James Bennett
ubernostrum@infosec.exchange
<p>The man with the plan and the pocket comb. </p><p>Ex-Mozillian.</p><p>I have enough opinions of my own to tell you about, without wasting time trying to give you my employer's.</p><p>Don't forget to tip your servers and normalize your Unicode.</p>
Posts
-
Post #4319930
Oh, your AI hacked Hugging Face? Well, my uncle&#39;s AI hacked Nintendo, and it says you CAN find Mew under the truck!
-
Post #4210342
I just learned that Oracle, which is shoveling unbelievable amounts of cash into getting everybody to use LLMs, also has a policy forbidding contributors to OpenJDK from using LLMs to generate code, citing code quality, security, and legal concerns: https://openjdk.org/legal/ai
-
Post #3796477
Uh, did gmail just do a huge redesign, or am I getting A/B tested?
-
Post #3419592
my name is Goose and wen its day or wen there are no eggs to lay and all the men dont value me the shareholders are worth just three ——— my name is Goose and on the slide i flap my wings and feel big pride i lay more eggs since chairman son tells them im worth seventy one
-
Post #3406008
RE: https://discuss.systems/@dev/116807460725864716 Under Goose Accepted Accounting Principles (GAAP), the EGGBITDA is actually significantly more than 71, which these slides omit to mention.
-
Post #1943382
Today&#39;s post in my #Python and #Django &quot;Advent calendar&quot; series is maybe a little controversial, but covers why I don&#39;t think you should ever define class methods on a Django ORM model (and what to do instead): https://www.b-list.org/weblog/2023/dec/17/django-model-classmethod/
-
Post #1886331
Get ready for comments and log messages about “Kill the Boer”, I guess. https://www.reuters.com/technology/spacex-says-it-has-option-acquire-startup-cursor-60-billion-2026-04-21/
-
Post #1886330
RE: https://infosec.exchange/@ubernostrum/116374532775532247 A recurring theme among the people who’ve pushed back the hardest on the “No Silver Bullet” argument is that a lot of them are people who are effectively solo — experienced developers who just use LLMs to code up things that they personally want, without neeeding to coordinate with a team or satisfy the needs of users other than themselves. Not sure what to make of that.
-
Post #1781891
BUDGET HACK: You *could* pay an "AI" company to have their LLM tools delete your production database. But did you know you can also just run the DROP DATABASE statement yourself, for free? Follow for more valuable tips!
-
Post #1733035
RE: https://infosec.exchange/@ubernostrum/116374532775532247 One other thing: I see a recurring argument made that even though a lot of surveys show people don&#39;t like &quot;AI&quot; tools, they still have high and growing numbers of daily active users (DAUs), so the &quot;revealed preference&quot; is that people actually like them. By this argument, people&#39;s revealed preference is that they really love Jira. (the reality in both cases is not &quot;people se...
-
Post #1175607
People used to complain that Anthropic seemed to be arbitrarily changing their rate limits, but are we sure, now, they weren’t just hitting slop code paths in Claude that do 10x the usage by accident?
-
Post #1175606
Does it still count as a mic drop if only three people know about it? Is there a minimum audience size for a mic drop?
-
Post #1175604
I know folks here don’t like Bluesky, but their custom feed functionality has achieved its highest and noblest purpose today: the automatic feed of cats watching Artemis II splash down. https://bsky.app/profile/did:plc:qrllvid7s54k4hnwtqxwetrf/feed/aaahuawzr46cm
-
Post #1081729
New blog post: I got tired of having repetitive arguments explaining why I think it’s OK to be skeptical of LLMs for coding, so I wrote six and a half thousand words on the topic that I will be referring people to from now on. https://www.b-list.org/weblog/2026/apr/09/llms/
-
Post #811777
If you’re looking for a nice, modern, featureful #Python package and environment manager, may I suggest PDM? And maybe also toss some funding their way. https://pdm-project.org/
-
Post #811776
@cczona I had an internal lead for a bit, but the past tense is relevant there. Rackspace seems to have long ago laid off most of the people I&#39;d likely have any kind of reasonable chain of connections to.
-
Post #811775
So, given the state of air travel, how are people planning to get to PyCon US this year? Is this going to be the year of Amtrak to the conference?
-
Post #811774
I am not traditionally a Pokémon completionist, but I decided to be one for Scarlet/Violet. All storylines complete, all Pokédexes complete. Took a lot longer and a lot more effort than I expected, but it&#39;s done.
-
Post #811773
New blog post: Rewriting a 20-year-old #Python library https://www.b-list.org/weblog/2026/mar/23/20-year-library/
-
Post #747625
RE: https://infosec.exchange/@ubernostrum/116184516972371923 I’m still looking for resources here if you know of any (tl;dr a company threatening debt collection over an account they admit is not mine). I suspect a single piece of correspondence on law-firm letterhead resolves this, but for every firm I&#39;ve talked to the dollar amount at issue is too low to even justify talking to one of their attorneys.
-
Post #736322
tl;dr I&#39;m looking for an attorney (California), urgently, to help deal with an unpleasant company. Longer context: once upon a time I was a customer of a hosting company called Slicehost. But as you may know, they were acquired by Rackspace, and eventually merged fully into Rackspace&#39;s hosting offering. I reacted to this by gradually migrating things off Rackspace and to other hosts. The last thing left was a site I helped run for a community I was a member of. Rackspace gave m...
-
Post #528482
New blog post: I&#39;ve mentioned before that #litestar is by far my favorite of the new generation of #python web frameworks, and I&#39;ve finally found time to write about why. https://www.b-list.org/weblog/2025/aug/06/litestar/