Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Why Your Telemetry Code Fails During Live Production Incidents

Most telemetry code gets written when you're calm, happy, and have zero idea how your system is actually going to fail. The result is predictable.

• Telemetry code often fails to capture internal queue state during production incidents.
• Effective telemetry requires emitting state vectors for observability systems.
• Structured metadata logging enables querying patterns based on actual data.

2h ago ·dev.to

Kotlin Multiplatform: the migration I wish I'd planned

We started moving a shared business layer to Kotlin Multiplatform, and it's going well — but I'd do a few things differently.

2h ago ·dev.to

Recon notes: what I look at before touching a target

Whenever I get a new scope (in a lab or a bug bounty program), I spend the first hour on the boring stuff: robots.txt , sitemap.xml , well-known endpoints Response headers — the CSP usually tells you…

2h ago ·dev.to

dbt tests that actually catch bad data

Most dbt test suites I've inherited check not_null and unique and not much else. Those catch schema problems, not business problems.

2h ago ·dev.to

Reranking Models: The Cheapest RAG Quality Upgrade

Last year I took over a support chatbot for a client with about 40,000 help center and internal wiki chunks in a vector database. Retrieval was pure dense vector search.

• Reranking improves RAG accuracy from 61% to 84% for $40/month
• Bi-encoders excel at recall, not precision, causing wrong chunk ranking
• Hybrid retrieval with BM25 and dense vectors handles exact string matches better

2h ago ·dev.to