Tuesday, 05 May 2026
Healthcare marketplaces leak citizenship data to ad tech giants, Bun ditches Zig for Rust, and LLMs are quietly neutralizing your writing voice
Today's Lead
TechCrunch
US Healthcare Marketplaces Shared Citizenship and Race Data With Ad-Tech Giants
A Bloomberg investigation found that nearly all 20 U.S. state health insurance marketplaces inadvertently shared sensitive personal data — including citizenship status, race, ZIP codes, email addresses, and phone numbers — with major advertising technology companies including Google, Meta, TikTok, LinkedIn, and Snap. The breach occurred through misconfigured tracking pixels embedded in the marketplaces' web pages, exposing data for millions of Americans who use state exchanges to purchase insurance each year. Virginia and Washington D.C. have paused or removed the trackers in response. The incident is a textbook example of how ad-tech infrastructure quietly colonizes government services: the tracking pixels were almost certainly added for legitimate analytics purposes, but no one audited what data was being sent, to whom, or under what retention and use policies.
Also today
GitHub / Oven
Bun Is Being Ported from Zig to Rust
The Bun JavaScript runtime is undergoing a full rewrite from Zig to Rust, documented in a detailed PORTING.md file on a public branch. The rationale is pragmatic: Rust offers compile-time memory safety and a mature ecosystem while preserving the low-level control that made Bun competitive on performance. The porting guide specifies strict rules — no async/await (callbacks and state machines instead), custom mimalloc-based memory management, intrusive reference counting, and mandatory safety justifications for every unsafe block. Work proceeds in two phases: Phase A produces draft Rust files capturing the logic, Phase B resolves imports and achieves compilability crate by crate. This is a significant architectural bet; Bun's original choice of Zig was itself unconventional, and switching languages mid-life is rarely smooth — but the performance results and ecosystem pressures appear to have made Rust the more defensible long-term choice.
Read →Research
How LLMs Distort Our Written Language
Researchers studying the effect of LLM writing assistance found three consistent patterns: AI edits systematically push essay conclusions toward more neutral positions, homogenize writing style into a cluster distinct from any human author's fingerprint, and — most troublingly — users report satisfaction with the results despite acknowledging loss of voice. A second finding with downstream consequences: AI-generated peer reviews score submissions 10% higher than human reviewers and apply different evaluation criteria, raising questions about what happens to scientific funding and publication decisions as AI-assisted reviewing becomes standard. The study puts empirical weight behind a concern that has largely been intuitive: writing shaped by LLMs becomes less distinctly human not through dramatic intervention but through accumulation of small, individually reasonable edits.
Read →Tweede Golf
Async Rust Never Left the MVP State
A detailed technical critique argues that async Rust's compiler has not matured beyond minimum viable product quality and is failing to deliver on its zero-cost abstractions promise. The author documents four specific inefficiencies: async functions generate disproportionately large state machines (360 lines of MIR for trivial functions), expensive panic paths in the Returned state add 2–5% binary bloat, poor inlining prevents optimization cascades, and duplicate state machine paths multiply code size. These issues are particularly damaging for embedded targets where binary size is a hard constraint. The author has submitted a Rust Project Goal requesting €30k in funding to address all four compiler optimization opportunities — a modest ask for a problem that affects a large portion of the Rust ecosystem.
Read →Addy Osmani
Agent Skills: Structured Workflows for AI Coding Agents
Addy Osmani identifies a core problem with AI coding agents: they default to the shortest completion path, skipping code review, testing, and documentation unless explicitly structured to do otherwise. His proposed solution is Agent Skills — reusable workflow files that encode the full SDLC rather than prose instructions, organized around six phases (Define, Plan, Build, Verify, Review, Ship). The design principles are specific: process over prose so agents cannot interpret their way around steps, mandatory verification gates, anti-rationalization safeguards that prevent agents from declaring tasks done without completing checks, and progressive context loading to avoid overwhelming the context window. Claude Code's marketplace is one distribution channel, but the post frames this more broadly as a team engineering standard for anyone running agentic workflows.
Read →Margaret Storey
Cognitive Debt: The Hidden Cost of AI-Accelerated Development
As AI tools accelerate development velocity, teams can outpace their own ability to maintain coherent mental models of the systems they are building. Margaret Storey defines this as cognitive debt — the gap between how a system actually evolves and what the team understands about it — and distinguishes it from technical debt in one important way: it lives in people, not in code. The consequences are concrete: slower onboarding, increased debugging friction, reduced developer confidence, and team fatigue. Unlike refactoring a messy codebase, repaying cognitive debt requires active investment in documentation, tests, conversations, and tooling. The post's implicit argument is that as AI removes the friction from writing code, maintaining shared human understanding of that code may become the new bottleneck for high-performing teams.
Read →Daring Fireball
Y Combinator Holds ~0.6% of OpenAI — Worth Over $5 Billion
Y Combinator holds approximately 0.6% of OpenAI, established through YC Research's early 2016 investment. At OpenAI's current $852 billion valuation, that stake is worth over $5 billion. John Gruber's post focuses on the conflict-of-interest implications: Paul Graham has publicly defended Sam Altman's character on multiple occasions without disclosing that he personally stands to benefit enormously from OpenAI's continued success. The broader point is about disclosure norms in an industry where the same people who publicly comment on AI company governance frequently hold substantial financial stakes in the companies they are commenting on.
Read →NixOS Discourse
Security Advisory: Local Privilege Escalation in Lix and Nix
A buffer overflow in the Nix and Lix daemon implementations allows local privilege escalation to the daemon user — typically root in multi-user setups. The vulnerability affects Nix 2.24.4+ and Lix 2.93.0+ and is exploitable by any user with daemon access (controlled by the allowed-users and trusted-users settings). Fixed versions are available across the active Nix release lines (2.28.7 through 2.34.7) and Lix (2.93.4, 2.94.2, and 2.95.2). Users running multi-user Nix installations should update immediately; single-user installs are not affected.
Read →PV Magazine
Heat Pump Sales Rise 17% Across Europe in Q1 as Energy Prices Surge
European heat pump sales grew 17% year-over-year in Q1 2026, with approximately 575,000 residential units sold across 11 countries. The primary driver was Iran's closure of the Strait of Hormuz in March, which spiked gas and oil prices across the continent and accelerated the economics of switching away from fossil fuel heating. France, Germany, and Poland led with 25% growth. Austria was the notable outlier — a 30% decline following the elimination of government subsidies — illustrating how quickly demand can reverse when policy support disappears. The episode reinforces a pattern from the past decade: heat pump adoption responds more to price shocks and subsidy structures than to climate awareness alone.
Read →Taipei Times
Taiwan Sentences TSMC Spy to 10 Years Under National Security Act
A Taiwanese court sentenced former TSMC yield engineer Chen Li-ming to 10 years in prison for stealing trade secrets related to 2-nanometer chip production equipment and passing them to Tokyo Electron Taiwan. Between mid-2023 and mid-2024, Chen and four co-defendants photographed and reproduced confidential technical information about etching equipment used in TSMC's most advanced fabrication processes. This is the first corporate case prosecuted under Taiwan's National Security Act — a designation that reflects how seriously Taiwan treats the protection of leading-edge semiconductor IP. Tokyo Electron Taiwan, the recipient company, faces a NT$150 million fine. The sentence signals that Taiwan intends to treat semiconductor espionage as a national security matter rather than a commercial IP dispute.
Read →