Skip Navigation

Kissaki

@ Kissaki @programming.dev

Posts
59
Comments
455
Joined
3 yr. ago

  • Microsoft Gave FBI BitLocker Encryption Keys, Exposing Privacy Flaw

    Jump

  • It’s possible for users to store those keys on a device they own, but Microsoft also recommends BitLocker users store their keys on its servers for convenience.

    Pretty obvious that if you hand over the (recovery) keys that they'd follow court orders.

    Of course, the criticism about defaults is warranted. At the same time, even outside of control concerns, it's fairly obvious why Microsoft would choose user convenience and ability to recover data over loss of data.

    It should be a well informed choice that makes the risks clear when setting it up.

  • The Death of Software Development

    Jump

  • It'll come crashing down 😱

  • Agent Psychosis: Are We Going Insane?

    Jump

  • I'm not saying you're wrong, but would we even be seeing them when they exist? When I publish or update my personal projects as public GitHub repos nobody sees and nobody cares. I imagine it would be the same if I were using LLM.

  • The Death of Software Development

    Jump

  • Maybe I can build a bird feeder that is as tall as a skyscraper. 🤔/s

  • Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"

    Jump

  • relevant, from a PR comment

    On Monday January 26, 2026, I intend to merge this pull-request and post an explainer blog post detailing some further reasoning and details behind this move. The change, the end of the bounty, is officially set for January 31 but I am certain it will take some days to "take effect" and by merging the update a few days early I don't think we actually hurt anyone.

  • Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"

    Jump

  • His comments came as cURL users complained that the move was treating the symptoms caused by AI slop without addressing the cause. The users said they were concerned the move would eliminate a key means for ensuring and maintaining the security of the tool.

    A single user commented, and they responded. “users complained” and "the users" is wrong. implying something different.

    “users complained” feels like a misrepresentation to me as well, at least how I read and understand "complained". The user wrote “As a security researcher, this is honestly painful to see, but also completely understandable.” Is it complaining if they understand the act and change?

    In a separate post on Thursday, Stenberg wrote: “We will ban you and ridicule you in public if you waste our time on crap reports.”

    The linked separate post is a /.well-known/security.txt file. It's not really a “separate post”. And I don't see where they got the date from. Maybe from whatever linked to that in the first place.

    An update to cURL’s official GitHub account made the termination, which takes effect at the end of this month, official.

    Isn't that from the merge request, which is not merged yet? It's definitely not in the main branch. Current MR state is something different. The MR discussion clearly states that they will merge on 26th - no early.

    “an update to the official GitHub account” makes no sense to me in the first place, when it's a file in a repo, not even the account.

    At first, I only wanted to point out one thing. Now this whole article feels like AI slop. Dunno how warranted that feeling/assessment is. Is it sloppy reporting? Am I, as a reader, the problem?

    /edit: The bleeping computer article posted in the community is much better/consistent/coherent. Of course, this one was earlier and already has traction.

  • A manifesto for open source, from Mercedes-Benz

    Jump

  • A manifesto for open source, from Mercedes-Benz

    Jump

  • From 2021. Shouldn't we already be seeing how it played out?

  • Welcome Dan Williams, new LibreOffice Developer focusing on UI/UX 🥳

    Jump

  • Liquid glass? Sounds hot. 🤡

  • Newer AI Coding Assistants Are Failing in Insidious Ways

    Jump

  • A task that might have taken five hours assisted by AI, and perhaps ten hours without it, is now more commonly taking seven or eight hours, or even longer.

    What kind of work do they do?

    in my role as CEO of Carrington Labs, a provider of predictive-analytics risk models for lenders. My team has a sandbox where we create, deploy, and run AI-generated code without a human in the loop. We use them to extract useful features for model construction, a natural-selection approach to feature development.

    I wonder what I have to imagine this is doing and how. How do they interface with the loop-without-a-human?

    Either way, they do seem to have a (small, narrow) systematic test case and the product variance to be useful at least anecdotally/for a sample case.

  • Removed

    Building a Physics Engine from Scratch (Rust/WGPU) to prove a theory I've been winging for a year. Looking for feedback on the compute kernels.

    Jump

  • Did you remove your earlier post from two or three days ago? https://programming.dev/post/43579392

    I posted a comment there, but looks like what I was asking about is no longer part of the post or repo readme this time around.

    While trying to determine whether this is that I noticed you wrote “566 pages of theory” but then 573-page manuscript. I assume it became more pages, or are they different things?

  • Creators of Tailwind laid off 75% of their engineering team

    Jump

  • Open Source Money Manager

    Jump

  • Open Source Money Manager

    Jump

  • I've been using GNU Cash for many years.

    The UI is kinda bad, way too complex, and the banking API integration is cumbersome and lacking.

    That's all negatives, and it sounds pretty bad, but it's still my banking app.

  • An open source website to read free scientific papers

    Jump

  • 🎨 Theming dark-mode compatible

    😵 quite the white border it has there

    scrolling is also quite limited to only the content area

  • Experienced software developers assumed AI would save them a chunk of time. But in one experiment, their tasks took 20% longer

    Jump

  • if the software developer had experience with AI

    Did these developers not have experience with AI?

    and were to start on a new project, without any existing context

    I'm not sure focusing on one aspect to scope a reasonable and doable study automatically makes it “really low effort”.

    If they were to test a range of project types, it'd have to be a much bigger study.

  • Experienced software developers assumed AI would save them a chunk of time. But in one experiment, their tasks took 20% longer

    Jump

  • Before starting tasks, developers forecast that allowing AI will reduce completion time by 24%. After completing the study, developers estimate that allowing AI reduced completion time by 20%. Surprisingly, we find that allowing AI actually increases completion time by 19%--AI tooling slowed developers down.

    The gap and miss is insane.

  • Removed

    I wrote a 573-page physics book, but I suspect it's actually a Game Engine specification. Here is why.

    Jump

  • Nodes only know their neighbors.

    When this makes me think of gravity and how that propagades huge distances (if not endlessly until practically ignorable), would that be correct or wrong for this aspect?

    What does 'neighbors' mean in this context? Is it meant as something more local, constrained, or scoped towards local physical locality?

  • Why users cannot create Issues directly – ghostty

    Jump

  • A relatively uncommon but reasonable, good approach to issue management.

    Discussions allow for different formats, including explicit voting, which is useful for things like feature requests.

  • Web Development @programming.dev
    Kissaki @programming.dev

    Exploring the JavaScript Temporal API - Supported in Firefox 139.0

    kcode.de /resources/references/javascript/temporal/
  • Opensource @programming.dev
    Kissaki @programming.dev

    Firefox 139.0, See All New Features, Updates and Fixes

    www.mozilla.org /en-US/firefox/139.0/releasenotes/
  • Programming @programming.dev
    Kissaki @programming.dev

    An Elaborate GitHub Comment on Microsoft's new edit CLI Text Editor Asking for Simplicity and Predictability

    github.com /microsoft/edit/issues/41
  • Web Development @programming.dev
    Kissaki @programming.dev

    Painting with the Web - Matthias Ott - Beyond Tellerrand Düsseldorf 2025

  • demicrosoft @programming.dev
    Kissaki @programming.dev

    Windows RDP lets you log in using revoked passwords. Microsoft is OK with that. - Ars Technica

    arstechnica.com /security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that/
  • Security @programming.dev
    Kissaki @programming.dev

    Windows RDP lets you log in using revoked passwords. Microsoft is OK with that. - Ars Technica

    arstechnica.com /security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that/
  • Security @programming.dev
    Kissaki @programming.dev

    Millions of Apple Airplay-enabled devices can be hacked via Wi-Fi - Ars Technica

    arstechnica.com /security/2025/04/millions-of-apple-airplay-enabled-devices-can-be-hacked-via-wi-fi/
  • Web Development @programming.dev
    Kissaki @programming.dev

    One Million Chessboards · eieio.games

    eieio.games /blog/one-million-chessboards/
  • Web Development @programming.dev
    Kissaki @programming.dev

    Firefox 138.0 Release

    www.mozilla.org /en-US/firefox/138.0/releasenotes/
  • Opensource @programming.dev
    Kissaki @programming.dev

    Firefox 138.0 Release

    www.mozilla.org /en-US/firefox/138.0/releasenotes/
  • Security @programming.dev
    Kissaki @programming.dev

    Site Attestation: Browser-based Remote Attestation

    dl.acm.org /doi/10.1145/3722041.3723095
  • Programming @programming.dev
    Kissaki @programming.dev

    Git turns 20: A Q&A with Linus Torvalds - The GitHub Blog

    github.blog /open-source/git/git-turns-20-a-qa-with-linus-torvalds/
  • Programming @programming.dev
    Kissaki @programming.dev

    Modernizing push notification API for Teams - .NET Blog

    devblogs.microsoft.com /dotnet/modernizing-push-notification-api-for-teams/
  • Programming @programming.dev
    Kissaki @programming.dev

    The Pain That is GitHub Actions - Feldera Blog

    www.feldera.com /blog/the-pain-that-is-github-actions
  • Rust @programming.dev
    Kissaki @programming.dev

    Rust-Written Zlib-rs Is Not Only Safer But Now Outperforming Zlib C Implementations

    www.phoronix.com /news/Zlib-rs-0.4.2
  • Opensource @programming.dev
    Kissaki @programming.dev

    I Stopped Using Matrix - Tatsumoto

    tatsumoto.neocities.org /blog/i-stopped-using-matrix
  • Opensource @programming.dev
    Kissaki @programming.dev

    kalk - command line calculator app for developers

    kalk.dev
  • Programming Horror @programming.dev
    Kissaki @programming.dev

    nmake cancel

  • Programming @programming.dev
    Kissaki @programming.dev

    Using the term ‘artificial intelligence’ in product descriptions reduces purchase intentions

    news.wsu.edu /press-release/2024/07/30/using-the-term-artificial-intelligence-in-product-descriptions-reduces-purchase-intentions/