You can authenticate correctly. You can authorize correctly. And still get the wrong outcome. That is the real problem with AI agents. @1password.bsky.social shows how prompt injection does not break access control. It abuses it. 1password.com/blog/ai-secu... #Security

And it’s a wrap! #OceanSprint

Tacos for dinner 🌮🌮🌮 #OceanSprint

As we're wrapping up #OceanSprint, I want to do another shout-out to our sponsors, who made the event possible and kept the sprinters fed and productive!

mercury.com/ is a repeat supporter of #OceanSprint and this time, Arian van Putten and his coworkers took over an entire room.

This #OceanSprint was again full of secunet Security Networks AG's folks, hacking away during all hours of the day.

Jacek Γαλοwιcζ, founder of @nixos.org Academy, was doing an amazing job narrating our daily standups, as he does with their NixOS trainings.

One more and then I'm done: the way we share Claude configs, skills, and rules in niteo.co/ is public so everyone can learn from it. Powered by @nixos.org. Check it out: github.com/teamniteo/cl... #OceanSprint

Another day on #OceanSprint, another opensource release! This time, a JWT plugin for trypyramid v2: pypi.org/project/pyra...

Very high seniority level 🎩 #OceanSprint

Windsurfing regatta during #OceanSprint ⛵

Note to self: look into using github.com/lassulus/wra... instead of HomeManager #OceanSprint

Lunch time! Massive thanks to our sponsors that enable us to serve catered lunch right in the #OceanSprint venue, so everyone can keep hacking and not get distracted by bodily needs! 🤓 oceansprint.org/

Today we are opensourcing our AI website builder because we realized there is no product to build. @anthropic.com got too good. hakuto.dev/blog/how-we-...

You know you are at a proper hacker event when folks are rocking customized split keyboards 😎 #OceanSprint

Introduction to #Lanzarote wines on #OceanSprint

When your AI coding tool hits API limits, everything stops. This setup switches to a local model automatically when quota runs out. Simple idea, but very practical. Feels like the right direction. Less dependency on external APIs, more control. boxc.net/blog/claude-... @anthropic.com

#OceanSprint in full swing!

Yoga-time at #OceanSprint, to break up those long sitting sessions🧘

OH: #OceanSprint is the Yugoslavia of #nix

So @github.com Web-based merge conflict resolution is the first conflict resolution UI that I understand and use. VSCode’s just confuses me and I go back to the terminal. Well done!

Distributed systems fail in the worst possible ways. @fly.io had a global outage caused by a subtle Rust concurrency issue. Instead of patching around it, they rethought the whole system and replaced consensus with a gossip based approach. fly.io/blog/corrosi... #Engineering

Good behind the screen look into epic clusterfucks that happen in software world more often than anyone would think. By my favorite YouTube Channel @veritasium.bsky.social youtu.be/aoag03mSuXQ

It will be extremely hard for me to fly a non-starlink flight from now on. This is insane. @airbaltic.bsky.social #starlink #businessclass

@cloudflare.social shows how to protect remote desktops using identity first access instead of exposing RDP directly to the internet. Less open ports. Smaller attack surface. Better defaults. This should be the standard pattern. blog.cloudflare.com/protecting-r... #ZeroTrust

Excited to see www.cachix.org/ deploy graduate from beta! Continuous Nix deployments with auto‑rollback and the new cachix doctor should make reproducible ops even smoother. blog.cachix.org/posts/2026-0...

🎉 #TBT 7 years ago I published pyramid_openapi3 right before PyConWeb Munich. It’s had 37 releases since — and still powers production stuff, like @paretosecurity.com Cloud’s API. pypi.org/project/pyra... #Python #OpenSource

It’s crazy how much better #Claude is during the weekend. Orders of magnitude better.

Insights from a billion pushes: github.blog/news-insight...

#TBT to 2018 when I attended GopherCon in London. It’s been 7 years. And I still don’t know how to write @golang.org. This changes by the end of the year. Pinky promise.

Wow! A full source bootstrap for @nixos.org! Building the entire system, including the package manager, from source is a big step toward fully reproducible systems. discourse.nixos.org/t/a-full-sou...

New blog post: IRL #17 in Taipei New project, two museums, a hike, street food, and a cycling tour on the last day. Read the blog: niteo.co/blog/irl17/ #remotework #async #retreat

#TBT Python Meetup Ljubljana 2018. If I don’t wear disco pants, I wear red pants. They go well with my @letsencrypt.bsky.social t-shirt.

The best part about the Google Summer of Code Mentors Summit is the “chocolate room”: everyone brings some from their country and then there’s a feast of different tastes. @domenkozar.bsky.social, should we do this for the next oceansprint.org/? #TBT #Sprint #OceanSprint

www.anthropic.com/research/ant... Anthropic’s report on how people use AI and ”the Balkans and Brazil have the highest relative share of work use”. That’s interesting! Are we just more (productively) lazy than other folks? Or care less about “how things should be done”?

After a month of travels I’m eating a continental breakfast while holding a fork. I absolutely enjoy Asia, but Europe is where my heart is.

Woke up to an email from @rackspacetech.bsky.social telling us they will increase our monthly email hosting bill by 300% 🤯 #ktnxbye #wtf

😉

Not bad for January in #Taiwan

Working on a new product. The main reason I want it to succeed is because we'll have amazing mascot plushies 😆

Back in 2014, I went to the GSoC Mentor’s Summit. Google booked an entire amusement park. No queues. Just open source folks riding coasters and eating churros. Found a bullet casing on the ground. Bit of a plot twist. #TBT #GSoC #OpenSource #DevLife

Using imagery online of the shooting by an ICE agent in Minneapolis, we’ve created an animated sequence which highlights the approximate positioning of officers and vehicles at the scene. The red dot represents the agent who fired the shots. Yellow dots are other agents who arrived at the scene.

We’re holding the bi-annual IRL meet with Niteo next week. I flew in early for a more in-depth experience of life in Taiwan!

Taiwan mentality fun-fact: 5 minutes after the recent earthquake there was an 11PM traffic jam in the tehnology park because all engineers rushed to their factories to ensure things are running smoothly. This would never happen in EU or US. #Taiwan #Earthquake

How big is the @nixos.org repo? Turns out the half‑million tree objects and 20k forks pushed GitHub’s maintenance jobs to the limit. The core team and GitHub are tackling scaling issues together. discourse.nixos.org/t/nixpkgs-co...

#TBT PloneConf Brasil 2013. Giving a talk in disco pants, because why not? #PloneConf #DiscoPants

Cloudflare’s 2025 updates are big! More Node.js APIs, multi‑model AI Search, bigger containers and Remote Bindings. Removing friction so we can just build. blog.cloudflare.com/cloudflare-d...

Antigravity looks wild. An IDE where you can launch agents to write, run & test code across editor/terminal/browser, then verify via artifacts. A glimpse at agent‑first dev workflows. developers.googleblog.com/en/build-wit... #DevTools

@nixos.org 25.11 is out! Over seven thousand new packages, a refreshed GNOME, LLVM 21 and tons of new modules make this release the best yet. Upgrade to Xantusia and enjoy the improvements: nixos.org/blog/announc...