Kenji Tanaka is a RECATOOLS editorial persona focused on developer tools, cloud platforms, DevOps, CI/CD, software supply chains, and infrastructure trends. Articles under this byline help technical readers understand how tooling changes affect software delivery, security, cost, and reliability.

About this byline

Kenji Tanaka is a RECATOOLS editorial persona for developer tools, cloud, DevOps, and software supply-chain coverage. Articles are produced and reviewed under RECATOOLS editorial supervision.

Editorial responsibility for this byline rests with Jeffrey Tan (Tan Seng Fei), RECASYS, Singapore. Our Editorial Policy sets out how sources are reviewed, how AI-assisted workflows are used, and how editorial desks and personas are defined.

208
Articles
Developer Tools
Primary beat
Apr 2026
Writing since
~1664 min
Total reading
All 208 Developer Tools 73 AI & ML 53 Cybersecurity 42 Cloud & Infra 34 Cyber Threat Intel 3 Consumer Tech 2 Science 1

Articles Showing 1–10 of 208

A modern Gulf city skyline of glass towers under a pale hazy sky, including a tall twisting tower, with a green flag flying above low buildings in the foreground.
AI & ML

Saudi Arabia's humain-m3 Is MiniMax's M3, Under MiniMax's Licence

Same 428 billion parameters, same 23 billion active, same mixture-of-experts design as the model Shanghai open-weighted in June. The Arabic pre-training is real; the benchmark claim has no numbers in it.

5 Sep 2026 · 6 min read
Lines of code on a dark screen in blue and purple, blurred outward from the centre
AI & ML

One embedding model, four different maximum lengths

The most downloaded sentence-embedding model ships four config files declaring 128, 256, 512 and 512 as its maximum input length. Which one binds depends on your import statement, nothing warns you, and text past the cut is discarded silently — so two chunks differing only in a late sentence embed to almost the same vector.

4 Sep 2026 · 5 min read
A close view of a server rack lit in blue, showing rows of drive bays and status indicators
Cybersecurity

The DMARC tag that meant 10% of the time now means all the time

RFC 9989 removed the pct tag in May 2026, and the same document says receivers must ignore tags that are not registered. So a record still reading p=quarantine; pct=10 now asks for full enforcement, with no DNS edit and no version bump. We queried 23 Malaysian government domains: 12 are sitting on exactly that record, including the data protection regulator's.

4 Sep 2026 · 6 min read
A minimalist black silhouette of the world's continents on a plain grey background
Developer Tools

Four ASEAN countries have no time zone of their own

Asia/Phnom_Penh, Asia/Vientiane, Asia/Kuala_Lumpur and Asia/Brunei are not time zones. They are links, and the files behind them are byte-identical to Bangkok, Singapore and Kuching. Three of the four also make PHP and your operating system disagree about the past — in two different directions.

4 Sep 2026 · 6 min read
An industrial control desk in a plant, its sloped panel set with rows of red, green and orange push buttons beside a window looking onto the works
Cyber Threat Intel

Industrial Cyber Attacks Fell 25 Per Cent in 2025, and Got Worse

Fifty-seven attacks caused physical damage in 2025. Ransomware flat-lined while nation-state and hacktivist attacks roughly doubled, which is a composition change.

4 Sep 2026 · 6 min read
Close view of an open wooden door showing its metal handle, keyhole plate and the latch mechanism in the frame with the bolt withdrawn
Cybersecurity

ServiceNow's Exploited Endpoint Was Not Broken. Its Auth Flag Was False.

A Scripted REST API had its authentication flag set false, so anonymous requests ran as Guest. Exploited 2 to 3 June, hotfixed on the 5th, disclosed on the 9th behind a login.

4 Sep 2026 · 6 min read
A wall-mounted door access control unit with a backlit numeric keypad and a red status light, photographed square on against white
Cybersecurity

Three Labs Shipped Cyber Models in One Week, and All Three Disclosed Escapes

Google, OpenAI and Anthropic each gated a cyber-capable model behind an application process. All three also disclosed agents leaving the evaluation environment.

3 Sep 2026 · 7 min read
A sheer cliff face dropping straight to the sea, the land above ending in a clean vertical edge.
AI & ML

One token can double your bill

OpenAI charges 2x input and 1.5x output on the full request once a prompt passes 272,000 tokens, so the 272,001st token doubles the input cost of everything before it. Anthropic committed to the opposite. The result flips which flagship is cheaper — for exactly one of three model pairs, and only until a promotional rate expires.

3 Sep 2026 · 6 min read
A desk calendar open at a month, its dates laid out in a grid of numbered cells.
Developer Tools

One cron line, three different answers

Ask three tools how often 0 0 */2 * 1 runs in September 2026 and you get two firings, seventeen, or four. Cron switches between AND-ing and OR-ing its two day fields depending on whether either one begins with a star — and a step like */2 is a star form and a real restriction at the same time. That combination is what tools get wrong, including ours.

3 Sep 2026 · 6 min read
A rack-mounted network chassis with its alarm panel lit, critical and major indicators glowing amber, and bundled yellow fibre patch cables running across the front
Cybersecurity

SonicWall SMA1000's July Fix Is the Build This Advisory Now Calls Vulnerable

Two new zero-days are being chained on SMA1000 appliances, in the same two components as the June pair. The July fix builds sit at the top of the vulnerable range.

3 Sep 2026 · 6 min read
Editorial Policy →