New episode of Still Burning is live now: share.transistor.fm/s/b9745f10

Programming isn't going away, it's splitting in two. Jessica Kerr on Still Burning: "If you want to build a bookshelf, that's a craft. But there's also IKEA." The code-crafting got commoditized. Knowing what to build didn't.

Good post from the author of rsync on the recent pile-on: medium.com/@tridge60/rs...

"Technical Debt Is a Prompt Now" by Pavel Voronin pavelvoronin.com/technical-de...

This goes for agent permissions too! I don’t want to “install Claude” with all the privileges of my account, I want Claude to have its own account to which I will grant some permissions, or none at all because again issues and PRs are public!

It's pushed by the most irresponsible of the vibe-coding crowd, who imagine that, if only the prompt were more detailed, they'd get better results. They won't. 3/7

"Appearing Productive in The Workplace" by No One's Happy nooneshappy.com/article/appe...

"The bottleneck was never the code" by Rémy Louf (@remilouf.bsky.social) www.thetypicalset.com/blog/thought...

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution | Discussion

Ghostty is leaving GitHub | Discussion

… are fucking kidding me. A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!! This is not what taking the role of supply chain stewards seriously looks like.

Looks like GitHub silently corrupted some index. PR #237 definitely exists and is closed (github.com/C2SP/C2SP/pu...) but is just... not in the list (github.com/C2SP/C2SP/pu...) regardless of filters. I briefly doubted my own sanity. This is bad.

This GitHub incident is insane. Merge queue commits have been reverting previously merged commits at random. This not only breaks the mental contract teams have with Git in general, but is subtle enough to be completely missed until something breaks. www.githubstatus.com/incidents/zs...

Age verification sounds reasonable until you realize it means every adult hands over their ID just to go online. We wrote about why this is a terrible idea and what should happen instead. https://proton.me/blog/keep-age-verification-from-killing-anonymity-online

Why do the Japanese like their buns askew (2026)

"The Cognitive Dark Forest" by Janko ryelang.org/blog/posts/c...

"Programming (with AI agents) as theory building" by Sean Goedecke www.seangoedecke.com/programming-...

Instead of angrily screaming at the cloud, some people like Bryan are capable of articulating and helping me understand my feelings on the current state of affairs.

"You can't cancel a JavaScript promise (except sometimes you can)" by Aaron Harper from @inngest.com www.inngest.com/blog/hanging...

O11ycast #89: "Software Is the Killer App fo AI" woth @bcantrill.bsky.social @charity.wtf and @krimple.bsky.social www.heavybit.com/library/podc...

"Signals, the push-pull based algorithm" by Willy Brauner (@willybrauner.com) willybrauner.com/journal/sign...

So lots of devs shipping overcomplicated PRs written with AI that score high "throughput" scores and/or use lots of tokens!! Goodhart's law

A good review of Altman's figure. TLDR; probably not.

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years. That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

Also another angle to consider: Fully AI-generated code has no copyright Almost all of Claude Code is AI generated (as shared by Anthropic) So... does that AI-generated code itself have copyright, to start with? bsky.app/profile/amyh...

More supply chain attacks: thehackernews.com/2026/03/axio...

Okay folks I've responded to the data center heat island paper. It is the worst study on AI and the environment I've ever read, by far. Thank you to @beijingpalmer.bsky.social for flagging. blog.andymasley.com/p/data-cente...

notes.zachmanson.com/copilot-edit... Github Copilot *adding ADS* to PR descriptions

The notion of delaying decisions to "the last responsible moment" is important. For some decisions, that moment is pretty early. For example, we need to develop strategic plans and do customer and market research early in the product development process.

"Why \"Skip the Code, Ship the Binary\" is a Category Error" by Tirtha Sarker engrlog.substack.com/p/why-skip-t...

"Quantization from the ground up" by Sam Rose (@samwho.dev) ngrok.com/blog/quantiz...

"Why craft-lovers are losing their craft" by Hong Minhee (@hongminhee.org) writings.hongminhee.org/2026/03/craf...

Finding myself frustrated because I got a spare hour and no tokens left. Interesting times indeed

Fetch is happening? Cc: @bcantrill.bsky.social kotrotsos.medium.com/developers-n...

"AI Made Writing Code Easier. It Made Engineering Harder" by Ivan Turkovic www.ivanturkovic.com/2026/02/25/a...

The part of "everyone becomes a manager" in AI that I didn't really think about until now was the mental fatigue of context switching and keeping many tasks going at once, which of course is one of the hardest parts of being a manager and now you all get to enjoy it too

If you can convert points to time, or if you're using them for anything other than comparison, you're not using them as intended. 4/5

📝 My desire to give you feedback is directly correlated to your effort to care. Just because nobody objects to what you shipped, doesn't mean it's worth keeping. blog.jim-nielsen.com/2026/feedbac...

you could not waterboard this out of me. “we didn’t understand why people use steam”

added a cheat sheet to the official Git website (with a lot of help from other folks who work on the website) git-scm.com/cheat-sheet

Excellent article referencing an excellent book: "Seeing like a software company" by Sean Goedecke and "Seeing like a State" by James C. Scott www.seangoedecke.com/seeing-like-...

"Everthyng I know about good system design" by sean goedecke www.seangoedecke.com/good-system-...

Putting all your controllers in one directory and your views in another Is like putting the cortisone and hemorrhoid cream in the drawer with toothpaste because they're all tubes.

I keep reading about things like detailed up-front Sprint plans, about "failed" Sprints, about people panicking when a Sprint doesn't go according to plan, etc. There is no agility in that thinking, whatsoever. 1/7

Fix This Sign xkcd.com/3113/

I missed the fact that people were talking about Kubernetes 2.0 this week Here’s my wish list I wrote down last year justingarrison.com/blog/2024-06...

I'm so old that I'm still kind of scared to put spaces in file names

Been there Done that