What Edu is reading this week (Jul 19 - 25, 2026)

A week of open-weight model routing and local AI tooling, OCI-backed package managers and registries, a Linux kernel CVE deluge, self-hosting mail and media, plus a good run of retro-computing and hardware rabbit holes.

AI, Models & Agents

• Kimi K3 is competitive with Fable; Kimi K3 + Fable is SoTA: Fireworks benchmarks routing between the open-source Kimi K3 and the closed Fable across 1,000+ agentic tasks, arguing a router that plays to each model’s strengths beats either alone.
• Echo by Tracer / Show HN: Echo pitches Fable-level results at a third of the cost using open-weight models, with the Show HN thread for discussion.
• Introducing Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber: Google introduces three new Gemini models, including a Flash Cyber variant.
• Claude Cookbook: Practical guides and code examples for building with Claude — prompting techniques, tool use and multimodal capabilities.
• ComposioHQ/composio: 1000+ toolkits, tool search, context management, authentication and a sandboxed workbench for building AI agents that turn intent into action.
• Nativ — Run AI locally on your Mac: Run frontier models locally on your Mac — no accounts, subscriptions or cloud.
• Libvirt Powered Claude Sandbox: A gist for running Claude inside a libvirt-backed VM sandbox.
• I Fine-Tuned a 7B Model to Be a Cloud Security Expert On My Local Machine, For $0: Fine-tuning a 7B model into a cloud-security assistant locally in 43 minutes on a consumer GPU, with 3,298 training pairs and no API cost.
• podcast-shorts-factory / Write-up: Ten cooperating AI agents that turn long podcasts into short-form videos automatically, open source and running on free AI providers.
• Stop Using OpenCode: A shower-thoughts blog post making the case against OpenCode.
• “You can use the Opus to jailbreak the Opus”: An X thread claiming an agent wrote a universal jailbreak from scratch and used computer use to validate it against Opus.

Cloud, Kubernetes & Infrastructure

• ttl.sh — Anonymous & Ephemeral OCI Registry: A free, anonymous, ephemeral OCI registry — push images with no sign-up and they expire automatically.
• Introducing pkgoci: A fast, native package manager where every package is an OCI artifact, backed by OCI registries (Docker Hub by default), for macOS, Linux and Windows.
• Sylve — Management Plane for FreeBSD: A modern web interface for FreeBSD — unified management of Bhyve VMs, jails, ZFS storage, networking and system monitoring.

Linux & Systems

• FreeBSD ports frozen after someone commits the entire 150MB Linux Copilot binary: The FreeBSD ports tree froze after someone committed the whole 150MB Linux Copilot binary.
• A moment of silence, please, for the final release of Debian on x86-32: The Register marks the final Debian release supporting 32-bit x86, alongside the 13.6 and 12.15 point releases.
• 432 Linux kernel CVEs published in the last 24 hours / Archive: 432 Linux kernel CVEs published in a single 24-hour window, with the linux-cve-announce archive to browse them.
• roadkell/ascii-logos / Boot screen: ThinkPad ASCII logos for your terminal, plus a matching Plymouth boot screen styled after Omarchy.

Security

• Nextcloud leaks 367K records, exposing staff and clients: A misconfigured database exposed 367K records — employee data, client contracts and infrastructure scripts — raising phishing risk.
• PortProtonQt: Custom Polkit Rule Allows Escalation (CVE-2026-59678): A custom Polkit rule shipped by PortProtonQt lets any local user modify NetworkManager connections or UDisks2 mounts.
• OpenAI and Hugging Face partner to address security incident during model evaluation: OpenAI and Hugging Face share early findings from a security incident during AI model evaluation, and lessons for defenders.

Self-Hosting & Homelab

• You should selfhost your mail: Christian Haschek on why — and how — to self-host your email.
• Nomad: The World’s Smallest Media Server: An open-source media server with movies, books, music, maps, games and offline Wikipedia.
• The death and rebirth of my home server: A blogger rebuilds their home server from the ground up.
• Free Ink · An open ecosystem for e-readers: Open-source software, firmware and hardware for e-paper readers — every layer shipped in the open.

Development, Web & Tools

• I Regret Migrating to Codeberg: A short argument on why a free-software host deciding which projects are welcome worries the author more than the bans themselves.
• Jelly UI — Soft Web Components: A dependency-free Web Components library for tactile interfaces — soft-body physics, real form controls, dark mode, RTL and WCAG AA accessibility.
• GitHub suddenly rejected my SSH key (the fix was a .pub file?!): git pull stopped working with permission denied out of nowhere — and the fix turned out to involve the .pub file.
• is-a.dev Documentation: Docs for is-a.dev — guides, the JSON file structure and how to claim a free developer subdomain.
• Two Stop Bits: Downtime…: The retro-computing community explains the downtime the site suffered, apparently the result of a DDoS.

Hardware, Retro & Fun

• DOSCON: A Handheld MS-DOS Machine Running on Two AAA Batteries: A handheld MS-DOS machine built around an 8088 that runs on two AAA batteries.
• The Beam Engine — An Interactive Guide: Interactive 3D figures explaining how a beam engine works — steam, pressure, Watt’s condenser, valves, linkages and the governor.
• PCjs Machines: Browser-based emulators for DOS, Windows, OS/2 and other vintage machines, plus an archive of historical software and documentation.
• coelhomarcus/usagi-pkgj: PKG download and installation directly on the PS Vita.
• I wrote an API client for my water-cooled bed: Yes, really — a small API client (bedctl) for controlling a water-cooled bed.
• It’s getting harder to focus every day: A personal essay on how hard it has become to hold attention, and forcing focus to get anything done.