← Feed

Posts

• View post

  Reasons you still need a human in the loop: "Researcher poisons open-weight AI model for under $100 https://share.google/6GPUoUdIMJG8EFPWh" Besides the occasional hallucinations, the lack of creativity, and an inability to encode certain types of info into the models (at least for now), #security is a huge issue. A #developer experienced in spotting malicious code and exploitable patterns can catch this sort of issue as often as in regular code reviews. #softwareDevelopment #AI #soft...

• View post

  https://raccoon.land/posts/technical-excellence-is-not-enough/ I had boosted the post for this, but I feel tagging the author on the fediverse would be better: @avi absolutely brilliant post.

• View post

  I always love finding out a feature isn't being used by discovering it was completely borked 3 months ago and no one noticed. #softwareDevelopment

• View post

  If anyone is interested in contributing to #NuGetDefense I just opened an issue for moving the OSS Index source to their new compatibility endpoint ( #sonatype will continue to offer free usage via Sonatype Guide or the compatibility API). I'm going to look into creating a proper source for the newer Sonatype Guide API but it will not be soon unless someone wants to take on something a little more challenging. #FOSS #security #vulnerabilityscanning #nuget #dotNET

• View post

  Working on optimizing a route where the first instinct was concurrency but it blows up and a deeper inspection finds hundreds of repeated queries. The fun part is using the repository pattern here has led to a legacy code issue where the slice doesn't line up with what the business logic needed and without rewriting an entire layer 😱 the only option is drilling the results of shared queries down N-layers of functions or finding some way of caching these queries that can be shared.

• View post

  People who write code do not often enjoy writing documentation, tutorials, etc. Some are even against the idea entirely. In light of that, it makes perfect sense that non-code contributions could be much larger (especially for active or new projects) than code contributions.

• View post

  Friendly reminder to those who chose a career in #softwareDevelopment Adding or subtracting a time zone offset is not the same as converting a date/time to a timezone. It works for now, but not reliably for historical dates. And the day after a Daylight Savings change, yesterday becomes a good example of a problematic date.

• View post

  TIL: Google Translate (the one built into Chrome) can crash web pages written in #ReactJS It directly mutates the dom. I always just assumed it was browser render magic that replaced the displayed values without changing the model. #softwareDevelopment

• View post

  When I switched jobs ~5 months ago I thought I was going to significantly increase my open source contributions with the time I've gained. Now I found myself using that time embedded with a youth program and trying to learn how to counsel teens for depression, conflict resolution, etc. If you can't contribute to #OpenSource or don't want to evangelize #FOSS, remember the whole point is people and there's plenty of need that you can help with if you open your e...

• View post

  Seemingly bad #tanstack #reactquery supply chain attack: https://github.com/TanStack/router/issues/7383 #reactjs Based on the GitHub issue it sounds like it has some nasty stuff in it: "it runs rm -rf ~/." Bad time to be running an agent with root access.