Blog: Getting ready for local inference

🦀 first basic prototype for the diff viewer on crates.io seems to work as planned 😍 and the regular code viewer is now publicly released :) #rustlang

Old Mac owners 🤝 Recent Mac owners "it's worth more than when it was new!"

I’ve been playing with an open source tool that’s coded with heavy AI assistance (dirge) and it’s an interesting dynamic. Usually if I found a bug I’d try to make a PR. Here it’s better if I just write a good issue and the maintainer can quickly generate a fix in exactly the way that suits them.

Blog: No more Standard Search for standard.site octet-stream.net/b/scb/2026-0...

netwatcher 0.7.1 is out, adding BSD support (crates.io/crates/netwa...). The obvious platform gap now is Redox OS. I've looked into it and I believe all the primitives are there. I just need to build a convincing integration test.

TIL it’s called a flag day because Multics once used Flag Day (the US holiday) for a coordinated incompatible change to ASCII values on 14 June 1966.

90s kids

Over the years I’ve seen various links to blog posts by @dbushell.com and shamefully it was only today I realised the domain is a name and not a grumpy linux blog

i get a sick thrill every time i write code that handles something like a UUID collision or a 64-bit counter overflow gracefully. sure, it'll never happen, but when it does, it won't be *my* code that breaks

#standard.site appview tip: save a lot of time catching up from a jetstream gap by skipping repos where documents exist but to your knowledge they have all failed verification. The odds that a verified one appeared in the meantime are negligible and this skips 98% of repos.

Turns out that operating a search engine offers an endless supply of tinkering, especially when Bluesky suddenly goes and encourages everybody to add to the dataset. Hoping to stay mostly ahead of people doing Weird Stuff, but atproto offers many exciting ways to do Weird Stuff so we will see.

v1.122 is rolling out today, featuring a better way to discover and share articles, blog posts and newsletters across the Atmosphere via new, dynamic Standard.site link cards. 🧵

At this point I could probably write most of an O'Reilly book about automating CI for physical Apple hardware. I doubt there are enough masochists to make it economically viable however.

The 70s disco is strong in this one youtu.be/TEDAKLTIwOE?...

AtmoXP Welcome Home. atmoxp.nrempel.com

Nextcloud is shutting down their HackerOne bug bounty programme because of too much AI nonsense. Interesting times. > [we] will not award any financial rewards for any submissions, regardless of severity

Mirror, mirror, on the wall, who’s the most absolutely right of them all?

"Restart to install update" 2025: Ugh 2026: Y'know what, that's a great idea. I accept your update, thank you.

All righty I'm now on team jetstream. Tap is wonderful but 5 TB/mo of downloads is too many TB for a toy project

Just published v0.5.0 of netwatcher, now with async, plus regular blocking if you want to dedicate a thread to the job. It was a bit of a job trying to make it runtime-agnostic (especially since most people will be using tokio anyway...) but I did my best.

If your PR hasn't been reviewed since you created it in 2017 is it time to close it, or just leave it be?

With the assistance of Mythos, Firefox 150 fixes 271 vulnerabilities: blog.mozilla.org/en/privacy-s...

Dating myself by saying “video card” instead of “GPU”

It’s absolutely incredible that one of the largest Japanese-run Go servers, which has been running since 1992, is still accessed entirely via Telnet. And while most players use GUI clients that use Telnet under the hood, you can still connect manually and get ASCII graphics streamed to you

What we need is more LAN parties

A normal week using Microsoft for Business™

Firehose is a little spiky right now

I heard there's a company that sells load balancers for this specifically

If anyone would like to make the standard.site community collectively roll their eyes try setting up one (1) verifiable record that has its publishedAt updated to now() every 5 minutes. Ideally a rickroll.

Free app idea: voice control so you can say “computer, set deflector shields to 20%” and your laptop constrains windows defender to 20% cpu

Cooked mode: terminal is showing implausible output Non-canonical mode: terminal is running on a distro without snaps

OpenBSD must be doing a pretty good job if a remote crash is the worst thing Mythos could find

I like that Anthropic has enough sense of humour to link Mickens' "The Night Watch" in the middle of explaining the unfolding vulnerability apocalypse

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years. That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

I sometimes wonder if Bluesky would be more vibrant if For You didn’t exist. It’s way easier to start a conversation in the replies of an existing busy thread than direct posting.

It's nice when some library I published and ignored for years suddenly has someone come along and add a feature

The challenge with AI in open source security has transitioned from an AI slop tsunami into more of a ... plain security report tsunami. Less slop but lots of reports. Many of them really good. I'm spending hours per day on this now. It's intense.

The Treachery of Images

One way you could handle shared mutable access to a single data structure by multiple #atproto users via their own PDSes is to represent it as a CRDT. If the appview knows _which_ users are trusted editors, then it can merge each user's published version to get the current state.

Still feeling pretty good about this decision. My potential blast radius is pretty small now. It baffles me that GitHub lets you use a user-wide SSH key freely but if you want to _narrow_ your permissions with a repo-scoped token or SSH key then you need approval from repos where you're not admin.

Tired of looking at bad ESP32, can't wait to get home and look at good ESP32

hot take: for a library with no dependencies that isn’t exposed to untrusted inputs, “unmaintained” is actually the most secure state possible

Remembering that time I hooked up a 1200 bps VHF radio to my linux machine as an IP interface and dropbox immediately started searching for all peers in a 10km radius

The main problem with tailscale getting so popular is not being able to use more than one network at a time. Today I'm setting up a ProxyJump config so one tailscale thingo can help me reach the other 🤷‍♂️

just saw my first `curl | claude` instead of `curl | bash` and you thought the arguments over piping to bash were contentious...

Smug linux fan: “Don’t you know you could do all your work in the terminal?” Person: *opens claude code* “Wait, not like that”

@octet-stream.net added label-based filtering for issues and pulls!

Growing convinced we could and should ship new version cooldown in the Go modules ecosystem. The subdb and MVP get us far, and supply chain attacks are not much of a thing in Go beyond typosquatting, but we want to stay ahead of them. github.com/golang/go/is...