Remote

Curtis Carter

@codingcoyote@floss.social

mastodon 4.6.6

Creator/Maintainer of #NuGetDefense. Technology agnostic Architect with a passion for #security #oss and #devtools

I work with and talk about #dotnet #kotlin #typescript #reactjs #rustlang #linux #aosp #sql #ai #python

I'm a Christian and that will flavor my posts and is part of my passion for #floss

My views are my own and do not reflect on my employer.

searchable

0 Followers

0 Following

15 Posts

Joined August 26, 2023

NuGetDefense (maintainer):

https://digitalcoyote.github.io/NuGetDefense/

GitHub Profile:

https://github.com/digitalcoyote

Chocolatey Profile:

https://community.chocolatey.org/profiles/codingcoyote

Software Blog:

https://blog.codingcoyote.dev/

Posts

Curtis Carter @codingcoyote@floss.social · Jul 24, 2026

Replying to @sarahjamielewis@mastodon.social

@sarahjamielewis@mastodon.social personally I don't want a smaller browser, but instead a modular browser. Allow me to turn on and off features and install my own engines for ES, CSS, ad tracking etc. Browser should ship with 1 flavor of all the standard features working within standard interfaces. I feel like it would end up being a bit of a security nightmare, and most people would just use the chrome defaults anyway, but it would allow for enterprises and individuals with specific privacy/security needs.

Curtis Carter @codingcoyote@floss.social · Jul 18, 2026

Reasons you still need a human in the loop: "Researcher poisons open-weight AI model for under $100 https://share.google/6GPUoUdIMJG8EFPWh" Besides the occasional hallucinations, the lack of creativity, and an inability to encode certain types of info into the models (at least for now), #security is a huge issue. A #developer experienced in spotting malicious code and exploitable patterns can catch this sort of issue as often as in regular code reviews. #softwareDevelopment #AI #softwaresecurity

Curtis Carter @codingcoyote@floss.social · Jun 26, 2026

Replying to @ShiroTechGuy@techhub.social

@ShiroTechGuy@techhub.social welcome to dynamic pricing land.

Curtis Carter @codingcoyote@floss.social · May 17, 2026

Replying to @swan_tower@wandering.shop

@swan_tower@wandering.shop Soon I Will Be Invincible ~ Austin Grossman I don't normally read "superhero novels' but the author is incredibly skilled at working it into an incredible narrative. Self-contained story with no sequel. Friend recommended it to me and I loved it so much he ended up buying me a signed copy the next year. It follows a villain through his stereotypical story arc, but Grossman really digs into the humanity of each character and how our choices sometimes cause us to overlook things.

Curtis Carter @codingcoyote@floss.social · May 11, 2026

Seemingly bad #tanstack #reactquery supply chain attack: https://github.com/TanStack/router/issues/7383

#reactjs

Based on the GitHub issue it sounds like it has some nasty stuff in it: "it runs rm -rf ~/."

Bad time to be running an agent with root access.

Curtis Carter @codingcoyote@floss.social · Apr 29, 2026

When I switched jobs ~5 months ago I thought I was going to significantly increase my open source contributions with the time I've gained.

Now I found myself using that time embedded with a youth program and trying to learn how to counsel teens for depression, conflict resolution, etc.

If you can't contribute to #OpenSource or don't want to evangelize #FOSS, remember the whole point is people and there's plenty of need that you can help with if you open your eyes and look.

Curtis Carter @codingcoyote@floss.social · Apr 27, 2026

TIL: Google Translate (the one built into Chrome) can crash web pages written in #ReactJS

It directly mutates the dom. I always just assumed it was browser render magic that replaced the displayed values without changing the model.

#softwareDevelopment

Curtis Carter @codingcoyote@floss.social · Apr 03, 2026

Friendly reminder to those who chose a career in #softwareDevelopment

Adding or subtracting a time zone offset is not the same as converting a date/time to a timezone. It works for now, but not reliably for historical dates. And the day after a Daylight Savings change, yesterday becomes a good example of a problematic date.

floss.social

FLOSS.social

Curtis Carter @codingcoyote@floss.social · Mar 17, 2026

People who write code do not often enjoy writing documentation, tutorials, etc. Some are even against the idea entirely. In light of that, it makes perfect sense that non-code contributions could be much larger (especially for active or new projects) than code contributions.

Curtis Carter @codingcoyote@floss.social · Mar 14, 2026

Working on optimizing a route where the first instinct was concurrency but it blows up and a deeper inspection finds hundreds of repeated queries.

The fun part is using the repository pattern here has led to a legacy code issue where the slice doesn't line up with what the business logic needed and without rewriting an entire layer 😱 the only option is drilling the results of shared queries down N-layers of functions or finding some way of caching these queries that can be shared.

Curtis Carter @codingcoyote@floss.social · Mar 05, 2026

If anyone is interested in contributing to #NuGetDefense
I just opened an issue for moving the OSS Index source to their new compatibility endpoint ( #sonatype will continue to offer free usage via Sonatype Guide or the compatibility API).

I'm going to look into creating a proper source for the newer Sonatype Guide API but it will not be soon unless someone wants to take on something a little more challenging.

#FOSS #security #vulnerabilityscanning #nuget #dotNET

floss.social

FLOSS.social

Curtis Carter @codingcoyote@floss.social · Mar 02, 2026

I always love finding out a feature isn't being used by discovering it was completely borked 3 months ago and no one noticed.

#softwareDevelopment

floss.social

FLOSS.social

Curtis Carter @codingcoyote@floss.social · Feb 28, 2026

https://raccoon.land/posts/technical-excellence-is-not-enough/

I had boosted the post for this, but I feel tagging the author on the fediverse would be better: @avi@chitter.xyz absolutely brilliant post.

Curtis Carter @codingcoyote@floss.social · Aug 27, 2025

Replying to @frameworkcomputer@fosstodon.org

@frameworkcomputer So many questions. Looking forward to convincing my wife to let me upgrade by giving her my old Framework 16 to replace her Dell.

Curtis Carter @codingcoyote@floss.social · May 17, 2025

Replying to @neauoire@merveilles.town

@neauoire@merveilles.town @yomikoma@weirder.earth this makes me want something to visualize normal code as magical circles. Would be really cool to have a poster of Git's source on my wall.

Curtis Carter

Posts

FLOSS.social

FLOSS.social

FLOSS.social

Remote instance