diego

👀

I have like a dozen publicly exposed services and none run on php so this kinda doesnt matter for me. Not much I can do about my MSPs using PHP atm, if any do. Kinda shocked to see the 70% web share, seems like it's been pinned at that level for close to 2 decades now.

it's not "code bloat", it's "operating at a higher level of abstraction"

MITMing every single one of your web requests is great marketing for CloudFlare

⚠️ We believe that there is an ongoing campaign targeting owners of popular crates and rust-lang team members that is attempting to compromise devices and accounts in order to use them to publish malware. See our blog post for details: blog.rust-lang.org/2026/09/17/t...

Utterly pathetic and embarrassing behavior by a company CEO. Begging their users to like them. Get a grip. Log off for a few days.

You know things are going well when you’ve entered Day Three of Posting Through It.

That bsky 38 thing is perverted af. Of course atproto devs would come up with something so cursed. I just gonna stick with mastodon. 👋

Amazing how every time someone goes from skeptic/critic to addict, suddenly all of the externalities of LLMs that they are generally insulated from become negotiable for whoever does have to bear the cost.

Due to the current state of supply chain attacks, I'm essentially setting all of my development environments up in dedicated VMs now. It seems pretty reckless to do otherwise, tbh.

⚠️ A few hours ago, a malicious crate was discovered on crates.​io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted. For details and how to see if you are impacted, see: blog.rust-lang.org/2026/08/20/s...

GOOGLE DOCS USES AI THAT TRAINS ON ANYTHING YOU WRITE IN IT, EVEN IF ITS A “PRIVATE” DOCUMENT. It’s now possible for users to get Google Docs’ AI to share information that is otherwise not publicly accessible, if it was written in Google Docs at some point. You CANNOT trust it w/ confidential info

The difference between 404 Media and Wired could not be more stark. 404 sources info from town halls and real community members, while Wired sits down with a literal fascist and ignores the key distinction between GPU DCs and the traditional storage and virtual server DCs to argue "horseshoe theory"

Codeberg's where it's at. Slop is gonna persist, but it sure as hell ain't gonna win.

Interestingly, if you use a 32-bit float, the loss of precision leads to the expected behavior, but if you use a double/64-bit float, you get the surprise.

Despite what you may want to tell yourself, Full Stack Developer, TypeScript is not 'strongly typed'.

The world cup has never needed a half time show, and the extremely thinly veiled effort to put more ads in front of you in the form of the conspicuously standard commercial break length "hydration breaks" is a form of enshittification.

good time to point out that flocks ceo is pro facial recognition and the only reason the firm doesn't use it is to avoid bad press

The beautiful thing about going from ruby (rails) to rust as a self taught dev is that you learn all of the software development concepts that rails abstracted away and that's a real good thing!

I guess technically is a JSR issue, but I feel really misled by deno's "full npm compatibility" after spending the better part of my day migrating my projects over only to find out ".svelte" files are not packable, so I'll need to have at least 2 node runtimes installed. That's annoying.

if AI psychosis is like real psychosis, then you won't know you have it. You'll tell yourself you're among the few with a clear-eyed view of the world. Hey, claude thinks so, after all.

It really seems at least one of the tangled brothers is starting to develop ai psychosis

I wrote a new blog post explaining why I think more people should practice "freecoding" (coding as much as possible from memory) haskellforall.com/2026/05/type...

This is essentially why I dropped my atproto project. Until I figure out how to make the PDS data useless to bots. I have ideas.

"deno_typescript_go_client_rust" honest question: what are we doing here?

Which javascript package manager is not a total shit show right now? Honest question because I want something stable and reliable. Obviously bun's out. My understanding is deno has been hemorrhaging maintainers, and npm is microslop. So is it just between yarn and pnpm?

Just migrated all of my projects on github to codeberg.org, and based on the activity logs it looks like there is a mass migration of large OSS taking place.

Agentic coding exists in this weird place where “builders” need to simultaneously believe that it does all the work for them but that nobody else would be able to replicate their product

I keep seeing developers post stuff that starts with "I built [X]", but then you look at the repo and it's all vibecoded. How I about I fork it and say "I built it"? You didn't do anything.

Anyone radical leftists out there operating a bsky appview with a native mobile build?

Made the switch from VS Codium to Gram (Zed fork) today and spent a surprisingly small amount of time setting up LSPs, themes and configs and now I have the peace of mind that I'm not doing my work on software downstream from whatever microslop's doing now.

feel like you shouldn't have to say "turns out" about your own code

⚠️ An active phishing attack is targeting crate owners by asking them to "confirm that your email address is still active". These messages are not from crates.io, and should be ignored. (We will never ask you to confirm that your e-mail address is still active.) ⚠️

"The interesting part is not the payload. It is how the attacker got the npm token in the first place: by injecting a prompt into a GitHub issue title, which the AI triage bot read, interpreted as an instruction, and executed." bruv... 💀