ozim

They just started updating the UI and I am pissed off.

I don’t want them to change UI. I have plenty of work to do and have plenty of other tools that I use daily.

I have my workflows, I am swamped with work and now I have to change my workflows because someone changed options in UI where ones that O used are not there anymore.

Atlassian migrated EU data to EU based servers. I still had to click approve but they did that for me.

For me problem is that people don’t understand that there are different levels of expertise.

Like if you can write an SQL query, you know difference between DDL, DQL, DML you are already an expert compared to average people.

Of course knowing that doesn’t make one database expert as you might not know how indexes work under the hood and might not know how to maintain a database.

Picking and mixing right levels of expertise is also hard because you never know what’s the next job will be.

I am not going to make up 3 things but it meaningfully replaced Google search that became unusable crap.

Downside is that OpenAI is already having ads on their chat interface, so I guess it will be crap any time soon.

I absolutely see all the crap devs who work on 5 tasks at once create.

Basically I try to explain to them they are not paid by amount of tasks they pick up but amount of tasks that are DONE and DONE doesn't mean "yeah it kind of works, I don't have time to fix details because I have 10 other tasks".

Super annoying, yeah we can make follow up fixes - but that's more work not less and if all would be done right just now topic would be closed.

Well no, I don’t think you can install anything that generates power without registering.

I remember in past people would make small wind turbines for their own use and would get fined in Europe. Because they expect you to sell the electricity and then buy it back - like you can’t use it directly as far as I remember, without paying taxes and stuff.

Banking apps are not “websites” by coincidence they happen to be apps using same technology to show the interface but there is huge difference between website and web app.

This distinction is important especially because people are notoriously confusing the two and expect web apps to be like websites and conversely implement websites with tech that is supposed to be used to build web applications bloating internet pipes with JS where HTML and CSS would be sufficient.

Don’t forget we don’t live in a pacifist utopia. Companies don’t work on the same ideas just because they think they can make it better.

Companies work on the same ideas because they want to own IP, data etc. and then charge money.

The other way around they work on the same ideas not to be charged by others and control their business.

“software industry” is not some big happy hippie family. Patent wars, browser wars, OS wars - well we get a lot of open source for free but that’s not the norm.

Everyone thinks that system is outdated. I don’t think we have any cybersecurity professionals claiming otherwise.

It is in use just because it already is there and to make something new will be tough.

I think we should drop the score entirely. Just give me details and I should be able to make my risk management based on if it is RCE is it local or just info disclosure etc.

Global scoring is something that feels right but in practice it is totally wrong. Biggest damage happens when management that doesn’t understand any of that wants to have excel sheets green.

Not new normal.

It already is a thing since I believe April as I follow cybersec.

Last year May, June, July counts of sec bulbs was order of magnitude lower than this year.

But idea is that it will not last forever. New code will be vuln checked by AI as well. So now we are in transition period that is awful but it won’t last.

Funny how 5yo needs sanding down, 15yo you need power tools like grinder, 30yo needs explosives to take ego down like major life event, death of close one or their own close call.

Imagine being able to say “AI said so, can’t argue with that”

Have the same idea. Compiled code with static type checking, existing SAST and formatting tools and there is quite sensible code hallucinated. You still have to check higher level requirements on your own … but LLMs with all that was mentioned are hard to beat on code quality. I usually had devs oposing those tools “because it makes their work harder” and “why can’t they just do stuff” - LLM is not like that ;) LLM doesn’t waste 2 weeks on new project arguing between agents weather it should be tabs or spaces for indentation.

I see it all the time, it is fixing the symptoms usually. It kind of works until it doesn’t and it fails miserably.

So yes you can and it works, sometimes…

It was „what–if that may never happen” before agentic AI.

Nowadays you can be pretty certain it will be exploited.

It is not just run faster than slowest guy to get away from the bear, now it is dozens of bears per runner and bears are stupid enough to chew on anything but also smart enough once they bite something tasty that works will just continue biting that.

I do expect there will be more closed knowledge forums. Unfortunately one person exposing it to LLM provider will be enough to break the whole idea. But I believe there will be many that will keep secrets for some in group.

TBH there were lots of npm clones that were „better/faster” and still npm is pretty much everywhere.

I guess people who are against static typing are not working on aviation type projects - more like worst thing that can happen on what they work is a div slightly off.

Sounds like this should go via Orange they have means to slap UCEPROTECT on the wrist. It also looks like it would be in Orange business to have proper spam lists not ones like that.

Article you linked is absolutely unreadable. Just rambling „cost cap is not bad, we have sustainable sport but smaller teams are worse off”.

Two important informations are buried like „now smaller teams take podium 5% of time instead of of 10%” and „cost cap administration is a burden” and they there are no clear guidelines on what is in the cap and what not.

Claude code setup seems to be using jq all the time when I use it but I did what is written here:

https://gist.github.com/cynthiateeters/6868ca26c059a3106cd93...

Maybe it is my web development bubble but jq seems to be far from „a niche CLI tool”.

Fun part is July 2026 „summer of bliss” for cURL project.

As much as cybersec forums were outraged that everyone will be hacked because of that — nothing happened.

Yeah I kind of forgot exploit injection in the spur of the moment as of course I rushed to correct "someone on the internet".

ISP injecting ads is like annoying but if someone knows as much as Tom about TLS and totally skips rouge "airport wi-fi" can use his website to own someones else device that is the argument I should use for calling him or anyone else names on the internet.

I guess Kazakhstan example kind of covers it, because I do believe they would definetly deliver malicious payloads to dissidents.

What ISPs were doing they were injecting ads and you had no way of knowing it happens unless some visitor was annoyed enough to make you aware by sending you a screenshot.

With Google you have to make an agreement and put piece of code in your website willingly and then you get minimal cut but still, that is totally your choice.

I just read the pdf that parent poster included.

While he does indeed have extensive knowledge of TLS/SSL. He still completely side steps points I wrote about and exaggerated many minor inconveniences. While PDF seems quite up to date it also picks on stuff that is not there anymore like green padlocks.

Oh I call those people „TLS antivaxxers”.

Conveniently Tom didn’t mention anything about Edward Snowden and what he published. That was basically start of TLS everywhere.

Then he didn’t mention ISP idiots that were actually injecting ads to cute websites like Tom’s. I hope Tom likes when his website is used by ISP to make money on ads he doesn’t have any control over.

Then he goes on to criticize certificate transparency, but it works. Companies got kicked out from trusted root program because they were doing stupid stuff like making certs they shouldn’t.

Let’s not forget glorious state of Kazakhstan where without TLS they would just listen to all traffic - well with TLS they were trying to pull MITM but were uncovered and got their stuff removed by TLS ecosystem.

Still far from cheap, decent sized city is 200km^2 that’s like $4k.

Much rather contribute that amount one time to OSM and have details from all cities from there.

LinkedIn was more open earlier I think they closed down much more. It seems that Google didn’t delist the profile pages.

What is even more funny ... AGI actually makes everything worthless. (I don't believe we can achieve AGI with current means to be clear)

Looking at it from one way would be "winner takes all, real AGI company will be most powerful and everyone will switch to use it".

But it is not like that and in my opinion it is more like "AGI wipes whole knowledge work, so no one who cares has any money to pay for tokens/subscriptions anymore". Even without AGI current state of art of LLMs already starts creating such a problem. How do they continue to grow their numbers, when they actively cut the branch they are sitting on? How does AI LLMs or AGI pays for its own electricity, when people switch from hype to resource protection (like not spending any money, because generating funny cats loses with having a dinner)?