security tip for @omarchy folks:
CVE-2026-98432 is a linux TCP bug with a remote root exploit. as of now, linux-omarchy is still on 7.2.8, older than the upstream fix (7.2.10/7.2.11).
until the patched kernel ships, turn off off MPTCP, which the known exploit uses (Go apps like Tailscale listen with it by default):
echo 'net.mptcp.enabled = 0' | sudo tee /etc/sysctl.d/99-no-mptcp.conf && sudo sysctl --system
not a full fix, but a layer of protection while you await the patch.
CVE-2026-98432 is a linux TCP bug with a remote root exploit. as of now, linux-omarchy is still on 7.2.8, older than the upstream fix (7.2.10/7.2.11).
until the patched kernel ships, turn off off MPTCP, which the known exploit uses (Go apps like Tailscale listen with it by default):
echo 'net.mptcp.enabled = 0' | sudo tee /etc/sysctl.d/99-no-mptcp.conf && sudo sysctl --system
not a full fix, but a layer of protection while you await the patch.
6
2
26
3,861
If anyone’s used proton products extensively this is incredibly easy to believe.
Sooooo buggy.
Sooooo buggy.
‼️ Proton CEO Andy Yen called a staffer's plea to pentest new code before release "bullshit and loser thinking".
Yen wrote that workers should prompt “better.”
Proton's CTO told staff AI wrote 90% of its code in October, much of it with Anthropic's Claude.
0
0
0
103
Just incredible.
Last night an AI agent performed brain surgery on a mouse.
We gave it 19 gene therapy vectors in a spreadsheet, a mouse model of epilepsy, access to a motorize surgery rig with cameras and one goal: reduce seizures.
It picked the drug. It picked the brain region. It derived the papers. Then it drove the stereotaxic arms into the brain and injected 250 nanolitres while watching the entry site through the rig camera for bleeding.
A licensed vet gated every irreversible step and held a physical kill switch to stop the AI agent.
Thread on what it decided, what it saw, and the moment it refused to let me override it.
[Writing this on the spot out of excitement, but I've been 18hrs in front of my laptop coding and coordinating this, so keeping it brief and descriptive, more cohesive thoughts on this soon...]
0
0
1
82
It’s superb.
Fellow photo nerds, I’ve partnered with dear friends @rianjohnson and Eric Cameron to make a bespoke iPhone still camera app: Chromagraph Camera. It’s the camera we wanted for ourselves and we’re making it available for purchase on the App Store. apps.apple.com/app/apple-stor…
0
0
0
103
The incredible thing about @omarchy is that you can build anything you want.
The problem with @omarchy is that you can build anything you want.
I was making a simple screen sharing/presentation layout in OBS. Then I got an agent involved. Mind blown. Then I built a whole collection of beautiful screen sharing layouts in OBS.
Then launching & switching felt cumbersome, so I built a custom launcher for the menu bar.
Then I added live preview, which led to me refactoring the whole thing in Rust.
Which led to me obsessively optimizing performance and adding every quality of life feature I could think of. It's absolutely beautiful, but I got to bed about 3 hours later than I'd planned.
@dhh you should rename this OS Rabbit Hole Linux
The problem with @omarchy is that you can build anything you want.
I was making a simple screen sharing/presentation layout in OBS. Then I got an agent involved. Mind blown. Then I built a whole collection of beautiful screen sharing layouts in OBS.
Then launching & switching felt cumbersome, so I built a custom launcher for the menu bar.
Then I added live preview, which led to me refactoring the whole thing in Rust.
Which led to me obsessively optimizing performance and adding every quality of life feature I could think of. It's absolutely beautiful, but I got to bed about 3 hours later than I'd planned.
@dhh you should rename this OS Rabbit Hole Linux
0
0
0
65
i had no qualms with cancelling my iPhone Duo order until @thekitze started posting about it.
0
0
0
90
Touchscreen MacBook is cool, but the return of the glowing logo is the real story here.
@johnternus SAY IT AINT SO
1
0
1
124
Sometimes I stumble across a level of domain expertise that blows me away.
I wonder how true/applicable this kind of analysis is to model benchmarks, where anecdotal experience often differs substantially from what the data would suggest.
I wonder how true/applicable this kind of analysis is to model benchmarks, where anecdotal experience often differs substantially from what the data would suggest.
@valvesxyzlook at claims like this in case I can improve Ghostty. I grabbed your source and immediately spotted the issue: your read loop overwrites a 64 KiB ring. Everything older is discarded unparsed per tick. You're faster because you're not actually terminal emulating.
It means the nt number. In a kitten benchmark run at the rate you're claiming, roughly 6.6 MB arrives per 60 Hz tick and 64 KiB of it gets parsed. You're read(2)-ing 100% of the data and parsing about 1% of it.
There are other minor issues (a small fixed scrollback in a preallocated ring buffer, no grapheme clustering, throwing away data like OSC 8 URIs, etc.), but the major one is simply that you're discarding ~99% of the input.
For plain text, e.g. your cat benchmark, the final screen ends up looking right, but the scrollback is missing 99% of the file and each retained chunk starts mid-line. As soon as there are escape sequences in the dropped spans, your emulator is fully out of sync and invalid: a cut inside a CSI prints the parameters as text, and any SGR, mode, title, or alt-screen change in the gap is just... gone.
FYI, this is why I don't like when people point at refterm as a terminal benchmark. refterm implements a TINY subset of what a terminal emulator must support, it's closer to a fast file reader, not a terminal emulator.
I also don't mean any shade by this. I like to look at technology objectively to try to learn something and improve my own craft and work. So I'm sharing what I found.
I modified your code very slightly to parse on every full buffer (rather than per tick). And the results are attached. Both use main commit in each repo at the time of this post.
Note the graph is in log scale, the discrepancy between performance for things like Kitty images is measured in GB/s.
0
0
0
68
An entire OS installing in 6 seconds. Absolutely wild, amazing work from the @omarchy team.
Omarchy 4.5 RC2 is now out and it includes our new F1 install technique that can almost get a full installation down to the time of a pitstop on the fastest machines (current record is 6 seconds!!). github.com/omacom/omarchy…
0
0
0
49
The plugin marketplace for @omarchy does this so incredibly well.
Everything is configurable. Your efforts to solve a niche problem are accessible to all fellow users who can tinker and tune your foundational concept to precisely meet their needs.
It’s awesome.
Everything is configurable. Your efforts to solve a niche problem are accessible to all fellow users who can tinker and tune your foundational concept to precisely meet their needs.
It’s awesome.
feels like there needs to be a new way to distribute opensource software such that people can modify via agents but also get upstream automatically merged in
coding agents can do this but they won’t do it automatically
1
0
3
161
Setting up a windows machine for the first time in ages. This is truly painful. I refuse to believe that anyone prefers windows to MacOS. It’s not possible.
0
0
0
40
One of the best and most creative UI decisions I’ve seen lately! Love this.
Little preview of something I've been working on!
You can connect to any provider, or through any harness like Hermes Agent, and the setup is instant with no configuration required, unless you want to.
Proactive, self-aware, and will be fully open source
0
0
1
41
My @omarchy aha moment was building my own email client.
There’s always things I’ve wished worked differently about my email clients.
I just told grok @bot what I wanted in an ideal native mail app. Tons of niche features. Forked an open source rust application and got to work.
Few iterations and it’s literally perfect. A completely customizable OS is beyond great.
There’s always things I’ve wished worked differently about my email clients.
I just told grok @bot what I wanted in an ideal native mail app. Tons of niche features. Forked an open source rust application and got to work.
Few iterations and it’s literally perfect. A completely customizable OS is beyond great.
2
0
2
131
Steep learning curve!
From here on, Rust will be the default for so many more apps.
From here on, Rust will be the default for so many more apps.
Mozilla created Rust
Microsoft uses Rust.
Amazon uses Rust.
Google uses Rust.
Meta uses Rust.
Firefox uses Rust.
Discord uses Rust.
Cloudflare uses Rust.
The Linux kernel supports Rust.
Memory safety, No garbage collector,
High performance.
Why isn't Rust the default choice for more developers?
0
0
0
39
