we caught a fake coding interview to steal your developer credentials on the @elastic.co community slack. be extra careful with anyone DMing you files to download and run full analysis: www.elastic.co/security-lab...
Philipp Krenn
@xeraa.net
🎩 of DevRel & Developer 🥑 at Elastic — posts about Elasticsearch, Kibana, search, observability, security
are you in the weights? it's the new klout also works for products (though reluctantly) #elasticsearch intheweights.com
more cursor skills in the wild — here and everywhere else. spin up an elasticsearch cluster, manage kibana, configure security, set up OTel,... and almost hidden under it is also the brand new MCP endpoint for the @elastic.co docs cursor.com/marketplace/...
BM25: "why won't you die?!" > the lexical retriever BM25 with appropriate setup outperforms neural rankers in most cases; notably, gpt-oss-20b with BM25 on the passage corpus achieves the highest answer accuracy across all retrieval settings in our study;
is it an API key for a cloud account or the cluster? way too common of a confusion. so why not both?! released today for serverless projects and your @elastic.co cloud account PS: please be extra careful in your day to day use with these. they have an extra wide blast radius 💥
someone woke up at RSA and chose violence: vibecoded.vc/cooked/ 😂 though it is entertaining (and I won't agree on all of the takes ;) )
obligatory GTC keynote tweet when you make the top slides: building HNSW graphs with up to 12x the throughput and 7x faster merges on elasticsearch and NVIDIA cuVS (a GPU-accelerated library for vector search)
nvidia GTC where every second word (spoken and on booths) is AI, agent, or token 😬 PS: who else is around?
BM25 for "sparse visual-word activations"? arxiv.org/abs/2603.05781 BM25 just refuses to disappear or even take the back set for retrieval
soon... and there's already the .md version for every elastic docs page and you can download the full docs as MD in a ZIP file too
outage scenario: electricity turned off because of a drone / rocket attack ongoing updates: health.aws.amazon.com/health/status
*claude code is the new gatekeeper* fascinating report on the choices claude makes, build vs buy, the personality of different models, and who is winning / losing 1/5 PS: when creating code is cheap, the new moat is distribution
4x performance improvement by upgrading from #elasticsearch 8 to 9. "this one weird trick your cloud provider / hardware vendor hates" 😉 medium.com/trendyol-tec... PS: I have a hunch what made the difference here
2 new #jina models have entered the embedding arena — v5 multilingual: * small: 1024 dim, 32K context * nano: 768 dim, 8K context both support matryoshka dimension truncation (32+) and are at the top of current benchmarks — especially for their parameter size publicly accessible (non-commercial)
gandalf prompt injection is still fun: gandalf.lakera.ai/gandalf 🧙♂️ though almost disappointing if one prompt takes you through multiple levels (🇦🇹)
Gandalf | Lakera – Test your AI hacking skills
Trick Gandalf into revealing information and experience the limitations of large language models firsthand.
gandalf.lakera.ai
* OpenClaw agent opening a PR on matplotlib * reviewer rejects it per the repo's policies * agent replies with a personal attack github.com/matplotlib/m...
new public #elastic roadmap: * covering key initiatives like ES|QL, better dashboards,... * recently shipped features (those are our fiscal quarters) * upcoming features as in-progress, near-term, and mid-term 1/2
catching up on the search dev room at #FOSDEM: lots of good stuff on fosdem.org/2026/schedul... glad we (or carly richmond) could put this together again. this won't be the last one. PS: given our colorful past, it's especially great to be back at FOSDEM pushing the search dev room and OSS :)
long US weekend — great time to catch up on some @JinaAI_ papers about rerankers and code / multilingual / multimodal embeddings: * jina-reranker-v3 * jina-code-embeddings * jina-embeddings-v4 * ReaderLM-v2 * jina-clip-v2
free and OSS alternative to CleanShot X: www.bettershot.site because not everything needs 100 features and a cloud service... PS: just added an issue for homebrew support
earning a living with OSS was never easy. but it just seems to be getting harder with LLMs like for tailwind, which ironically LLMs love: github.com/tailwindlabs... not an encouraging thought
anybody tried z.ai in anger? not sure about the quality other than the claims; there is a more in-depth paper: arxiv.org/abs/2508.06471 but the pricing looks really hard to beat and you can just put it "under" the common tools
back at home to upset the neighbors: mr 🐿️ was not pleased by my presence — only wants nuts unobserved
how to clean up an ancient (8 years!) #elasticsearch cluster with MCP + #claude: frutik.medium.com/robots-vs-zo... PS: not being able to delete indices might be a bit of a feature
final friday elky of the year — already in the well rounded holiday version 😀 I‘m off to europe for a bit now
latest malware benchmarks from www.av-comparatives.org/tests/busine... PS: still surprised to see elastic in the list and how well we're doing — caught everything in 2025