Your Claude: *Does a breakthrough* My Claude: *Tries to guess UUIDs...*
Tommy McCormick
@jan0ski.net
security, distributed systems, networking, & rust
Oh nice, Amp has their own subscriptions now that can be combined with Codex subs. ampcode.com/news/subscri...
Subscriptions, At Last
Subscribe monthly to Amp to explore the agentic frontier more cheaply and predictably, especially with a linked ChatGPT sub.
ampcode.com
HuggingFace got hacked by an AI. What stuck out to me was the guardrail asymmetry. The attacker had no constraints, but HF's response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local models. Another aspect for your IR plans. huggingface.co/blog/securit...
In elementary school, my teacher did this exercise with the class where one student was "the machine" and one was "the brain". Both students would compete to answer a series of math questions for which "the brain" had to answer them manually and "the computer" *must* use a calculator.
Normally I'd just reboot to fix any intermittent issues on Ubuntu like sound, printing, bluetooth, etc. Lately, I've sicking Claude on it and end up finding some wild root causes. Chrome was refusing to open and it was determined to be Discord leaking X11 connections. Neat!
Does anyone actually use OSS ML Ops platforms in production? Something like TensorZero looks interesting unsure if it raises the bar for evals or the like more than just the provider logs themselves
jj is super powerful if you need it, but tbh I think the pitch is even stronger for non-power users. In 6 months of regular use I've never needed to consult the Deep Tomes to unfuck a repo, and the only time I ended up remotely off the happy path it was a limitation of the underlying VCS, not jj
Definitely calling this one the "sig-seven" vulnerability. 🫴 🫴
Matteo Collina@nodeland.dev · 7mo agoThe bug: when async_hooks is enabled and your code hits stack overflow, Node.js exits with code 7 immediately. No try-catch. No uncaughtException handler. Just... dead. The problem? async_hooks is enabled the moment you use AsyncLocalStorage, which is EVERYWHERE.
i think a core beef that i have with a lot of this "automation is bad" sentiment lately is that there is no inherent moral good in laboring the story of humanity is one of invention, where we improve our conditions by building things that help us do more things more easily
Do you have an idle cluster? Can you spare a couple core-years? Help me bruteforce some test vectors for RSA key generation edge cases! Here are the instructions, it's just a matter of running a single self-contained cross-compilable Go binary that will report the results autonomously.
RSA test vector crowdsourcing instructions
gist.github.com
The reason the Eagles didn’t just fly the ring into Mordor is that Kevin Patullo was coordinating their offense
Politico is reporting that the breach at the Congressional Budget Office is "ongoing." “Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.
Cybersecurity breach at Congressional Budget Office remains a live threat
Library of Congress employees were informed to take caution when emailing the office of the congressional scorekeeper.
politico.com
If you're coming into Atlanta for Kubecon next week and looking to explore outside the conference, reach out! I'm nearby in East Atlanta and happy to recommend some local favorites and/or catch up over a meal or a beverage.
Wrote up my first impressions of ChatGPT Atlas, OpenAI's new browser - I remain unconvinced by the entire category of "browser agents", the security and privacy challenges still feel insurmountable to me simonwillison.net/2025/Oct/21/...
Introducing ChatGPT Atlas
Last year OpenAI hired Chrome engineer Darin Fisher, which sparked speculation they might have their own browser in the pipeline. Today it arrived. ChatGPT Atlas is a Mac-only web browser …
simonwillison.net
if the presence of hype makes you completely unable to think about reality independent of the hype, that is not resisting hype, it is surrendering to it totally
It's not you, cloudflare, npm, firebase, and google cloud are all having issues. If you are affected, go touch grass. There's nothing you can do about it.
Found this tonight and it's a really solid read on the Go runtime. Definitely a long post but it's got a lot of useful info in it. Learned a lot about things that I haven't really dug into before from it. nghiant3223.github.io/2025/04/15/g...
Go Scheduler
↑ ↓
nghiant3223.github.io
This is *exactly* why the @cncf.io was created. A safe space for community and companies to come together with longitudinal guarantees of stability and fair ground rules. There are no backsies. @synadia.bsky.social? @derekcollison.bsky.social? This is not ok. www.cncf.io/blog/2025/04...
Protecting NATS and the integrity of open source: CNCF’s commitment to the community
When a company contributes a project to the Cloud Native Computing Foundation (CNCF), it’s not just sharing code—it’s making a commitment to the open source community. It’s a pledge to uphold open…
cncf.io
i feel like im watching my 11 yr old nephew play civ on the hardest difficulty setting