To celebrate the new edition of DDIA, revive my writing discipline and my resolve to read the whole damn thing this time, I share my first blog in years: LSM Trees from First Principles.
ditsuke.com/lsm-trees
there’s a new edition of @intensivedata which is one of the most pivotal technical books written in the last decade, and almost no chatter on this app about the new edition or the new content it covers.
Are there no serious engineers and practitioners on this app anymore? 😢
Tushar retweeted
If Prasar Bharati can spend ₹15 crore a year on a DD News show featuring a star anchor, while the ISRO Chairman’s basic pay is about ₹27 lakh a year, shouldn’t we rethink our priorities? If India wants to conquer space and attract our finest scientific minds, our rewards must match our ambitions.
Tushar retweeted
Does Japan have a low TFR?
Yes.
Does Japan have by far the highest TFR of all developed East Asian nations?
Yes.
Is Japan's TFR comparable to or higher than that of Euro countries like Italy and Spain, despite far less immigration?
Yes.
Tushar retweeted
we're 26 years into Mac OS X, and apparently this is the first time it occurred to anyone that a root cert might require certificate revocation?
Apple has confirmed they are working on a software update for macOS to patch security issues related to the compromised eMudhra intermediate CAs
"Apple is making further changes to block these certificates in other places on Mac where software checks certificates, such as the command-line tools included with macOS or the Xcode Command Line Tools that use /etc/ssl/cert.pem. These changes will be available in a future software update, and you won't need to edit any files to get them."
Tushar retweeted
The ugly truth about France and some of the other European countries currently in turmoil - and which none of the politicians want to admit because it'd be political suicide - is that you can't solve the problem by going after immigrants (as the right asserts) or the rich (as the left asserts), but you could solve it by going after the old.
One extraordinary statistic for you: people over 60 in France, a quarter of the population, own 60% of France's wealth, non-financial and financial (ofce.fr/pdf/revue/2025/3-192…).
And here is another crazy statistic:
that same quarter of the population, those above 60, receive nearly two-thirds of all social spending by the French government (previssima.fr/actualite/prot…) - which is famously among the highest in the world (France's government spending is an insane 57.3% of GDP).
Last statistic: they make up about 40% of voters because they're a third of registered voters (insee.fr/fr/statistiques/266…), and they turn out far more than anyone else (franceinfo.fr/elections/sond…).
Put our 3 statistics together and there's almost a bit of an apartheid situation here: the old own most of the country's wealth, collect most of the social spending and have the political power to keep it that way.
Which makes them a de-facto rentier class, living off assets and transfers paid for by younger generations.
And, of course, at the risk of stating a truism, the future is built by the young. Yet France keeps effectively taking money away from them to give it to those whose working lives are already behind them - and need the money far less since they already own the country's wealth.
What about inheritance, I hear you ask? That's the funniest/saddest aspect: given that life expectancy has kept rising, the French now inherit a home at 54 on average. The most common case is someone in their 80s leaving it to heirs in their 50s, in effect the very old transferring wealth to the about-to-be old (insee.fr/fr/statistiques/fic…).
You can add this to our earlier apartheid statement: on top of all the rest, even when the old finally let go of their wealth, it stays within their own "camp".
That's my personal situation, incidentally: I'm 42, my father is 71 and he is starting to look at ways to pass things on to me and my siblings, when our professional lives are already well settled, so it'll arrive when it changes things the least, which is pretty much the French system in a nutshell.
Now, I get that there'd be some unfairness in going after them: they paid into the system their entire working lives, playing by the rules of a social contract that told them if they paid up they'd collect at the end. Changing the rules now means breaking that promise, which is admittedly unfair.
But there's no magic wealth tree in any society: you can only take it where it is. That's the way most major societal transformations end up happening. They're often triggered by a catastrophic event (the so-called "four horsemen": mass-mobilisation war, revolution, state collapse, plague) BUT what really drives change is a transfer: wealth gets pried from the privileged class who've been sitting on it and handed to those who'll build what comes next.
So, in theory and in an ideal world, you can do without the catastrophic event and directly proceed with the transfer...
The fact that in France, and elsewhere in Europe, it's the youth protesting is probably no coincidence - even though they don't frame it as a generational fight. And even though, cruel irony, the left politicians many of them march behind promise to bring the retirement age back to 60 (lcp.fr/actualites/legislativ…), which would make the situation even worse.
Let's say they understand intuitively that the system is stacked against them, even if they haven't yet figured out how. And politicians are obviously doing what politicians do, meaning pandering to the people who actually vote, while pointing the young towards easier - and politically convenient - scapegoats.
To be clear I'm not saying it's the only problem in France, VERY far from it. I'm also not saying that all old people in France live a lavish lifestyle at the expense of younger generations: there are also plenty of very poor retirees who, if anything, would deserve more.
What I am saying is that it's probably the biggest elephant in the room: everyone can see it, nobody dares mention it - no politician, from any side, wants to run on cutting grandma's pension - and it makes every other problem harder to fix.
Tushar retweeted
PSA for macOS users:
1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys.
2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git.
3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately.
4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again.
4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below.
5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt:
“Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.”
Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple.
I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
PSA for Codex CLI users:
1. Codex 0.163.0’s release lockfile pins rustls-webpki 0.103.15 and root bundles that can still trust compromised eMudhra certificates.
2. An attacker intercepting your connection could impersonate a server, steal sensitive data, or alter responses, potentially tricking Codex into running malicious commands.
3. Codex 0.164.0, released October 23 at 12:48 a.m. ET, updates those dependencies to fixed versions.
4. To check your codex version run "codex --version". It should be at least 0.164.0.
5. To patch the vulnerability, run "codex update".
6. Apps that bundle their own Codex copy must also be checked.
Tushar retweeted
My dear friends, please, I hope to demand your absolute attention to this matter:
In 2018, my junior from St. John’s Medical College, Bengaluru, Dr. Randall Sequeira (middle in the pic), trekked up a steep, bauxite-rich plateau in Odisha to hold a monsoon health camp in the indigenous Kutiya Kondh village of Kutrumali.
In a piece he wrote then titled "Kutrumali’s Demons," Randall described sleeping under a dripping school roof in freezing fog, borrowing utensils from a local health worker to cook khichdi, and waking up at 6 AM to a line of tribal mothers. He wrote with heartbreak about treating malnourished toddlers with protruding bellies and visible ribs, listening to stories of stillbirths and chronic fevers, while noticing the shiny new solar lights installed by a mining conglomerate eyeing the aluminium ore beneath the villagers' feet.
Comparing his small medical team to hobbits sheltering in the night, Randall worried about the outside forces coming for that fragile village.
Randall stayed with the tribal/ adivasi community to serve them. After St. John’s and an MD in Internal Medicine from SMS Jaipur, he gave up every comfort of urban medicine to live in Kalahandi, recognizing that clinical prescriptions are meaningless when indigenous communities are stripped of their forests, water, and dignity.
On the night of October 16, Odisha police picked up Dr. Randall Sequeira and Dalit activist Laxman Naik at 11 PM from his home in Bhawanipatna. A gentle physician who has spent years trekking up hills to save tribal children is now locked in Rayagada sub-jail under frivolous but draconian charges (attempt to murder, dacoity), simply for standing with Adivasis peaceful protesting the mining of their sacred hills in Sijimali and Kutrumali.
thewire.in/rights/randall-se…
Odisha Govt. said it will cut down forests to connect tribal villages. But it was a way to bypass green laws and fast track London based Vedanta’s, and Adani's mining plans. Local organisations estimate that around 45 villages depend on these hills and would be affected.
reporters-collective.in/trc/…
The state has answered with repression rather than dialogue. In the last three years, at least 43 police cases have been filed and over a hundred Adivasis and Dalits, both women and men, have been incarcerated in Odisha jails. For example, from In March and april 2026, 8, 2026, to April 8, 2026, within one month, 24 people were sent to jail, 217 were made accused, and the number of “others” total 1,140. An activist who was not named in the original FIRs, but has since been implicated in about 12 cases, so that bail in one case is followed by arrest in another. This pattern of capture and releases have been used to crush rational dissent.
Dr. Randall understood that being a good doctor means understanding that prescriptions cannot compensate for the denial of land rights, that surgery cannot undo displacement and that no medical can substitute for the basic infrastructure a government has failed to provide.
thehindu.com/sci-tech/health…
To my fellow medical fraternity, and every citizen with a conscience: a kind physician who embodies the highest ethics of our profession is being criminalized to clear the way for bauxite mining. Please do not let his voice be buried in a sub-jail.
Amplify this, demand due process, and demand the immediate release. Please sign in this form to show solidarity: forms.gle/o2Rj2Uu3tXaoWu9dA
If anyone can help out in this situation please reach out to Medico Friend Circle - mfcindia.org/
Tushar retweeted
When systems see too much load, they sometimes never fully recover. These metastable failure states aren't esoteric or rare, and can be triggered on even very simple systems.
Here's an example with single-node Postgres, and a very common query pattern:
Tushar retweeted
emudhra is exiting their certificate authority business
not because they're incompetent
but because of social media reactions
Tushar retweeted
I want to move my home LAN off the common 192.168.0.x and 192.268.1.x ranges. Something other than 0 and 1.
Options: 4, 66, 115, 155, 156, 230, 237
Tushar retweeted
I read this and I'm terrified, the situation seems intractable.
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/informa…
Tushar retweeted
INTERESTING: The Delhi High Court judge seemed more interested in the age of Saurav Das and Ashutosh Ranka than their personal liberty . By the way, Judge Saheb, Saurav is born in Jan 2000 so is very much Gen Z. And Ashutosh is 31. By the way, what difference does age make here is beyond me. 🙏
Tushar retweeted
That video of that old man trying to educate that goon about the value of books while he just throws the books around broke my heart. Such a gruesome representation of India today.
Tushar retweeted
We just released uv 0.13.4, which updates our bundled certs in response to the eMudra incident.
This is a huge deal, and not unique to uv! It affects much of open source due to bundled CAs in certifi, webpki-root-certs, etc. Please upgrade anything that bundles CA certs.
one of eMudhra’s CA private keys was literally 4. google and mozilla acted within hours.
MeitY’s CCA licenses eMudhra. CERT-In hasn’t issued a public advisory till now. eMudhra works as a technology provider for government project.
literally zero accountability.
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
Tushar retweeted
Break: SBI confirms data Leak of its customers. #SBI Data Leak.
LOL
LOL @ "Custom Public Key Infrastructure- A Comprehensive Guide"
eMudhra Limited
July 11, 2025
emudhra.com/en/blog/custom-p…































