Julien Roncaglia
@vbfox.net
Software developer 🇫🇷 🇪🇺 Mostly on Mastodon, https://hachyderm.io/@vbfox (Bridged at @vbfox.hachyderm.io.ap.brid.gy)
On one end, the Anthropic team is a massive user of AI to write code (80%+ of all code deployed is written by Claude Code). They ship amazingly fast. On the other hand, seeing these beyond terrible reliability numbers suggests there might be a downside to all this speed:
Récemment, RMC et CNEWS se sont intéressés aux linguistes atterrées (c'est nous !) à travers d'une actualité... assez molle. Pourtant, quand on analyse le bail, on peut se poser beaucoup de questions : et si le point de départ de toute cette séquence était... ailleurs? youtu.be/p3HC-h3m4GM
CNEWS & RMC VEULENT NOTRE PEAU (et c’est grave)
YouTube video by Linguisticae
youtu.be
On en parlait en stream : la défense des droits, notamment ceux des plus fragiles, est en danger. 2027 va être une purge.
People have to come to terms with the fact Trump confuses diplomacy for capitulation. He's posting this because he thinks it's a victory.
Aaron Rupar@atrupar.com · 7mo agoTrump posts what appears to be a private text message sent to him by Macron
here’s an Elon Musk Christmas Tale. Merry Xmas everyone ❤️
Good lord: "While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find."
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens - dirkjanm.io
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant. The vulnerability consisted of two components: undocumented impersonation tokens that Microsoft uses in their backend for service-to-service (S2S) communication, called “Actor tokens”, and a critical vulnerability in the (legacy) Azure AD Graph API that did not properly validate the originating tenant, allowing these tokens to be used for cross-tenant access.
dirkjanm.io
Oui, la canicule de 1976, c’était du pipi de chat. Un épisode aujourd’hui ridiculisé par la violence et la répétition des canicules de ces dix dernières années. [1/4]
Les États-Unis cette nuit, en violation de tout droit international, ont bombardé l’Iran. Quel sera le prix en retour de ces bombes ? Trump et Netanyahou, deux dirigeants d’extrême-droite, sont en train de faire basculer le monde face à une Europe muette et paralysée.
Even accepting the premise that AI produces useful writing (which no one should), using AI in education is like using a forklift at the gym. The weights do not actually need to be moved from place to place. That is not the work. The work is what happens within you.
Les gens qui gueulent contre Hidalgo et les décisions dans Paris devraient regarder ce genre de cartes et voir la réduction absolument dingue des émissions de dioxyde d'azote en 18 ans.
David Ho@davidho.bsky.social · last yr.Cars ruin cities in more ways than just running people over. Paris has reduced air pollution by 50-55% over the past 20 years through policies limiting traffic and banning polluting vehicles.
But if you want me to answer the question of "Can atproto scale down?" my answer is still: no. :) ATProto still cannot scale down and scale wide, not towards meaningful decentralization. Thanks for listening!
TypeScript team: rewrites compiler in Go. Go community: what do you mean your new compiler takes more than a minute to compile? Unacceptable. Dishonorable even. We are so sorry for this sub par experience. Not how we do things around here. Two days later: WIP 5x speedup. HN: why pick Go anyway?
cmd/compile: slow escape analysis in large package in the typescript compiler · Issue #72815 · golang/go
Go version go version go1.24.1 linux/amd64 Output of go env in your module/workspace: AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' ...
github.com
269% !! Arrivera-t-on aux 270 % avant ce soir ? Aux 300% avant la fin ? Le suspens est INSOUTENABLE ! Mais sinon, vous, vous pouvez toujours précommander le tome 2 de Pour Quelques Moutons de Plus ici : www.exemplaire-editions.fr/exemplaire/p... (ou RT, ça aide bien, le RT)
Took me a while to see it, but it’s a simple vulnerability. The API takes messages as hex strings like “AB12” and passes them to the bignum library. That library supports negative numbers like “-AB12”. However, the sign is dropped when calculating the nonce. Different messages, same nonce 💥
Since we don't have polls: Repost if you want _less_ generative AI in your tech in 2025.
Blogged: StackOverflowException vs. OutOfMemoryException. This is the first blogpost in a series, based on recent production incidents I was investigating. sergeyteplyakov.github.io/Blog/csharp/...
StackOverflowException vs. OutOfMemoryException
I was investigating crash dumps for one of our services and faced a puzzling group of crashes. These crashes were caused by a StackOverflowException with relatively short stack traces. It wasn’t due t...
sergeyteplyakov.github.io
Visual Studio 2022's splash screen shows up approx. 100ms later than Visual Studio 2013 manually testing it. This was confusing to me after I traced it, as relative to their main method entry point, they both take about the same amount of time to render and show the window. What was going on?
Si vous voulez du mindblown, regardez comment on respirait juste avant de naitre, c'est *vraiment* fascinant youtu.be/6BwM0SNubv0
Comment respirait-on avant de naître ? C'est vraiment fou !
YouTube video by Scilabus
youtu.be
