chimbosonic

@chimbosonic.com

Principal software engineer, ex-security nut, traveler, amateur photographer, gamer, maker, 3D printing nerd, coder and computer enthusiast. My opinion is my own. Mastodon - @chimbosonic@fosstodon.org openpgp4fpr:AC48BC1F029B6188D97E2D807C855DB4466DF0C6

Ugh, this sucks. Looks like @hope.net was kicked out of St. John's University and needs to find other options for the next conference. Stated reason was anti-police materials at someone's booth, but wasn't brought to the con's attention until after it was over.

There is a lot of demand for digital privacy and security advice out there right now and lots of people are giving advice and writing guides. I beg them to do a few things: 1. Be explicit about the threat model your advice is meant for.

Huge thanks to everyone who joined the Serverless Meetup and to Aleios and Moonpig for sponsoring and organising! A special shoutout to Ryan Cormack for his insightful talk on Smithy. I had a blast giving my talk and chatting with so many of you afterwards.

Photo of Ryan Cormack giving a talk. The slide reads APIs in the Fastlane.Photo of myself giving a talk. Slides read Thank you.

Looking forward to speaking at London GraphQL in April! I'll be sharing insights from Moonpig's experience with GraphQL, Federation, and Serverless. Excited to connect with everyone there!

London GraphQL@london-graphql.bsky.social · 2y ago

🪅 Apr 29th at 6PM: London GraphQL April London GraphQL will be held on July 5th at Herbal House, 8-10 Back Hill, London EC1R 5EN. Two talks on the most up-to-date GraphQL topics interspersed with pizza. Check it out 👉 https://guild.host/e/fl322c

1. LLM-generated code tries to run code from online software packages. Which is normal but 2. The packages don’t exist. Which would normally cause an error but 3. Nefarious people have made malware under the package names that LLMs make up most often. So 4. Now the LLM code points to malware.

David D. Levine@daviddlevine.com · 2y ago

LLMs hallucinating nonexistent software packages with plausible names leads to a new malware vulnerability: "slopsquatting."

Looking forward to speaking at London GraphQL in April! I'll be sharing insights from Moonpig's experience with GraphQL, Federation, and Serverless. Excited to connect with everyone there!

London GraphQL@london-graphql.bsky.social · 2y ago

🪅 Apr 29th at 6PM: London GraphQL April London GraphQL will be held on July 5th at Herbal House, 8-10 Back Hill, London EC1R 5EN. Two talks on the most up-to-date GraphQL topics interspersed with pizza. Check it out 👉 https://guild.host/e/fl322c