SEJeff

Their action is also super handy: https://github.com/zizmorcore/zizmor-action

Use pinact (you can brew install it) to pin it by checksum: https://github.com/suzuki-shunsuke/pinact

Just gonna leave this absolute gem from Thomas Ptacek on DNSSEC here:

https://sockpuppet.org/blog/2015/01/15/against-dnssec/

https://graphify.net and trail of bits’s trail mark https://github.com/trailofbits/trailmark

Both use treesitter and create knowledge graphs for llm use. It results in way less tokens spent as well.

The US Navy has been working on their idea of a holy grail they have deemed the free electron laser[1]

[1] https://boeing.mediaroom.com/2010-03-18-Boeing-Completes-Pre...

I believe tools like graphify cut down the tokens in thinking dramatically. It makes a knowledge graph and dumps it into markdown that is honestly awesome. Then it has stubs that pretend to be some tools like grep that read from the knowledge graph first so it does less work. Easy to setup and use too. I like it.

https://graphify.net/

Michael Meek’s referenced blog post. The irony is I remember him championing openness for OpenOffice and I remember how transparent he was when he helped found libreoffice and TDF. What a shame we have devolved to this situation.

https://www.collaboraonline.com/blog/tdf-ejects-its-core-dev...

https://docs.npmjs.com/trusted-publishers/#recommended-restr... This helps mitigate spear phished privileges employees pushing hacked npm packages entirely.

Palantir maven uses Claude. This is not misinformation, but fact.

https://www.reuters.com/technology/palantir-faces-challenge-...

Fun fact: Palantir is powered entirely by Claude and was what was used for the Venezuela operation and for targeting for the Iranian operation.

It definitely has profiling client libraries https://grafana.com/docs/pyroscope/latest/configure-client/l...

I wonder how this compares to grafana pyroscope, which is really good for this sort of thing and already quite mature:

https://grafana.com/oss/pyroscope/

https://github.com/grafana/pyroscope

Well played good sir, well played

That’s not a builtin, so wouldn’t it be:

   #include <old-man-shouting-at-clouds.h>

man -k, apropos, but less to type

I did some research for a large financial library we were helping maintain to improve CI and did a writeup on the best way to redo the ci for:

* pushing a container image to docker hub

* pushing a sdk to npm

* pushing a rust crate to crates.io

* publishing a cli executable and some docs to GitHub as a release

We settled on a eeeily similar approach as caddy sans the release proposal. We are also heavily focusing on trusted publishing and attestation (via cosign) for any platform that supports it.

I went through this today and it is just work of art. Mohammed Al-Sahaf Is an artisan in CI, truly.

This is one of the cleanest and nicest "release from a tag securely" builds on github. Also their process to propose a new release is equally based:

https://github.com/caddyserver/caddy/blob/master/.github/wor...

Or Isaac Asimov’s foundation series with what the “psychologists” aka Psychohistorians do.

One of my coworkers, Liam, gave this talk. If you like this and want to work with like minded individuals, apply to some of our seceng roles:

https://www.asymmetric.re/careers

One might even call the rust community a “cargo cult”

The reason there were so many commercial distributions of open stack was because setting it up reliably end to end was nearly impossible for most mere mortals.

Company’s like meta cloud or mirantis made a ton of money with little more than openstack installers and a good out of the box default config with some solid monitoring and management tooling

And Blue Origin was incorporated a few years prior to SpaceX. They’ve been working on this problem significantly longer than SpaceX, so they were more confident in their approach.

Free software is by its very nature dogmatic. Stallman himself makes cringey jokes and references to the “church of gnu”. It’s more of a way of life than a way to develop software. By design, a religion is only happy with 100%.

Open source is just pragmatic and is very happy with the 99% being open source. It’s more corporate and doesn’t generally care at all about the dogma.

Google the term “high frequency trading”

Yeah, most large electronic finance companies do this. Lookup “the sniper in mahwah” for some dated but really interesting reading on this game.

In the US, dark fiber will run you around 100k / mile. Thats expensive for anyone even if they can afford it. I worked in HFT for 15 years and we had tons of it.

Absolutely correct.

Blender is absolutely an underdog in commercial studios. It is used, but it’s the minority tool for professional settings. There are still several areas blender is lacking compared to maya or 3dsmax.

Maya, 3D Studio Max, Cinema 4D...

Blender has a ton of competitors. They're all commercial and have corporate backing. If anything, blender is the "little guy". It is utterly amazing what Ton has managed to do with Blender.

Caerlaverock castle is pretty spectacular however when it comes to Scottish castles.

Or if the service didn't support pam_limits because it was legacy trash, you had to hack something into the initscript like `ulimit -n XYZ` and restart it. Now things like this are trivial and easy to solve. Using systemd makes large scale Linux systems administration much easier.

Now it has gone a bit overboard. Some of the stuff like the dns resolver or the nspawn capability seem a bit over the top, but overall, it has massively improved all Linux distributions it is used in.

Never again will I worry about trash buggy init scripts not actually stopping a service due to a stale pid file. Now it puts the service into a control group and can kill all things in the control group even if the service is bad code.