Curtis Carter

Reasons you still need a human in the loop:
"Researcher poisons open-weight AI model for under $100 https://share.google/6GPUoUdIMJG8EFPWh"

Besides the occasional hallucinations, the lack of creativity, and an inability to encode certain types of info into the models (at least for now), #security is a huge issue. A #developer experienced in spotting malicious code and exploitable patterns can catch this sort of issue as often as in regular code reviews.

#softwareDevelopment #AI #softwaresecurity

Friend of mine is a new dev and apparently involved with the development of a #visualNovel #indieGame that was streamed by an #indievtuber recently. Game is interesting (haven't watched the let's play stream yet). If a vampire mystery sounds like something you would enjoy you can support both of them by watching it: https://youtu.be/R_LKZ-oTF2M?si=BR7KBgcGc6ga6B7s

LaurEli: Blood-Dipped Manor

No idea when it's releasing, but he's basically cutting his teeth by working with ArkD3v's team on it.

Seemingly bad #tanstack #reactquery supply chain attack: https://github.com/TanStack/router/issues/7383

#reactjs

Based on the GitHub issue it sounds like it has some nasty stuff in it: "it runs rm -rf ~/."

Bad time to be running an agent with root access.

TIL: Google Translate (the one built into Chrome) can crash web pages written in #ReactJS

It directly mutates the dom. I always just assumed it was browser render magic that replaced the displayed values without changing the model.

#softwareDevelopment

Just found out the best #steathgames series I've played has a new entry coming out!

If you haven't played Styx, he's an accidental protagonist that was never in it to be a hero and honestly still isn't at the end.

It's on sale on #fanatical (like #humblebundle used to be named Bundle Stars years ago).

https://www.fanatical.com/en/game/styx-blades-of-greed

I don't know if anyone else likes caffeine (and other nootropics), but #GamerSupps has 20% for 24 hours with creator codes.

It tastes good, has #waifu aesthetics (if you're into that), sugar free, mixes without grainy residue, and is fairly cheap. Compare to energy drinks/soda at $0.32 per drink (I use 2 scoops in a 24 oz shaker so it's $0.64 for me).

My only problem is that some of the canisters are ecchi enough that I don't consider them to be safe for work and have to peel the labels off.

I like #GitLab, and I like their CI/CD but compared to #JetBrains #TeamCity it feels incredibly underpowered when it comes to cross project pipelines.

I've built multiproject chains of configs in team city that know to wait on various builds, automatically pull the latest artifacts, and deploy to a spread of endpoints. Doing a Y shaped pipeline in Girls has been exhausting.

#SecureCodeReview always fills me with either disappointment or excitement. It's a good exercise reading someone else's code, and trying to best them in a match of wits (by finding a missed security issue). But occasionally I see sloppy code that is clearly LLM regurgitated #copypasta that I feel a little sick.

Just caught a low risk Path Traversal vulnerability that has been in there for years and we missed it the last time this area was reviewed. 😎

@verge have a Pixel 9 Pro Fold and love it, but not all apps deal with foldables well. Even YouTube sometimes has issues transitioning properly.

It was a significant improvement over the Pixel Fold and has survived enough hard drops to bash the hinge protection off my #dbrand grip case.

Working on #adacompliance by trying to integrate a #texttospeech engine into #AOSP

#espeak has been deemed too low quality, and #sherpaTTS too slow. #RHVoice silently fails on our hardware, and I'm running out of options. Does @GrapheneOS have a TTS engine that would be commercially friendly enough for us to push it via OTA update? Or would anyone recommend one?

We work with a sensitive population and lack of a screen reader can make things even more difficult for some.

Someone updated #easyspeak to put on #GrapheneOS and saved me a ton of time. A custom #AOSP based OS I've been working with needed a TTS service for our proprietary app and the devices we have didn't have one. I need to make a few modifications so we don't have to configure it for every device we have, but #FOSS has saved me a significant amount of headache.

#SherpaTTS also worked well, but required too many resources and I didn't have enough vespene gas to justify building more pylons...

I finished #skindeep today and wow! The final level was crazy but the boss fight was more of a wrap up cinematic. It's an excellent if a little out wonky #OpenSource #stealthgames entry.

Anyone who likes goofy #stealthgames should check out #SkinDeep

It's very fun and they released the source code to encourage more people to make games like this. Which also means it's probably insanely moddable now.

https://github.com/blendogames/SkinDeep

Send the devs some love and buy it on #steam (or wherever it's sold).

Today I learned some of my team has been using deploy scripts in #TeamCity to rewrite code for test sites and special builds.

I cannot stress enough how bad of a habit this is. If you are redirecting code, it should be done via configuration file changes not find/replace powershell scripts run on the codebase. This should be treated as dangerous since it could be used to circumvent security reviews if it happened on the production configuration.

#ci_cd #softwareDevelopment

You may not care for their branding (or maybe they feature your waifu) but #GamerSupps has free shipping right now and it's my caffeine of choice. Cheaper and tastier than #monsterEnergy and AFAIK they aren't suing indie developers over the use of the word "monster".

This is what keeps me sane on the drive home after 14 hours of debugging spaghetti code and it's only $0.40 per drink.

For the sake of my sanity, please do not use a Rube Goldberg cartoon as your SRS. If I see one more button that writes to a database, so a timer can write to a different database, so another timer can trigger an update in a cache, so a service watching the cache can send a message to Even grid, so #eventgrid can send a message to a #signalR hub, so a signal r client can receive the event and call up to an API to get the data set by the button, I may lose my cool.

Anyone have experience with the JSON column support of #AzureSQL ?

I need to store an array of integers in a heavily read table as efficiently as possible. I also need to be able to query rows that contain that integer.

I'm also needing to have an #EntityFramework6 lib in another application able to query the array out of the JSON to use locally. Feels like it should "just work" but Microsoft docs aren't always straightforward about the pitfalls.

I'm gonna start experimenting later tonight.

I can understand why people would hate #entityframework after a few years working on an older #dotnetframework version. Updating the edmx and regenerating code is painful. It doesn't help that the tooling isn't great either. I spent 3 hours trying to get VS 2022 to correctly generate code and edmx changes from a database change. This should have taken minutes.

The newer #dotnet versions of EF Core are so much better.

Just bought $200 of my preferred caffeine #gamersupps thankfully they replaced an expired gift code with a code for free shipping (roughly the. Same value). Feels good to support a brand that isn't taking legal actions against any #gameDev that uses the word Monster in their titles.

Flavors are good even if the branding is a little risque (flavor names like "Anime Girl Thigh" for Peaches & Cream).

If you are in a position to approve equipment purchases. Please do not deny a request for a USB-C cable that is required to connect to a target device and direct them to purchase it out of pocket. That's probably a $10 purchase for a dev who will spend far more in terms of time dealing with connection issues from a bad cable.

Time is a finite resource. Money is an investment that makes sense when it's paid back within a week by recovering lost time.

#devmanager #developer

Also, if you've never used #lvm2 I highly recommend it. You can throw a bunch of spare drives together on an old dell powerEdge server and have a cheap Plex server, #minecraft server, etc. Just be aware those ~$100 powerEdge servers are EoL so they shouldn't be open to the Internet or hold anything critical (also for safety install #linux as current Windows versions don't support them at all).

Absolutely amazing Superbowl tonight. I read some wonderful pages of the #InfiniteDendrogram #LightNovel before doing some much needed crafting for my base in #Enshrouded and got a big fix in for #NuGetDefense

Also, my wife is very excited that the Chiefs won. (I heard the screams of joy from the living room)

Has anyone tried using #writerside yet? It's part of my #Jetbrains subscription and I'm considering trying it out to see if it makes it any easier to write documentation. My main concern is that it may make it harder for others who want to contribute to the docs.

Currently I'm using #docusaurus with mixed results. It's like a #React wrapper for markdown docs.

Ok, so it appears #github changed something a couple months back that broke several packages in my #chocolatey au repo (auto-updates packages by watching for releases).

Fortunately it was an easy fix. I also added some missing #milkman plugins (like postman, but #foss ) and found out the #gobuffalo cli was moved to a different repo. So that's also updating properly again.

#biome is not currently releasing for #Windows.
Hopefully the impact was minimal for anyone consuming those packages.