Roberto Empijei Clapis
@empijei.bsky.social
Security Toolsmith Posts mostly about Go, banter, web development, security and cooking. https://empijei.science
I've been saying this since 2024. I'm waiting for a major, catastrophic vulnerability to shake the world due to this.
Tanya Janca | SheHacksPurple@shehackspurple.bsky.social · 2mo agoBasically: the robots are helping us write code now, which is great, except when the robots confidently hand us a security problem wearing a tiny little party hat. 🎉 If you build software, secure software, lead AppSec, or are currently side-eyeing your AI assistant, this episode is for you. 3/4
I have had problems with my MacBook more or less non-stop since I got it. I've had so many people tell me that it was just a matter of habit. Seeing @jakearchibald.com , struggle with the same issues made me feel less dumb and lonely. Thank you.
This is what I expect to happen to most developers in a couple of years youtu.be/lgXkty83jPM?...
A.I. Sherlock Holmes
YouTube video by Foil Arms and Hog
youtu.be
Most AI images fall in the uncanny valley for me. And there's more and more in the streets and public spaces by the day. This is a new kind of nightmare I didn't see coming.
A bit over two years after starting to work on it... Go is officially FIPS 140-3 certified 💥 csrc.nist.gov/projects/cry... I am pretty confident Go is now one of the most—if not the most—seamless and complete FIPS 140-3 compliance solutions... with a single env var, out of the box.
Journal: Summary punishment How to improve Google’s search results and the World Wide Web in one fell swoop. 🔗https://adactio.com/journal/22540
It's cringe to ask "what would Trump be doing differently if he were a Kremlin asset?" And yet we must.
David Roberts@volts.wtf · 3mo agoPutin is paying people to disrupt renewable energy projects & drive polarization around net-zero goals in Europe. Luckily, I'm sure he would never pull anything like that in the US, so we're probably fine.
@empijei.bsky.social’s favorite thing! pmbanugo.me/blog/why-asy...
The Tokio/Rayon Trap and Why Async/Await Fails Concurrency
Async/await makes concurrency easy to write, but incredibly complex to operate. Read on for why the Tokio/Rayon boundary is failing in production, and how explicit state machines fix it.
pmbanugo.me
Periodic reminder that modern computers are fast enough to do substantially anything without having to make the human wait, in any language. If your CLI is slow you don't need to change language (e.g. py->rs), but you should rethink how you design your code.
Roscoe Rubin-Rottenberg@knotbin.com · 4mo agoliterally every person in the world will disagree with me on this but: codex is the fastest, most reliable agent CLI out there. Specifically the CLI itself. It's written in Rust and it shows. It doesn't have the 2-second stutter on startup and it's not the buggy, flashy mess that Claude Code is.
An mRNA treatment for PANCREATIC CANCER was in trials, among many other uses. Choosing to end this research is choosing to sentence millions to an early, painful death
The UnPopulist@theunpopulist.net · 4mo agoKennedy canceled $500 million in mRNA research and announced no new mRNA projects will ever be initiated—killing the technology that produced the fastest vaccine rollout in human history.
This seems like a good time to remind everyone that renewables aren't just better for the environment.
LLMs are gaining our trust while working at a loss... I really can't imagine what the future holds! (It's ads)
I'm officially looking around, if anybody needs a Go software engineer with a very strong background in web security lmk. I also know a fair share of frontend dev and was a SWE/SE for Google and Microsoft. I'm looking for security-sensitive dev projects and security reviews.
MacOS: I see you've set Finder to appear on 'all desktops' me: yes MacOS: So when you cmd-tab to Finder, which desktop should I switch to? me: well you shouldn't because… MacOS: So I can switch to a random desktop? YAY!
MacOS: When I restart, would you like me to re-open all these apps? me: no MacOS: hmm well that's a shame because I am going to do that. me: ok MacOS: Should I open them all maximised on the same desktop? me: no MacOS: hmm well…
Will LLMs become a fundamental tool in our box? Sure. Will they replace us? No. Linters may become very powerful Reviews may become more precise Autocomplete may be more useful Testing may become more thorough and widespread But only if we collectively take our heads out of our a###s soon
I wonder how much of this applies to software engineering.
Before You Adapt to AI… Watch This
YouTube video by Andreas Hem
youtube.com
One more ooopsie and github is going to lose their last nine. I wonder what is the cause behind this 🤔
After about 12y of Vim and 1.5y of vscode I tried @zed.dev. I have to say, the speed is impressive, there still are some minimal graphic quirks, but I don't care about those. It feels amazing to use it, but I can't switch to it yet 🧵
I am using a MacBook lately. It was a gift, so I took the chance to finally try it. I have to say: it's the best hardware AND the worst software I've ever had on a laptop. The operating system is barely usable and shaves the bar for "functional" VERY closely. But the machine is a beast. 🤔
The AI harness engineering hype is basically just people finding out that with leaner design, good encapsulation, simpler code, improved tools, working CI/CD and precise documentation one can be more effective at writing correct code.
devdocs.io is an amazing os-agnostic app that allows you to download and browse docs offline and blazingly fast. Since it's a PWA it takes a second to install, and works exactly the same everywhere. I strongly advise to give it a look.
DevDocs
Fast, offline, and free documentation browser for developers. Search 100+ docs in one web app including HTML, CSS, JavaScript, PHP, Ruby, Python, Go, C, C++, and many more.
devdocs.io
Holy smokes @zed.dev is Dizzyingly fast. I have no doubt that with some minor improvements that they're already working on it's going to eat up a big chunk of the other editors' user base.
There's an AI-induced anti-pattern that I don't see people discussing enough about, so here is my take. 🧵
Week one of sourdough, results are staggeringly similar to those of the bread maker I own. I accidentally started this experiment as a game for my daughter but it's already surpassed my expectations.
I've started to hear about engineers using AI-written code as an excuse for broken products. Please let's not go towards a future where writing code by hand becomes a liability. Please.
I just published kotama, an experimental GOOS=tamago compiler branch that allows execution of a rich example in barely 6MB of RAM, running on an rv64imfc CPU (yes, no d or a extension). This paves the way for supporting aifoundry.org Minion cores! github.com/usbarmory/ko...
