Andrej Karpathy talks about “Claws”
Andrej Karpathy tweeted a mini-essay about buying a Mac Mini ("The apple store person told me they are selling like hotcakes and everyone is confused") to tinker with Claws: I'm …
I Verified My LinkedIn Identity. Here's What I Actually Handed Over.
I wanted a blue badge on LinkedIn. To get it, I gave a US company my passport, my face, and my biometric data. Then I read the fine print.
I Intercepted 3,177 API Calls Across 4 AI Coding Tools. Here's What's Actually Filling Your Context Window. | The Redbeard
Claude used 23K tokens to fix a one-line bug. Gemini used 350K. I built a tool to find out why.
Turn Dependabot Off
I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.
Wikipedia blacklists Archive.today, starts removing 695,000 archive links
If DDoSing a blog wasn't bad enough, archive site also tampered with web snapshots.
Engineering Maturity is all you need
8:PM in the evening: it’s demo day tomorrow.
Use digests, not tags, in your Dockerfiles
How mutable Docker tags can pwn your builds.
Thoughts on Standardizing Programming Languages
I’ve worked at a few places where there is a “standard” language. Froman organisational perspective, this makes a lot of sense: if everyonewrites the same la...
I found a Vulnerability. They found a Lawyer.
What happens when you responsibly disclose a critical vulnerability exposing personal data - including that of minors - and the organization responds with legal threats instead of a thank you?
Django ORM Standalone⁽¹⁾: Querying an existing database
A practical step-by-step guide to using Django ORM in standalone mode to connect to and query an existing database using inspectdb.
Inside PostgreSQL's 8KB Page
A byte-level tour of the 8KB page. PostgreSQL's atomic unit of storage. We deep dive into page headers, line pointers, and free space using pageinspect to see exactly how your data lives on disk.
How will OpenAI compete? — Benedict Evans
OpenAI has some big questions. It doesn’t have unique tech. It has a big user base, but with limited engagement and stickiness and no network effect. The incumbents have matched the tech and are leveraging their product and distribution. And a lot of the value…
Ten years late to the dbt party (DuckDB edition)
My Coding Agent Watches Me Get Frustrated, Then Fixes Itself
pi-reflect reads your coding agent's session logs, finds where you got frustrated, and edits its rules so the same mistakes don't happen again.
If LLMs Only Predict the Next Token, Why Do They Work?
Discussing why LLMs work and the reasoning behind their behavior.
satisfies never off by one
Exhaustiveness checking in TypeScript. Works with `if` and ternary expressions. No unnecessary conditions or unreachable code.
PGQueuer for High-Performance Job Queues
PGQueuer takes a PostgreSQL database and can turn it into a reliable background job processor. The problem becomes how on the face unwieldy the technology is. Because it’s powerful, it requires a lot to get into, especially for people new to backend developmen…
Thought Eddies
An Experimental Digital Garden
Be Wary of Bluesky
Bluesky promises decentralization, but nearly every user's data sits on Bluesky's servers, and every new ATProto app reinforces that centralization. T
I Audited Three Vibe Coded Products in a Single Day
Three AI-built products, three critical security vulnerabilities. An afternoon of casual testing reveals what happens when nobody understands the code that runs their product.
erxi or how I learned to love the fast testing suite
erxi is available on GitHub.
Vibe Coding vs Vibe Engineering
Coding is only one aspect of the engineering process. We don't have to leverage LLMs just to code. We can leverage them to engineer better software.