whirlwin

So bubblewrap is the community medicine to this issue. But isn't it funny that we're now trusting a single GH user (although allegedly a RH employee) for the supply chain security? Imagine bubblewrap itself being compromised.

Now you trust a single GH user rather than a company. Fair enough. I just think it's very paradoxical.

Does anyone know if it is useful for bidirectional sync between codeberg and GitHub?

In that case it sounds like the last waves of malicious reset attempts happened after the patch was put in place

I got a suspicious password reset request email today from Meta but it landed in my inbox. Luckily I have MFA and after checking audit logs inside IG upon logging in, I did not see anything suspicious.

The RCA and preventive measures was a pleasant read. I got a lot of respect for companies putting a lot of effort into incident reports like these. Makes them appear very professional rather than just blaming the cloud provider outright.

I've started experiencing them first time during Q1 this year up until now. Used to be pretty stable before that.

We just invested a lot migrating 300+ pipelines from Azure DevOps to GitHub Actions. What a bummer timing-wise. Anyone got an alternative to GitHub Actions?

Not long ago RH Product Security created a blog post around lola, their AI context package manager. Ref: https://developers.redhat.com/articles/2026/04/08/manage-ai-...

The article refers to their GH repo and that was all cherry and sunshine up until just recently, where it is redirected to https://github.com/LobsterTrap/lola.

No mention of it anywhere. "Did it get compromised?" was my initial thought. Still in the fog here.

MS is turning focus to compliance market when they cannot compete on agentic tooling capabilities

If you don't have ad-blocker, you will get redirected to betting/crypto broker sites

Most of, if not every commit of claude code is now written by claude code itself without any human writing code, only promoting.

Windows is just a wonderful box of chocolate that keeps expanding. You never know what you get, all brilliant frontier tech innovations like Edge, Bing, the calculator, vertical taskbar, and now the highly intelligent Copilot, up there fighting with OpenCode, CC and others...!

For showing something "hacker-looking" in the screen, I think also tcpdump could be a good alternative, because nmap might be a bit slow...

This is likely a matter of poor competence by the author of the spreadsheet, and an oversight after all.

From my experience, unfortunately, people who manage policies are much less competent that those who implement them.

The new Head of Quality in Microsoft has not started working there yet, so it's business as usual at MS... And now with AI slop on top

Ref: https://www.reddit.com/r/technology/comments/1r1tphx/microso...

Many European software companies are looking for alternatives outside the US now with the geopolitical situation between the US and EU. It's not only limited to the three big cloud providers, but Microsoft in general, in addition to other US providers.

If you look closely, you can see the color of the orange Cloudflare logo being slightly adjust to match a particular individual's facial color tone.

Happy new year from Norway!

TLS certificates is not the only technology for which the default mode is failure. What about disks, databases or syntax errors in configuration files in general?

In technology, there are known problems and unknown problems. Expiring TLS certificates is a known problem which has an established solution.

Imagine if only some of the requests failed because a certificate is about to expire. That would be a debugging nightmare.

Maybe I'm too cold or cynical here, but I would make it compulsory to indicate the disability in the diploma with an annotation or comment.

Or possibly the other way around: "Completed degree on standardized terms "

This is how Heroku has been doing it for years since it started out 10+ years ago.

$ git push heroku master

So you'll have to make sure to push to e.g. GitHub as well for version control.

Steve Jobs is gone, so is the unique quality obsessed Apple we knew. Even on the hardware side, the AirPods reecks of poor quality since they break so easily

Can one also use AirPods for e.g. Google Maps navigation?

You're pointing out something important. I think it's feasible for the crowd who dislikes the overall direction Docker has been heading and need a simple drop-in replacement

Do you have any real experience with Warp? Just curious to learn

The socialists’ rallying cry has long been, “Finally, it’s ordinary people’s time.” But in reality, ordinary people have seen their wealth steadily decline, while the state has only grown fatter and richer. The slogan should be more honest: “It’s the state’s time now.”

Now the state has more employees and will continue growing to attain more power, and thereby more voters. Having worse public services than 10 years ago while the spending has increased drastically is a bad sign.

That being said, it'll have to get drastically worse before ordinary people realize where their money went, and then it might shift

For Norwegian situation, I can recommend the book "The country that got too rich" which in fact is very accurate. Socialism works to a point but if it continues to spiral into more aggressive socialism you will end up in a much worse place for everyone, this is where Norway is heading the moment unfortunately even though we are a social democracy on paper.

Would be nice if the browser tabs had a terminal pane inside. Usually I'm reading something in the browser that I want to immediately run via the terminal.

Pro-tip: For GitHub Copilot which doesn't yet support AGENTS.md, you can create a symlink if your GH Copilot instruction files are defined on a per-repo basis:

ln -s AGENTS.md .github/copilot-instructions.md

Just curious - What is the future of service like these? More and more content will be AI generated, to some degree. And should thereby that content be aggregated?