What Edu is reading this week (Jul 12 - 18, 2026)

A week of new open frontier models and AI CLI wire-level analysis, a 15-year-old Linux kernel privilege escalation, ZFS and FreeBSD tooling, plus plenty of hardware, SDR and retro-computing rabbit holes.

AI, Models & Agents

• Kimi K3 Tech Blog: Open Frontier Intelligence: Moonshot’s tech blog for its Kimi K3 model, pitched as open frontier intelligence.
• Announcing Bonsai 27B: The First 27B-Class Model to Run on a Phone: PrismML’s Bonsai 27B, presented as the first 27B-class model that runs on a phone.
• What xAI Grok Build CLI actually sends to xAI — a wire-level analysis: A wire-level look at exactly what the xAI Grok Build CLI (grok 0.2.93) transmits back to xAI.
• Claude Code Sends 4.7x More Tokens Than OpenCode Before Reading Your Prompt / Discussion: Measuring what Claude Code and OpenCode spend before reading your prompt, then adding instruction files, MCP servers and subagents to the bill.
• Musheer360/SwiftSlate: An Android accessibility service for AI-powered text transformation.
• Clawptcha — Reverse CAPTCHA for Bots & AI Agents: A reverse CAPTCHA that proves you’re a bot, not a human — for AI agents and automated systems.

Cloud, Kubernetes & Infrastructure

• containers/kubernetes-mcp-server: A Model Context Protocol (MCP) server for Kubernetes and OpenShift.
• SELinux Volume Label Changes goes GA (and likely implications in v1.37): If you run Kubernetes on Linux with SELinux enforcing, plan ahead — the SELinuxMount gate is expected on by default around v1.37, which speeds up volume setup but can break apps relying on recursive relabeling.
• gpubox / ericcurtin/gpubox: An auto-detecting, GPU-aware container launcher.
• Dependabot version updates introduce default package cooldown: Dependabot now waits until a new release has been on its registry for at least three days before opening a version update PR.

Linux & Systems

• FreeBSD 16 Retires The Last Of Its GPL Code From Its Base System: As of this past week in the FreeBSD 16 source tree, the last of the GNU GPL-licensed code has been retired from the base system.
• topgrade-rs/topgrade: One command to upgrade all the things across your system’s package managers and tools.
• Re: Linking Patchwork with Sashiko: Linus Torvalds puts his foot down on the linux-media list — “Linux is not one of those anti-AI projects.” Over a proposal to wire Patchwork’s patch tracking to Sashiko (an AI bug-finding tool for kernel patches), he says no one is forced to use AI, but he’ll loudly ignore anyone trying to stop others from adopting it.
• Block Cloning in ZFS: A technical reference for ZFS block cloning — the Block Reference Table, trigger paths, requirements, tunables, stability history and zfs send/receive interaction.
• ArthorH/Ubuntu-ZFS-Install-existing-pool: An Ubuntu zfsbootmenu install onto an existing ZFS pool, without formatting or editing existing partitions.
• lobste.rs is now running on SQLite: The community link aggregator has migrated its database to SQLite.
• 8 Linux Handheld Computers You Can Splurge On: A roundup of Linux handhelds that are ready to use out of the box, no spare Raspberry Pi or tinkering required.

Security

• IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years: GhostLock (CVE-2026-43499) is a Linux kernel bug present in every major distribution since 2011, turned into a 97%-stable privilege escalation and container escape — earning $92,337 in kernelCTF.

Development, Web & Tools

• Visual Studio Code 1.129: What’s new in VS Code 1.129, including an experimental Modern UI preview.
• cachix/secretspec: Declarative secrets for every environment and any provider.
• Microsoft Comic Chat is now open source: The IRC client that turned conversations into comics — and helped introduce Comic Sans to the world — has been open sourced.
• Never Argue With Your Boss (2009) / Discussion: A career-advice classic on “managing your manager”, from a talk by Bill Howell.

SDR, Hardware & Electronics

• Teardown: A Generic 7-Port USB 3.0 Hub That Wasn’t: An AliExpress bargain USB 3.0 hub gets taken apart — and turns out to be not quite what the listing promised.
• The Scariest Chart In Electrical Engineering: Veritasium on why the Smith Chart has such a fearsome reputation among electrical engineers.
• darrylmorley/whatcable / The Verge: A free macOS menu bar app (M1 or later) that tells you, in plain English, what each USB-C cable plugged into your Mac can actually do.
• vjsoriano83/onu-sfp-alcatel-lucent-setup: Setup notes for an Alcatel-Lucent ONU SFP module.
• Quansheng UV-K5 Wiki / Multi-UVTools: Firmware wiki and multi-tool flashing instructions for the popular Quansheng UV-K5 handheld radio.

Networking

• Mysteries of Telegram DC: A dig into Telegram’s five data centers — where they are, how accounts get assigned, and the quirks around them.
• Telegram’s t.me domain has been suspended: Hacker News discussion on the suspension of Telegram’s t.me domain.
• I co-founded pfSense. For the last year I’ve been building its successor.: A pfSense co-founder on the reasons to look beyond pfSense today — and the successor he’s been building.

Gaming, Fun & Misc

• dibdot/uWolf / OpenWrt Forum: A dependency-free JavaScript raycaster that reads the original Wolfenstein 3D data formats and renders them in the browser — served as static files by OpenWrt’s uhttpd, so your router can now run Wolfenstein 3D.
• Bless The BC250, The Budget E-waste Steam Machine: Building a miracle budget gaming computer out of cheap BC250 mining-rig garbage.
• Jurassic Park computers in excruciating detail: Fabien Sanglard dissects the real computers and software that appear in Jurassic Park.
• First atmosphere found around Earth-like planet LHS 1140b: Researchers report an Earth-like rocky planet with an atmosphere orbiting within its star’s habitable zone.
• Aymeric Laporte, first player to beat his country of birth in a World Cup semi-final: He captained France at youth levels but switched to Spain after receiving citizenship in 2021 — and just beat France in a World Cup semi-final.