Engineering Insights

ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)

Unicode Fonts and Tools for X11

Comments

Meta enables ADB on deprecated Portal devices [video]

https://developers.meta.com/horizon/blog/build-apps-for-port... Comments URL: https://news.ycombinator.com/item?id=48406640 Points: 298 # Comments: 121

Open Code Review – An AI-powered code review CLI tool

Article URL: https://github.com/alibaba/open-code-review Comments URL: https://news.ycombinator.com/item?id=48406358 Points: 256 # Comments: 67

Drives for Vercel Sandbox in Private Beta

now supports drives in private beta. Drives are persistent, attachable storage with a lifecycle independent from any sandbox.Vercel Sandbox Create a drive once, then mount it at a configurable path when starting a sandbox. When the sandbox stops, the drive remains available to attach to a later sandbox. Install the beta () or beta (), then create and mount a drive:SDKCLI@vercel/sandbox@betasandbox@beta Sandbox Drives are useful for: During the private beta, a drive can be mounted read-write by

AI Gateway - Control AI costs with spend limits

AI Gateway now supports spend limits — cost-based budgets that track cumulative dollar spend and block requests when the budget is exceeded. Unlike rate limiting, which caps the number of requests, spend limits track actual cost based on token usage and model pricing. You can scope limits by model, provider, or custom metadata dimensions. For example, give each user a $200/day budget, cap total gateway spend at $10,000/day, or limit a specific model to $50/day per user. Each rule uses a configur

Radar - Finer-grained chart granularity on Cloudflare Radar for longer time ranges

Radar now provides finer-grained traffic charts for longer time ranges. Previously, selecting a 1-3 month view on HTTP and NetFlows charts defaulted to weekly aggregation, which was too coarse to surface meaningful trends. Views longer than 3 months defaulted to monthly aggregation, returning as few as 7 data points for a 6-month range. The new defaults are: 1-3 months: daily granularity (7x more data points) Longer than 3 months (HTTP and NetFlows): weekly granularity (4x more data points) For

Gateway, Cloudflare Mesh, Workers VPC - Filter Workers' public Internet traffic using Gateway policies

Workers using a VPC Network binding with network_id: "cf1:network" now egress to public Internet destinations through Cloudflare Gateway. This means your existing Zero Trust traffic policies — DNS, HTTP, Network, and egress — extend to traffic that originates from your Workers, the same way they do for WARP users today. Worker Calls env.EGRESS.fetch() VPC binding ↓ Cloudflare Mesh Bind via cf1:network ↓ Cloudflare Gateway Policies applied: DNS HTTP Ne