InfoQ Homepage Development Content on InfoQ
-
Cloudflare K2 Builds Event Streams on R2 Object Storage, at a Second of Produce Latency
Cloudflare has launched K2 in public beta, a serverless event streaming service implementing a durable log on R2 object storage. Cloudflare states produce latency of about one second at p99; a tester reported end-to-end p99 of 7.5 seconds, which a commenter answering for the team said was higher than expected. Consume charges match produce charges per GB.
-
Technological Sovereignty Requires Choice, Skills, and Support, Panelists Say During OSS EU
European organisations can enhance their technological sovereignty by developing credible alternatives and acquiring necessary skills, rather than completely avoiding global providers. A panel discussion at the OSS EU highlighted the importance of understanding dependencies in cloud and hardware, and emphasized the need for practical choices in software for effective operational sovereignty.
-
Survey Finds AI-Generated Code Increases Debugging and Failure Rates and Creates a Comprehension Gap
A survey conducted by independent research firm Coleman Parkes on behalf of Undo, a company focused on scaling AI-powered root-cause analysis, found that while AI coding agents have accelerated code generation, they have shifted the primary bottleneck to debugging, code comprehension, and maintenance.
-
The Async Multiprocessing Has Sound Foundations in Linux, But Further Testing is Needed
At Embedded Linux Conference Europe 2026, Wolfram Sang discussed the Linux building blocks for asymmetric multiprocessing (AMP). He highlighted the solid foundation but noted challenges like limited contributor coverage and fragmented testing. Sang's work on a hardware-spinlock driver revealed maintenance complexities and the need for more reviewers and testers to support evolving AMP systems.
-
Grab Redesigns Counter Service Storage for 50% Lower P99 Latency
Grab migrated its high-volume Counter Service from a wide column database to Aerospike using storage abstraction, shadow traffic, data parity validation, and gradual traffic migration. The redesigned data model consolidated time buckets into map-based records. Grab reports about 50% lower production p99 read latency, 1 TB versus 3 TB of disk usage, and 45% to 50% lower cost per node.
-
Spanner Omni Reaches GA, Replacing Google's Atomic Clocks and File System with Software
Google has made Spanner Omni generally available, running its distributed SQL database on-premises, across clouds or on a laptop. Doing so meant replacing Colossus with a Colossus-like abstraction layer and TrueTime with software-based time synchronization. There is no availability SLA, and practitioners are pricing the move in tail latency and operational toil.
-
QCon London 2027 Announces 15 Tracks on Production AI, Architecture, and Engineering at Scale
A preview of the 15-track QCon London 2027 program, covering agent evaluation and guardrails, AI-era architecture, distributed-system debugging, modern data platforms, high-performance engineering, and Staff+ leadership.
-
Flagged by the Machine: How Google Ads Suspended an Open-Source macOS Term as Malicious
Przemyslaw Alexander Kaminski created RACE, a Rust terminal multiplexer on an infinite canvas that detaches child shells into background processes. When he launched an ad campaign, automated scanners suspended his account for malware despite clean notarization and Safe Browsing checks. The flag illustrates operational deadlocks when ad heuristics evaluate POSIX process architectures.
-
Cloudflare Introduces CLI for AI Agents, Sunsetting Wrangler
Cloudflare recently launched the open beta of cf, a new open-source, agent-focused command-line interface for interacting with Cloudflare services through a unified CLI. Written in TypeScript, it provides structured output and command discovery to make Cloudflare’s APIs easier for both developers and AI agents.
-
Java News Roundup: JobRunr 9, OpenXava 8, Quarkus, LangChain4j, JNoSQL, Introducing Lathe
This week's Java roundup for September 28th, 2026, features news highlighting: the GA releases of JobRunr 9.0 and OpenXava 8.0; point releases for Quarkus, Micronaut, LangChain4j, Eclipse JNoSQL; ADK for Java and ADK for Kotlin; and introducing Lathe, a new Java language server.
-
Akka Tests Spec-Driven AI Delivery across 65 Open Source Projects
Akka used 65 open-source projects to examine how specification structure, context, model selection, automated validation, and delivery guardrails affect AI assisted software porting. The experiment measured time, token use, code size, test parity, and performance, finding substantial variation across models, effort levels, and project types.
-
Aspire 13.6 Adds Persistent Dashboard Telemetry and First-Party Java and Rust Hosting
Microsoft has released Aspire 13.6. The dashboard now stores telemetry in SQLite and keeps up to ten completed runs per application. The release adds prerelease hosting packages for Java and Rust, portable volume paths, and new CLI options. Breaking changes include automatic TLS for local MongoDB resources and a new default Cosmos DB emulator image.
-
Cloudflare Fixes Cross-Tenant Data Exposure in Containers
Cloudflare has disclosed a cross-tenant data exposure vulnerability in Containers and Sandboxes, caused by thin-provisioned storage pools configured to skip zeroing reused blocks. Researchers recovered directory structures, database pages and complete SQLite databases across four continents. Cloudflare remediated it and found no evidence of exploitation.
-
Cloudflare Plans Public Certificate Authority to Issue Quantum-Safe TLS Certificates
Cloudflare will operate a free public Certificate Authority to issue quantum-safe Transport Layer Security certificates. This initiative addresses challenges in migrating from classical public key cryptography to post-quantum methods. It utilizes Merkle Tree Certificates to reduce data payloads and maintain system efficiency, while also enhancing certificate transparency and revocation processes.
-
Google's Android Security State Libraries Enable Component-Level Security Verification
Google's AndroidX Security State libraries enables apps to verify security patch status at the individual component level, rather than relying on a single, device-wide security patch date.