Pretty neat exploration of storylines of possible climate futures by Dagomar Degroot and colleagues: after2c.com

After 2C - Histories of the Future of Global Warming

An interactive exploration of five plausible, research-grounded climate futures, written as history papers looking back from the year 2100.

after2c.com

lethain.com/decisions-no...

Roadmap decisions rather than dates.

One thing that bothered me about Imprint’s product after joining was our lack of passkey support. Passkey support is a rare opportunity to increase resiliency to phishing attacks while simultaneously ...

lethain.com

I've been unsettled lately when reading messages and papers. It feels like I'm dissociating. Everything seems a bit alien, even if it's completely human. I've had a realization: When our simulations finally exited the Uncanny Valley, they brought the Uncanny with them.

Life on the Uncanny Precipice | Naomi Saphra

We were wrong about the Uncanny Valley.

nsaphra.net

Benjamin Netanyahu is a war criminal.

npm v12 🎉 - allowScripts defaults to false, scripts have to be approved - git dependencies are disallowed - remote URL dependencies are disallowed (e.g. http) big wins!

npm install-time security and GAT bypass2fa deprecation - GitHub Changelog

npm v12 is now generally available and tagged latest. This major release turns on the install-time security defaults we announced in June, and it’s also where we begin a deprecation…

github.blog

shape is the new emdash.

Testcontainers (testcontainers.com) are really neat for integration tests. I use them in a project to create an instance of the database on postgresql.

Been using lazygit (tui for git) for about a week and it's a super well made. Check it out github.com/jesseduffiel...

GitHub - jesseduffield/lazygit: simple terminal UI for git commands

simple terminal UI for git commands. Contribute to jesseduffield/lazygit development by creating an account on GitHub.

github.com

got frustrated recently at work about people writing using AI instead of using their brains! here's my take on it: sophiebits.com/2026/06/25/t...

We regret that our event on Extreme Heat: Improving governance and strengthening action around the world has been cancelled due to the red extreme heat warning issued by the UK Met Office. Our apologies to everyone who was planning to attend the event.

npm merged a PR today to support exclusions for dependency cooldowns. Exciting as this was the missing piece for us to be able to implement cooldowns at work github.com/npm/cli/pull...

LLM generated text is so boring, everything looks the same. I'm at the point where if I see a blog is LLM-generated I close the tab and move on.

Cette année au nsec CTF, nous avons demandé aux gens d’autodéclarer les flags trouvés par un agent IA. Nous avons aussi demandé à la communauté leur opinion sur le rôle+impact des agents IA dans les CTFs Plus de 40% des participants ont répondu au sondage! J’ai écrit un blogpost qui analyse le tout

Retour sur nsec 2026: le pouls de la communauté sur l’agentic CTF

Si vous avez assisté à la cérémonie de fermeture, passez directement à la section Sondage de rétroaction, la première section répète les…

res260.medium.com

This is such a bad look for you @vscode.dev. I'm usually all for giving the benefit of the doubt but you're making it very difficult with this one news.ycombinator.com/item?id=4798...

Ernie Smith@ernie.tedium.co · 4mo ago

Microsoft figured out a way to upset all the VS Code users: Add a comment to commits that says "co-authored by copilot" even when the feature is not used. github.com/microsoft/vs...

This is hilarious. With AI generated music polluting Tidal feeds of existing artists I could see myself join this movement. fuckoffaimusic.com

JetBrains Rider has a very clever way to handle cases were there are multiple function calls on the same line when debugging, you use the arrows to select which one you want to step into. It's the first time I see this and now I wish all debuggers supported it.

Bitwarden cli compromised in supply chain attack socket.dev/blog/bitward...

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...

Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

socket.dev

www.theguardian.com/world/2026/a...

Israeli soldiers using sexual assault to force Palestinians out of West Bank, report says

Experts say attacks, also carried out by settlers, are leading girls to quit school and enter early marriages

theguardian.com

🚨 Active supply chain attack on axios@1.14.1. The latest version pulls in plain-crypto-js@4.2.1 -- a brand-new package that didn't exist before today. We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...

Supply Chain Attack on Axios Pulls Malicious Dependency from...

A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...

socket.dev

new post on my personal blog. i think these three areas often go unexplained, so hopefully this explains why some of these packages exist. these are fine to exist but the majority of developers shouldn't have to pay the cost for them.

A tale in two images.

The U.S. Senate must be clear: no war with Iran.

Dependabot security alerts have terrible signal-to-noise ratio, especially for Go vulns. That hurts security! Just turn it off and set up a pair of scheduled GitHub Actions, one running govulncheck and the other running CI with the latest version of your deps. Less work, less risk, better results!

Turn Dependabot Off

I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

words.filippo.io

Yet another episode of infected npm packages www.aikido.dev/blog/shai-hu...

Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains

The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets, injecting malicious code, and enabling widesp...

aikido.dev

Trying Ubuntu in Hyper-V once again and the experience is not great. The clipboard randomly stops working, I have to close and reopen the session.

So it turns out GitHub Copilot in VSCode is much better at doing code search on a very large code base because it could benefit from automatic remote indexing from GitHub, where Claude Code is basically just grepping files locally with no auto indexing: code.visualstudio.com/docs/copilot...

Make chat an expert in your workspace

Learn how workspace context gives chat a deep understanding of your entire codebase to provide accurate, contextual answers.

code.visualstudio.com

Marc-André Moreau@awakecoding.com · 10mo ago

I'm trying Claude Code as a GitHub Copilot in VSCode user, and the first thing I noticed is how it appears much slower at searching a large code base. Apparently Claude Code relies only on grep for code search and has no code indexing for semantic search? github.com/anthropics/c...

New blog post! 📰 I tried "vibe coding" in VSCode using GitHub Copilot (Claude Sonnet) to build an MCP proxy tool in Rust — I didn't touch a line of code, just pure agent mode magic 🧙‍♂️ 🚀👇 awakecoding.com/posts/vibe-c...

Vibe coding a Rust MCP proxy in VSCode with GitHub Copilot

A hands-off experiment building a Rust-based Model Context Protocol (MCP) proxy tool using only GitHub Copilot agent mode. Covers setup, multi-transport support, and lessons learned from letting Copil...

awakecoding.com

Check out the #PSCONFEU 2025 playlist. We finished the summit yesterday, we published the 1st video on the finaly day (aka yesterday) and 2nd one TODAY. Guess what will be next! Better subscribe to the channel. Playlist for 2025 below. youtube.com/playlist?lis...

PSCONFEU 2025 - YouTube

youtube.com

🎉 Big news! We've secured a $3M, three-year sponsorship from @devolutions.net This sponsorship will allow us to speed up development, improve docs & tooling for all the community's benefit! 🚀 Read about it here: github.com/AvaloniaUI/...

Arguing point-by-point considered harmful #SuggestedRead #devopsish www.seangoedecke.com...