Roger Peppe

@rog.bsky.social

CUE, Go, fiddler, climber, gardener, curry maker.

I've seen it's being more common to put historical articles (eg all previous designs and associated documents) directly into a repo's content rather than leaving it in git history. What should I be thinking about this in this new age?

I'm officially looking around, if anybody needs a Go software engineer with a very strong background in web security lmk. I also know a fair share of frontend dev and was a SWE/SE for Google and Microsoft. I'm looking for security-sensitive dev projects and security reviews.

Are you still hiding if no one is looking? People aren't reading the code at all—they'd see the weird decoder+eval—and machines can see that and also the private use code points. Also, it's been public since May 2025 and GitHub/NPM/Microsoft have done nothing. www.aikido.dev/blog/glasswo...

Glassworm Returns: Invisible Unicode Malware Found in 150+ GitHub Repositories

The Glassworm supply chain attack is back. Researchers uncovered malware hidden in invisible Unicode characters across 150+ GitHub repositories, plus npm packages and VS Code extensions.

aikido.dev

I don't understand why Claude is such a resource hog when it's not actually doing that much locally. For example, it's currently idle on my machine and it's coming up as using just under 500MB of memory. WTF?!

One of the most frustrating things in the modern age: on an Android phone, having a set of photos selected in Google Photos and wanting to attach them to a specific Facebook reply.

Using Claude Code, I sometimes find myself in the situation where I want to interrupt a generic sub-agent (but not its parent!) and tell it to do something differently. Is there some way to do that, or some other similar-ish UI that allows this kind of thing? @simonwillison.net might have ideas?

I'm enjoying using Claude Code, but... why does it use so much CPU time when surely it's essentially just blocked on I/O almost all the time? Is it just doing some really inefficient polling or something?

Today, I'm proud to officially announce CUE Labs! I co-founded CUE Labs with @mpvl.io to build a Configuration Control Plane, solving config chaos with CUE. Our work also provides the stewardship for the @cuelang.org open source project. Read our launch post: cue.dev/blog/announc...

A World Without Configuration Chaos: The Configuration Control Plane

Imagine a world where you can answer, with absolute confidence, the critical question: “What is the full impact of this change?” A world where configuration isn’t a source of fear, but a source of rel...

cue.dev

This heartfelt and meaningful statement by Portland resident and author Cristina Breshears on another social media platform bears reposting here. I don't think the intent is to idealize Portland but to remind all of us what is important and why. (Posted here with permission.)

For nine nights now, the steady thrum of Black Hawk helicopters has circled over Portland. The sound is constant, invasive; a low mechanical beating above our homes. It’s expensive. It’s intimidating. And it’s unnecessary.

Our protests have been largely peaceful. There is no insurrection here. Yet this federalized military presence makes us feel like we are living in a war zone (the very kind of chaos this administration claims to be protecting us from). 

The irony is painful: it is only this occupation that makes Portland feel unsafe.

Each hour of helicopter flight costs taxpayers between $2,000 and $4,000, depending on crew, fuel, and maintenance. Multiply that by multiple aircraft over multiple nights, and you’re looking at hundreds of thousands (if not millions) of dollars burned into the sky.Meanwhile, the Woodstock Food Pantry at All Saints Episcopal Church — which feeds working families, elders, and people with disabilities — has seen its federal funding slashed by 75%. How can we justify pouring public money into intimidation while cutting aid to those who simply need to eat?

This is waste, fraud, and abuse in plain sight:
* Waste of public resources on military theatrics.
* Fraud in the name of “public safety.”
* Abuse of the communities that federal agencies claim to protect.

Portland is a Sanctuary City. A sanctuary city is not a fortress. It’s a promise — a living vow that a community will protect the dignity and safety of everyone who calls it home. It means that local governments and ordinary people alike will refuse to criminalize survival. That schools, clinics, churches, and shelters will remain safe spaces no matter who you are or where you were born. But the term reaches far beyond policy. It’s an ethic of belonging; a refusal to criminalize need, difference, or desperation. 
Sanctuary isn’t weakness. It’s courage. It takes moral strength to meet suffering with care instead of punishment, to believe that our neighbors’ safety is bound up in our own, to insist that safety is not achieved through force but through community, inclusion, and trust. It is living Matthew 25:40 out loud and in deed. It is an act of moral imagination and moral defiance. To hold sanctuary is to say: you belong here.

When we hold space for the most vulnerable — refugees, the unhoused, the undocumented, the disabled, the working poor, the displaced — we become something larger than a collection of individuals. We become a moral body. We do more than offer charity. We offer witness. We declare that the measure of a nation is found not in its towers or tanks, but in its tenderness.

Sanctuary cities are not lawless; they are soulful. They represent the conscience of the nation, a place where the laws of empathy still apply. To make sanctuary is to affirm that the United States is not merely a geographic territory, but a moral experiment: a republic that must constantly choose between fear and compassion, between domination and democracy.
A nation’s soul is measured not by the might of its military, but by the mercy of its people. When helicopters circle our skies in the name of order, while food pantries struggle to feed the hungry, we are forced to ask: What are we defending, and from whom? The soul of a nation survives only when we make sanctuary for one another. Not through walls or weapons, but through compassion and collective will. If we allow intimidation to replace compassion, we will have traded our conscience for control.

Please know that despite the hum of war machines overhead, the conscience of our city — whimsical, creative, stubbornly kind — can still be heard.

Portland is not the problem. Portland is the reminder. A reminder that a city can still choose to be sanctuary. That a people can still choose to be human.

Just been mostly-vibe coding a PoC. I feel a bit like I feel when I'm on a drag lift up a ski slope: very aware how much work is being done for me. And then I get to play on the downhill after each feature is built. Lots of fun!

TIL Claude's new code interpreter mode has a /mnt/skills/public/ folder full of prompt instructions and Python utilities for creating and manipulating pdf, docx, pptx, xlsx files - and you can ask Claude for a copy and learn a TON about working with those formats simonwillison.net/2025/Oct/10/...

simonw/claude-skills

One of the tips I picked up from Jesse Vincent's Claude Code Superpowers post (previously) was this: Skills are what give your agents Superpowers. The first time they really popped …

simonwillison.net