João Antunes
@joao.antunes.dev
Code, headbang, grouch, repeat! 👨💻🤘😈🔁 Writing and talking about code, headbanging @ concerts, ranting @ anywhere. He/him https://antunes.dev & https://blog.codingmilitia.com
We should know enough by now that all the alarm bells should sound when an apparently benign feature like LinkedIn's recent "looks like AI slop" is released.
Google hacking Microsoft wasn't on my bingo card (Wiz is part of Google) The fact that Microsoft had a "Master key" for a public service launched 9 years ago 🤦 It took 10 months to remove it from the architecture www.wiz.io/blog/cosmose...
CosmosEscape: Taking Over Every Azure Cosmos DB | Wiz Blog
Wiz Research details CosmosEscape, a critical vulnerability in Azure Cosmos DB that granted full read/write access to every database. Now fully remediated.
wiz.io
Warcraft 2 (1995). Anyone remember this? Feels like a lifetime ago.
Some math ain't mathing for me right now 😅 In the MS MVP website, it says this is my 9th year in the program. However, my first award was in 2019, we're in 2026, so it seems the count is incorrect?! There's an off by one error somewhere, either in my head, or on the MVP website 😂
It continues to baffle me that the default messaging app used around these parts (PT/EU) is WhatsApp, when Signal, which, as far as I'm aware, has (relevant) feature parity and is just as easy to use, is right there...
TOMORROW AT 12:00 is the final vote on Chat Control 1.0. An absolute majority of 361 MEPs is needed to stop it! This is the works of EP President Roberta Metsola who is forcing through the vote on Chat Control 1.0 despite the plenary already rejecting it. Take action now! fightchatcontrol.eu
Today is a good day to remember that authoritarianism is not inevitable, overthrowing fascists is possible, and good things can still happen. www.pbs.org/newshour/wor...
Tens of thousands march in the first Budapest Pride since Viktor Orbán was voted out
Saturday's Pride march came a little more than a year after Orbán's nationalist-populist government passed legislation and a constitutional amendment to outlaw the event, drawing criticism from human ...
pbs.org
get in losers, we're making vintage UIs w/clear visual affordances, sub-100ms performance, no unnecessary animations, bookmarkable URLs & a functioning back button
Now the question is, how many years until this is implemented widely enough for it to be safe to use in APIs exposed to 3rd party clients? www.rfc-editor.org/info/rfc10008/
RFC 10008: The HTTP QUERY Method | RFC Editor
This specification defines the QUERY method for HTTP. A QUERY requests that the request target process the enclosed content in a safe and idempotent manner and then respond with the result of that pro...
rfc-editor.org
So now there are two main European atproto providers (PDS and client), one is open source and one is closed source. Very concerned that the EU talks about how important OSS is, and then they pick the closed source one :/
If a service crashes while writing to S3, the incomplete multipart upload will sit there. Without cleanup policies in place, it will sit there forever, taking up space and costing money. Today's lesson: enough crashes with large enough payloads, quickly racks up terabytes of "invisible" trash 😅💸
Trying out filen.io, to move my things off of Google Drive, and it's looking pretty interesting. It includes some features that I've been looking for, but hadn't found generally available, like sync specific directories, file versions, an event log and a .gitignore like file to define exclusions.
There are two ways to resolve the cognitive dissonance of being on Twitter while also caring about all the awful shit happening because of Twitter 1. Leave Twitter 2. Stop caring Profoundly disappointing how many people I like seem to have chosen the latter
"We call it: Siri AI" - so... what was it before? Siri Regex? 😂
So, I have a funny(ish) story from the past weekend (I’ll get back to the "ish" part at the end).
This is absolutely nuts: hackers are hijacking high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email on the account. Meta's AI does it, hacker gets password reset code, they're in. A staggering security issue www.404media.co/hackers-simp...
Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked
The exploit shows the extreme risk of offloading technical support to AI.
404media.co
Interesting read: "Ingesting 1Gbps of logs into ClickHouse for $180/month" www.opendata.dev/blog/ingesti...
Ingesting 1Gbps of logs into ClickHouse for $180/month | OpenData
New pipelined producer and consumer clients for OpenData Buffer, plus a ClickHouse integration with batch deduplication, move 1.1 Gbps of logs from an OTel Gateway to ClickHouse via S3 for $180/mo.
opendata.dev
This is really a great video on renewable energy technology (and other things) www.youtube.com/watch?v=KtQ9...
You are being misled about renewable energy technology.
YouTube video by Technology Connections
youtube.com
[2/2] Since I don't ever make this kind of video, I'm sure it could be done a lot better, but hopefully it gets the point across. I'd love it if people who specialize in this kind of video started looking at the broader issue. Here's the link: www.youtube.com/watch?v=tlQ7...
"But it happened."
YouTube video by Molly Rocket
youtube.com
Gotta love these tech CEOs... youtu.be/tlQ7EoJDTQY
"But it happened."
YouTube video by Molly Rocket
youtu.be
Be like @plausible.io which sends an heads-up email before the upcoming subscription renewal. Don’t be like @proton.me which doesn’t.
Wondering if a session about building a dynamic and distributed authorization enforcement system with #DotNet and #AspNetCore would be interesting 🤔
ChatGPT was never Google’s biggest threat; it was always its own hubris. With Search now being sacrificed on the altar of AI dominance, the time has come for users to get serious about moving off Google services. It’s not only destroying its products; it’s trying to further degrade the web itself.
Google is its own worst enemy
In its bid to push AI, it’s destroying its products and trying to kill the web too
disconnect.blog