← Feed

Posts

• Post #3917370

  Reasons you still need a human in the loop: "Researcher poisons open-weight AI model for under $100 https://share.google/6GPUoUdIMJG8EFPWh" Besides the occasional hallucinations, the lack of creativity, and an inability to encode certain types of info into the models (at least for now), #security is a huge issue. A #developer experienced in spotting malicious code and exploitable patterns can catch this sort of issue as often as in regular code reviews. #softwareDevelopment #AI #soft...

• Post #2523166

  https://raccoon.land/posts/technical-excellence-is-not-enough/ I had boosted the post for this, but I feel tagging the author on the fediverse would be better: @avi absolutely brilliant post.

• Post #2523165

  I always love finding out a feature isn't being used by discovering it was completely borked 3 months ago and no one noticed. #softwareDevelopment

• Post #2523164

  If anyone is interested in contributing to #NuGetDefense I just opened an issue for moving the OSS Index source to their new compatibility endpoint ( #sonatype will continue to offer free usage via Sonatype Guide or the compatibility API). I'm going to look into creating a proper source for the newer Sonatype Guide API but it will not be soon unless someone wants to take on something a little more challenging. #FOSS #security #vulnerabilityscanning #nuget #dotNET

• Post #2523161

  Working on optimizing a route where the first instinct was concurrency but it blows up and a deeper inspection finds hundreds of repeated queries. The fun part is using the repository pattern here has led to a legacy code issue where the slice doesn't line up with what the business logic needed and without rewriting an entire layer 😱 the only option is drilling the results of shared queries down N-layers of functions or finding some way of caching these queries that can be shared.

• Post #2523160

  People who write code do not often enjoy writing documentation, tutorials, etc. Some are even against the idea entirely. In light of that, it makes perfect sense that non-code contributions could be much larger (especially for active or new projects) than code contributions.

• Post #2523159

  Friendly reminder to those who chose a career in #softwareDevelopment Adding or subtracting a time zone offset is not the same as converting a date/time to a timezone. It works for now, but not reliably for historical dates. And the day after a Daylight Savings change, yesterday becomes a good example of a problematic date.

• Post #2523156

  TIL: Google Translate (the one built into Chrome) can crash web pages written in #ReactJS It directly mutates the dom. I always just assumed it was browser render magic that replaced the displayed values without changing the model. #softwareDevelopment

• Post #2523153

  When I switched jobs ~5 months ago I thought I was going to significantly increase my open source contributions with the time I've gained. Now I found myself using that time embedded with a youth program and trying to learn how to counsel teens for depression, conflict resolution, etc. If you can't contribute to #OpenSource or don't want to evangelize #FOSS, remember the whole point is people and there's plenty of need that you can help with if you open your e...

• Post #2523152

  Seemingly bad #tanstack #reactquery supply chain attack: https://github.com/TanStack/router/issues/7383 #reactjs Based on the GitHub issue it sounds like it has some nasty stuff in it: "it runs rm -rf ~/." Bad time to be running an agent with root access.