands like
Speaker 0: help, quit, exit without needing parenthesis, a pace
Speaker 0: mode, toggle bolts. Oh, man. I I love
Speaker 0: this for you guys, but just set yourself
Speaker 0: up with a a great Neo Vim config.
Speaker 0: You can get all this set up. You
Speaker 0: can have multiline editing. You can have all
Speaker 0: the cool features that make your your little
Speaker 0: VIM VIM setup look like a, you know,
Speaker 0: like a whole ID. Don't get e max.
Speaker 0: Ignore those people. But I don't know. I've
Speaker 0: never had problems setting up a Python environment,
Speaker 0: on on any machine. So I don't know.
Speaker 0: I I definitely hear that a lot, especially,
Speaker 0: from some of my professors. They'll they'll literally
Speaker 0: say it's, oh, oh, Python's tricky to set
Speaker 0: up, in the environment. So, three words, just
Speaker 0: run Linux. Or if you just can't get
Speaker 0: away from Windows, just run WSL. Make your
Speaker 0: life easier. I guess easier in a sense.
Speaker 0: Ubuntu is a great place to start. But
Speaker 0: back to Python. Prototype JIT compiler. Wait. No.
Speaker 0: Experimental free threaded mode. So, yeah, this is
Speaker 0: this global interpreter lock thing I was talking
Speaker 0: about. One of the most ambitious moves in
Speaker 0: three point one three is introducing an optional
Speaker 0: mode to run c Python without the global
Speaker 0: interpreter lock. So, yes, you can so in
Speaker 0: this mode, threads can execute in parallel more
Speaker 0: freely. The mode is currently experimental and not
Speaker 0: enabled by default. So if you guys know
Speaker 0: about threads, really awesome tool. It's cool to
Speaker 0: see that coming to Python a little bit
Speaker 0: more, easily. I'm sure that we'll start seeing
Speaker 0: some libraries being, I don't know. I'm sure
Speaker 0: there are already some libraries being developed for
Speaker 0: that, but that, that is cool. Just another
Speaker 0: another reason to stop writing in c. No.
Speaker 0: I'm just kidding. Prototype JIT compiler. Minimal just
Speaker 0: in time compiler is bundled in three point
Speaker 0: one three. It's disabled by default and considered
Speaker 0: experimental. Its current performance gains are modest. The
Speaker 0: goal is to lay groundwork for more aggressive
Speaker 0: optimization in future releases. And I love that
Speaker 0: they're just thinking ahead, trying to get this
Speaker 0: thing fast. You know, people have complained for
Speaker 0: a long time. Oh, Python's so slow. And
Speaker 0: yeah. Oh, sure. Yes. I've said it before
Speaker 0: too. I admit Python, I you know? Yes.
Speaker 0: It is so much more work to write
Speaker 0: something in in, ski or c plus plus.
Speaker 0: Yes. However, you get the two of the
Speaker 0: same programs next to each other ten years
Speaker 0: ago, written in Python and c, and you
Speaker 0: press play, and you just watch one just
Speaker 0: sit there. Yeah. It's it's so aggravating. You
Speaker 0: know, you know, it's I feel like especially
Speaker 0: early on, you don't really understand why. You
Speaker 0: just all you all you're worried about is
Speaker 0: speed. Speed. So speed. You know, I feel
Speaker 0: like that's just a complaint they've heard so
Speaker 0: much over the years, so it's always been
Speaker 0: about optimization. Of course, I'm pretty sure Python's
Speaker 0: also just built on c or c plus
Speaker 0: plus. So, it's already got a great infrastructure
Speaker 0: to start. Right? But your minimum Mac OS
Speaker 0: version is now, ten point thirteen high Sierra
Speaker 0: or newer to run three point one three.
Speaker 0: So if you're running Mac, they increase that,
Speaker 0: the the OS requirement. Delaney just came by
Speaker 0: and brought some food. She looks really awesome.
Speaker 0: Woo hoo. I'm gonna eat that right after
Speaker 0: this. You guys are holding me back right
Speaker 0: now. I'm just kidding. I love being here.
Speaker 0: It's kinda fun to read these with you
Speaker 0: guys. Alright. Cloudflare AI team just open source
Speaker 0: Vibe SDK that lets anyone build and deploy
Speaker 0: a full AI Vibe coding platform with a
Speaker 0: single click. Gotta move this back. I keep
Speaker 0: hearing the the whistles. CloudFlare AI team just
Speaker 0: open source Vibe SDK, a full stack Vibe
Speaker 0: coding platform that you can deploy end to
Speaker 0: end with a single click on CloudFlare's network
Speaker 0: or GitHub repo for. It packages code generation,
Speaker 0: safe execution, live preview, and multi tenant deployment
Speaker 0: so teams can run their own internal or
Speaker 0: customer facing AI app builder without stitching together
Speaker 0: infrastructure. So if you guys aren't familiar with
Speaker 0: live coding yeah. Prompts only. Prompts only to
Speaker 0: build you, a software. And, you know, a
Speaker 0: lot of money has been going into this.
Speaker 0: It's one of the big reasons where people
Speaker 0: have been screaming AI bubble. So I know
Speaker 0: there's a lot of businesses right now that
Speaker 0: are that are building AI driven, IDEs for
Speaker 0: for developers and, you know, the the code's
Speaker 0: there too. So it's it's half and half.
Speaker 0: But I I was reading the other day,
Speaker 0: they're finding now that is that the senior
Speaker 0: developers are the ones that benefit from the
Speaker 0: the most from using something like a AI
Speaker 0: tool. Because they they are the most familiar
Speaker 0: with how to operate a system. They're most
Speaker 0: familiar with, you know, the the requirements of
Speaker 0: of, of a project, so to speak, you
Speaker 0: know. And, their scope provides them it's like
Speaker 0: it's like giving, giving them wings, you know.
Speaker 0: They're able to really utilize that a little
Speaker 0: bit easier. Yeah. Because if I mean, if
Speaker 0: you've seen any sort of chatty p t
Speaker 0: generated code, is not optimized. It's not you
Speaker 0: know, if you're copying and pasting that and
Speaker 0: trying to get a really big project going,
Speaker 0: you know, at some point, you you just
Speaker 0: can't it doesn't understand what it's working, what
Speaker 0: it's working on. You know what I mean?
Speaker 0: So it it is kinda crazy to kinda
Speaker 0: see this kinda being built up so fast.
Speaker 0: Vibe SDK is a production oriented reference implementation,
Speaker 0: not a toy UI. The repo MIT license
Speaker 0: ships a React invite front end worker back
Speaker 0: workers back end with durable objects for agent
Speaker 0: coordination. So d one SQLite via drizzle, r
Speaker 0: two for template storage, k v for sessions,
Speaker 0: and deploy to Cloudflare flow. It integrates Cloudflare
Speaker 0: sandboxes slash containers for isolated builds and previews
Speaker 0: and uses workers for platforms to publish each
Speaker 0: generated app as an isolated worker with its
Speaker 0: own URL. You know, really only got that
Speaker 0: last sentence. Integrates Cloud for a sandbox and
Speaker 0: containers for isolated builds, previews, and uses workers
Speaker 0: for platforms to publish each generated app as
Speaker 0: an isolated worker with its own URL. How
Speaker 0: code moves through the system? A user describes
Speaker 0: the app. The agent generates files and writes
Speaker 0: them into a per user sandbox. The sandbox
Speaker 0: installs depths and starts a dev server. The
Speaker 0: SDK exposes a public preview URL. Logs and
Speaker 0: errors string back to the agent for iterative
Speaker 0: fixes. A deployment sandbox runs Wrangler deploy to
Speaker 0: publish the app to a workers for platforms
Speaker 0: dispatch namespace, giving each app its own tenant
Speaker 0: isolated worker. Okay. So, under this whole thing,
Speaker 0: got Google's Gemini two point five plant family
Speaker 0: for planning, cogent, and debugging, but all LLM
Speaker 0: calls go through CloudFlare AI gateway that enables
Speaker 0: unified routing across providers. OpenAI, Anthropic, Google, response,
Speaker 0: Caching for common requests for provider tokens, latency,
Speaker 0: observe observability, and cost tracking. Swapping or mixing
Speaker 0: models is a conflict choice, not an architectural
Speaker 0: rewrite. Okay. So you don't have to use
Speaker 0: Gemini two point five. That's kinda cool. And
Speaker 0: then they have a live demo and a
Speaker 0: one click of deploy button. Once running, users
Speaker 0: can export generated projects to their own CloudFlare
Speaker 0: account or GitHub repo for continued development. Useful
Speaker 0: if you wanna move work off the hosted
Speaker 0: instance or bring your own CI. So, yeah,
Speaker 0: they're starting to really get into, you know
Speaker 0: it's beyond just that copy paste code generation
Speaker 0: now where it has feedback loops, safe code
Speaker 0: execution, and cheap global deployment by using probably
Speaker 0: something like Docker containers, you know, or it's
Speaker 0: just they're just VM contained builds. Yeah. Wow.
Speaker 0: Jeez. I don't really know how I feel
Speaker 0: about all the vibe coding. I've played with
Speaker 0: cloud code, quite a bit. Yeah. Maybe just,
Speaker 0: like, in this past week, really quite a
Speaker 0: bit. But even that's just, like, I I
Speaker 0: I I feel like the control leaves my
Speaker 0: hands to a degree. You know? I I
Speaker 0: don't know what's going on. I don't know
Speaker 0: if I can fix it. Like, it kinda
Speaker 0: becomes Claude's the engineer now, which I I
Speaker 0: really don't know if I like. I don't
Speaker 0: I don't think I do. You know? Especially,
Speaker 0: you lose out on being able to work
Speaker 0: through the problem, figuring it out, and getting
Speaker 0: that, like, satisfying moment of, like, this this
Speaker 0: is the solution right here. You know? So
Speaker 0: I don't know. It's gonna be an interesting
Speaker 0: change. I'm sure that there's gonna be programs
Speaker 0: for this, to learn how to vibe code
Speaker 0: and to be an efficient vibe coder. But
Speaker 0: who knows how fast those, tools are gonna
Speaker 0: really gonna become available. I mean, even in
Speaker 0: the last year or two, we've seen crazy
Speaker 0: changes with the, LLM scene. So be interesting
Speaker 0: to see how that goes. Alright. I think
Speaker 0: that's it for tonight. Thanks so much for
Speaker 0: coming through. I woulda had a couple more
Speaker 0: articles, but this food is tempting me, and
Speaker 0: I just can't just can't justify not eating
Speaker 0: it. Thank you so much for listening. If
Speaker 0: you listen all the way through, if you
Speaker 0: wanna support the show and or the channel,
Speaker 0: subscribe at geek news central dot com slash
Speaker 0: insider. Got it in the, nav bar now.
Speaker 0: So you could just click it if you
Speaker 0: go to the home page too. But support,
Speaker 0: we really appreciate it. Helps keep the site
Speaker 0: online. Otherwise, till next time. Have a great