Jayme "Danger" Howard

Jayme "Danger" Howard

@gimpy.bsky.social

Former tech lead for Reddit's Compute Platform. Now, Infrastructure Security, still at Reddit. Extremely Online. He/Him/His, actually 40 damn years old

1.1K followers1.3K following15K posts

I wrote an SNMP trap sink/translator that took pre-ratification v1 payloads I got from a whitepaper and hardware experimentation, in PHP, and it served in production for at least 10 years. Might still today, honestly. People use the tools they have and know how to use at the time.

i once inherited a webservice written in php that shelled out to a python script that called a haskell binary to parse, edit, commit, and push bind zone configs to svn

View full thread

And the harms are real, we're seeing them every day. This is actually one of the reasons why I lean into the craft of software making being called engineering. These aren't toys. People's lives are literally on the line. From the financial system, to your car, to control of traffic lights,

somebody had to write, approve, and deploy that code. That responsibility matters just as much as the structural engineering of a bridge. We have to do better. We're never going to live in a world without zero-day exploits. But we can reduce their frequency with education and more care.

I wrote an SNMP trap sink/translator that took pre-ratification v1 payloads I got from a whitepaper and hardware experimentation, in PHP, and it served in production for at least 10 years. Might still today, honestly. People use the tools they have and know how to use at the time.

i once inherited a webservice written in php that shelled out to a python script that called a haskell binary to parse, edit, commit, and push bind zone configs to svn

View full thread

Ultimately, the lesson here isn't "<language> bad", and anyone trying to sell you that has an agenda and is either short-sighted or an asshole. We need to do a better job of teaching people secure coding. We, as an industry and community, have abstracted so much away that the average developer

is coming in with no understanding of basic premises that really matter, particularly security and performance. Undergrad courses and boot camps generally ignore these topics from what I've seen, and that's harming the industry and the world on the whole.

I wrote an SNMP trap sink/translator that took pre-ratification v1 payloads I got from a whitepaper and hardware experimentation, in PHP, and it served in production for at least 10 years. Might still today, honestly. People use the tools they have and know how to use at the time.

i once inherited a webservice written in php that shelled out to a python script that called a haskell binary to parse, edit, commit, and push bind zone configs to svn

PHP is not an inherently bad language. It's not an optimal language in many cases, but it's easy to learn and use, and flexible enough. Are there better languages for general purpose use? Absolutely. Do I regret the above? Kinda. But it was department policy that we used PHP.

The thing is, flaws like the one revealed this week can happen in any language. PHP, the language itself, wasn't the problem here. A bug in the interpreter was. Could just as easily happen with Javascript (and has, with v8, which is the most common interpreter these days).

My first five TTRPGs in the order I played them: 1. D&D 3e 2. Shadowrun 3e 3. D&D 2e 4. Exalted 5. 7th Sea (or maybe WEG Star Wars d6, can't recall for sure) Despite ~25 years in this hobby, I feel like the surface has barely been scratched for me, and I'm prepping to run Triangle Agency.

Sadie 🔜 PAXU@oakleafinsignia.games

My first five ttrpgs in the order I played them: 1. D&D 5e 2. Call of Cthulhu 4. Maybe Fiasco? I dunno for sure - after the first two I just started playing all the systems I could get my grubby lil hands on

And that's a wrap on Castlevania: Belmont's Curse. Got all the endings and the 100% completion trophy, and I'm just fine with that. I'd like a shorter wait between entries in the series, but this one was definitely worth that wait.

The last two fights in Venomous Abyss are so cool and so completely fucked for small groups. The scaling on the mechanics is such a problem. I can't understand how that hasn't been fixed.

Yeah, thanks Pagerduty, I totally didn't want that last hour and a half of sleep before work. No no, you're fine, don't worry about the completely non-actionable page due to normal Monday traffic increases, that's on us.

I'm not going to give specifics about this on here, but I just rolled credits on Castlevania: Belmont's Curse, and I have so much more playing to do that it's comical.

A hundred bucks for this is an absolute steal. Dude does great work and I've already gotten my money's worth out of mine. Strong rec for picking one up!

Satanic Panic | DNGN CLUB@dngnclub.itch.io

Its my kid's birthday (aka DNGN CUB) this week - so I'm trying to get a little extra money together for his birthday party and gifts! So 5 lifetime tickets are back! Please consider helping out (or at least reposting!)

Okay. Yeah. That movie was worth every minute. It was viscerally upsetting. The writing is excellent, the acting is spectacular, the folks who did the lighting need to have high-paying work for the rest of their careers. Just incredible work all around.

Jayme "Danger" Howard@gimpy.bsky.social

I'm not a horror fan, but something in me became convinced I should watch Obsession. I'm now about halfway through it and deeply uncomfortable, but in a way where I'm screaming internally about how *brilliantly* made this movie is, and it's going to haunt me.

View full thread

There are people who want to point at Nikki as the villain of this movie and either they have fundamentally broken media literacy, or they're ignoring the plot. The former is fixable, the latter is pretty plainly bad faith and those people are likely problematic all on their own.

Pivoting from that, I think something that made it extremely cool was that all the bones of a romcom were absolutely there, and that makes the bleakness and horror of it all even more stark. So many moments would have been cheesy and stupid if they weren't in the frame of exactly this movie.

Okay. Yeah. That movie was worth every minute. It was viscerally upsetting. The writing is excellent, the acting is spectacular, the folks who did the lighting need to have high-paying work for the rest of their careers. Just incredible work all around.

Jayme "Danger" Howard@gimpy.bsky.social

I'm not a horror fan, but something in me became convinced I should watch Obsession. I'm now about halfway through it and deeply uncomfortable, but in a way where I'm screaming internally about how *brilliantly* made this movie is, and it's going to haunt me.

View full thread

I reiterate that this is not my genre. Most horror isn't for me. But fucking hell this was a good movie, and a good story. I'm going to have to sit with this one for a while.

Actually, I have more to say. Bear's an incredible piece of shit. Every step of the way throughout this movie. The entire thing was preventable. Ian was an idiot and a bad friend. Bear was stupid and self-centered. And the combination is what made this all happen.

Okay. Yeah. That movie was worth every minute. It was viscerally upsetting. The writing is excellent, the acting is spectacular, the folks who did the lighting need to have high-paying work for the rest of their careers. Just incredible work all around.

Jayme "Danger" Howard@gimpy.bsky.social

I'm not a horror fan, but something in me became convinced I should watch Obsession. I'm now about halfway through it and deeply uncomfortable, but in a way where I'm screaming internally about how *brilliantly* made this movie is, and it's going to haunt me.

I think I would watch Inde Navarrette in just about any role with how flawless her performance was. I don't know how much of that was directing and how much she brought to it herself, but I can't stress enough how impressed I was.

I'm not a horror fan, but something in me became convinced I should watch Obsession. I'm now about halfway through it and deeply uncomfortable, but in a way where I'm screaming internally about how *brilliantly* made this movie is, and it's going to haunt me.

Jayme "Danger" Howard reposted

Hi, I’m a sighted alt text user! Here are some reasons I use it: - Slow Internet on an airplane - I’m over 40, I have no idea who that celebrity is - Bluesky broke images again - My vision sucks and that text is too small to read otherwise - Conveys further context and authorial intent

This post is unavailable.

Finally rolled credits on Control Resonant. Platinum trophy for the first time in a while. Game was worth it. The combat could have been deeper, but Remedy once again delivered something elevated beyond the level of the genre with a hell of a good story and deep, interesting world.

My girl cat loved me more than anyone else in the world and just wanted to be near me. She respected when I wanted space but also always tried to be within a foot of me when she could. She wouldn't let anyone else hold her like me, and purred like a belt sander any time I touched her.

Kat Abughazaleh@katmabu.bsky.social

“girl cats are mean” “girl cats are standoffish” “girl cats are —“ my girl cat is constantly trying to put her nose inside my nose so have you considered that it’s a you problem

Ian's one of the most legit, genuine humans out there, who truly takes care of those around them. Let's get them the help they need.

I feel terrible asking this, but my debit card got stolen and I don’t currently have the funds in my account to cover some upcoming payments while I sort the dispute out with the bank. If anyone could help spot me, I would really appreciate that! V: @Ian-Coldwater CA: $iancoldwater PP: @coldwater

Went to a haunted house for the first time in a long time tonight, had a blast, except for the part where I got turned around and blasted face first into an exposed beam and wrecked my glasses. Still a solid 9/10 experience that I've missed doing so much.

I've spent most of my life consistently not having dreams for the overwhelming majority of nights, and in the last month I've woken up from them almost every night. It's a weird as hell change, and I'm not sure what to make of it.

Feels like I would need the damn stars to align to actually get a group of people together to play a TTRPG. Of all the inconsequential shit to be frustrated about, this is the one that feels like a mountain that I can't manage to climb, and I'm just mad about it.

Person asks me a question about something I am an expert on, I answer it. They have a followup. They tell me they're asking Codex. Not me. Not the human who is the expert and is actively talking to them to help. The LLM that definitely doesn't know the answer. WHYYYYYY

I am kicking myself for not taking tomorrow off work to play Control Resonant all day. I am a grown ass man who has responsibilities, and all I want is to spend my day watching video clips of Casper Darling saying absolutely batshit things between interludes of me smashing stuff with a giant hammer.

Recruiter email. Subject: "Exciting opportunity for a Principal Incident Response Lead" Sorry, you're telling me that you've made a role whose whole purpose is to suffer and you'd like me to apply? No, no thank you.

I am genuinely shocked by a Diablo 5 announcement. Not sure if this means they feel like 4 isn't sustainable at a systems level or what. ~6 years between, and a 3 year early announcement feels *so strange*. I don't think any of y'all can tell me anything, but I want to know so badly what's up.

Feel like I've been a real downer on here for a minute, and I'm not doing any better today, but goddamn, it'd be nice to feel good for a day or two. Maybe next week. Whole world's fucked, not just me, but I'd take a little bit of positive energy if there's some to spare.