The plan? Pose as an international man of mystery to gain access to the most exclusive hide outs, so you can claim them under squatter’s rights and secure valuable land overseas.
Let a Canadian be Bond
Andrew Lilley Brinker
@alilleybrinker.com
Memory safety / Rust 🦀, Dodger baseball ⚾️ ...also #jj-vcs, urbanism, and more. Helping you assess OSS risks with @hipcheck.mitre.org. Principal Engineer at MITRE (opinions are mine) blogs: alilleybrinker.com / possiblerust.com
The plan? Pose as an international man of mystery to gain access to the most exclusive hide outs, so you can claim them under squatter’s rights and secure valuable land overseas.
Let a Canadian be Bond
It's still low-volume, but it's picking up relatively high-signal posts, so I'm pretty happy with this!
Made a "Rust Lang Deep Dives" feed with @attie.ai that aims to be a less noisy alternative to the popular Rustlang feed. It's intended to focus *solely* on Rust itself, not on crates in the ecosystem. I'll be using it to (hopefully) track discussions and developments in the language itself.
Big Walk (2026) is the inverse of Journey (2012). In this essay I will...
Some things get worse because people are incentivized to make them worse. Search aggregates searchers, which businesses need so they can find potential customers, so they're incentivized to game search results. The aggregator wants the best results, not the most-gamed, so it's a natural arms race.
I've been saying recently that AI "search" will eventually face a strong adversarial environment the way regular search does today, because gaming your appearance in the aggregation point of the information ecosystem is too valuable *not* to do.
I've been saying recently that AI "search" will eventually face a strong adversarial environment the way regular search does today, because gaming your appearance in the aggregation point of the information ecosystem is too valuable *not* to do.
Google's move to AI means traditional SEO doesn't work anymore so every big company is now desperately doing Reddit AMAs to try and get their responses ingested by the Gemini slop machine and farted out in AI summaries
Trusted publishing is good, but it's still just an authn method and doesn't mean the package itself is safe to run. Good breakdown by @yossarian.net about that
You shouldn't trust Trusted Publishing
blog.yossarian.net
🚨 Another npm worm is live right now. It landed the same week npm turned on publish-time malware scanning, and after npm killed long-lived tokens in favor of OIDC trusted publishing. It propagates through trusted publishing. keyv@6.0.0 even shipped with passing provenance.
Last year I volunteered with a group that provides meals to immigrant families, and they started by having us play a game. You're given a card describing a person's circumstances as they try to immigrate to the US. You have to walk through 6 POSTER BOARDS of flowcharts to see if they can make it.
Genuinely, the vast majority of American voters believe that only laziness or criminal intent could be stopping the average immigrant from obtaining US citizenship. The truth is that becoming a US citizen takes years upon years of work and requires navigating a baroque bureaucratic nightmare.
Addendum: use AI for feedback! Have it identify weak points in arguments, unclear explanations, and awkward phrasing; but don’t substitute its voice for yours.
One of the easiest ways to stand out when writing or creating videos or posting: DONT. USE. AI. Suddenly you sound distinctively different from 80%+ ppl who do and output the same verbose + nicely formatted stuff that feels all the same (+ most ppl stop paying attention midway)
I get where Katie's coming from, but pure text interfaces have a real problem with discoverability. You want users to know what more the tool can do, but lack clear mechanisms for them to discover it organically. So this kind of prompting is a key part of how you teach them its capabilities.
I’ve seen a lot of my colleagues’ interactions with Claude working on research problems & it would be easier for me to accept it as a serious scientific tool if it didn’t end every single response with the LLM equivalent of “you want fries with that?” — constantly trying to goad you into asking more
Need to make it there someday. For folks in southern California, the Vintage Computer Festival is great
VCF SoCal | Vintage Computer Festival in Southern California
VCF SoCal is the premier Vintage Computer Festival in Southern California. Come see amazing vintage computers and retro tech, share your passion, and connect with other enthusiasts. Stroll the exhibit...
vcfsocal.com
/me at the Computer History Museum, looking at dead computers "VAX'd?"
"Continuous batching" has got to be there too. If it's continuous... it's not really batching.
"Docker-out-of-Docker"'s got to be up there on the list of "worst names programmers have used for something"
New hobby: redefining existing terms. Dating app? No that’s a bond market
Madiba's coverage of bar exams' history as a way to block Black law grads from working as lawyers is chilling.
I wrote about the hotass mess that hundreds of recent law grads in Washington are going through for no good reason! ballsandstrikes.org/legal-cultur...
CISA published updated SBOM minimum elements yesterday, so here's Allan with the highlights!
What's that? You want some more in depth analysis of the brand new 2026 International #SBOM Minimum Elements? And you don't mind people who just use LinkedIn for blogging? Well, have I got some quality markdown content for you! www.linkedin.com/pulse/sbom-m...
While it's good for people to be able to do things themselves (self-host software, grow their own food, etc.), specialization is good for society and we can never expect or even worse demand a de-growth return to generalism.
give a man a hosted platform, he'll say he can do it better for a lifetime let a man self-host a platform, he'll rejoin your hosted platform in 3 months
Great article covering what to do to make a trait "dyn compatible" (previously called "object safe"). I'll add my own "3 Things to Try When You Can't Make a Trait Object," which covers two techniques that don't involve modifying the trait itself.
3 Things to Try When You Can’t Make a Trait Object
Trait objects are Rust’s usual mechanism for dynamic dispatch, and when they work they’re wonderful, but many Rust programmers have struggled with the question of when a trait can become a trait objec...
possiblerust.com
Great in-depth explanation on how Rust's "dyn" work, and understanding and fixing the dreaded "the trait is not dyn compatible" compiler error. corrode.dev/blog/dyn-com...
My favorite thing about CISA's work on OSS policy the last few years has been how much they *get* that OSS is a participatory ecosystem. They know the burdens OSS maintainers face, and want federal agencies and private industry to participate and own their responsibilities as integrators.
CISA's published "Open Source Software: Security Principles and Practices" with recommendations on how to use, contribute to, and produce open source software at US federal agencies. It includes multiple recommendations to use @hipcheck.mitre.org to assess OSS packages' security risks!
Open Source Software: Security Principles and Practices | CISA
cisa.gov
The Dark Knight: come for The Joker, stay for *litigating the post-9/11 order of rendition, detention, interrogation (RDI) and mass surveillance.*
the Nolan Batman films are, in order, 1. entirely mediocre 2. excellent. 3. trash.
Google search results *and* websites are doomed to get worse under search aggregation because of structural forces. Google needs to constantly evolve the algorithm to keep SEO slop down. Legit websites need to do SEO that degrades the experience to maintain rankings. Everyone pays the cost of spam
Yeah I agree that Google products have gotten genuinely worse, though I think search (even pre-AI) has the unenviable challenge of being in a persistently adversarial environment of Search Engine Optimization (SEO) for websites.
Wanting Rust stuff for intermediate Rustaceans is why I made @possiblerust.com, and I wish I had more time to write for it.
The idea that there's an easy abundance of free resources to learn to code is laughable once you've done what I've done and been a VP of research at a company that helped thousands of people break into tech careers. There's an abundance of *beginner tutorials*
They should invent bodies that don't hurt from mistakes like "sleeping wrong"
To people asking "does anyone really want this?" about new AI features in products, the answer is sometimes overwhelmingly yes! AI chat products had rapid product-market fit and remain highly actively used! Not all AI features are desirable, but consumers clearly *want* AI in some contexts.
Fun discovery: "Memory Safety for Skeptics" appears on the 1st page of Google search results for "memory safety" and is a top suggested reference if you ask Google AI mode about memory safety. Neat!
Memory Safety for Skeptics – Communications of the ACM
cacm.acm.org