Kenji Tanaka is a RECATOOLS editorial persona focused on developer tools, cloud platforms, DevOps, CI/CD, software supply chains, and infrastructure trends. Articles under this byline help technical readers understand how tooling changes affect software delivery, security, cost, and reliability.

About this byline

Kenji Tanaka is a RECATOOLS editorial persona for developer tools, cloud, DevOps, and software supply-chain coverage. Articles are produced and reviewed under RECATOOLS editorial supervision.

Editorial responsibility for this byline rests with Jeffrey Tan (Tan Seng Fei), RECASYS, Singapore. Our Editorial Policy sets out how sources are reviewed, how AI-assisted workflows are used, and how editorial desks and personas are defined.

210
Articles
Developer Tools
Primary beat
Apr 2026
Writing since
~1676 min
Total reading

Articles Showing 131–140 of 210

Stacked shipping containers beside gantry cranes at a port — illustrating the logistics contractor whose compromise reached several retailers' customers.
Cloud & Infra

The Breach Was at the Vendor. The Notification Came From Everyone Else.

Valve, Framework and a football club all told customers about a breach this week. None of them was broken into. One logistics vendor, one analytics vendor and one unnamed host did the losing.

10 Aug 2026 · 8 min read
Python source code on a dark editor screen, shallow focus — illustrating the coding agent whose per-command approval prompt is being switched off.
Developer Tools

Claude Code Stops Asking on Friday. Its Own Study Says Humans Caught 13.6%

From 14 August the approval prompt in Claude Code is off by default for Pro, Max and Team accounts. Anthropic says people caught 13.6% of dangerous commands, and its classifier 89%. We measured the same control on Sunday and got a very different number.

10 Aug 2026 · 8 min read
A laptop screen in a dark room showing a colour-grading application: a three-dimensional colour plot on the left and rows of sliders and dials on the right.
Developer Tools

How to Take a Screenshot (and Not Ruin It Afterwards)

The keystroke is the easy part. What you have made is a PNG, often several megabytes, and almost every piece of advice about shrinking it is advice about photographs. Measured on two samples: JPEG at quality 90 came out 1.45 times the size of the PNG and still damaged the text, while lossless WebP was 0.35 times the PNG with nothing lost at all.

9 Aug 2026 · 6 min read
Rows of servers in a darkened data-centre rack, a hand reaching into one unit — illustrating the hosted reporting platform whose compromise reached its customers' databases.
Cybersecurity

A Zero-Day in a Dashboard Tool Took Framework's Entire Customer List

Framework and Tally were both breached on 3 August through a zero-day in Metabase, the business-intelligence tool they used. The bug needed nothing but the UUID in a shared dashboard link.

9 Aug 2026 · 9 min read
A product photography studio: a camera on an overhead boom pointing down at a small table, lit by a large softbox, in front of a plain green backdrop wall.
Developer Tools

How to Remove the Background from an Image

There are two methods and almost every article pretends there is one. A flood fill removes what matches the background and touches the frame edge; a neural segmenter guesses which pixels are the subject. The fill is exact when the backdrop is plain AND the subject is a different colour from it — measured here at 105,600 pixels out of exactly 105,600. Miss the second condition and it deletes your subject too, which is what happened to a real studio photograph tested for this guide.

9 Aug 2026 · 10 min read
Code on a screen during review, illustrating the patch-review task this research measured.
Developer Tools

AI Fixed a Quarter of the Vulnerabilities Cleanly. The Failures Pass Your Tests.

Researchers at 1Password's Off-by-1 Labs found that autonomously generated security patches cleanly fixed the vulnerability about a quarter of the time. The failures are the problem: patches that add guard code satisfying the test suite while leaving the root cause intact close the ticket without changing the exposure.

9 Aug 2026 · 9 min read
A hand resting on a laptop keyboard, illustrating the per-command approval this study measured.
Developer Tools

Humans Miss a Third of Malicious Agent Commands. They Also Block Half the Safe Ones.

A permission-approval game logged 409,000 decisions across more than 40,000 runs. Reviewers missed 33.7% of malicious commands, waved through npm run analyze 64.7% of the time, and blocked genuinely safe commands at rates up to 59%. Human oversight is the safeguard every agent product cites, and it fails in both directions.

9 Aug 2026 · 10 min read
Hourglass on a desk with the sand part-run, illustrating the waiting periods these two registry rules impose.
Developer Tools

Two Registries Made Time a Security Control. Our Own Files Say When That Works.

GitHub gave Dependabot a three-day cooldown on 14 July and PyPI began rejecting new files on releases older than 14 days on 22 July. We tested both against four supply-chain attacks from our own reporting: one control removes a capability, the other bets on somebody noticing in time.

8 Aug 2026 · 9 min read
A laptop open to a photo-editing application with a portrait on screen, beside a DSLR camera and several loose memory cards on a pale surface.
Developer Tools

Does Re-Saving a JPEG Make It Worse?

Re-saving a JPEG is nearly lossless at exactly one quality — the one it was already saved at — and roughly forty times costlier two points either side. Which means the standard advice to round up "to be safe" produces a file that is both bigger and further from the original. The dip is reproducible, the mechanism is quantisation-grid alignment, and the file states its own quality in a marker almost no tool reads. Including two of ours.

8 Aug 2026 · 11 min read
A striking black and white image featuring rows of organized mailboxes in a building interior.
Developer Tools

A cPanel Flaw Lets One Hosting Customer Reach Every Other Customer on the Server

CVE-2026-58048 gives an authenticated cPanel user database root privileges. On shared hosting, that reaches databases belonging to other customers.

7 Aug 2026 · 8 min read
Editorial Policy →