Martin Boßlet
@klautcode.bsky.social
Freelance software architect & CTO-as-a-Service. Cryptography, digital signatures, security, Git, AI-assisted development, modern web development. Workshops, audits, hands-on architecture. Better software. Starting now. https://martinbosslet.dev
Lore - an open-source VCS that looks like a true contender to Perforce and Git LFS. lore.org
Learn about Lore: next-generation open source version control
Maintained by Epic Games, Lore is designed for unprecedented scalability of both data and teams. It’s optimized for projects that combine code with large binary assets.
lore.org
Hacker News or r/programming, but exclusively for independent, personal blogs: bubbles.town
Bubbles
Independent blog posts, ranked by the community. Good stuff bubbles up. The rest pops.
bubbles.town
We released Ruby 4.0.5 and published security advisory for CVE-2026-46727. If you use Ruby 4.0.0~4.0.4, we recommend updating your Ruby version to 4.0.5. www.ruby-lang.org/en/news/2026...
Ruby 4.0.5 Released | Ruby
Ruby 4.0.5 has been released.
ruby-lang.org
This is just insane. A million lines rewrite that likely nobody has read. LGTM, for sure. How is this professional? Even if you blindly trust AI, this is reckless. Feels like a marketing ploy preparing for a grand IPO. Look Ma, no more humans needed. github.com/oven-sh/bun/...
Rewrite Bun in Rust by Jarred-Sumner · Pull Request #30412 · oven-sh/bun
Blog post with details coming soon. It passes Bun's pre-existing test suite on all platforms (and fixes several memory leaks and flaky tests), the binary size shrinks by 3 MB - 8 MB, the benchm...
github.com
This is worrying. We fought decades for standards-compliant browsers, let's not go back to a new IE - or this time, Chrome - era. denodell.com/blog/browser...
Browsers Treat Big Sites Differently
Safari and Firefox change how big sites render based on the domain. TikTok, Netflix, Instagram… even SeatGuru. Chrome doesn’t. Why is that?
denodell.com
I benchmarked which language works best with Claude Code. Ruby, Python, and JavaScript came out cheapest, fastest, and most stable! See my article in detail: dev.to/mame/which-p...
We've seen this cycle before, it didn't start with AI: "Young devs using too much of [Tech X] will lead to degrading skills" - veteran engineers have been making this argument for decades. It's not the tool that makes us worse developers, our own complacency does.
Ruby 4.0.4 Released www.ruby-lang.org/en/news/2026... This is a routine update that includes bugfixes. We recommend upgrading your Ruby version at your earliest convenience.
Ruby 4.0.4 Released | Ruby
Ruby 4.0.4 has been released.
ruby-lang.org
The European Commission (@ec.europa.eu) has updated the top follow buttons on its web page. Mastodon and Bluesky are in, X is out. commission.europa.eu/index_en
Quick caveat to my own post: the Mozilla follow-up explains the CVE accounting, but doesn't really answer whether Mythos was needed to find these bugs. Worth reading flyingpenguin's breakdown and the Schneier comment thread before treating 271 as an apples-to-apples upgrade from 22.
Impressive stats showing that Mythos is more than hype. It seems clear where this is going - it'll be used as a weapon instead of improving security for everyone. hacks.mozilla.org/2026/05/behi...
Behind the Scenes Hardening Firefox with Claude Mythos Preview – Mozilla Hacks - the Web developer blog
New details about what we found, and how agentic harnesses are now able to reproduce real bugs and dismiss false positives.
hacks.mozilla.org
Ever felt the urge to choose “********” as your actual password, just so you can type it out in the open for everyone to see? Happy World Password Day, everyone!
Made a new blurg post about AI + OSS security. I was going to just complain on here, but I figured a short blog post would be better for my complaining 😂 tenderlovemaking.com/2026/05/06/r...
Rails Security, AI, and IBB
For quite a few years the Rails project has been working with the Internet Bug Bounty (IBB). The IBB is an organization that awarded cash to security researchers that reported issues to OSS projects p...
tenderlovemaking.com
AI agents running on your machine inherit every credential you have. AWS, Kubernetes, SSH keys, all of it. I run mine inside 'Dexter', a locked-down Debian VM. No sudo, no synced credentials, no push access. Just the tools the agent needs. Short walkthrough: www.youtube.com/watch?v=F_mv...
Locking down AI agents
YouTube video by Luis Lavena
youtube.com
Debunking the myth that in a PQC era, we would need to use 256 bit keys - AES-128 will continue to be good enough. words.filippo.io/post-quantum...
KEMs and Post-Quantum age
NIST selected a post-quantum cryptographic KEM. We look at how it works and how we can use it for file encryption with age.
words.filippo.io
I’ve been working on this classical cipher cryptanalysis tool using a mixture of Claude Code and Codex, just to get a sense of how capable these tools are on big (advanced) code bases. So far it solves homophonic, substitution, and a few polyalphabetic test cases. github.com/matthewdgree...
GitHub - matthewdgreen/decipher: An AI-enabled application for cracking ciphers
An AI-enabled application for cracking ciphers. Contribute to matthewdgreen/decipher development by creating an account on GitHub.
github.com
Dass das .de-Internet gestern nach 22:00 Uhr ausgefallen ist, war zum Glück nicht schlimm. Nach Ladenschluss hatte sowieso keine Webseite mehr auf, höchstens ein, zwei Spätis im Dark Mode. So spät im Netz braucht man sich nicht zu wundern, wenn das Signal-Passwort aus der Tasche gestohlen wird.
Thema Diversity, Equity und Inclusion (DEI) im Software Engineering: Trotz Anti-DEI Bewegungen, setzt sich die Software Engineering Community weiter für DEI ein, denn es macht auch laut Forschung Sinn (oh Wunder), führt zu mehr Kreativität und bessere Teamleistung (link.springer.com/content/pdf/...)
link.springer.com
High Performance Git: A book that peeks under the hood of Git, with a focus on Git staying fast even as repos grow: gitperf.com
High Performance Git
High Performance Git by Ted Nyman, a book about Git internals and large Git repositories.
gitperf.com
Really looking forward to presenting my "Text-First" methodology for AI-assisted development tonight. 👇 www.linkedin.com/feed/update/...
#ki #softwareentwicklung #ai #developer #expertenkreisjava #gedoplan | Martin Boßlet
Text-First. Make AI Great Already. Freue mich sehr und fühle mich geehrt, diesen Vortrag für GEDOPLAN GmbH zu halten 🙌 📅 30.04.2026 | ⏰ 18:00 - ca. 19:30 Uhr | 💻 Online via Zoom Zur Anmeldung: http...
linkedin.com
Post Quantum Cryptography is no longer about a theoretical threat in the distant future. We need to at least think about it. Now. scottaaronson.blog?p=9718
Will you heed my warnings NOW?
Holy crap … yesterday I was elected to the US National Academy of Sciences! If you don’t believe me, click the link and keep scrolling down until you hit the name “Aaronson.” But …
scottaaronson.blog
Spent over a decade not posting on Twitter - let’s see if I can do better here. Oh, wait - they call it "X" now.