just added more prefs to firefox after noticing 'ask ai chatbot' appear in context menu after update user_pref("browser.ml.chat.page", false); user_pref("browser.ml.chat.menu", false); ...

Omg, the solution to CIA's Kryptos being discovered by someone becoming a subject matter expert, going on location, and finding the plaintext sitting in a vault several miles away is the absolute *perfect* ending to Kryptos. You couldn't write it. Just absolutely A+ www.nytimes.com/2025/10/16/s...

#ESETresearch has discovered #HybridPetya ransomware on VirusTotal: a UEFI-compatible copycat of the infamous Petya/NotPetya malware. HybridPetya is capable of bypassing UEFI Secure Boot on outdated systems. www.welivesecurity.com/en/eset-rese... 1/8

You've probably heard about the supply chain attack that affected a number of widely-used npm packages today. tl;dr: Don't panic. Notes: 1. Svelte, SvelteKit and their associated packages are not vulnerable to this attack, as they do not use any of the compromised dependencies in the browser

you may have heard about a supply chain attack on a number of packages distributed on npm. a quick update: 1. nuxt is not vulnerable. we do not ship code into client/server from these particular packages (this attack required running in the browser) www.aikido.dev/blog/npm-de...

imagine going to great lengths to inject malware which runs on the browser into nodejs packages ...

🚨 Breaking: npm author Qix compromised. Malicious package versions published in projects that typically see hundreds of millions of downloads each week. Details: socket.dev/blog/npm-aut...

Humblebundle to support World Central Kitchen, and get a bunch of my books from @tordotcom.bsky.social including Murderbot and Witch King! #booksky www.humblebundle.com/books/martha...

it is still incredibly funny to me how “GamersNexus” remains one of the hardest-hitting voices in contemporary investigative journalism

We've spent 3 weeks in Asia investigating the AI GPU Black Market. We need your help finalizing this crazy story: www.youtube.com/watch?v=ltgy...

I imagined the Chatsubo in 1984. 41 years later I opened its door. Neuromancer is in production.

Consider a programmer looking at code they themselves wrote a year ago, now having to identify and fix a bug. They have to rebuild the mental model of what is going on, which is easier if they have already had a mental model of what is going on.

wat...?

"Over four months, LLM users consistently underperformed at neural, linguistic, and behavioral levels." arxiv.org/abs/2506.08872

No notes. deplet.ing/the-copilot-...

The Rust GCC backend can now fully bootstrap the Rust compiler. Excellent work from FractalFir in their GSoC (which starts in one week XD). More information here: www.reddit.com/r/rust/comme...

"AI's gonna take your jobs"

📣 The rush to add AI into everything is a big threat to privacy, as we've been saying. MS Recall's screenshotting everything is a (not) great example of exactly why. So, Signal took steps to protect everyone using Signal on Windows 11 from Recall's privacy invasion.👇 signal.org/blog/signal-...

new #rustlang crate drop: iddqd! ID-based maps where keys are borrowed from values. Four maps are included: IdOrdMap, IdHashMap, a bijective (1:1) BiHashMap and a trijective (1:1:1) TriHashMap. At Oxide we've found this pattern to be very useful. iddqd is no-std compatible, too! docs.rs/iddqd

Oh my god, Copilot is allowed to create and fix issues on Microsoft github repos and it goes exactly as you'd have imagined. Try going into any of these PRs commits to see poor Microsoft engineers try to coerce Copilot into doing literally anything right. www.reddit.com/r/Experience...

I’m writing a series of posts about Hardcovers recent migration. The first one in the series was published yesterday! Part 1: How We Fell Out of Love with Next.js and Back in Love with Ruby on Rails & Inertia.js hardcover.app/blog/part-1-...

Today marks a decade since the 1st stable release of #rustlang 🎉 To commemorate this milestone, we asked Karen Tölva (Ferris creator 🦀) to design a celebratory graphic & answer a few questions in our blog. Congrats to EVERYONE who has made Rust what it is today 🧡 rustfoundation.org/media/celebr...

🎉 Rust turns 10! What a decade for us all 🥳 To celebrate, we’ve curated 10 must-watch talks from EuroRust. Let’s kick things off 👇 🧵 1/11

Lots of folks fell for the "DOM is slow" marketing of certain frameworks, but DOM isn't slow. *Uncontrolled style read-back* is. But what if that wasn't a thing? Looking for feedback on a new proposal to control layout thrashing here: github.com/MicrosoftEdge/MS…

BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.

1. LLM-generated code tries to run code from online software packages. Which is normal but 2. The packages don’t exist. Which would normally cause an error but 3. Nefarious people have made malware under the package names that LLMs make up most often. So 4. Now the LLM code points to malware.

🦀 Hello World! The Rust project now has an official presence on Bluesky! ✨ We'll be posting the same on our Mastodon and Bluesky accounts, so you won't miss anything on either platform.

Want to get in on the ATProtocol fun and build cool applications but don't know where to start as a Rust dev? Well, I was in the same boat! So, I took the popular Statusphere example and remade it in Rust! Complete with a minor rewrite of the tutorial for the new code base.

*reads post about firefox ai chat* checks user prefs & git blame shows I added disable weeks ago (Mar 13, 2025) *goes back to work* github.com/equk/ffox_pr...

I was very interested to read the 2024 DORA report, in particular the section about AI adoption. I wrote up my thoughts on AI and productivity, and how whilst we feel like AI is making us more productive, the data tells a different story. And no, I did not use AI to summarise the report data.

Using #11ty plugin for font awesome svg icons with no clientside javascript eleventy-plugin-font-awesome @fontawesome.com plugin by @zachleat.com equk.co.uk/2025/03/23/1...

Would you look at that, it's tmp.0ut Volume 4! Happy Friday, hope you enjoy this latest issue! tmpout.sh/4/

Microsoft is getting #rustlang -y: a review of successes and challenges www.youtube.com/watch?v=1Vgp...

Adding #Obsidian & #Github Style Alert / Callout Blocks Using #11ty and markdown-it Plugins equk.co.uk/2025/02/24/1...

trillion dollar industry that will revolutionize everything

NEW: Apple said it "can no longer" offer iCloud end-to-end encryption in the UK, and turned off the option to enable it for new users in the country. The unprecedented move comes after the British government demanded a backdoor into Apple's cloud service. techcrunch.com/2025/02/21/a...

I can now invoke EFI Boot Services and jump to Linux. The shell interface is 520 LOC, the EFI driver is 160 LOC. I cannot emphasize enough how productive, lean and efficient is bare metal Go to develop this. Next up Console I/O so that I can boot this on real hardware.

OpenAI shocked and appalled that an AI company would steal intellectual property www.404media.co/openai-furio...

Ok, quick thread on why DeepSeek is blowing up assumptions about LLMs and maybe the whole (U.S.) AI industry. DeepSeek is an AI lab funded by a Chinese hedge fund, their AI code is open source, meaning freely available to use, which most big U.S. models (aside from Meta’s) are not. That’s the start…

The AI bubble was inflated based on the idea that we need bigger models that both are trained and run on bigger and even larger GPUs. A company came along that has undermined the narrative - ways both substantive and questionable - and now the market panicked that $200bn got wasted on AI capex

"but what is 'a lifetime?" with a good criticism of an example from the book www.youtube.com/watch?v=gRAV... #rustlang

Strong "Oops, we voted for Brexit" energy from the Biden administration. Dude, you are the guy who signed the TikTok ban into law.

Writers, musicians, actors & other creators strongly oppose upending copyright law to favour AI companies, as suggested in the UK's AI Opportunities Action Plan. As Kate Mosse says, seeking economic growth "cannot be on the basis of theft of our work". www.theguardian.com/technology/2...

Web component using the bluesky api to display a single post with count of likes, replies, reposts Implemented into #11ty website equk.co.uk/2025/01/09/b...

New blog post - Mastodon Post Web Component #webcomponent which uses the #mastodon api to display a single post alternative to #webmentions to provide reactions to posts equk.co.uk/2025/01/08/m...

events.ccc.de/congress/202... You can bypass security on the RP2350 by glitching the OTP power supply (which does not have a glitch detector on it). This causes OTP to supply "guard data" instead of real data, and interpreting the guard data happens to enable RISC-V mode, which can do anything.