• 2 Posts
  • 145 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle

  • Fuck that. Emailing coworkers shouldn’t be a formal thing. Just wastes everyone’s time.

    I wrote my last email today and it was literally just 3 sentences.

    1. Hi, tomorrow is my last day, thanks for the good time.
    2. Snacks and champagne in the break room at 1pm.
    3. My socials if you wanna keep in touch.

    I could have had the company-mandated AI make it “professional” and unnecessarily long but nah, I’d rather be human.



  • I like Gnome because it doesn’t have a Desktop that I can crowd with Icons and random files. The few times I tried KDE I just didn’t really jive with it because the text and icons were super small by default and the whole handling was just…idk, too click-y? Yeah, it can all be adjusted and stuff, but default Gnome is just closer to my preferences than default KDE.


  • I used to really like Motorola but their lineup has really gone down the drain in the last few years. The last Motorola I had was a Moto G100 (2021) and I was reasonably happy with it until the battery started expanding in early 2025. When I tried looking for a new Motorola at that time I didn’t find anything that didn’t have completely disappointing specs, so I went with a Pixel 9 pro specifically for GrapheneOS. It was a really good upgrade. The camera is much better, the battery lasts longer and has fast-charging and wireless charging. I hope I won’t be needing a new phone for the next few years but if I needed one right now I probably wouldn’t go with a Motorola, even if I could keep using GOS on it.


  • Have you ever pressed F12? We technically weren’t allowed to see the config either, but LiteLLM literally returned a users password hash as part of the user data json in the version we were using. It was easy enough to see that it wasn’t salted.
    Another fun thing it does is that any user can see their entire teams token spend trough the network tab, even if they technically shouldn’t be allowed to do that. Oh and LiteLLM had a CVSS score 9.9 vulnerability recently where any user with any sort of write privilege (including the “privilege” to change any of your own data, like your password) could just change their own role to admin 🤷

    The pure incompetence of that software would be really funny if it wasn’t such a pain in the ass to be the person who has to convince coworkers to rotate compromised credentials…




  • Another fun thing about Melatonin is also that nocturnal animals produce it basically the same way - dim light makes them produce melatonin while bright light flushes the melatonin out of their system. The melatonin itself just affects their nervous system in the opposite way and acts like a stimulant, so they get less sleepy when they have a lot of it. I think that’s kinda neat and maybe a bit counterintuitive if you have never thought about it before. I sure know that I would have either expected nocturnal animals to have their own separate compound or to produce melatonin at daytime.




  • I spent like an hour yesterday bullying Claude out of using a ResizeObserver, Refs and a useEffect construct just to fix the height of a container (there was a bug where the container didn’t properly scale down in height because some weird hard-coded properties in an external component inside of it). I knew that it had to be solvable with just the right css selector, but I was lazy and didn’t want to manually go through the html and figure out which selector on which component would be the right one. And on paper “Go through this massive block of html and check which property is out of place” should be the kind of use case where LLMs actually work. The stupid thing introduced two new different catastrophic failure modes where the entire browser crashed due to excessive rerenders before it found something that even remotely worked. And then I had to spend another hour stripping out unnecessary style properties it glued on while looking for a working solution. In the end, I probably would have been much faster doing it by hand.






  • Yeah, when my company first forced Claude on everyone the head engineers managed to negotiate that Claude would only run in a WSL sandbox. But people were lazy, so they just gave that WSL as many permissions as possible (Mounting C directly to it, opening up all interfaces, popping in full-access git tokens etc.). Then management sent out an extremely biased “survey” that has the question “Is having Claude in the WSL inconvenient to you?” and all the lazy bastards said yes. So now management lifted the sandboxing requirement to make work “easier” for devs. In the meantime, the engineers arguing for proper sandboxing are already so worn out from telling people to not intentionally compromise their sandbox that they’ve kinda just given up. Not having a sandbox at all isn’t much more insecure than whatever people are already doing 🫠