Connect with us
DAPA Banner
DAPA Coin
DAPA
COIN PAYMENT ASSET
PRIVACY · BLOCKDAG · HOMOMORPHIC ENCRYPTION · RUST
ElGamal Encrypted MINE DAPA
🚫 GENESIS SOLD OUT
DAPAPAY COMING

Tech

Most companies think they’re building a software factory. They’re actually just shipping bugs faster.

Published

on

Industrialized factories changed how the world produced physical goods: more output, lower costs, faster than anything that came before. Now a similar shift is happening with software. 

LLMs have lowered the barrier to writing code, increased individual output, and pushed organizations to think about software development as a production system. The standard software development lifecycle and CI/CD practices that have held for decades won’t hold up under that pressure. That’s where the software factory comes in — and like physical factories, it needs more than speed to actually work.

The idea of a “software factory” started to solidify over the past year. Luca Rossi’s “The Era of the Software Factory” made the case plainly: AI is not just changing how fast people write code — it’s changing the whole production system around software. 

The concept can mean different things: a collection of coding agents and skills files; faster CI/CD; better review systems; or more automation around software delivery. A better frame is to think of it less as a tool category and more as a set of principles. A software factory can’t just be a loose collection of prompts, agents, and plugins. It needs a platform that defines how work moves through the system and how code is generated, reviewed, tested, traced, deployed, and improved when something goes wrong.

Advertisement

Otherwise all you’re doing is putting yet another one-off machine into an empty room and calling it a factory. 

Why is this happening now?

There are a few forces all hitting at the same time.

Companies have always wanted more software than engineers can produce. That’s why tools like Excel exist: They often fill in the gap for a lot of the software that many companies wish they could make.

AI has also lowered the barrier of entry to creating code, and this is the part everyone focuses on. Code creation is now easier, though not always cheaper or better, as evidenced by many high-profile companies fretting over their high AI bills. The barrier to writing functional code has effectively collapsed.

Advertisement

More importantly, a single engineer can generate more code than they could just a few years ago. That changes the bottleneck: it’s no longer “How fast can someone write this?” or even, in some cases, “Can someone understand how to code?” Instead it becomes, “Should this be written?” 

More importantly, can we actually create end products that are durable and reliable and don’t just build tech debt? Or are we just putting out more AI slop faster than ever? That’s where the danger lies. 

The dangers of the modern software factory

All of this sounds great. Factories, after all, made production faster and more consistent. 

They made it possible to build more cars and products, less expensively, which led to more people being able to afford cars and products. Putting environmental impacts aside, you could argue this was positive.

Advertisement

But like many things in engineering, there are always tradeoffs, and in this case, there are new risks.

When you increase the output of one person with machinery, digital or otherwise, you also increase the mistakes that can be made either by the individual or the machinery. The speed at which code can now be put out is on an industrial scale. Even smaller organizations can suddenly have code bases ballooning up to the size of tech company code bases a decade ago. 

The data is already showing problems. Faros AI found that while task throughput per developer is up 33.7% and PR merge rate is up 16.2%, the incidents-to-PR ratio has risen 242.7% and bugs per developer are up 54%. Google’s DORA research found that more AI adoption was actually associated with worse delivery stability

As a fractional head of data, I’ve been brought in to fix these exact issues. In the past year alone, I’ve worked on two projects where AI-generated data infrastructure slowly started to morph over time.

Advertisement

Between multiple engineers trying to move quickly and a lack of standards, these projects became unruly. Code bases tend to go through some level of evolution, but as different styles blend, the LLMs in turn start to create their own mutations. Codebases developed five to six different styles within months — a process that previously took years. Layer by layer, the engineers would slowly stop understanding exactly what was going on.

The pattern echoes what happened a decade ago with self-service tooling: early productivity gains that masked downstream complexity.

And that’s why the software factory can’t just be about speed. 

What makes a software factory work

There are several key principles to consider when building a software factory.

Advertisement

Platform over tools: Many teams are slowly implementing AI into their coding workflows at the edges — adding a PR review agent or a skills file into their repos. But building an actual software factory requires a platform, not a collection of tools at the edges. A platform provides a unified foundation where tools aren’t scattered in separate corners. Instead, they actively share data, talk to each other, and work as a single cohesive system — standards, processes, and the work itself all connected. 

Rerunability and traceability: A real platform requires the ability to go back into any run, identify what went wrong, and rerun it — which is why one-off agents don’t make a factory. The system needs to support taking a serial ID, looking it up, and tracing exactly how it got to the output it produced. This is why state machines make more sense than loops for AI workflows: they make it far easier to rerun a process and understand what happened at each step.

Safety and guardrails: Factories are not safe places. Neither is a software factory. As more people develop on these platforms, better guardrails and safety measures need to be built in. Testing and quality control need to be pushed to the front of the process — catching bugs at the lowest possible stage reduces the cost to fix them and limits the blast radius.

Standardization: At the enterprise level, every codebase has its own flavor. Layering a code assistant on top without standards produces an amalgamation of styles. Standardization has to be built into the process from the start.

Advertisement

Quality control: In older manufacturing models, quality control happened at the end of the line. The product was built, inspected, defects found, and fixed later. Toyota’s approach was different. Quality was pushed into the process itself — workers were expected to stop the line when something was wrong. The goal wasn’t to catch defects at the end; it was to prevent them from flowing downstream in the first place. 

The same is true for the software factory. QC needs to be baked into the entire process, starting with how the spec is written. That means integrating static code analysis that catches obvious errors and providing templates to LLMs so they know the structure the code should follow. Without that, the bottleneck becomes the final review — or teams just push out more AI slop.

Speed without quality isn’t productivity

Improving the speed of your code output is not actual productivity if the downstream issues aren’t managed. A company is not more productive because it produces millions of cars, only to see them all fall apart within 100 miles. It’s also not more productive if all it does is produce an endless stream of proofs-of-concept that never enter production. 

Actual productivity is when the software factory takes ephemeral tokens and turns them into durable outputs. It’s easy to talk about lines of code and how much faster your team is moving.

Advertisement

The software factory that wins isn’t the one that generates the most code. It’s the one that generates the fewest defects downstream.

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Tech

Samsung Will Start Charging For SmartThings API Access

Published

on

This will impact Home Assistant users and those who rely on similar third-party tools.

Samsung just announced it’s going to start charging for SmartThings API access, which is the company’s smart home automation platform. Most of these changes impact software developers and other commercial partners, but there is a way this could hit regular users in their wallets. 

Starting in October, there’s going to be a $5 monthly plan for “non-commercial individual developers.” This won’t impact people using the traditional SmartThings app to control any of the thousands of gadgets that automatically work with the platform. It does, however, apply to those who use third-party tools like Home Assistant to control their Samsung-connected devices.

Advertisement

It’ll also likely impact those with custom smart home controls, adding yet another monthly subscription fee to the pile. This seems like a real kick in the pants to the smart home open-source community.

“We’re all for choice, but feel very disappointed that users will have to decide whether to shell out for access in the shadow of yet another cloud paywall,” Home Assistant founder Paulus Schoutsen wrote in a blog post.

What are users getting as part of all this? We aren’t exactly sure. Samsung says the added funds will allow it to “invest heavily in the enterprise-grade features our partners and users have been asking for.” The company hasn’t released any concrete details, other than saying that it’s working on new integrations and expanded capabilities of some kind. There is a new Developer Center hub coming down the pike, which will provide “current usage and data points to optimize” code.

Again, this starts in October. Access to the SmartThings API remains free for the time being.

Advertisement

Source link

Advertisement
Continue Reading

Tech

IBM unveils tech capable of producing chips smaller than one nanometre

Published

on

The announcement comes amid a race between organisations to build semiconductors that can handle increasingly demanding AI workloads.

Multinational technology giant IBM has announced the creation of what it claims is the world’s first ​technology capable of producing chips smaller than one nanometre.  

According to IBM, the chip has a transistor architecture of 0.7 nanometres and can hold nearly 100bn transistors on a “fingernail”-sized surface, achieving roughly double the density of its 2-nanometre chip unveiled in ​2021. 

In order to create the chip, IBM reportedly developed a new transistor design called a nanostack, which lays transistors on top of each other in three dimensions, rather than the standard method of laying them flat, effectively fitting more into the same amount of available space.  

Advertisement

Commenting on the achievement, Jay Gambetta, a director of IBM Research, said, “With our new nanostack architecture, we’re not just making smaller transistors, we’re reinventing how chips are built to deliver ​dramatically more power and ​energy efficiency.”

According to IBM, the new nanostack technology will also be capable of shrinking a type of memory circuit called SRAM by 40pc when compared to its previous chip technology. Production is expected to begin within the next five years and the organisation has yet to name a manufacturing partner for this technology, if there is one. 

IBM’s announcement comes at a time when many organisations all over the globe are racing to become the most prominent name in the manufacturing of advanced chip technology and artificial intelligence. 

In late May, leading chipmakers Micron and SK Hynix both surpassed $1trn in market value. Global semiconductor company Infineon Technologies announced earlier in June that it is set to open a new €5bn chip factory in Dresden, Germany, representing Infineon’s single largest investment. Last month, Analog Devices announced it was acquiring AI power delivery provider Empower Semiconductor in a deal valued at $1.5bn.

Advertisement

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Source link

Advertisement
Continue Reading

Tech

A GUI Solution For ESP32 Web Development

Published

on

These days, a lot of embedded projects feature some sort of screen, and a screen often creates a desire for a nice user interface. [Geoffrey Wells] has created a tool for developing web interfaces for the ESP32, named ESP-GenUI.

The aim was to make UI development as easy as possible for this platform. ESP-GenUI allows the creation of a website by dragging various nodes on to a canvas and linking them up to create the desired web interface. There are nodes for GPIO control, camera feeds, gauges, and all sorts of other common elements for quickly putting together dashboards and control panels. All this is done from within the browser, and the code generated by the tool can even be flashed without having to open any external tools. Alternatively, it can spit out Arduino code that you can open and flash from within the IDE. You can try the tool out yourself right here.

We’ve featured some other great resources for developing embedded user interfaces, like this highly-flexible display library for the ESP32. Feel free to espouse on your own favorite tools and techniques in the comments.

Advertisement

Source link

Advertisement
Continue Reading

Tech

Daily Deal: flowkey Piano Learning App

Published

on

from the good-deals-on-cool-stuff dept

flowkey is a fun, interactive piano learning platform that helps anyone go from absolute beginner to confident player — at their own pace. It combines step-by-step courses with thousands of songs you know and love, tailored for every skill level, from first-time learners to advanced pianists. The app listens as you play and gives instant feedback so you can improve faster, practice technique, and master sheet music with confidence. Whether you’re learning scales or your first full song, flowkey makes piano practice easy, fun, and rewarding. A one year subscription is on sale for $40, two years for $60, or five years for $80.

Note: The Techdirt Deals Store is powered and curated by StackSocial. A portion of all sales from Techdirt Deals helps support Techdirt. The products featured do not reflect endorsements by our editorial team.

Filed Under: daily deal

Source link

Advertisement
Continue Reading

Tech

Want To Clean Your Concrete Driveway Without A Pressure Washer? This May Be A Solution

Published

on





We may receive a commission on purchases made from links.

Keeping your driveway clean is an important step in maintaining your home’s appearance. The benefits aren’t just cosmetic, either. Mold, algae, and moss can make pavement slippery and unsafe to walk on. Automotive fluids, such as oil and transmission fluid, can degrade the structural integrity of the concrete. Even simple dirt accumulation can create beds for weeds, allowing their roots to widen existing cracks. So, in a very real sense, keeping your driveway clean helps to preserve its safety and structural integrity.

One of the easiest ways to clean a driveway is by investing in a good pressure washer from a major brand. All you need to do is hook it up to your hose, power it up, and blast away. Not only does this clean the surface of your concrete, but it penetrates deep into the pores. That said, a lot of people might not want to purchase an expensive and space-consuming tool just to do one job.

Advertisement

Fortunately, there are two main methods of cleaning: mechanical and chemical. Using a pressure washer is a form of mechanical cleaning — literally blasting the dirt and debris from the concrete. It’s highly effective and requires minimal effort. That said, it isn’t the only way to clean your old driveway so it looks new again. You can also use a chemical cleaning solution with a bit of extra elbow grease. There are plenty of cleaning chemicals that are designed specifically for removing grime from driveways. But if you’re really in a pinch, you might even be able to use something that’s already sitting in your cabinet: baking soda. Additionally, there are several smaller and more affordable pressurized nozzles for you to choose from.

Advertisement

Driveway cleaning compounds

There are a lot of different compounds out there that are designed explicitly for cleaning driveways, patios, and other paved surfaces. Simple Green Concrete and Driveway Cleaner with Oxy Solve is one of the better-selling and higher-rated products on Amazon. This cleaner has a 4.2 out of 5-star rating aggregated from over 4,900 reviews. It’s primarily designed to work in tandem with a pressure washer, but the company also gives directions on how to apply it manually. To use it without a pressure washer, you need to mix two cups of the cleaner with one gallon of water, and then apply it with a soft-bristle brush or other scrubbing apparatus. Once the driveway is thoroughly scrubbed, let it sit for five to seven minutes, then hose it off. 

There are several other similar options available as well. Zep Driveway and Concrete Cleaner has garnered quite a reputation on TikTok as a solution that works wonders on oil stains. Meanwhile, Wet and Forget Outdoor Cleaner is specifically designed to target moss, mold, mildew, and algae. Those who don’t want to purchase a special cleaner for the job might be able to get away with just using baking soda. It’s abrasive, alkaline — and best of all — cheap.

To clean your driveway with baking soda, start by sweeping off as much debris as you can. Then get a large bucket and combine a cup of baking soda and about ¼ cup of dish soap per gallon of water. Stir this up good and then pour it over the parts of your driveway you want to clean. Let it sit for about 15 to 30 minutes, but don’t let it go dry. Then you’ll need to scrub it with a brush and, finally, hose it all down.

Advertisement

There are other ways to add pressure

Cleaning compounds and elbow grease will win the day if you don’t own a pressure washer, but there are a few tools that can add a bit of blasting power to your hose without the need for a motorized pressure washer. The most basic of these is a simple hose nozzle. There are tons of multi-setting options, like the Automan Garden Hose Nozzle, that offer multiple watering patterns. If you own one of these, then the ‘jet’ setting is probably your best bet. There are also twist nozzles, like the Gilmour Heavy Duty Brass Twist Hose Nozzle, that can be twisted until they unleash a similarly concentrated stream.

That said, one of the best options if you don’t have a pressure washer is to get yourself a high-pressure nozzle. You can get the Carfka Jet Nozzle High Pressure Wand for just $19.99, for instance. This utilizes the same narrow frame and tip as a pressure washer, but it concentrates the water from your hose into a narrower stream instead of using gas or electricity to generate pressure. As such, the PSI will depend entirely on the output of your spigot.

Advertisement

There are also options with a more ergonomic design. The JetHose Pressure Washer Jet or the Pocket Hose Arrow, for example, both use a similarly narrow tube and small-opening tips to build pressure. Unlike the wands, they have a pistol grip with a lever to control the stream. These tend to be a bit pricier, however, generally retailing for around $50.



Advertisement

Source link

Continue Reading

Tech

Surprise: CBS’ ‘Ombudsman’ Has Been A Useless Trump Lackey

Published

on

from the glorified-lapdogs dept

You might recall that one of the conditions of the FCC’s approval of The Ellison family’s $8 billion acquisition of CBS was that the agency would install a “ombudsman” at the network to ensure CBS journalism was appropriately feckless and deferential to our mad, idiot king.

This was particularly ironic given decades of whining by Republicans about stuff like the “fairness doctrine,” and other short-lived government attempts to set acceptable contours for journalistic speech. The appointment didn’t even really appear necessary, given Bari Weiss’ pretty obvious loyalty to oligarchs and autocrats like Trump and Netanyahu.

The guy they appointed, Kenneth Weinstein, unsurprisingly had no qualifications for the role. Weinstein had been the head of the faux-academic right wing Hudson Institute “think tank,” and has absolutely no experience in journalism or television whatsoever.

Similarly unsurprisingly, a new New York Times report indicates that Weinstein has largely been invisible and pointless since his appointment. He doesn’t issue statements, he doesn’t appear to help anybody dealing with internal chaos being caused by Weiss, he doesn’t respond to direct questions from politicians, and he barely shows up at the office:

Advertisement

“In the nine months since he was hired, Mr. Weinstein has issued no public statements about CBS News’s coverage or its controversies. He has not issued any guidance or feedback in staffwide emails or memos, three employees said. He has told some employees that he is scheduled to work only one day per month, two people said, though one said he responded to queries outside his monthly workday.”

As I predicted, there’s just not much for him to actually do at a company that’s innately so dutifully loyal to the nation’s richest assholes. The New York Times at one point seems confused by the idea this “watchdog” does do any useful watchdogging:

“As CBS News has been shaken by infighting between management and its star correspondents this year, Mr. Weinstein’s silence is being criticized by media experts. They say Paramount, the parent company of CBS News, has essentially hired a watchdog who doesn’t bark.”

Of course Weinstein wasn’t appointed to be a “watchdog” or to help the network or its employees. He was hired so that the Trump administration could be ensured a direct line to the leadership of a media company being converted into a propaganda mill, something that’s likely not even necessary due to the ample close connections between the Ellisons, CBS leadership, and the administration.

Weinstein’s other job was to simply ensure that CBS was remaining dutifully loyal to the president, a role that’s also not really necessary since folks like Bari Weiss have no integrity.

The New York Times doesn’t mention how much Weinstein is being paid for his single day of “work” a month, and how many shitcanned CBS journalist salaries it would have paid for.

Advertisement

Filed Under: bari weiss, cbs news, fcc, kenneth weinstein, media, ombudsman, propaganda, the hudson institute

Source link

Advertisement
Continue Reading

Tech

Your First GRC Agent: A Red Teamer’s Walkthrough

Published

on

Agent Studio

By Maril Vernon, GRC Engineering Evangelist, Anecdotes.

Every vendor on every panel right now is saying the word “agentic.” But most of them can’t explain what actually changes when you stop treating GRC like a filing cabinet and start treating it like a fluid system.

I spent years on the offensive side, red and purple teaming, breaking the controls that GRC teams swore were working. Same findings, same gaps, different quarters. So when I tell you agentic AI is about to reshape how GRC operates, I’m not selling you a buzzword. I’m telling you what I’d be paying attention to if I were still trying to get past your controls.

Here is the honest version of where this goes, and what one of these agents actually looks like when you build it.

Advertisement

What “Agentic” Actually Means Here

Automation is not new to GRC. We have been scripting evidence collection and bolting RPA onto workflows for years. The problem is that most of it just moved the busywork around faster. It still produced static artifacts, still ran on a schedule, still answered the only question legacy GRC knows how to ask: “Did this control pass?”

An agent is different in three specific ways. It has autonomy, so it acts when a condition is met instead of waiting for a human to kick off a task. It has context, so it works against the actual state of your program rather than a screenshot from last quarter. And it executes multiple steps, so it can analyze, decide, and act in sequence rather than dumping a row into a report for you to deal with later.

The systems we are governing have already gone agentic. Cloud is elastic, identity is fluid, infrastructure is ephemeral, AI is non-deterministic, and CI/CD never stops. Attackers figured that out a long time ago but too many compliance programs are still trying to govern real-time systems with point-in-time assumptions.

Now, agentic does not mean handing judgment to a stochastic parrot, in fact most of the work should remain deterministic. The model provides reasoning, summarization, and orchestration. Your controls, thresholds, and policy decisions should still come from humans.

Advertisement

Frankly, this is one of the best use cases for AI in cybersecurity. GRC is full of high-volume, repeatable work performed against known baselines. That’s exactly the kind of problem machines excel at. We already trust AI to help us detect anomalies, prioritize alerts, and sift through mountains of telemetry.

Using it to help analysts identify evidence gaps or trace control drift is hardly the radical leap some people make it out to be.

Bottom line: AI should not replace judgment. It should give practitioners more opportunities to creatively apply it.

Agent Studio is the no-code builder for custom GRC agents. Pick a trigger, describe the task in plain English, and deploy with a full audit trail.

Advertisement

Join the early-access program and build your first agent in minutes.

Request Early Access

Three Things That Actually Change

The analyst’s job shifts from collecting to managing. Nobody gets into GRC because they dream of chasing screenshots and manually updating spreadsheets. The analyst’s job changes, but not in the way people fear.

Agents don’t turn practitioners into passive supervisors. Agents don’t replace practitioners; they give them back the time to apply judgment where it actually matters.

Compliance moves from periodic to continuous. Historically, annual and quarterly cycles existed because humans couldn’t continuously evaluate every control and every change. Agents dramatically expand that capability, making continuous assessment practical where periodic reviews once were the only option.

Advertisement

The moment that constraint goes away, “are we compliant right now” becomes a question you can actually answer, not a snapshot you defend three months after it stopped being true.

Trust becomes the bottleneck. Keep in mind: pass/fail is a compliance outcome. Confidence is a security outcome.

People underestimate this one because once effort is cheap, the hard question is whether you trust what the agent did and can prove it, or did you simply shift the manual work to the verification tax? That is a governance problem, and it is the one worth your attention.

What It Looks Like to Build One

Theory is easy to consume and file away. Here is the concrete version, using Anecdotes Agent Studio, which is the no-code builder my team put into early access. The mechanics are the point, so follow the structure even if you use something else.

Advertisement

Agent development comes down to three decisions:

Pick a trigger. This is the condition that wakes the agent up. It might be a schedule (run every Monday), or it might be an event in your program (a risk level changes, or evidence for a control goes stale past a freshness threshold you set). I prefer event triggers, because they fire the moment something changes instead of waiting for the next scheduled run, which is what makes the monitoring continuous rather than periodic.

Describe the work in plain English. You write the instruction the way you would brief a junior analyst, no code needed. Take ISO 27001:2022 control A.8.5, secure authentication.

The instruction might read: “When the MFA evidence for A.8.5 is older than 24 hours, query the identity provider for the current MFA enforcement policy, compare it against the organization’s required MFA baseline, and if any group has fallen out of enforcement, open a finding and assign a remediation task to the control owner.” Start from a prebuilt recipe or write your own.

Advertisement

Deploy and watch. Now trace what the agent actually does when that trigger fires.

It reads the live MFA policy from your identity provider through the connected plugin (Okta, Entra ID, whatever you run), pulls the current enforcement state for each group, compares it to the A.8.5 baseline you defined, and finds that a newly provisioned admin group was created without an MFA policy attached. It opens a finding, attaches the policy snapshot it pulled as evidence, links it to A.8.5, and assigns remediation to the IAM owner.

Each of those steps lands in an execution log: the trigger event, the data it read, the comparison it ran, the decision it reached, and the action it took.

That single run is the difference between “we passed A.8.5 at the last assessment” and “A.8.5 is enforced right now, and here is the timestamped evidence.”

Advertisement

Agent Studio

The Part Security People Will Push On (Correctly)

If your instinct reading this was “I am not handing compliance decisions to a black box,” good. Keep that.

Agentic GRC is defensible for one reason: the work is observable. A useful execution log captures the trigger that fired, the exact inputs the agent read, the rule or baseline it evaluated against, the decision it reached and why, the action it took, and the evidence it touched; all timestamped. That record is what lets you reconstruct any decision after the fact and hand it to an assessor without taking the agent’s word for anything.

Two scoping rules keep it safe. Give the agent least privilege: read-only access to the systems it evaluates, and write access only to the GRC objects it is allowed to create, like findings and tasks. Then gate anything consequential behind a person. Detecting drift and opening a finding can run unattended; closing a risk or marking a control effective should route to a human for sign-off.

Plan for the agent being wrong, because a non-deterministic model sometimes will be. If it opens a finding on A.8.5 that turns out to be a false positive, the log shows exactly what it read and concluded, so you fix the instruction instead of guessing.

Advertisement

An action you can trace is an action you can reverse, and that is why the log matters more than the model.

Where to Start

Don’t start with your highest-stakes control. Start with the task that is high-toil and low-judgment, the one your team does the same way every week and hates.

Think evidence gap detection, extracting findings from audit reports, or generating analysis rules for evidence that has no testing procedure. Prove the pattern there, read the logs, build the trust, then expand.

If you want to go deeper on this, it’s the whole agenda at the GRC Data & AI Summit 2026 on August 12, a free virtual event where security, risk, and compliance leaders work through what being agent-ready actually requires. Save your spot here.

Advertisement

I did not come back to GRC because it was comfortable. I came back because it was unfinished. Agents are the first time the tooling has started to match the speed, scale, and interconnected nature of the systems we’re trying to govern. If you want to see what building one feels like, Agent Studio is in early access now

My advice? Build the boring one first. Then tell me what changed.


Maril Vernon is a former red and purple team operator and the Principal GRC Engineering Evangelist at Anecdotes. She writes and speaks on GRC Engineering, continuous controls monitoring, and pushing compliance into the same decade as the systems it governs.

Sponsored and written by Anecdotes.

Advertisement

Source link

Continue Reading

Tech

Acoustic Energy AE2 40th Anniversary Standmount Speakers Debut at North West Audio Show 2026

Published

on

Acoustic Energy is extending its anniversary campaign with the AE2 40th Anniversary, a limited-edition standmount loudspeaker that will make its world premiere at the North West Audio Show in Cranage, UK, on June 27-28, 2026.

Following the AE1 40th Anniversary in 2025 and the launch of the fully analog AE Active at High End Vienna 2026, the new AE2 looks back to one of the British brand’s more ambitious compact loudspeaker designs—only with considerably more modern engineering under the gloss finish.

Rather than simply dusting off an old badge and hoping nostalgia does the heavy lifting, Acoustic Energy has redeveloped the AE2 around the later AE2 Signature concept. The new speaker uses technology derived from the AE1 40th Anniversary, adds internal steel reinforcement to reduce cabinet coloration, and is positioned above the AE1 for listeners who want more scale, bass weight, and dynamic capability without surrendering the placement flexibility and imaging strengths of a proper standmount.

The AE2 40th Anniversary will be demonstrated publicly for the first time ahead of its wider launch later this summer. Acoustic Energy’s intent is clear: take the compact-monitor attitude that made the AE1 famous and give it enough muscle to annoy a small floorstander.

Advertisement

From Acoustic Energy: “Building on the unprecedented success of the AE1 40th Anniversary Edition, the AE2 uses the same newly developed woofer and tweeter drive units from the AE1. The AE2 40th Anniversary derives from the legacy of the highly renowned flagship ‘AE2 Signature’ model of the 1990s. The same technological refinements from the AE1 have been used to update the performance to today’s level, along with aesthetic detail sympathetic to the original.”

Acoustic Energy AE2 40th Anniversary Loudspeakers (walnut)

Driver Design

The AE2 40th Anniversary uses the same newly developed tweeter and mid/bass driver platform as the AE1 40th Anniversary, but applies it to a larger offset MTM configuration intended to deliver more bass extension, headroom, and authority. Acoustic Energy has also added strategically placed internal steel plates to reduce cabinet coloration and help the larger enclosure match the quieter, more controlled behavior of its smaller sibling.

The 29mm anodized aluminum dome tweeter carries over the AE1 40th Anniversary’s larger 29mm voice coil and slightly increased radiating area. Like the original AE designs, it is ferrofluid cooled and damped, a combination intended to improve power handling, dynamics, and thermal stability without abandoning the metal-dome character that helped define the brand.

The mid/bass drivers use Acoustic Energy’s spun, hard-anodized aluminum cone design, reinforced with a thick ceramic coating on both sides. The 125mm cone offers more radiating area than the original AE1 driver, which Acoustic Energy says contributes to higher efficiency, lower distortion, and greater air displacement. In the AE2, that shared driver platform is paired with the larger cabinet and twin-driver arrangement to give the speaker more scale than the AE1.

Advertisement

Reduced Cabinet Coloration

Acoustic Energy AE2 40th Anniversary Loudspeakers in black
Acoustic Energy AE2 40th Anniversary Loudspeakers (black)

Acoustic Energy has scaled up the AE2 40th Anniversary with greater bass extension and dynamic headroom, which the company says should translate into lower distortion through the midband and greater transparency at typical listening levels.

The goal was to retain the tonal character and punchy dynamics of the smaller AE1 40th Anniversary within a larger offset M-T-M driver layout. That required more than simply adding a second mid/bass driver and three front-firing bass-reflex ports. To keep the larger enclosure’s coloration in line with the AE1, Acoustic Energy has added strategically placed internal steel plates to the cabinet structure.

The idea is straightforward: deliver the scale and authority expected from a small floorstander while preserving the low coloration, imaging precision, and placement flexibility that made the AE1 such a compelling standmount in the first place.

Advertisement. Scroll to continue reading.

Performance and Amplifier Matching

Acoustic Energy positions the AE2 40th Anniversary for listening rooms of around 25 square meters (about 270 square feet) and larger, where its additional bass extension and dynamic headroom should give it more authority than the smaller AE1 40th Anniversary.

Advertisement

Its published specifications support that positioning: a claimed frequency range of 35Hz to 45kHz, measured within ±6dB; 88dB sensitivity at 1 metre/2.83V; a nominal 6-ohm impedance; and 200 watts of power handling. Those are sensible figures for a substantial standmount designed to play with more scale and composure than its dimensions might suggest.

The AE2 is not being pitched as a difficult loudspeaker, but it should reward an amplifier with proper current delivery and some reserve power. The goal is the weight and room-filling authority of a compact floorstander, combined with the imaging, low cabinet coloration, and placement flexibility that remain central to the AE1 and AE2 design philosophy.

Crossover & Cabinet Finish

The AE2 40th Anniversary uses a minimalist, low-order crossover network set at 2.2kHz. Acoustic Energy says the approach is intended to preserve the lively, direct character of the original AE2 Signature, rather than bury the music beneath a small mountain of crossover components.

The cabinet is available in High Gloss Black or High Gloss Walnut, with each finished in ten layers for a properly luxurious appearance. At 385 x 235 x 315mm (HWD) and 14.5kg each, the AE2 is a substantial standmount, but not one that requires a civil-engineering permit before you put it on proper stands.

Advertisement

From Acoustic Energy: “Building on the unprecedented success of the AE1 40th Anniversary Edition, the AE2 uses the same newly developed woofer and tweeter drive units from the AE1. The AE2 40th Anniversary derives from the legacy of the highly renowned flagship ‘AE2 Signature’ model of the 1990s. The same technological refinements from the AE1 have been used to update the performance to today’s level, along with aesthetic detail sympathetic to the original.”

Comparison

Acoustic Energy Model AE2 40th Anniversary Edition AE1 40th Anniversary Edition
Product Type Standmount Speaker Standmount Speaker
Price (pair) €2,799  £1,049 – £1,500 
Design 2-way, Three front reflex ports 2-way, twin front reflex ports
Tweeter 1 x 29mm anodized aluminium dome 1 x 29mm anodized aluminium dome
Mid/Bass Driver 2 x 125mm spun, hard-anodised aluminium cone 1 x 125mm spun, hard-anodised aluminium cone
Frequency Range (±6dB) 35 Hz – 45 kHz 50Hz – 45kHz 
Sensitivity (1m/2.83V) 88 dB 87dB 
Power Handling 200 W 150W
Crossover Frequency 2.2 kHz 2.8kHz
Impedance 6 ohms 6 ohms
Cabinet 18–32mm RSC HDF/bitumen construction, braced 18–22mm RSC HDF/bitumen construction, braced
Grilles Cloth, magnetic fit Cloth, magnetic fit
Dimensions (HWD) 385 x 235 x 315mm 295 x 180 x 255mm 
Weight 14.5 kg each 7kg each
Finishes High Gloss Walnut, High Gloss Black High Gloss Walnut, High Gloss Black

The Bottom Line 

The AE2 40th Anniversary is not simply an AE1 40th Anniversary in a larger cabinet with a fancier badge. Its real purpose is to take the newer AE1-derived driver platform and apply it to a larger offset M-T-M design with twin mid/bass drivers, three front-firing ports, and additional steel cabinet reinforcement.

That makes it the more ambitious option for AE1 fans who want greater bass weight, higher output capability, and more convincing scale in rooms of roughly 270 square feet and larger, but still prefer the imaging precision and placement flexibility of a proper standmount speaker.

It is aimed at listeners with a capable amplifier, proper stands, and no interest in buying a full-size floorstander simply because their room needs more than a compact monitor can comfortably deliver. The AE2’s appeal is straightforward: more authority than the AE1 without abandoning the fast, direct, metal-driver character that made Acoustic Energy’s original compact speakers such enduring cult favorites.

Price & Availability

The AE2 is expected to be available by the end of 2026 with a recommended retail price of €2,799 per pair (US pricing not yet available) with a choice of Walnut or Piano Black finishes through Authorized Acoustic Energy Dealers in the US, UK, and Other Regions.

Advertisement

For those attending the UK Northwest Audio Show held from June 27-28, getting a listen to these will be worth the stop. 

Source link

Advertisement
Continue Reading

Tech

Oracle promises to open up MySQL governance, but the community wants guarantees

Published

on

DATABASES

Open source advocates remain concerned over lack of binding commitments 

Oracle has promised a new phase in its custodianship of MySQL following the creation of a lobby group concerned about its future independence and long-term development.

A new governance model, a new steering committee, and support for the MySQL community are among the measures Big Red announced for the open source database whose intellectual property it owns.

Advertisement

However, a co-founder of the OurSQL Foundation – an independent organization claiming to represent the interests of MySQL users and developers – says Oracle has yet to make binding commitments about the database’s future governance and management.

In a blog post this week, Oracle said it was “taking the next step” in terms of transparency in MySQL development and engagement with its wider community.

“Our goal is simple: accelerate innovation and contributions, make it easier for the community to participate meaningfully in the evolution of MySQL, and grow the MySQL Ecosystem.”

In the “spirit of collaboration,” Oracle said it would establish a new governance model in which community members can contribute through code, testing, documentation, reviews, and technical discussions. Experienced contributors can take on extra responsibilities as “committers,” Oracle said. They would help review changes and maintain code quality.

Advertisement

“Stronger governance gives the MySQL community clearer ways to participate and accelerate innovation while preserving the quality, security, and compatibility users expect,” said Jason Wilcox, senior vice president, Data and AI Platform Services, Oracle Cloud Infrastructure.

The governance model also includes a technical steering committee, which will serve as a forum for strategic guidance and community representation, bringing together perspectives from across the MySQL ecosystem. The initial steering committee will include cloud giants Amazon Web Services, Google Cloud, and Oracle, with additional perspectives from as-yet-unnamed users of MySQL. Microsoft – provider of DBaaS Azure Database for MySQL – is notably absent.

“We are continuing to expand opportunities for engagement through public roadmap discussions, Contributor Summits, GitHub-based collaboration, Early Access releases, technical design conversations, and enhanced developer resources,” Oracle said.

The OurSQL Foundation formed in May following a period in which the MySQL community expressed concerns about Oracle’s long-term commitment to the database and willingness to open its governance to external contributions.

Advertisement

In September last year, Oracle made “widespread layoffs” across its core MySQL development team. Michael “Monty” Widenius, who co-authored the original MySQL in the 1990s, said the job cuts had left him “heartbroken,” but not surprised.

Peter Zaitsev, co-founder of open source consultancy Percona, one of the organizations behind the OurSQL Foundation, welcomed Oracle’s new tone and openness around its management of MySQL.

“This is a step and in the right direction,” Zaitsev said. “We welcome Oracle engaging the MySQL ecosystem as a whole. For the last nine months, Oracle has shown a desire to show more openness to the community in terms of sharing and including the wider community in the decision-making process. This is all great.”

However, the OurSQL Foundation would continue to hold Oracle to account as questions remained about whether its commitment to open governance was binding.

Advertisement

“If you read all those announcements they say, ‘we will involve the community in an advisory capacity,’ which is of course better than nothing, but it’s not really PostgreSQL-type community engagement, where community is really able to plot a path forward for users,” he said.

Zaitsev expressed concern that any direction set for MySQL could ultimately be changed by new Oracle management. “There’s nothing binding in this regard.”

A test of Oracle’s determination to live by its commitment would come when the community wants to make changes to the database that Oracle might consider detrimental to its commercial interests. “Would those be accepted?” Zaitsev asked.

Another test would be whether the community was willing to contribute to a system whose future it believed Oracle controlled entirely. ®

Advertisement

Source link

Continue Reading

Tech

Not All Tech Survives Solar Storms, Here’s What’s Most At Risk

Published

on

The northern lights could mean lights out for the infrastructure we rely on.

In 1989, the Canadian region of Quebec experienced something that likely shocked many of its residents: the Sun knocked out its power grid. Caused by a geomagnetic storm, the resulting blackout made six million people lose power for nine hours. Known as ‘the day the sun brought darkness,’ the blackout is emblematic of both the potential effects of solar activity on modern technologies and our relative unpreparedness for a major solar storm.

Solar storms are caused by magnetic reconnection, a process in which the Sun’s rotation forces its magnetic fields to twist and knot. As it undergoes its 11 year cycle, the pressure from these fields mounts. Eventually, these magnetic fields break and rejoin, whereby energy and plasma explode from the Sun’s surface into the solar system. Although invisible to the naked eye, solar storms can have a profound effect on Earth’s magnetic fields. And while the phenomenon is responsible for the aurora borealis, it can also wreak havoc on our technological infrastructure.

Advertisement

These eruptions cause three types of solar storms. Solar flares are intense explosions of light and radiation. Capable of producing energy equal to a billion hydrogen bombs, solar flares travel at the speed of light, hitting the Earth’s atmosphere in just eight minutes. Radiation storms, meanwhile, are eruptions of charged particles that blast through the solar system, reaching Earth in just half an hour. The largest, coronal mass ejections, or CMEs, are massive clouds of magnetized plasma. Each of these solar events can disturb the Earth’s magnetic field to cause geomagnetic storms that threaten power grids, disrupt communications systems and even down global internet infrastructure.

What happens when solar storms reach Earth?

Before diving into how solar storms affect technology, you first have to understand the geomagnetic basics. Once a solar storm reaches the protective magnetic region of the Earth’s atmosphere, known as the magnetosphere, its charged particles temporarily change the atomic and magnetic makeup of the Earth’s atmosphere, disturbing its magnetic fields, currents and plasma.

Advertisement

Like the solar events themselves, these disturbances can be divided into three broad categories. Coronal mass ejections, for example, can cause geomagnetic storms which send geomagnetically induced currents (GICs) through the Earth’s magnetic field lines toward the southern poles, where they can surpass the Earth’s atmospheric defenses and disrupt technological systems. Intense solar winds can also generate geomagnetic storms. Similarly, radiation storms send highly charged proton particles down these magnetic field lines, forcing radiation into the lower levels of Earth’s atmosphere. Solar flares, for their part, can cause a phenomenon known as radio blackouts, through a process called ionization, in which magnetically charged particles blast through the atmosphere, dislodging electrons from atmospheric molecules and thereby changing the trajectory of radio frequencies.

The National Oceanic and Atmospheric Administration grades all three of these solar storms on a scale from one (minor) to five (extreme). Although solar activity is common, the vast majority of solar storms are recorded on the lower ends of the spectrum. For instance, while minor events may occur almost 3,000 times during an 11 year cycle, we’re likely to see less than five extreme solar storms over that period. However, even the largest storms on record pale in comparison to their historical predecessors. But we’ll get there. For now, let’s focus on what technologies are at risk.

Advertisement

Power Grids

As evidenced by the geomagnetic event that caused the infamous Quebec blackout, strong solar storms can have a major effect on the world’s power grids. When geomagnetically induced currents hit electrical infrastructure, they can cause blackouts by overheating transformers, relays and sensors. Expensive and difficult to manufacture, replacing a critical mass of transformers could take years. Geomagnetic currents can also overload and damage grid systems’ transmission lines. The control and protection infrastructures through which we manage power grids are also vulnerable to geomagnetic currents. Over time, these storms can shorten the lifespan of grids by damaging their electrical components and insulating materials, causing noticeable wear. 

Not all power grids are threatened by solar storms equally, as several environmental factors shape whether grids are more susceptible to solar storms. For one thing, geomagnetic storms are geographically prejudiced. Because storms are drawn toward the Earth’s magnetic poles, latitude is the most consistent indicator of risk, with arctic regions seeing the strongest magnetic disruptions. In 2003, for instance, Sweden saw a portion of its power grid knocked out by a series of abnormally potent geomagnetic activity. Soil resistivity, which refers to how well the ground conducts electrical currents, is another factor. Areas with high likelihood of exposure whose soil conducts energy well are particularly at risk. For example, the arctic regions between 55 and 70 degrees latitude, are especially vulnerable, given their high latitudes and resistivity rates.

Increasingly, experts are concerned about the risks solar storms pose to artificial intelligence and other grid-needy industries. And while the AI boom is already straining our electrical infrastructure, the costs of widespread grid outages could prove catastrophic for the world’s fastest growing industry. Writing for Space News, Scot McIntosh, a former deputy director of the National Center for Atmospheric Research, said AI executives are “among those who should be most concerned” about the knock on effects of solar storms.

Advertisement

Satellites

Although satellites are designed to withstand solar weather, protecting them from the strongest solar events is costly and impractical. As such, solar storms can damage a satellite’s hardware and internal electronics. Such damage can reduce a satellite’s lifespan or potentially necessitate critical repairs.

A satellite’s software is also at risk. As Russell DeHart, a lead engineer at NASA’s Goddard Space Flight Center, describes it, high-energy particles can “end up hitting a computer chip aboard a spacecraft and cause a [computer programming] bit to flip,” prompting an “anomaly” known as “a single event-upset.” In essence, high-energy particles from a solar radiation storm can physically force the sequences of 0s and 1s that make up the program’s binary code to switch properties. If key operations experience a bitflip, it forces the satellite to suspend noncritical tasks until the issue is resolved.

CMEs typically heat and expand the atmosphere, creating a denser medium for satellites to pass through. This additional drag can force satellites to lose both speed and altitude, dropping up to 2,000 feet. Losing a few thousand feet while in an orbit over a thousand miles high may not seem like a disaster. But considering that satellites are precisely calibrated machines, the drop could be substantial enough to stop operations entirely. 

Complicating the issue is that low Earth orbit is increasingly crowded. Changes in altitude risk collisions with other satellites or space debris. And while most satellites have extra fuel to maneuver back into place, deploying it can cut down a mission’s lifespan. As Dehart notes, “you can see years shaved off” a satellite mission “if a solar cycle was more active than originally anticipated.”

Advertisement

Many satellite-dependent technologies are susceptible to these disruptions. For instance, a solar storm in 2022 knocked 38 SpaceX internet satellites out of orbit. In October 2003, meanwhile, a flurry of solar activity scrambled half of the world’s satellites. The storms grounded flights between North America and Asia, muddied TV and radio broadcasts, upended remote GPS systems, and curbed several scientific missions. As more of our technological infrastructure continues to migrates to low Earth orbit, such concerns are likely to become more acute.

Radio communications

It goes without saying that satellite issues can disrupt a host of communication technologies. Navigation systems, like GPS, which depend on the exact positioning of a satellite and geographic coordinates, can be discombobulated by a sufficiently large solar storm. Just ask the farmers whose GPS-enabled tractors were knocked off-kilter by a solar storm in 2024, causing a reported half a billion dollars in damages. The same can be said for many satellite-dependent communications systems.

Beyond physical damage to satellites, however, solar storms can hurt satellite communication systems by changing the atomic makeup of the Earth’s atmosphere. As mentioned earlier, solar flares, CMEs, and solar radiation storms can all have a pronounced effect on the Earth’s ionosphere. Radiation storms, for one, can block the passage of radio waves at high altitudes. Ionization caused by solar flares and coronal mass ejections, meanwhile, causes the Earth’s ionosphere to either absorb or refract different radio waves. These changes in wave pathways can upend GPS and other satellite-dependent navigation systems that need frequencies to pass through the ionosphere. 

Advertisement

Radios that use high frequency radio waves, also known as shortwave radio, meanwhile, utilize the Earth’s ionosphere to refract radio frequencies and extend signal range. Typically used by operators who need to communicate beyond the horizon, shortwave radio systems are deployed by deep sea vessels, aircraft, emergency rescue crews and military personnel to communicate over vast distances. Changes in the ionosphere alter the angle of refraction, making it difficult for radio transmissions to reach their intended receivers. Very High Frequency and Ultra High Frequency radio communication systems, for their part, are more resilient to geomagnetic storms because they don’t depend on ionosphere refraction.

Satellite disturbances can affect popular consumer devices. According to a report by IoT manufacturer Memfault, a string of storms in 2024 potentially caused malfunctions in roughly 2.5 million of their devices. Luckily, solar events should only have a minimal impact on consumer cellular service, since the radio waves used by wireless networks are largely unaffected by ionization. Likewise, your phone’s GPS signal triages cellular tower location data with satellite GPS, limiting their exposure to satellite disruptions. However, many of these caveats likely go out the window in the case of catastrophic storms that decimate the power grids cellular networks depend on.

Advertisement

Internet

Some warn that a massive coronal mass ejection could also damage the world’s internet infrastructure. Dr. Sangeeth Abdu Jyothi, a professor and researcher at UC Irvine, released a 2021 paper detailing how a solar storm could cause a worldwide “internet apocalypse.” According to Jyothi, solar storms threaten the submarine fiber optic cables that give the world wide web its name. And while local and regional networks are likely safe, the cables that carry data between continents remains under threat.

To understand this distinction, we need to dive into the fiber optic deep end. For the sake of brevity, think of internet data as pulses of light beamed through thin strands of glass, which are known as fiber optic cables. The global internet is underpinned by roughly 870,000 miles of these cables, which carry data across the ocean floor. Interestingly, the fiber optics themselves are immune to GCI-induced outages. Unfortunately, light signals disperse as they travel long distances. To remediate this issue, signal repeaters are placed every 30 to 100 miles to amplify the optical signal. According to the NOAA, over 95% of international data is routed through these subsea cables.

Unfortunately, the electronic components of optical repeaters are vulnerable to geomagnetically induced currents. According to Dr. Jyothi, a sufficiently large CME could render many of these cables unusable, striking a blow to global internet infrastructure. Add potential damage to satellite internet systems, and a major solar storm could substantially slow internet traffic.

Notably, the study finds that some regions are more susceptible to the “internet apocalypse” than others. As with power grids, GCI damage to internet cables will likely correlate with latitude. The long distance cables connecting the U.S. to Europe are most at risk, while internal communications in Asia and Europe are comparatively insulated.

Advertisement

Preparing for the worst

Modern technologies have yet to encounter a historically strong geomagnetic storm, as the strongest recorded occurred in 1859. Known as the Carrington Event, the storm was three times larger than the one that knocked out the Hydro-Quebec electrical grid, and caused the Northern Lights to stretch as far south as Panama. What technology we did have, namely telegraph machines, went haywire, with some even catching fire. Scientists worry that such a storm could cripple our modern technological ecosystem, stranding planes, downing power grids, breaking internet connections and disrupting global communication systems.

Those looking to prepare for a major solar storm can ensure access to essential electronics through a variety of home products. For instance, generators are increasingly efficient, come in variety of sizes and prices, and are ideal for sustained power generation. Solar powered home battery backups, such as Anker’s Solix E10 or Tesla’s Powerwall, meanwhile, are eco-friendly alternatives capable of buoying power supplies for a few days. For more mobile options, portable power stations can pack a significant punch into a smaller package, while uninterruptible power supplies, or UPS, can be an affordable means of delivering power to essential electronics.

Luckily, storms like the Carrington Event occur only twice a millennia. However, even the Carrington Event is historically benign. Scientists found evidence of solar events that dwarf the 1859 storm by measuring the levels of carbon-14 in arctic ice samples. The largest of these are dubbed Miyake events, and one that occurred in 774 AD is hypothesized to have been 12 times larger than the Carrington storm.

Advertisement

Some scientists warn that a catastrophic storm is inevitable . As reported by the Washington Post, the National Academy of Sciences believes a geomagnetic disaster could cost over $2 trillion. Bolstering the world’s satellite, internet, communications and power infrastructure is likely to incur major financial costs. For example, the Foundation for Resilient Societies projects that securing the U.S. national power grid would cost roughly $255 billion alone. And although NASA has invested in detecting geomagnetic storms, a 2025 report by NOAA found that our solar forecasting systems also need upgrading. Addressing these issues will likely require extensive international cooperation. But given the relatively low year-to-year chances of a geomagnetic disaster, it remains unlikely that the world’s governments will collectively counteract them with the urgency some advocate. If you don’t believe me, just ask your local climate activist.

Source link

Advertisement
Continue Reading

Trending

Copyright © 2025