Ubuntu 25.10 seems to have issues with smartcard login, when the smartcard (Yubikey) is always connected. I have to remove the USB key and reinsert it to get PIN entry.

Just noticed Cursor 2.0 is now installable as a Debian .deb package! A very welcome update, having dealt with AppImages with broken desktop integration for too long now. cursor.com/download

Still getting AWS CloudFormation rollback failed errors when trying to deploy Lambda functions, after today's AWS outage. It's going to be a huge mess to clean up all these broken stacks afterwards.

TIL the private 100.x address space used by Tailscale was allocated quite recently in 2012, as an addition to the older 10.x, 192.x and 172.x spaces that were allocated back in 1994.

For endless fun, try asking ChatGPT: Is there a seahorse emoji?

I think that the classic vt220/xterm emulation should be enhanced with a standard feature for expandable visual objects, so that you could expand/collapse e.g. JSON data and verbose log segments afterwards, when they were already written to stdout.

Eilisessä A-studiossa yksi keskustelijoista viittasi CSIS:n tutkimukseen todisteena vasemmistolaisen väkivallan kasvusta Yhdysvalloissa. Kuvio tutkimuksesta kontekstoi populistisen tilastosiivutuksen. Oikeisto punaisella, vasemmisto sinisellä. Vasemmistolaisia iskuja heinäkuun alkuun mennessä 5...

WebAssembly 3.0: Garbage collection, exceptions, 64-bit memory and all kinds of other stuff. webassembly.org/news/2025-09...

I've been using Record<string,T> in TypeScript quite a lot and only today realized that it means an infinitely large object where all keys are defined. That's why you should actually use Partial<Record<string,T>> to get proper undefined warnings about potentially non-existing keys in your code.

LLMs are lossy encyclopedias. simonwillison.net/2025/Aug/29/...

Unsnapified my Ubuntu by adding the mozillateam PPA, so that Firefox and Thunderbird are installed as regular .deb packages.

Upgraded to Ubuntu 25.04 to get NVIDIA working with Wayland. Now Remmina RDP doesn't work any more. So I guess stick to Ubuntu TLS releases whenever possible.

TIL you can use Tang and Clevis to implement very simple automatic disk encryption in Linux. The computer boots and uses public/private key encryption over LAN to get the disk encryption key, which works as an alternative to the manually entered password.

Why not? hackaday.com/2025/08/07/a...

Here's a thought: The purpose of comments in code is to reduce the cognitive load needed to understand what's happening. You can always figure things out with enough cognitive investment, but a good comment can reduce the investment to nearly zero and make you feel good.

Maybe there should be a limit for maximum depth of nested dependencies allowed in npm packages. The node_modules folder is always full of weird crap nobody knows where it came from. www.bleepingcomputer.com/news/securit...

I like this fallback plan. Keep a compressed copy of all human knowledge in the form of a LLM on a USB stick, just in case everything goes wrong and we have to start over again. simonwillison.net/2025/Jul/18/...

TruffleHog has proven to be a pretty good tool to keep running regularly as a cronjob. It will notify you about any unencrypted secrets like API keys and other credentials left lying around in some folder.

I'm impressed by CDK-Terraform. The whole HCL mess disappears and you can define the application with TypeScript, allowing multiple stacks, clearly defined constructs and simple multi-stage configuration that doesn't repeat every property a billion times. Benefits of AWS CDK but without needing AWS.

This seems useful if you need to use TLS certificates outside AWS services, valid for 395 days, at $15/fqdn or $149/wildcard. I assume this is fully API-programmable but haven't tried it yet. aws.amazon.com/blogs/aws/aw...

This reminds me why I prefer using AWS CloudWatch to hosting my own Grafana instance on Kubernetes. It's so much work just to keep up with all the updates of all your running software. www.bleepingcomputer.com/news/securit...

I wish Git could autosync the working directory to GitHub, so that I wouldn't need to commit everything or create temporary branches when moving from one computer to another to continue working. #backyard

"We need to push back against age verification mandates. Not because child safety is not a concern – it is. But because age verification mandates risk undermining crucial access to digital services, eroding privacy and data protection, and limiting freedom of expression." www.eff.org/deeplinks/20...

Curious about new attack vectors on AI that is capable of executing scripts and reading files. Cursor confirms first, but I'm not sure if you can persuade it to skip the confirmation. And can e.g. external dependencies contain instructions that are passed as prompts. forum.cursor.com/t/important-...

Nice to see AWS at least try to setup a sovereign EU unit, although it's still subject to the Cloud Act, which requires US companies to turn over data to law enforcement authorities. www.theregister.com/2025/06/03/a...

Wikipedia, y u put darkmode in some cookie that expires every day.

Who broke 1Password?

Useful tool to spend your CPU cycles on: Generate vanity key prefixes for WireGuard public keys github.com/axllent/wire...

Better be careful, if you play with programming challenges where you clone code from a remote Git repository. It could be an innocent looking North Korean trap injecting secret-stealing malware to your computer. unit42.paloaltonetworks.com/slow-pisces-...

TIL since I have Yubikeys on all my computers, I can actually login to Ubuntu using a PIN code similar to Windows Hello. And use it to unlock to session/keyring without having to re-enter password every time. I assume this is safer than Windows since the Yubikey will lock after some failed attempts.

I guess VR is officially dead when it's officially removed even from Minecraft. Maybe retry in 10 years, if we could get it to fit regular eyeglasses. www.pcworld.com/article/2773...

Keyboard should have an AI button. Not a button that brings up some silly chat, but a button that accepts proposed changes to your code and jumps to the next change. Using Tab for this is inconvenient, because if you just keep hitting it, you eventually insert some extra tab characters to the code.

Using SQL always makes me feel silly. Counting did I write eleven or twelve ? marks and other such silliness.

Playing around with SSE (Server-sent events) for the first time. I'm enjoying the simplicity compared to websockets. Just write lines as text and flush & go.

"The Bluesky CEO is thinking at the level of community building, incentives, longevity and decentralisation at a fundamental level. The Mastodon founder seems primarily motivated by building an open source project and supporting contributions from the community." news.ycombinator.com/item?id=4380...

Playing with Kubernetes and Longhorn, I've learned not to mess with the lower-level distributed stuff like etcd and volumes. Once you degrade them, you spend many hours or days to fix them, and confront uncomfortable issues like multipathd preventing mounting Longhorn volumes manually for debugging.

Tämä on minusta mainio ajatus siitä näkökulmasta, että tehdään tehdään väärän ehdokasnumeron kirjoittaminen lappuun tuntumaan väärältä, ja oikeanlaisen taas hyvältä, kun kaikki "slotit" täyttyvät. Numerointi kannattaisi myös aloittaa 100:sta, jotta ehdokkaat ovat aina 3-numeroisia.

No more CVEs from MITRE. Can't really trust the US for anything any more in the near future. www.theregister.com/2025/04/16/h...

When working on integration of legacy systems rather than incrementally developing new systems, lack of TypeScript "ORM" for DynamoDB becomes apparent. Lot of effort goes into writing DynamoDB queries and juggling HTTP bodies and JSON objects and ensuring all data models are handled correctly.

It's the weekend, baby

There's something deeply wrong with the way web development tools need to watch thousands of files for modifications to autorefresh the browser. The OS and filesystem should provide a way to watch the entire directory hierarchy for changes as a single operation without opening every file separately.

Nasty bug in Brave 1.77 that signs you out from websites when closing the browser. I think it will be fixed in the next update, but meanwhile you can also downgrade to 1.76 by installing the right .deb package by hand. github.com/brave/brave-...

Jos hallitus kieltäytyy noudattamasta eduskunnan selvän enemmistön tahtoa, täytyy eduskunnan toimia itse. Alamme valmistella aloitetta eheytyshoitojen kieltämisestä. Hyvällä ryhmien yhteistyöllä ja asiantuntijoiden tuella laki on mahdollista saada hyväksyttyä hallituksen jarrutuksesta huolimatta.

Vibe coding is similar to JavaScript 25 years ago. People were copy pasting random code around and got their webpages to work with luck. Slowly it matured into what we have now, allowing clean and maintainable projects with TypeScript frameworks. I think the same will probably happen to vibe coding.

I have been positively surprised by Flux for managing Kubernetes deployments. It's very self-repairing in handling missing dependencies and automatic minor updates with semver. Combining it with Fission FaaS, I'm getting more comfortable with hosting my own apps on a non-serverless platform.

One of my favorite codebase quality metrics is greppability. Example of an ungreppable identifier: "id". Example of a greppable identifier: "feedbackId".

After working a bit with Terraform, I really see the difference between using a limited DSL and using a real programming language like Python or TypeScript in AWS CDK. Making infrastructure actually programmable instead of just definable was a big step that CDK enabled.

I've been using Ubuntu on my desktop and laptops for over a year and it's business as usual now. Windows has not been needed or missed. Here's one more small piece that was missing: Jabra headset management app for Linux console. github.com/Watchdog0x/j...

There should be an official UUID v7 variant that sorts in descending time order.