Liz Keogh

@lunivore.bsky.social

Staff Developer, Lean/Agile coach, speaker, blogger, pattern hunter, poet, writer, complexity thinker, free will skeptic, Londoner, Goth, she/her.

User fixingmedaybyday on Reddit came up with "Agilecadabra" to describe management thinking that if they use the word "agile" without changing anything else it magically makes people complete tasks quickly, and I love it and am stealing it right now.

Cuckoo ducks (animal) An obligate brood parasite which lays its eggs in seagulls' nests. They don't hurt other eggs; they just get in the way and take advantage of others' care. (software devlopment) Jira tickets that got bodged into your team's epic because it's less work than creating a new one.

New blog post: A third conversational pattern in BDD: lizkeogh.com/2026/01/23/a... - Interaction Questioning: “Given the behaviour that results in the outcome, is there any point where a human should confirm choices or decisions being made?”

A Third Conversational Pattern in BDD

It’s been a moment! COVID disrupted a lot of things, not least my writing. More recently I’ve been busy with my new employment with the amazing Assent, focusing on sustainability in sup…

lizkeogh.com

Software devs solve problems that haven’t been solved before, or solve them in new contexts; otherwise we’d be buying (or open sourcing) solutions. When AI solves problems that don’t come from its training data set, I’ll worry about my mortgage. Until then it’s great for the other stuff. Mostly.

AI is super-helpful, especially when we tread on someone else's specialist turf to get things done. But it still takes a human to help you check / test the work, and AIs can't tell you who the right person is to do that, or reach out to them for you. As ever, the hardest problems in SW are human.

Specialisms in modern SW means that we have to work with each other: to over-communicate, relentlessly clarify priorities, work as a team-of-teams when they shift, create and clean up docs, and it's always messy no matter how hard you try. Katherine Kirk calls it "the entanglement of entanglement."

It's been eye-opening getting "back to the coal face". The complexity of modern software development is mind-boggling. Back in 2000 one person could reasonably hold the whole of an Enterprise website plus services in their head having spent a year or so on it. Now we necessarily have specialisms.

I stumbled across this essay as I was falling asleep last night, and left myself multiple emphatic reminders to remember to circle back to it today. "The joy we're about to lose...we'll become overseers rather than creators, managers rather than builders." annievella.com/posts/the-so...

The Software Engineering Identity Crisis - Annie Vella

Many of us became software engineers because we found our identity in building things. Not managing things. Not overseeing things. Building things. With our own hands, our own minds, our own code. But...

annievella.com

What gets me about the Signal chat isn't the chat itself. It's that nobody can answer the question: "What other information has been compromised?" This will not be the only thread, possibly not the only leak, and anything > 4 weeks old is deleted. They have no idea what they leaked, to who.

Don’t ask Amazon Q Developer to put code under test for you. It thinks you’re trying to “put it under”, refuses, and directs you to the Responsible AI Policy instead.

Newsletter: Our digital lives are unregulated growth-hacked ecological disasters. The modern tech ecosystem's growth-at-all-costs mindset is actively harming billions of people, pushing them toward authoritarianism for profit. We must fight back. www.wheresyoured.at/never-forgive-them/

Never Forgive Them

In the last year, I’ve spent about 200,000 words on a kind of personal journey where I’ve tried again and again to work out why everything digital feels so broken, and why it seems to keep getting wor...

wheresyoured.at

Here's a puzzle. How do y'all work out what data you need from your users and data constraints, alongside your emergent product, when you can't get the data later if you didn't get it from the get-go and you can't put data constraints in if the data is already a mess? What should I read / watch?

Can you imagine going to a restaurant and yelling at the waitress to bring your food faster, following her around the room shrieking at her and when she finally sets your in meal in front of you, sniffing it and walking outside. MY CAT CAN

The National Gallery in London is renovating its Sainsbury Wing and they’ve just found a secret letter from one of the original donors, sunk into a concrete column, saying that he hates the columns and is glad they’re being demolished. 10/10 unhinged rich man behaviour, no notes

A modernist concrete foyerTO THOSE WHO FIND THIS NOTE
IF YOU HAVE FOUND THIS NOTE YOU MUST BE ENGAGED IN DEMOLISHING ONE OF THE FALSE COLUMNS THAT HAVE BEEN PLACED IN THE FOYER OF THE SAINSBURY WING OF THE NATIONAL GALLERY.
I BELIEVE THAT THE FALSE COLUMNS ARE
A MISTAKE OF THE ARCHITECT AND THAT WE WOULD LIVE TO REGRET OUR ACCEPTING THIS DETAIL OF HIS DESIGN.
LET IT BE KNOWN THAT ONE OF THE DONORS OF THIS
BUILDING IS ABSOLUTELY DELIGHTED THAT YOUR GENERATION HAS DECIDED TO DISPENSE WITH THE UNNECESSARY COLUMNS.

I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, not auth bypass, and gated/unreplayable.

Filippo Valsorda@filippo.abyssdomain.expert · 2y ago

This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library. Looks like this got caught by chance. Wonder how long it would have taken otherwise.