me at 17: a secret conspiracy of billionaires shapes global events
me at 35: class interest creates emergent outcomes and aligned behavior, but thereās no smoky room where plutocrats plot to shape global events
me at 41: a secret conspiracy of billionaire perverts shapes global events
[contains quote post or other embedded content]
Reminder that #Renovate 43 came out yesterday! We landed a few breaking changes, so check out the release notes: https://github.com/renovatebot/renovate/releases/tag/43.0.0
I'm legit unfollowing people who never use alt text.
You're literally typing on a text based app. So why are you making Canva images with little pithy quips and no alt text. I honestly don't understand it.
Did someone post something? It's on mastodon.social. It's literally on booping.synth.download. It's maybe in wetdry.world. It's literally on gts.apicrim.es. You can probably find it on app.wafrn.net. Dude it's on shrimp.starlightnet.work. It's a infosec.exchange original. Check out mas.to for it. You'll find it on hachyderm.io. It's definitely on oomfie.city. Look for it on tech.lgbt. It's over on yeen.town. You can see it on waf.moe. It's been shared on akko.wtf. Go peek at fuzzies.wtf. It's trending on transfem.social. You can catch it on eepy.moe. Browse over to lethallava.land. It's on $INSTANCE$host$. You can read it on $INSTANCE$host$. You can go to $INSTANCE$host$ and like it. Log onto $INSTANCE$host$ right now. Go to $INSTANCE$host$. Dive into $INSTANCE$host$. You can $INSTANCE$host$ it. It's on $INSTANCE$host$. $INSTANCE$host$ has it for you. $INSTANCE$host$ has it for you.
If you funded a maintainer before they created their most successful package, you have a claim on it.
The Law of Surprise is underutilized in open source.
Everybody thinks 'https://' stands for 'hypertext transfer protocol secure' but it actually stands for 'head to this place, sucka' followed by a colon and two laser sounds
We've announced 6 Moderate Security Advisories, which allow for possible remote code execution, when an attacker has access to a repository's default branch
More info: https://github.com/renovatebot/renovate/discussions/40403
This week on #OpenSourceSecurity I chat with Jamie Tanna about updating open source dependencies. It's usually not as simple as "just update" and Jamie has a ton of real world experience in this working on Renovate
https://opensourcesecurity.io/2025/2025-12-renovate-jamie/
it's truly amazing what LLMs can achieve. we now know it's possible to produce an html5 parsing library with nothing but the full source code of an existing html5 parsing library, all the source code of all other open source libraries ever, a meticulously maintained and extremely comprehensive test suite written by somebody else, 5 different models, a megawatt-hour of energy, a swimming pool full of water, and a month of spare time of an extremely senior engineer
Jan 1: this is the year of new Me
Jan 12: [eating shredded cheese directly from the bag] new years resolutions are a bourgeois construct for disciplining bodies into productive units for capital
Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software.
Just fuck you. Fuck you all.
I can't remember the last time I was this angry.
Saw an advert for a Trainline AI assistant thing, with a disclaimer at the bottom saying itās AI, so might not actually be right.
Why is it okay for AI to be unreliable? Why are we collectively so accepting of the idea?
I made something new: an eslint plugin to validate your npm ecosystem lockfiles! It supports npm, pnpm, yarn, bun, and vlt, and it's already helped find a supply chain security attack vector inside a fortune 500 tech company. https://www.npmjs.com/package/eslint-plugin-lockfile
FYI: We've changed the `GOSUMDB` environment variable on the Mend-hosted Renovate Cloud infrastructure, which may lead to impact to users with private Go modules. As we've noted in https://github.com/renovatebot/renovate/discussions/40041, this is due to previously used settings leaving users open to supply chain attacks
Do you write blog posts, documentation, or anything for software engineers? Do you want to?
Join us for the Writing for Developers book club with @overcommitted.dev, officially kicking off now! š
Chapters 1+2 now, first discussion Friday. Join us in Discord to chat about it: discord.gg/d9gZyYuqKd
https://discord.gg/d9gZyYuqKd
My first advice to junior contributors is to STOP using vibe coding for PRs. OSS is always about people more than about code. We don't need more code generated by LLM, we need more people who care.
When you become disabled thereās a few things you notice right away:
Ableism is everywhere.
People will abandon you. Even those you were certain would stick by you.
Just because something is illegal or against human rights code doesnāt mean itās not happening ALL the time
Accessibility is not what it should be.
People will blame you for your disabilities. It wonāt matter what you do or how hard you try, you wonāt be āgood enoughā
All the misconceptions you had about disabled people were wrong.
Thatās really the crux of it.
Disability is a minority group you can join anytime.
Most people will experience disability in their lifetime
Yet discriminating against us is not only common itās socially acceptable.
Most people donāt realize how misguided they are until it happens to them
Many of us living with chronic illness had the same preconceived notions about disabled people until we became disabled ourselves
We thought it wasnāt āthat badā.
We believed we would be the exception
Many of us became advocates because the realization that we were so horribly wrong shook us to our core.
If we had that much ableism to work through, then so does everyone else.
Thatās why we need strong allies.
We need people who will say disabled lives matter.
We need to shift the public perception away from the idea that disability is a moral failing.
We need to be visible, take up space and help people realize that all health is temporary and disability happens to almost everyone.
Inclusion and accessibility matter!
#disability #ableism
#eugenics #chronicillness
This is why I have a website. Itās also why everything Iāve ever written has appeared on my website with *very* few exceptions
Having a single domain name thatās YOU is invaluable. My website gets lots of compliments on its branding and appearance. My slides borrow that appearance, too
It matters!
[contains quote post or other embedded content]
Honestly, if you value content you've created always make sure it has a home outside of a single company. Always.
[contains quote post or other embedded content]
The best software engineers are fantastic written communicators.
Here's why:
- breaks information out of silos (DMs, emails) so others can reference, build upon, and expand your work
- supports remote teams, different timezones, and helps colleagues catch up after time off
- unblocks teammates by reducing repetitive conversations
- prepares you for the lest of your career. Senior+ roles ARE writing roles: architecture docs, code reviews, technical specs, etc.
1/
"Entitled white billionaire wants to decide laws"
I don't give a fuck if Harry Potter was your whole childhood. It's not more important than the lives of trans people.
it's kinda weird that all the software i am expected to use for work are all written by distributed teams, go, python, postgres, linux, chrome, k8s etc
and despite being told "the best teams work in an office together" i don't know of any software i use that's actually written that way
The tragedy of the UK is that we grew up believing that our government would dispatch James Bond with his ālicense to killā to dispatch megalomaniac media tycoons, water barons and mad billionaire rocket builders.
The reality is Bond would probably turn up to award them their MBE.
We built a calculator that doesn't work, but don't worry, it's also a plagiarism machine that will tell you to kill yourself. It runs on the world's oceans and costs 10 trillion dollars.