27 October 2026

 Like

Liked kat cosgrove (@kat.lol)
Post details
I was going to write something flowery and post a bunch of photos but I just don't fucking have it in me. I had to put Espresso to sleep. She was just a couple weeks shy of her 23rd birthday and she was perfect. I am not ok and am taking some time for myself. If you need something, no you don't.

26 October 2026

25 October 2026

 Repost

Reposted Josh Bressers (@joshbressers@infosec.exchange)
Post details
I'm not sure claiming "everything is on fire" is the correct takeaway here There is a pile of flammable materials we've been ignoring for decades. It catches on fire sometimes. It caught on fire a lot this week And the people who put out the fires, for free, put the fire out again The current plan is to just keep throwing more oily rags on the pile. We could try to help the volunteers, but that costs more than adding oily rags to the pile

24 October 2026

 Like

Liked BrianKrebs (@briankrebs@infosec.exchange)
Post details
Got some unwelcome news first thing today: Someone I've known for many years recently took their own life. Feeling angry and sad and like a shit friend because we lost touch at some point, and I had no idea of their struggles. But I definitely could have been more curious. My response so far since hearing this news has been to reach out to a few people I've not checked in w/ for a while.

 Like

Liked Andrea (Drea) Tamar Pinski (@pinskia@hachyderm.io)
Post details
Maintainers of open source projects should be mentoring folks to become their replacements. Not just thinking this is about controlling their project. I have learned this the hard way for gcc. You can't just think it is your way or the highway. Also gsoc is NOT a replacement for mentoring inside the project. It should supplement the mentoring that is done, just like an internship. Also this is not unique to gcc, it is many open source projects. And then there is the gaming of github stats, the one or two commits in llvm and leave issue. Those are used to gain stats for a job. Seriously open source is broken because of the gaming of the system. Even inside companies where you have the person with the most open source commits. Or the person who opened the most issue. Or the person who reviewed the most. (What is funny is that i am that person but I am not trying to play the game of counting, I am just trying to push gcc forward). At the same time I am mentoring folks both inside and outside of qualcomm on both gcc (and even to a less sense llvm) and performance analysis. But going back to my original point is mentoring and maintainship overlaps. It is not one or the other but rather both in the same role. By the time you step down you should have at least mentored a few to be able to take you from you. If you have not you partially failed a as a maintainer as the project will no longer can be maintained in the future.

23 October 2026

22 October 2026

 Listen

Listened to Raising An Agent: The Company of the Future
Post details
Quinn and Thorsten sit down together in San Francisco to answer the question they get asked most: how does the Amp team work? They walk through a week at Amp, from Thorsten's Sunday post and the single Monday meeting to writing down goals in silence. They explain why Amp has no quarterly goals, no departments and no territory, and how feature flags and the work in progress, orb good and orb bad channels keep a team of 21 in sync. They also cover reviewing changes with agents, pushing to main without mandatory code review, and why they think more companies will soon work like this.

21 October 2026

 Like

Liked kat cosgrove (@kat.lol)
Post details
If your response to this vulnerability is "just don't use PHP lol" I have to assume that you know zero about web development and the web outside of a modern bespoke, FAANG, React/Angular, static site generator type of way and you should probably sit this one out 'cause you look a little dumb

 Like

Liked kat cosgrove (@kat.lol)
Post details
I do not like Chainguard. You cannot get me to say a single positive thing about them as a company. Leaking a critical vulnerability in violation of an embargo is outrageous behavior even for them and they absolutely know better.

Browse by date

Every post on this site, by when it was posted. The brighter a month, the more was posted that month.

JanFebMarAprMayJunJulAugSepOctNovDec
2026210128144164218133131166123213
2025345203189191212170182154131160196142
2024410389421330361237249195189211226333
202310348291027504394363273611724751700599
2022112469510701693121213041248701642111020521473
20214852673794624263272832542945175761167
2020595764914627821708686630533500332458
201955396764786681109115192232358
2018413462764957354639415151
2017535262597769605961412536
2016133111034353536
20151111432
201411141
20131