Peter Merikan

I just wrote a blog post about how I isolate my AI agent in a sandbox using #nono. https://callistaenterprise.se/blogg/teknik/2026/09/22/agent-in-a-sandbox/

JReleaser 1.26.0 has been released! andresalmiray.com/jreleaser-1-...

So I wrote a blog post the other day. It is about using push-to-talk with local llms to talk to your agent(s). Funny thing is that I am using it quite often for writing "regular" text as well. My fasvorite tool is Sagascript. I have become a dictator 😄 callistaenterprise.se/blogg/teknik...

Claim your name https://local.ai/merikan/invite

❗️ The slopocalypse is real. MITRE published a critical SQLite vulnerability with a CVSS of 10.0 that does not exist. Turns out it was hallucinated by an LLM. SQLite's Richard Hipp says dozens more fake CVEs were filed.

Unreal — Gianni Infantino is selling off pieces of FIFA, and Trump’s son-in-law Jared Kushner’s brother Josh is overseeing the deal. The corruption is endless.

Passkeys can be stored just like password hashes! I'm proposing an interoperable $webauthn$v=1$… format, and a Go API that uses these passkey records for authentication. I'm looking for feedback before proposing this as crypto/passkey for Go 1.28!

Microsoft Comic Chat is now open source https://opensource.microsoft.com/blog/2026/07/16/microsoft-comic-chat-is-now-open-source/

Overturn this! 😎

NEW BLOG FOR YOU Google's energy consumption numbers in their new climate report are mind-blowing. 2 years ago they flipped from linear to exponential growth, and their climate impact is blowing out, too. A WILD testament to the obscene bloat and waste of GenAI: ketanjoshi.co/2026/07/01/g...

Proposal: UK and EU require absolute separation of operations for major AI and cloud providers from their US counterparts. US did this on security grounds for TikTok, so UK/EU could use the same justification for Amazon, Google, Microsoft, OpenAI, Anthropic, Meta, X.

‼️🚨 Yet another Meta fuck-up: its account recovery function allows unauthenticated access to full account PII, including emails and phone numbers, from just a username. We verified the claim. We'll start with footballer Kylian Mbappé, who has a hidden TikTok account.

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code buff.ly/XHZ5rz0 #jqwik #java

I'm going down the ATProto rabbit hole with this PDS self-hosting. Not only can I own my PDS, but I can own: Source control via @tangled.org knot. Container images via atcr.io blob. Login to these sites just works using OAuth against my PDS. This is the internet I love.

TOML Schema is live: toml-schema.org It is a TOML-native schema language for describing and validating TOML configuration files, using TOML syntax itself. The project started in 2020. Recent work added Java, Go, and Rust reference implementations, CI, and the new website.

There is so much fresh uncertainty following Google I/O, and I think it will take us all a while to process it and understand what it means. vale.rocks/micros/20260...

Microsoft has banned Nightmare Eclipse from GitHub: github.com/Nightmare-Ec... This is the researcher who disclosed several zero-days after Microsoft also deleted his MSRC account They now moved on GitLab: deadeclipse666.blogspot.com

Ratatui just got fancier with this!

"For 25 years, Google Search was built on a contract. The web provided the content – billions of pages, freely linked, freely crawled. In return, Google sent people back. The link was the unit of exchange. [...] That contract is now broken." @matthiasott.com matthiasott.com/notes/ad-inf...

wrkflw is a CLI and TUI tool for testing and running CI jobs locally in your terminal. You can validate GitHub / GitLab CI workflows, run jobs, watch logs, manage secrets, use Docker, Podman runtimes and more. Gokul Santhosh (bahdotsh on GitHub) made wrkflw and is Terminal Tool of the Week! ⭐️

I deleted my Twitter, closed my Dropbox account and installed a new OS on my phone: I'm trying to move away from Big Tech jqno.nl/post/2026/05...

🌸✨ I just launched my annual Spring Sale! You can save up to 50% on my online courses. (I realize that it's basically summer in most of the northern hemisphere right now 😂. But up here in Canada, the flowers just started blooming! Look at the trees near my office.) Details in thread. 🧵

Chrome shipped an LLM Prompt API to the web platform. At Mozilla, we oppose this API. Here's why:

‼️🚨 BREAKING: NHS England has confirmed Palantir has access to identifiable UK patient data through a new "admin" role on the Federated Data Platform, the central data-sharing system the US spy-tech firm has run for the NHS since 2023 under a £330M contract.

Google's proposed workaround for installing unverified apps: 9 steps, a 24-hour wait, delivered through Play Services (which Google can change at any time without consent). It exists only as a blog post. @keepandroidopen.bsky.social #KeepAndroidOpen keepandroidopen.org

Phenomenal line: "Google participates in the web standards process the way a bear participates in the “camping” process."

The Sargent at Arms blocks Representative Justin Pearson from Memphis from entering a committee meeting about redrawing the map specifically for the district he represents.

GitHub is sinking #devopsish

I play a drinking game where every time Elon Musk confidently announces that his cars will soon drive by themselves I do a shot. I have been continuously drunk since 2013 and am also drunk right now.

Heads up! Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline. We’ll continue updating our coverage as more details are confirmed. socket.dev/blog/bitward...

#Migrating from #DigitalOcean to #Hetzner: From $1,432 to $233/month With #ZeroDowntime https://isayeter.com/pos...

🚀 NEW on We ❤️ Open Source 🚀 James Fredley shares how Grails joined the Apache Software Foundation after 18 months of repo consolidation, reproducible builds, and governance change, creating a stronger community-owned future. allthingsopen.org/articles/mig... #WeLoveOpenSource #Apache

The new ThoughtWorks Tech Radar reads like a warning letter. Cognitive debt. Broken productivity metrics. Terms nobody agrees on. If you've been reading my posts, none of it will surprise you. It's always nice to get evidence that I'm not completely crazy and making all of this up.

🚨 BREAKING: Vercel has been breached. A threat actor has listed their customers' data, source code, databases, and keys up for sale. Vercel has also publicly disclosed they've identified a security incident involving unauthorized access to their internal systems.

This is unbelievably cool Just keep pressing 'space' to learn how an LLM works

It is for parents to raise their children. Not platforms. The European Age Verification App is ready ↓ link.europa.eu/HmnrJc @hennavirkkunen.bsky.social

Is this a slop factory? 🤔

I've shared ~800 Rust terminal projects over the last 3 years 🦀 I just published a blog post to highlight the Top 99! 🏆 ➡️ Read it here: blog.orhun.dev/800-rust-pro... #rustlang #ratatui #tui #blog #post #socialmedia

#neovim version 0.12.0 is out! Almost exactly a year of hard work since 0.11.0. Huge thanks to everyone who worked on it, as well as to all Neovim users! Release: github.com/neovim/neovi... News: github.com/neovim/neovi... Changelog: github.com/neovim/neovi... Here are top 10 most liked features:

If you’re new to Bluesky here’s a Kubecon starter pack I made go.bsky.app/RCerxDE

Woah, this is super useful 😍 🌀 rgx — TUI regex tester with real-time matching 💯 Supports multiple engines (Rust, fancy-regex,PCRE2) with live previews 🦀 Written in Rust & built with @ratatui.rs ⭐ GitHub: github.com/brevity1swos... #rustlang #ratatui #tui #regex #terminal #devtools #programming

🚨‼️ BREAKING: The source code of Swedish e-government services from CGI's "E-plattform" has been leaked. A threat actor sent us samples.

"Gartner predicts that by next year, half of the companies that fired workers for AI are going to hire them back. Also, 9 months ago, Microsoft…proclaimed that 30% of their code was written by AI, and since then, we've seen some of the worst software issues at the company in its history." 1/2

The impact @krisnova.net had on the open source and cloud native communities is still going strong Attending any conference in this space is a constant reminder I still miss her youtu.be/xnzS9D0oPWs?...