Advertisement Β· 728 Γ— 90

Posts by naugtur

some dumb shit head writing bullshit

some dumb shit head writing bullshit

Women are lagging behind on going bankrupt on DraftKings, drinking themselves to death, and fist-fighting anyone who looks at them funny on the subway but they can catch up.

9 months ago 7387 1310 89 69

Don't fix what's not broken? 🫣

43 minutes ago 0 0 0 0

I saw these kinds of things happen in code before. The basic logic seems correct but when you zoom out it's nonsense. It's even worse when it works and passes a test

48 minutes ago 0 0 0 0

This is some extremely interesting nonsense

7 hours ago 127 7 12 0
Matteo announcing NodeConfEU at CityJS

Matteo announcing NodeConfEU at CityJS

This is where I want to be in September BTW

1 day ago 8 3 1 0
Preview
Math.sumPrecise() - JavaScript | MDN The Math.sumPrecise() static method takes an iterable of numbers and returns the sum of them. It is more precise than summing them up in a loop, because it avoids floating point precision loss in inte...

JavaScript addition using the new and upcoming Math.sumPrecise():

❌ 1 + 0.1 - 1 = 0.10000000000000009
βœ… Math.sumPrecise([1,.1,-1]) = 0.1

❌ 1e20 + 0.1 - 1e20 = 0
βœ… Math.sumPrecise([1e20,.1,-1e20]) = 0.1

❌ 0.1 + 0.2 = 0.30000000000000004
❌ Math.sumPrecise([.1,.2]) = 0.30000000000000004

1 day ago 31 8 2 1
Preview
Socket Selected for OpenAI's Cybersecurity Grant Program - S... Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

πŸŽ‰ We're excited to share that Socket is one of the initial recipients of OpenAI's Cybersecurity Grant Program, alongside Semgrep, Calif, and Trail of Bits. More on how we're putting frontier models to work defending open source β†’

socket.dev/blog/openai-...

1 day ago 16 5 0 1

Btw... Stay tuned for some possibly NodeConf EU shaped news very soon....

1 day ago 22 7 0 0

There are only two bug classes left: complexity and memory safety.

CurveBall (CVE-2020-0601)? Complexity.
BigSig (CVE-2021-43527)? Memory safety.
Log4Shell (CVE-2021-44228)? Complexity.
BlueKeep (CVE-2019-0708)? Memory safety.

Heartbleed looks like memory safety, but it's actually complexity.

2 days ago 121 17 4 0

+1 if the "..." stands for "only" πŸ˜‚

2 days ago 0 0 0 0
Advertisement

You misspelled purr programming

2 days ago 2 0 0 0
Meme of a Trojan Horse with "mass surveillance" inside

Meme of a Trojan Horse with "mass surveillance" inside

Last month, the EU Council wanted to push through voluntary scanning. But they failed! πŸŽ‰

However, the trilogue discussions on Chat Control 2.0 start this Thursday. But #ChatControl is a Trojan Horse for citizens and businesses in Europe.

2 days ago 86 43 2 0

Looking forward to a detailed blog post 🀣

2 days ago 1 0 0 0

Oops. Hope I didn't start a chain of events that leads to you poking holes in it 🫣

2 days ago 1 0 1 0

Are the used shoes increasing in value as a result too?

2 days ago 0 0 0 0

What is it made of?

2 days ago 0 0 1 0

Chrome has been a tough target for extensions in the last 4 years

2 days ago 1 0 0 0

Doh πŸ˜”

2 days ago 0 0 0 0

this is a really dumb story that I'm sure I will see 50 times today. company goes out of business, sells its IP for $1, sells its warehouse space for $2. this is what their stock "exploding" looks like

2 days ago 321 74 15 11
Advertisement

Arriving tomorrow πŸ™ˆ

2 days ago 1 0 1 0

What I'm really looking for in an AI datacenter is something light and breathable using natural fabrics.

2 days ago 33 2 2 1

Experience in making shoes is the competetive advantage they need in this saturated space

2 days ago 0 0 0 0

Yup. Very fancy!
A good one for early spring before I will inevitably switch to a Polish brand of Brazilian mate with fruity flavors for terere when it gets really hot.

2 days ago 1 0 0 0
Yerba mate LaMerced brand cardboard box

Yerba mate LaMerced brand cardboard box

😁
Look what I just finished!
A friend very generously brought it from a trip to Argentina and sent to me.

2 days ago 3 0 1 0

Non-ai features in vscode are also degrading a little

2 days ago 1 0 0 0

They're not that expensive to make with your own brand either. meet.js is our local community 😊

2 days ago 2 0 1 0
Two thermal cups shaped in a way that makes them appealing to use for yerba mate with bombillas sticking out

Two thermal cups shaped in a way that makes them appealing to use for yerba mate with bombillas sticking out

I've got 2 branded thermal materos 🫑

2 days ago 5 0 1 0
Advertisement
Hi JoshuaKGoldberg,

We're writing to let you know that between September 2025 and January 2026, webhook secrets for webhooks you are responsible for were inadvertently included in an HTTP header on webhook deliveries. This means that any system receiving webhook payloads during this window could have logged the webhook secret from the request headers. Webhook deliveries are encrypted in transit via TLS, so the header containing the secret was only accessible to the receiving endpoint in a base64-encoded format. We have no evidence to suggest your secrets were intercepted. This issue was fixed on January 26, 2026. Please read on for more information.

Hi JoshuaKGoldberg, We're writing to let you know that between September 2025 and January 2026, webhook secrets for webhooks you are responsible for were inadvertently included in an HTTP header on webhook deliveries. This means that any system receiving webhook payloads during this window could have logged the webhook secret from the request headers. Webhook deliveries are encrypted in transit via TLS, so the header containing the secret was only accessible to the receiving endpoint in a base64-encoded format. We have no evidence to suggest your secrets were intercepted. This issue was fixed on January 26, 2026. Please read on for more information.

GitHub leaked webhook secrets for many repos for *months* in 2025 and again in January 2026. Then only notified some of us today, in April.

But hey at least Copilot is integrated into GitHub and Windows 11!

🀑 show

3 days ago 74 8 5 2
Bailey Pumfleet @pumfleet (1h ago) post in X:

Open source is dead.

That’s not a statement we ever thought we’d make.

@calcom was built on open source. It shaped our product, our community, and our growth. But the world has changed faster than our principles could keep up.

AI has fundamentally altered the security landscape. What once required time, expertise, and intent can now be automated at scale. Code is no longer just read. It is scanned, mapped, and exploited. Near zero cost.

In that world, transparency becomes exposure. Especially at scale.

After a lot of deliberation, we’ve made the decision to close the core @calcom codebase.

Bailey Pumfleet @pumfleet (1h ago) post in X: Open source is dead. That’s not a statement we ever thought we’d make. @calcom was built on open source. It shaped our product, our community, and our growth. But the world has changed faster than our principles could keep up. AI has fundamentally altered the security landscape. What once required time, expertise, and intent can now be automated at scale. Code is no longer just read. It is scanned, mapped, and exploited. Near zero cost. In that world, transparency becomes exposure. Especially at scale. After a lot of deliberation, we’ve made the decision to close the core @calcom codebase.

So we're back to security through obscurity? Sorry, but this is wrong. Our OSS apps and libs will be more secure thanks to the new models, not less. They are being released to researchers responsibly. Let's help maintainers avoid burnout. Let's fund them. Let's welcome more eyes checking our code.

2 days ago 263 42 21 12

Gimp has gotten pretty close to Photoshop cs2 level of capability. Might be worth a try

(I'm not a design professional, so my assessment might be wrong. Happy to hear how)

2 days ago 0 0 0 0