Eva Ogbe

root beer float implies the existence of root beer int

🚨 Password2Shell 🚨 An attacker just has to type in the username and password to gain full control. Full writeup here: man7.org/linux/man-pa...

Like there's a world where procedural generation is a creative tool. MidJourney did not choose to be in that world.

You know the date is going well when the other person is explaining how DNA works and you're explaining the performance implications of fullstack JavaScript vs HTMX

I have the same access to the same AI the "author" has. If I want to read an AI generated novel, I can type the prompt myself and get something more customized to my tastes

while you port and emulate games, I ported Jira to my PSP

I love how people now apparently think it's totally cool to make an AI clone of you without your consent. This is the subject line of an email I got, and they put up an unlisted YouTube video with me, cloned, to me show how great it is.

The first genuinely honest ad for generative AI I've ever seen, from Microsoft / CoPilot A mediocre white guy sees his non-white colleague getting praised for good work, he asks AI to *literally copy it*, and then he gets all the praise instead: www.ispot.tv/ad/SoDi/micr...

If your response to this vulnerability is "just don't use PHP lol" I have to assume that you know zero about web development and the web outside of a modern bespoke, FAANG, React/Angular, static site generator type of way and you should probably sit this one out 'cause you look a little dumb

If you're a railway customer, you need to jump on this immediately. "We strongly recommend that you immediately roll all environment variables, including any API keys, stored in Railway" blog.railway.com/p/security-d...

Maybe the BBC should get someone who actually knows what he is talking about then.

"user centered" design is not enough. we need user left justified design

Chuffed to get a shout out in this vid from @kevinpowell.co! www.youtube.com/watch?v=bLB9... Learn how to use a few less magic numbers with progress()

We just sent $100,000 to 20 open source projects ($5000 each) that the Syntax team use regularly and depend on. Thanks to all the maintainers for all your time and efforts! Thanks to @sentry.io and @opensourcepledge.com for giving us the resources to do this. blog.sentry.io/another-year...

has anyone slop forked the typescript compiler in coffeescript yet? opportunities abound.

✍️ Just published a new post about my most-anticipated CSS proposals from Interop 2027! If you’re not familiar, the Interop project is a collaboration between browsers to pick shared focus areas. There’s *so much* good stuff this year, it was hard to pick just 10!

The Society of Authors has withdrawn from the ill-conceived concession to the dark side that was the "ethical GenAI" charter because of the mass and vocal outrage of authors. Publishers need to be made afraid of this level of anger too.

OH COME ON NOT NODE.JS TOO nodejs.org/en/blog/vuln...

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

(generating certs for my root CA) ok now let's do a silly one

It's not real stand-up comedy unless it comes from the Jira region of software development.

I feel like we've been getting a steady stream of articles like this for the past 2 years where various executives, including at companies creating LLMs, realize that the slop is making everything worse. I will start to believe when there's actual evidence they're changing their policies

The perfect metaphor for Apple design these days

I agree with this 100%. Finally a true AI moderate maevyn.codes/addenda/ai-u...

pluralistic.net/2025/12/05/p...

My thoughts on the current state of AI driven software development, why I'm no longer concerned about a runaway intelligence explosion, and what I think is a far worse outcome we could be walking into maevyn.codes/decoherence

In the vein of "public libraries could never be created today," a pitch for a calculator would get you thrown out of the boardroom. What do you mean, it just maths? Where are the ads supposed to go? How does it send usage telemetry back if it doesn't even have wifi? There isn't even a leaderboard.

People complain about how much churn the JS ecosystem has without recognizing the tradeoffs

It came to me in a dream

Updating my priors

"""Every"""

This is incredibly tone deaf to do in an industry that generally hates AI. Did Claude tell you this was a good idea?

What could possibly go wrong? 😂

this is true, I tested it myself

reporting emails as spam is doing a civic duty for everyone else because the more spam complaints a sender receives, the bigger impact on their deliverability do your civic duty today and every slop spam email you get, report it as spam

LLMs output is better for an expert than for a novice. In a class that allows AI use, I tried these prompts: 1. I am a student. Explain [concept] 2. I am a professor. How do I explain [concept]? For the professor, the LLM breaks down the concept more slowly and connects it to other familiar topics

the thing about lines of code is you have to think about that metric as "we couldn't find a shorter way to say this" and for postgres it is entirely plausible to me that this is the case i am less convinced of that for agent-generated software

ah damn, RIP Margaret Hamilton. she took safety-critical software engineering seriously, and got people to the moon and back. news.mit.edu/2026/margare...

Harvard just dropped a study AI productivity in software engineering and it found the average increase in productivity from using Claude code is.....zero and for exactly the reasons you'd think fion.ac/jellyfish.pdf

Make your passion into your job* and you’ll never work another** day in your life. * and have tech bros decide that your work is incredibly valuable as data and also high value for audience attention but monetarily priced at zero ** paid

I am begging software engineers to unionize.

The AI policies of my professors range from no AI ever to graded required AI project

this 9,076 character regex matches all 4,030 4 letter words in the Scrabble dictionary - and nothing else. Those words would add up to 16,120 characters total.

Always nice to do updates like this one 😊 Yes, CSS `light-dark()` with `<image>` values is now available in all major browser engines. Check brm.us/light-dark-i... to get the details.

Why are we lamenting over closed PRs? Opening a PR was never the right first interaction with any project. Read issues, discuss, learn from the maintainers, *then* open a PR. And if you do all that, you'll already be a collaborator in most OSS projects I know of.

it's so strange how like at least 60% of the time when someone makes a claim about "making invalid states unrepresentable", what they actually mean is using a representation with many perfectly representable invalid states that are just hidden behind an abstract type and a smart constructor

My understanding is that this was a good way to make a living in the fossil fuel industry for stats people for quite a few decades.

Kind of amazed at all of the people who say "AI" made them better systems-thinkers when none of their analysis includes the models they rely on, let alone the cos that build them, or the finance that enables it all The whole point of "systems-thinking" is that the system is larger than the object.