RE: https://aus.social/@decryption/116815782853060762

and just when I thought I was out, @decryption pulls me back in. This is a bargain for local daily tech news!

yesterday I was defending npm as no less secure than other ecosystem package registries and just a high profile target for supply chain attacks...

Today I discover there's no way for it to authenticate against private registries other than storing long lived credentials in a known location on disk

This Marxist lens on the different ways my peers and network is reacting to GenAI was more interesting than I expected

https://writings.hongminhee.org/2026/03/craft-alienation-llm/

mostly it doesn't matter because who regularly listens to music via laptop speakers? Still, I'm impressed

Running an accidental experiment by swapping between a personal lenovo X1 carbon and work apple M4 pro while listening to music from the built in speakers.

Holy crap, the apple sound quality is easily 5x better.

earlier this year I switched pdf-reader from sorbet types to RBS using inline comments. I'm pretty happy with the result https://yob.id.au/2025/12/30/inline-rbs-comments.html

ruby friends: I've drafted a blog post (remember those?) on migrating pdf-reader type annotations to inline RBS comments. Anyone up for a quick pre-publish review?

https://github.com/yob/yob.github.com/pull/12

Added ruby 4.0 to the CI matrix for pdf-reader and it Just Worked, meaning 12 years of MRI+JRuby releases are supported (MRI 2.1+, released 2013)
https://github.com/yob/pdf-reader/pull/575

The replit AI deleted my production database sorry is fake right, designed to go viral? No one is actually running a non deterministic autocomplete machine with credentials for production…..

Interested in helping drive renewable energy uptake? We have multiple mid+senior engineering roles open at Amber atm: mostly in product teams, but I have my eye out for a platform shaped engineer too. Located in AU and UK, typescript and serverless experience a nice-to-have

https://www.amber.com.au/amber-careers

Labour and Monique Ryan are sending me SMS reminders that prepoll in Kooyong is open from today, but I haven't lived in that electorate since 2009.

I wonder where their elector data is coming from?

Peter Dutton insists public servants must return to office full time or lose their jobs, while also planning to work remotely from Sydney if he wins Government

https://archive.is/EnpSN

@timriley thanks for tooting https://mastodon.social/@webology/112895540168320686 into my feed, I've been unsatisfied with pinboard's slow bitrot for a while but hadn't looked for alternatives

internet friends: what tools do you love for collecting and reporting on CSP, DMARC, TLS CT logs, etc?

I'm experimenting and the hosted options all seem.... very underwhelming

🤣 “And then some absolute son of a bitch created ChatGPT, and now look at us. Look at us, resplendent in our pauper's robes, stitched from corpulent greed and breathless credulity, spending half of the planet's engineering efforts to add chatbot support to every application under the sun when half of the industry hasn't worked out how to test database backups regularly”

https://ludic.mataroa.blog/blog/i-will-fucking-piledrive-you-if-you-mention-ai-again/

Shocked to find my ICQ number bubbled out of my brain when I saw this article, despite a 15+ year gap since I last used thought of 6370237

https://www.pcgamer.com/software/well-miss-you-pioneering-instant-messaging-program-icq-is-finally-shutting-down-after-nearly-30-years/

Anecdata: My Uber driver works as an NBN linesman during the week. I asked which access tech is the least reliable in his experience, and he answered FTTC without hesitation. Primarily due to DPUs failing via water or lightning

We rolled back to 100% x86 after 9 days. Interesting results: graviton was ~5% more CPU, ~10% more memory, and ~16% more fargate tasks. Each task was cheaper, but overall not much cost savings.

50% of HTTP requests on *.buildkite.com now served by ARM instead of Intel. We're gonna run this way for a bit, and see what the cost+performance looks like

we've used UUIDv4 as public identifiers in our UI and API for years so mostly customers are unlikely to notice much. The first few nibbles of each UUID are looking very similar now though