Ephemeris · Issue 047 Thursday · 04 Jun 2026 · Zürich
Ephemeris · Issue 047 01 / 05 · Cloudflare
Security · Networking

The route says it came from you. It didn't.

Forged-origin BGP hijacks strip the attacker's own network out of the path and impersonate someone legitimate. Cloudflare makes the case for "First AS" enforcement — a router check that the leftmost hop in an announcement matches the peer that actually sent it, and a treat-as-withdraw when it doesn't. Their measurements found 7 of 14 Tier-1 backbones enforce it by default; the other 7 will still carry a forged path.

AS_PATH · forged origin
199524 270118 17072 13335 36429
First AS = leftmost hop. If it isn't the peer that sent it, drop the route — don't tear down the session.
7 / 14 Tier-1 enforce by default
Ephemeris · Issue 047 02 / 05 · OpenAI
Dev Tools · Agentic Coding

Months of systems work, done in weeks.

Wasmer pointed Codex with GPT-5.5 at a hard, low-level target — a Node.js runtime for the edge — and kept the loop tight. The build that usually eats a quarter of specialist time landed in weeks. The lesson is the shape of it: a small team, an agent aimed at a real systems problem, and verification close to the work.

10–20× faster
Built
Node.js edge runtime
With
Codex · GPT-5.5
Shipped
Weeks, not months
Ephemeris · Issue 047 03 / 05 · Google
Dev Tools · Agents

One agent, five surfaces.

Google rebuilt Antigravity from an IDE into a platform: a desktop app, the agy CLI, an SDK you can host on your own infrastructure, and Managed Agents you spin up with one Gemini API call into an isolated Linux box. Gemini CLI and Code Assist are folding into it. The desktop app runs up to five agents in parallel across different parts of a codebase.

$ agy run --parallel 5 "port module to rust"
→ spawning isolated Linux sandboxes…
agent_1 auth/ ✓ verified
agent_2 router/ ✓ verified
agent_3 codec/ running…
agent_4 · agent_5 queued
 
! gemini-cli + code-assist → retiring into antigravity (18 Jun)
Ephemeris · Issue 047 04 / 05 · via TechCrunch
Generative Media · Video

Now the video takes direction.

Gemini Omni Flash folds text, image, audio and video into one model and reasons across them instead of stitching clips together. Once a shot exists, you direct it in conversation and it holds character identity across edits. It launched May 19 across the Gemini app, Flow and YouTube Shorts, every frame carrying a SynthID watermark.

You
"Make the background a rainy Tokyo street."
You
"Give him a leather jacket — keep his face."
Ephemeris · Issue 047 05 / 05 · PostHog
Databases · Data Engineering

Pick by the workload, not the logo.

PostHog's Mathew Pregasen lays out a comparison worth bookmarking. Postgres is a row-based, client-server OLTP database built for transactions and concurrent writers; DuckDB is an embedded, vectorized OLAP engine built for analytical scans. Past ~100M rows, Postgres strains on aggregations where DuckDB — batching thousands of values at a time — accelerates. They solve different problems, and the value here is drawing that line cleanly.

Postgres

Model
Row-based · client-server · OLTP
Best at
Single-row lookups, concurrent writers
Past 100M rows
Strains on big aggregations
Reach for it
Transactions, shared source of truth

DuckDB

Model
Columnar · embedded · OLAP
Best at
Aggregations over millions of rows
Past 100M rows
Vectorized scans accelerate
Reach for it
Zero-setup analytics, Parquet in place
End of issue 047 Back to top ↑

That's today.

Five picks on a dense morning: a backbone-routing fix, an agent-built edge runtime, a dev platform that spreads across surfaces, conversational video, and a clean read on when to choose DuckDB over Postgres.

Sources today · Cloudflare · OpenAI · Google / Antigravity · TechCrunch · PostHog
Rubric · tools you can adopt this week · creative & generative media · dev tools & agentic coding · privacy & security · research with a practical kernel
Issue 047 · 04 June 2026 · Europe/Zürich