In the tech world, there is a constant flow of changes and keeping up with them means the choice for tools and technologies which are the most appropriate to invest your time in.
In 2026 the best programming language or technology stack to learn really depends on your personal aims, hobbies, and apps you are going to create.
The use of AI is increasing. AI as a “Pair Programmer” is becoming the default. Code completion, refactoring, and boilerplate generation are used often. Devs spend more time reviewing and steering code than typing it. “Explain this error” and “why is this slow?” prompts are useful.
In prompt-Driven Development programmers describe the intent in natural language and then let AI generate first drafts of functions, APIs, or configs. Iterate by refining prompts rather than rewriting code. Trend: Knowing how to ask is becoming as important as syntax.
Strong growth in: Auto-generated unit and integration tests and edge-case discovery. Trend: “Test-first” is easier when AI writes the boring parts.
AI is moving up the stack. Trend: AI as a junior architect or reviewer, not the final decider.
AI comes to Security & Code Quality Scanning. Rapid adoption in: Static analysis and vulnerability detection, secret leakage and dependency risk checks. AI can give secure-by-default code suggestions. Trend: AI shifts security earlier in the SDLC (“shift left”).
Instead of one-off prompts: AI agents that plan → code → test → fix → retry. Multi-step autonomous tasks (e.g., “add feature X and update docs”) can be done in best cases. Trend: Still supervised, but moving toward semi-autonomous dev loops.
AI is heavily used for explaining large, unfamiliar codebases and translating between languages/frameworks. It helps onboarding new engineers faster.
What’s changing: Less manual boilerplate work
More focus on problem definition, review, and decision-making. There is stronger emphasis on fundamentals, architecture, and domain knowledge. Trend: Devs become editors, designers, and orchestrators.
AI usage policies and audit trails is necessary. Trend: “Use AI, but safely.”
Likely directions:
Deeper IDE + CI/CD integration
AI maintaining legacy systems
Natural-language → production-ready features
AI copilots customized to your codebase
859 Comments
Tomi Engdahl says:
https://en.wikipedia.org/wiki/Liberty_Alliance
Tomi Engdahl says:
I created the same complex website in VS Code, Cursor, and Google Antigravity; only one worked like a senior developer
https://www.xda-developers.com/created-same-complex-website-in-vs-code-cursor-google-antigravity-only-one-worked-like-senior-developer/
Tomi Engdahl says:
Love Language
Maybe Vibe Coding Should Be Called “Cuck Coding” Because You Just Sit in a Chair and Watch
Hey, front row seats!
https://futurism.com/artificial-intelligence/vibe-coding-cuck-coding?fbclid=Iwb21leAVGDBdjbGNrBUYMFWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEewvsU2pvLsm8hvlrkMIbcS9t_DPiztILboocRlBaFfkH6f9ZioTvxRyCXW7w_aem_rzoz9prLrFYg4SA0F98TFA
Vibe coding is the act of telling an AI what you want to program and letting it write all the code for you. When it was first adopted, it was supposed to embody the sort of care-free optimism that was running in AI circles at the time, high off the possibilities of the tech. AI models had become so powerful that you could build an app using the same conversational language that you deploy while confiding in ChatGPT.
But the “vibes” are different now. Programmers were quickly forced to grapple with the new reality that AI coding tools brought to their profession. Now that everyone’s using AI to churn out code, you have to crank out even more work to keep up and meet your boss’s quota. It may be more “efficient” — and even that’s contested, since someone needs to do the hard work of verifying all that AI pablum — but it hasn’t exactly made people’s jobs easier. Meanwhile, everyone with a Claude subscription and a half-baked app idea fancies themselves a bona fide programmer, too.
Tomi Engdahl says:
Respan spent two years building on LiteLLM. One upgrade made it start over.
Respan rebuilt its AI gateway in Rust around a small plugin core after 100,000 lines of LiteLLM patches. Custom plugins still mean compiling your own.
https://thenewstack.io/respan-rust-ai-gateway/
Tomi Engdahl says:
Seitsemän yleisintä tapaa, joilla tiimit tuhlaavat pilvirahaa – ja miten sen voi korjata
https://corellia.fi/seitseman-yleisinta-tapaa-joilla-tiimit-tuhlaavat-pilvirahaa-ja-miten-sen-voi-korjata/?fbclid=Iwb21leAVEqHZleHRuA2FlbQEwAHBkb2YFYWRpZAGrOSIpQc__c3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEewOqxdiuPUftJs_Lv1LpoetdRKb5bVSYdMIEOn9M62aqEJ1lSA3sIjc__Ad8_aem_EvWC-O17sTJLeV-UZXhrzA
Tomi Engdahl says:
https://rakettitiede.com/blogi/miten-ottaa-moniagenttinen-ohjelmistokehitys-haltuun-vuoden-tauon-jalkeen
Tomi Engdahl says:
https://venturebeat.com/orchestration/researchers-made-ai-agents-better-by-turning-academic-papers-into-working-code-no-retraining-required
Tomi Engdahl says:
Linus Torvalds Eliminates Unsafe __get_user() & __put_user() Functions In Linux 7.4
https://www.phoronix.com/news/Linus-Kills-Get-Put-User-Linux
Tomi Engdahl says:
Kriittisiä haavoittuvuuksia PHP:ssa
21. lokakuuta 2026 klo 10.06, päivitetty 21. lokakuuta 2026 klo 17.58
21.10.2026 klo 10.06, päivitetty 21.10.2026 klo 17.58
PHP on julkaissut korjauspäivitykset kahteen kriittiseen haavoittuvuuteen, jotka koskevat kaikkia julkaistuja PHP-versioita. Haavoittuvuutta hyväksikäyttämällä hyökkääjä voi mahdollisesti suorittaa etänä mielivaltaisia komentaja palvelimella ja ottaa sen täysin hallintaansa. Kaikki PHP:tä käyttävät sovellukset tulee päivittää välittömästi korjattuun ohjelmistoversioon.
https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-37
Tomi Engdahl says:
https://www.xda-developers.com/steam-better-way-run-windows-apps-linux-than-wine-not-just-games/
Tomi Engdahl says:
PHP Updates Released For Two Critical Code Execution Vulnerabilities
Written by Michael Larabel in Programming on 21 October 2026 at 09:43 AM EDT. 14 Comments
PROGRAMMINGPHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 were just released to fix two critical vulnerabilities that can allow for unauthenticated remote code execution. Server administrators are advised to update immediately.
The first vulnerability is out-of-memory handling can interrupt PHP causing OOM corruption and remote code execution. The second remote code execution vector is via stale global state surviving after its backing memory has been freed.
Both of these remote code execution vulnerabilities are rated critical at 9.2 out of 10.
More details on these security vulnerabilities and the updated PHP versions at PHP.net.
https://www.phoronix.com/news/PHP-New-Critical-CVEs-October
Tomi Engdahl says:
Claude’s new rich text editor replaced Google Docs for me, and it already knows my entire project before I type anything
https://www.xda-developers.com/claude-new-rich-text-editor-replaced-google-docs/
Most AI-generated files end up living somewhere completely different from where they were created. A chatbot can draft your task list or spec sheet, then you put it in a Google Doc, owned by a completely different company. Wherever you put the notes, that doc ends up with no idea about the conversation behind it. Then Anthropic launched its own editor inside Claude in September, which completely cuts out the middleman between AI synthesis and note-taking. I’ve been using it in regular chats and in Claude Code, and I think it might have started replacing Google Docs for me.
Tomi Engdahl says:
Today’s PHP Security Release, and How We’re Strengthening PHP Security
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
Earlier today, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. These releases fix two critical vulnerabilities that, under the right conditions, allow an unauthenticated attacker to execute code on servers running PHP. If you run PHP, it is imperative that you update now. The announcement on php.net contains and references technical details on the vulnerabilities, attack vectors, and instructions on how to update on which systems.
Tomi Engdahl says:
https://www.infoq.com/news/2026/10/vercel-zig-fx-agent/
Tomi Engdahl says:
https://corellia.fi/seitseman-yleisinta-tapaa-joilla-tiimit-tuhlaavat-pilvirahaa-ja-miten-sen-voi-korjata/?fbclid=Iwb21leAVEqHZleHRuA2FlbQEwAHBkb2YFYWRpZAGrOSIpQc__c3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEewOqxdiuPUftJs_Lv1LpoetdRKb5bVSYdMIEOn9M62aqEJ1lSA3sIjc__Ad8_aem_EvWC-O17sTJLeV-UZXhrzA
Tomi Engdahl says:
ARStack61850 — Real-Time IEC 61850 Instrumentation Stack
ARStack61850 is the real-time, hardware-aware evolution of ARIEC61850.
ARIEC61850 understands IEC 61850. ARStack61850 measures and executes IEC 61850 in real time.
The portable C++20 stack remains rooted in the ARIEC61850 behavioral model, but the project north star is now broader: build an open, deterministic IEC 61850 instrumentation platform for hardware-timestamped Sampled Values/GOOSE/PTP injection, analysis, commissioning and real-time closed-loop testing.
https://github.com/masarray/arstack61850
Tomi Engdahl says:
Test libraries
Unity Test Project
https://github.com/throwtheswitch/unity
This project is made to test code targetting microcontrollers big and small. The core project is a single C file and a pair of headers, allowing it to be added to your existing build setup without too much headache. You may use any compiler you wish, and may use most existing build systems including Make, CMake, etc. If you’d like to leave the hard work to us, you might be interested in Ceedling, a build tool also by ThrowTheSwitch.org.
GoogleTest
https://github.com/google/googletest
GoogleTest helps you write better C++ tests.
GoogleTest is a testing framework developed by the Testing Technology team with Google’s specific requirements and constraints in mind. Whether you work on Linux, Windows, or a Mac, if you write C++ code, GoogleTest can help you. And it supports any kind of tests, not just unit tests.
https://google.github.io/googletest/
https://www.geeksforgeeks.org/software-testing/gtest-framework/
https://www.throwtheswitch.org/cmock
CMock generates pure C code from regular C headers. No special markup is required! These generated files allow you to test a module thoroughly while being in full control of any connected modules.
CMock creates mocks and stubs for C functions. It’s useful for interaction-based unit testing, where you want to test how one module interacts with other modules. Instead of trying to compile all those real units together, CMock helps you by creating fake versions of all the “other” modules. You can then use those fake versions to verify that your module is working properly!
Tomi Engdahl says:
*322 percent* more. https://trib.al/xMjBx29
Code Red
Programmers Using AI Create Way More Glaring Security Issues, Data Shows
“AI is fixing the typos but creating the timebombs.”
https://futurism.com/ai-coding-security-problems?fbclid=IwdGRjcAVJZoFjbGNrBUlmZGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeZQNlaBkQeSTCZRKP5WrPi2AhoSJavidpB6BMepp_cywA93m_8K0ApRYXASU_aem_VmAvhZfHwR0PM6zxVKd_YA
Artificial intelligence has notorious problems with accuracy — so maybe it’s not surprising that using it as a coding assistant creates more security problems, too.
As a security firm called Apiiro found in new research, developers who used AI produce ten times more security problems than their counterparts who don’t use the technology.
Looking at code from thousands of developers and tens of thousand repositories, Apiiro found that AI-assisted devs were indeed producing three or four times more code — and as the firm’s product manager Itay Nussbaum suggested, that breakneck pace seems to be causing the security gaps.
“AI is multiplying not one kind of vulnerability,” Nussbaum wrote, “but all of them at once.”
Ironically, some of the “benefits” of AI coding appear to be the vehicles for these issues. Apiiro found that syntax errors fell 76 percent and logic bugs — faulty code that causes a program to operate incorrectly — were down 60 percent.
Tomi Engdahl says:
https://hackaday.com/2026/10/26/hiding-virtualization-from-other-software/
Tomi Engdahl says:
https://www.facebook.com/share/p/1PdCxFWoU5/
Gregory Kurtzer created CentOS. Then Rocky Linux. Now he has built an entirely new kernel in 11 days.
It’s not a fork. It’s not a patch. It’s a fresh, independent Rust-first kernel called Ginux, written almost entirely by an OpenAI Codex agent running GPT-5.6 Sol, with Kurtzer directing the architecture.
139,000 lines of code. 1,000+ commits. Boots Rocky Linux 10 all the way to systemd multi-user mode.
His method is called “Human-Directed Agentic Engineering”. The human defines architecture, constraints, milestones, and acceptance criteria. The AI handles implementation, testing, diagnosis, and revision. Domain expertise stays with the human. The repetitive engineering goes to the agent.
But Kurtzer is clear about what this does not prove.
“AI can generate complex systems software, but compatibility, security, hardware support, standards, community, and long-term maintenance remain the real moat.”
The project is a research prototype, Apache 2.0, QEMU-only for now. The point was never to replace Linux. It was to prove that a skilled engineer with the right AI pairing can compress years of systems work into days.
That proof now exists.
Tomi Engdahl says:
The Antithesis Approach to Breaking AI-Generated Code
Antithesis came out of stealth in 2024. In just two years, the company’s revenue shot up by 12x.
https://analyticsindiamag.com/ai-startups/the-antithesis-approach-to-breaking-ai-generated-code
Tomi Engdahl says:
https://github.com/dmoka/skills
Tomi Engdahl says:
https://getartcraft.com/apps?fbclid=IwT01FWAU-ypJleHRuA2FlbQIxMABwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABHjkOC1g0-gboSnhQEPLq4gW3y1OAOqEm5sDwJc7612qpiv4hLvYg5DXggXAV_aem_lmmzvlwf6z6brIA9vervWA
Tomi Engdahl says:
LibreOffice’s ‘no AI’ stance meets LLM-assisted code
Core developers avoid AI coding assistants, while community contributors face disclosure and review rules
https://www.theregister.com/ai-and-ml/2026/10/29/libreoffices-no-ai-stance-meets-llm-assisted-code/5306084
Tomi Engdahl says:
https://copyconstruct.medium.com/how-to-effectively-debug-when-you-no-longer-understand-the-code-bd3dcb2c5f7b
Tomi Engdahl says:
https://www.technologyreview.com/2026/10/20/1145399/emacs-turns-50/
Tomi Engdahl says:
Accelerating HTTP Web Servers With In-Kernel eBPF Deliver Up To 4.5x Throughput
https://www.phoronix.com/news/Beeper-In-Kernel-Parsing-eBPF
An interesting new open-source project born out of university research is Beeper to provide application-layer parsing within the in-kernel eBPF. With an HTTP parser implemented by Beeper in eBPF and providing an in-kernel HTTP cache, the throughput for web servers could be improved by 3x at high rates.
Beeper and the notion of using in-kernel eBPF for application-layer parsing was presented earlier this month at the Linux Plumbers Conference. It’s quite interesting and the videos from LPC2026 were recently posted. Below is the Beeper presentation.
Tomi Engdahl says:
LLMs are making formal software verification feasible at a much larger scale
https://www.anthropic.com/research/formal-verification
Most software is riddled with bugs, which AI can now easily find and exploit. The standard defenses against cyberattacks are no longer sufficient: we need ways to prove that code is free of bugs. Formal software verification could provide this guarantee, but it has historically required years of expert effort, making it impractical for most real-world projects. In a collaboration with Theorem, however, we show this is no longer the case: LLMs can now produce formal proofs at large scale, enabling new software development workflows that include proven security guarantees. Using Claude, we proved security properties at the assembly code level (RISC-V) in over 100 real-world open-source software libraries.
Tomi Engdahl says:
https://www.makeuseof.com/linus-torvalds-has-a-message-for-anyone-who-doesnt-want-ai-in-linux/
Tomi Engdahl says:
Tekoäly rakentaa demon päivässä, VAID rakentaa liiketoimintasovelluksen
Työntekijäsi innostui tekoälyn mahdollisuuksista ja rakensi sen avulla työkalun, joka ratkaisi yritystä pitkään piinanneen ongelman. Kuukautta myöhemmin tietohallinnosta vastaava osoitti työkalusta vakavan tietoturvariskin, ja sen käyttö kiellettiin. Miten tässä näin kävi, ja miten vastaava vältetään jatkossa?
https://www.tivi.fi/kumppanisisallot/virnex-group-oy/tekoaly-rakentaa-demon-paivassa-vaid-rakentaa-liiketoimintasovelluksen/
Tomi Engdahl says:
https://venturebeat.com/orchestration/a-coding-agents-harness-can-triple-its-cost-without-making-it-more-accurate-study-finds
Tomi Engdahl says:
https://www.phoronix.com/news/HPFS-For-Linux-Removal
Tomi Engdahl says:
https://www.infoq.com/news/2026/10/google-argon-optimizes-adk/
Tomi Engdahl says:
https://www.phoronix.com/news/Linux-7.4-memblock
Tomi Engdahl says:
https://www.xda-developers.com/my-self-hosted-ai-models-research-code-and-generate-images-and-all-they-cost-is-a-gpu-i-already-own/
Tomi Engdahl says:
https://rakettitiede.com/blogi/miten-ottaa-moniagenttinen-ohjelmistokehitys-haltuun-vuoden-tauon-jalkeen?fbclid=Iwb21leAVL36FleHRuA2FlbQEwAHBkb2YFYWRpZAGrNjU715TQc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeIQq7gI4Fak98uT1dsOEzXRyjLnxevPcZUbPh7bOfEu2NfbDgkKx3UvQ2TUM_aem_D3FdDKodTPBSUt6qAbl5ZA&utm_medium=paid&utm_source=fb&utm_id=120249417304460784&utm_content=120249417307140784&utm_term=120249417304540784&utm_campaign=120249417304460784
Tomi Engdahl says:
https://www.makeuseof.com/this-os-isnt-linux-isnt-windows-and-it-runs-on-any-pc-you-have-lying-around/?link_source=ta_first_comment&taid=6ade3ca61cb46000018b3d0a&utm_campaign=trueanthem&utm_medium=social&utm_source=facebook&fbclid=Iwb21leAVL7PdjbGNrBUvs7mV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEevGDoIB8SRDMDhd1-Q9lty-C4c7uQZqy7gAenTbbv8qh2esjFABpDMOXClP4_aem_7EEcelZHWJlzkTNwZaPogw
Tomi Engdahl says:
https://cedardb.com/blog/sqldoom/
Tomi Engdahl says:
https://www.phoronix.com/news/Linux-7.4-EFI
Tomi Engdahl says:
https://www.xda-developers.com/home-cards-offers-straightforward-obsidian-homepage-alt-without-fluff/
Tomi Engdahl says:
https://www.autoevolution.com/news/someone-created-an-open-source-android-auto-alternative-without-google-play-services-277469.html
Tomi Engdahl says:
I turned my favorite Linux terminal apps into desktop apps so I could launch them with one click
https://www.howtogeek.com/i-turned-my-linux-terminal-apps-into-desktop-apps/
Terminal-based apps are awesome, but if you’ve ever tried to use them, you’re probably already aware of their biggest annoyance: you have to open a terminal and type a command every time. They don’t show up in your dock or app launcher the way regular desktop apps do. Thankfully, there’s a quick and easy fix for that. It’ll hardly take a few minutes, and you’ll be able to give your terminal apps their own icons and entries in your application launcher.
Tomi Engdahl says:
https://www.phoronix.com/news/Jamey-Sharp-Praises-Wayland
Tomi Engdahl says:
https://www.testimate.fi/ostajan-opas-nakokulmia-testiautomaatioon/?utm_source=facebook&utm_medium=cpc&utm_campaign=Remarketing-06-2025-META-ALL-B&utm_content=Rema-12-2025-Testiautomaatio&fbclid=Iwb21leAVO3VRleHRuA2FlbQEwAHBkb2YFYWRpZAGrNWS60InMc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeNlbkOHb85tmXAMboS4hpr7j7P2hgq9UqVRZKIemdpcR5NAptn6b25iCUQGM_aem_cKZdrcfHXf2ubrJRx0SMsg&utm_id=120227024633450780&utm_term=120239436495320780
Tomi Engdahl says:
https://www.phoronix.com/news/NTFS-Linux-7.4-Improvements
Tomi Engdahl says:
https://softability.fi/insights/building-secure-rd-with-ai/
Tomi Engdahl says:
https://softability.fi/insights/cybersecurity-in-rnd-from-regulations-to-quantum-safe-solutions/
Tomi Engdahl says:
https://norrin.com/fi/insights/use-cases-from-ai-in-manufacturing-logistics-and-e-commerce?utm_term=&utm_campaign=Norrin+%E2%80%93+Demand+Gen&utm_source=adwords&utm_medium=ppc&hsa_acc=8118626597&hsa_cam=22651700323&hsa_grp=186339414131&hsa_ad=815292353230&hsa_src=dsc&hsa_tgt=&hsa_kw=&hsa_mt=&hsa_net=adwords&hsa_ver=3&gad_source=1&gad_campaignid=22651700323&gbraid=0AAAAACoZ-VD2PZrbMca1mHfzCVc_c5fTz&gclid=CjwKCAjwuobXBhBXEiwAYUaIlfBcrCLBP3PEdy3fteHQs_5OIIpEycZ48WIy56A2zPzuQl68aO7t7BoCgekQAvD_BwE
Tomi Engdahl says:
https://www.sanomapro.fi/tekoalytyokalupilotti-auttoi-lahihoidon-lehtoria-tehtavien-ja-kokeiden-teossa/?utm_campaign=sp&utm_source=facebook&utm_medium=paid_social&fbclid=Iwb21leAVPJ1hleHRuA2FlbQEwAHBkb2YFYWRpZAGrPBYeyHIGc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEf8H_fzXGryTtDPY4p67tj-z98zgFQsuorXBZrgrVuPQ5Iw2-RJu16kBFkM8g_aem_zXjc45mi2tlmO_QcC9yhpA
Tomi Engdahl says:
https://hackaday.com/2026/10/28/jpeg-xl-is-back-on-the-menu/