← Feed

Posts

• View post

  Observation: If you are learning a new language (for me #Rust atm), you don't quite know yet what existing go-to libraries are and you start searching around. Maybe that has always been the case in some form, but the amount of vibe-coded, only 1-2 releases in total, still with clear bugs and issues and then abandoned is just CRAZY. Sure, I'm still learning and certainly not quick understanding why something doesn't work, but I've literally wasted many hours already b/c of slop-...

• View post

  Naming heat haves after petrol companies is an excellent idea! https://mastodon.social/@dmian/116930053970724530

• View post

  Haven't seen a big splash in the (IT) news yet, but apparently there is a 16 year old vulnerability in KVM which can be used to escape a guest and even take over the host (CVE-2026-53359): https://github.com/V4bel/Januscape. If /dev/kvm is available (world-writable on the host), it can also be used as a LPE to root. This is kind of bad. REALLY bad.

• View post

  I learned the other day, that I must assume MUCH less I know about the implications the "AI” bubble has when talking to others. A good friend of mine, well educated, PhD in Psychology, is o/c aware of psychological issues caused by "AI”. She was completely unaware of the absolute reckless and exploitative behavior of the industry. I only noticed, b/c she was complaining about how expensive new notebooks are and was VERY surprised why this is the case. For her “AI” was just a “free se...

• View post

  People on the internet trying to look smart by saying "not vibe coding" is like "not using a calculator”. Quite an evolution to the "like not using compilers” I have to listen to in person.

• View post

  Any #ruby #minitest users in my timeline? Today I tried to understand how to use MiniTest::Mock to expect a method call with some positional arguments, but arbitrary (none or any) keyword arguments. I think you can’t. It's just not a thing. The only way to do this, is to use the block form with MiniTest::Mock#expect and to all argument matching yourself. What am I missing here? Disclaimer: I’m deep in the RSpec camp when it comes to Ruby test frameworks 🫣

• View post

  Which one of the #redis drop-in replacements is still active and maintained these days? It’s for the Celery worker of paperless and I'm not exactly sure what is needed feature wise. I was just wondering what you would replace "docker.io/library/redis:8" with in a docker-compose file 😀

• View post

  In a #Rust application, why would I specify a dependency version in Cargo.toml, if I don’t care about a specific version? Like using “*" by default. Cargo.lock would contain a concrete version, so stuff doesn't break randomly, everybody gets the exact same version. If there is an incompatible change, you can add constraints, like limiting it to version “2” for example.

• View post

  Nice "hack" to get all your gists from Github, including private ones by @FND: https://prepitaph.org/snippets/gist-exfil/

• View post

  What is this? Some kind of spammy cold calling/outreach? I most certainly did not trigger this. The email looks very legit (as in comes from Anthropic). It's sent to an old email I basically don't use anymore.

• View post

  Aside from the abysimal uptime Github currently presents, they -also- had one of the worst security incidents you can think of: An RCE via a simple “git push” with total loss of tenant isolation (via https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854). If GitHub weren't such a central piece of infrastructure, the current situation would be disastrous for their business. I am afraid this is just the beginning. #github #security

• View post

  Copy Fail (https://copy.fail/, CVE-2026-31431) is a good reminder why I don’t want to run CI jobs only in containers. It would be great to get some momentum to https://code.forgejo.org/forgejo/forgejo-actions-feature-requests/issues/4 (microVMs for forgejo actions). At least on bare metal (or nested VMs with nested KVM) this would make things a lot safer. It would also simplify the usage of containers/docker in CI jobs without compromising security, which is kind of a pain with Codeberg Action...

• View post

  @OSCo Hey there 👋🏻 I'm a little confused, what you want to tell us by the message on the registration page. Which one is "the last edition”? Is registration for 2026 already closed?