New blog post! 📰 I tried "vibe coding" in VSCode using GitHub Copilot (Claude Sonnet) to build an MCP proxy tool in Rust — I didn't touch a line of code, just pure agent mode magic 🧙‍♂️ 🚀👇 awakecoding.com/posts/vibe-c...

This is what I've been driving for the past year! It's an exciting time, with Rust making its way into one of the most critical pieces of software: the core crypto library used in Azure and Windows. With Rust, formal verification becomes easier, and so far, no blockers to Rust adoption.

Tried macOS 26 beta in a VM. I like the glass effect. The default icons in dark mode are like the ones on iPhone, but the clear icons look good. It seems like a stepping stone toward touchscreen Macs. Lots of big UI elements & more of an emphasis on interactivity. Needs refinement of the layering.

Formal Security and Functional Verification of Cryptographic Protocol Implementations in Rust (Karthikeyan Bhargavan, Lasse Letager Hansen, Franziskus Kiefer, Jonas Schneider-Bensch, Bas Spitters) ia.cr/2025/980

@watchmarquee.bsky.social @mlb.com Would love to get the Cubs games in 5.1 audio through MLB.TV.

It’s the time of year where we re-read ComodoHacker’s pastebin. Props to pastebin.com for keeping this up for all these years. pastebin.com/u/ComodoHacker

Released *ring* 0.17.9. X25519 is about 20% faster for GCC users (clang got it in 0.17.8). AES-GCM is slightly faster. Auditing the code for memory safety and panic-freeness should be easier now. Expect 100% compat with 0.17.8, but MSRV was raised from 1.61 to 1.63; still Debian-Stable-friendly.

New study on the effect of driver aids on crash risk: - Lane keep assist: -19% - Driver monitoring systems: -14% - Automatic emergency braking: -10.7% - Adaptive Cruise Control: +8% - Cruise Control: +12% No data on speed limit alerts though. www.sciencedirect.com/science/arti...

I wish I wasn’t the kind of person to question whether a language’s mutex implementation guarantees acquire/release semantics.

Rust Rules! (Programming Language-Wise) www.eejournal.com/article/rust... Ferrous Systems has carved out a leadership role with respect to Rust solutions for safety-critical systems. Its flagship tool chain, Ferrocene, has achieved IEC 62304 Class C qualification for medical device software.

It's a big week for voting technology. We're launching VotingWorks, the voting system we've been hard at work on for six years. Transparent, secure, and easy to use. So every American can trust their ballots are counted correctly. voting.works/machines

Step N+1: the person with the keys will tell you that having the option to disable specific integration points is an enterprise-only feature, but that they can add it to your account if you confirm that's what you want. A few minutes later, it's active. Ours now looks like this.

I want to share my experience today with Google support, trying to get Gemini (their AI/plagiarism machine) turned off in my Google workspace account. That account is where I personally do all my work communication—I am an editor, and most of my work contracts explicitly ban any use of Generative AI

Time to deprecate & remove wasm32-unknown-unknown. It is basically the same as a WASI 0.2 environment that exposes no components. It’s easy to create a minimal WASI 0.2 environment that implements wasi-random—or whatever—by delegating to the host (browser, etc.). This would simplify many libraries.

Thinking about switching to RedNote Actions for CI. I heard it has native loongarch64 support.

NEWS: The massive Chinese hack of U.S. telecoms breached firms Charter, Consolidated and Windstream as part of a historic espionage campaign. Security vendor Fortinet was a key intrusion point. Investigators are still grappling with the damage. That and much much more: www.wsj.com/tech/cyberse...

If magic links work well for signing into your website then passkeys are probably a poor alternative for improving sign-in convenience, as they are overkill and the costs associated with them are high, especially end user support costs. Why not OpenID Connect w/ Discovery using the email address?

Saw Wicked, the stage production, in L.A. last night. It was truly a masterpiece of art. I usually avoid musicals of all sorts, and I seem to annoy people with my Hamilton review (“absolutely not worth the ticket price”). Especially if you have no interest in it, consider giving it a go.

When I order something from overseas on eBay I reliably (100% of the time) get a phishing text related to my package being stuck in customs. Receiving this message is the primary & only mechanism by which I learn my package has arrived in the US before it shows up at my door a few days later.

If you have chopped down a tree, drug it into your home, placed it in a pot of water, and decorated it with lights, then it is highly likely that you plugged it into whatever outlet that room has. If it isn’t a GFCI outlet, you can get an “inline” GFCI cord/wall-wart for this.

AFAICT, the best defense against disasters (e.g. fire) caused by water (rain/sleet/snow/hose overspray) in electric decorations (e.g. Christmas lights) is the exclusive use of GFCI power outlets. If you don’t have conveniently-placed GFCI outlets, inexpensive “inline” GFCI adapters are available.

Supply chain attack via a shell injection in a PR branch name (!) due to unsafe use of GitHub Actions' pull_request_target. Inserted a crypto miner in the PyPI package. Paging @yossarian.net to the courtesy phone. Would github.com/woodruffw/zi... have caught it?

This was stabilized in Rust 1.81 as std::hint::assert_unchecked (doc.rust-lang.org/std/hint/fn....), while the functionally equivalent `if !cond { std::hint::unreachable_unchecked() }` has been stable since Rust 1.27, released in 2018.

Many Californians seem to feel too overwhelmed by the daily grind to do anything to make this world more beautiful. But there is something you can do, no matter how busy you are: You can remove the compliance stickers from your cars’ driver side window. Please! Encourage others do the same.

I worked at Apple in the Red Team at the time. As has been speculated publicly, this ended up being the result of a merge failure. The merge was submitted as a single ~10,000 line diff and (understandably) none of the reviewers caught it. Procedures were changed after this one…

Let's Build a FIPS-validated Rust Crypto Library: briansmith.org/lets-build-a...

As a matter of principle I keep my car’s top down unless it is raining. I usually park it top down windows up. I found some auto insurers cover a car that is parked with the top down only if it is locked. Most seem to require the windows to be up too. The worst further require the top be up.