27 links from the last 24 hours · 3 October 2026
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6528-1 security@debian.org https://www.debian.org/security/ Salvator…
Andrew · 1 October 2026 · 2 min read
I got targeted
Someone targeted me in an attempt to gain access or credentials because of my Open Source and/or consulting roles
This blog post goes into quite some detail about how I first booted Linux on my M4 Mac mini. I encourage you to look up terms and concepts you don’t know, since I cannot explain all the background in this post ;)
Just let me in, please — Max van IJsselmuiden
Authenticating online, has it become better or worse?
Superpersuasion will look like bribery
The idea of “superpersuasion” has been floating around the AI safety community for decades. Now that powerful and difficult-to-control LLMs have appeared…
Developer and Author from Austin, TX.
I think that the Dreyfus Model stands to be a well-suited framework through which we can analyze certain aspects of the always-evolving profession of software engineering.
The end of many big things
Unfinished — still a work in progress
One month coding with GLM 5.3 Flash | Wagtail CMS
Reporting on 2B tokens of AI usage and what shapes model selection and cost
You’ve probably seen this setup, or at least most of it. I’ve seen versions of it in enough places that I no longer think of it as anyone’s mistake. The SIEM sends high-severity alerts to a shared security mailbox, and within a month the analysts have written …
One clip from a Minnesota Cycling Federation fundraiser took on a life of its own. Hey look mom I’m famous.
Ten commandments from a decade of maintaining an SDK that shipped in a thousand apps and ran on hundreds of millions of devices.
In April I had to record a screen video for Meta’s app review (a huge pain, to be honest). The feature I was showing needed a permission Meta hadn’t granted yet, so I couldn’t turn it on for everyone. Recording it locally wasn’t realistic either, because most …
A container is just a process
If you are a regular reader of this blog, you know I’ve been hacking on container technology for a while now. A common misconception you see in the wild is that people conflate containers and virtual machines, thinking they are equivalent. This blog post illus…
I maintain a small coding agent written in Rust. Its input area is home-grown: a bottom region fenced off with a terminal scroll margin, a half-cooked termios mode, and a line editor I wrote myself. It works, but it does not look or feel as good as the agents …
Anything connected to the internet is going to get hacked to pieces
Software is too vulnerable and LLMs are too powerful.
Your app’s frontend UI is now optional
Your app's frontend is now optional. Build components that users can apply to their surface of choice.
Waterfox 6.7.5 — Read the Feed — Release Notes
A new feed manager and built-in reader are now available natively within Waterfox.
Whether you’re creating passes for a local fitness center, a small music venue, a global airline, or a national coffee chain, Pass Designer makes it easy to craft and preview passes that reflect your business.
Carrier Pigeon Internet Protocol
[WAITZMAN, David and the BERGEN LINUX USER GROUP.] One printed IP/ICMP "ping" packet sent by carrier pigeon per RFC 1149.Small scroll of paper, 41 x 210 mm. Rolling creases visible from when attached to pigeon's leg. Framed. Inscribed and signed on the verso o…
DeepSeek Harness | Explore the limits of intelligence
Use DeepSeek Harness to work with documents, analyze spreadsheets, write code, and schedule tasks. Extend its capabilities with composable plugins.
You can now experience the 15-year-old Portal 2 e-book like it's 2011 again. And it's all open source.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6528-1 security@debian.org https://www.debian.org/security/ Salvator…
Git 3.0 will make SHA-256 the new default content hashing algorithm and it will be an incomprehensibly expensive and ultimately valueless and avoidable global nightmare.
Get it while it’s hot