Post Mortem: axios npm supply chain compromise · Issue #10636 · axios/axios Post Mortem: axios npm supply chain compromise Date: March 31, 2026 Author: Jason Saayman Status: Remediation in progress On March 31, 2026, two malicious versions of axios (1.14.1 and 0.30.4) were...

so what i am learning from github.com/axios/axios/... is that you should simply never join a Microsoft Teams call for any reason --- because of security

@mith.ro sharing about the cool projects from the first wafer.space run at this month’s Hackware meetup. I see @gregdavill.bsky.social has been busy!!

This post inspired GrantBar, a menu bar app listing NSF and NIH grant opportunities! bsky.app/profile/step...

ST Just Killed CubeMX (They Split It Again)

ST just split STM32CubeMX into two versions: Legacy CubeMX and the new CubeMX2. In this video I show what changed, test CubeMX2 on the STM32C5, and explain what this means for all STM32 developers going forward.

#STM32 #GettingStarted #Tutorial […]

The method, encapsulated in a single screenshot below.

Of course, there are implications for how you sensemake if you use this method.

For starters, you might want to build a sensemaking group in your org / friends group to just share field reports with each other.

Gero Takke created the Ottopot, a Teensy-powered MIDI controller with "nothing but 8 dials". But what dials they are! 14-bit MIDI CCs changes with a 1:1 mapping to physical movement provides an experience more akin to analog pots, but with continuous rotation

pjrc.com/ottopot-midi...

Do I have any followers familiar with Embassy + smoltcp + STM32, and interested in a paid consulting gig? I've got a company seeing dropped / missing packets, and it could be an interesting project + fun investigative writeup.

Jo has a rare combination of tech and communication skills. Another person to snap up.

@bcantrill.bsky.social Have you seen this “truly” open source silicon efforts from Andrew “bunnie” Huang? I think they’d be fantastic for the Root of Trust use case in an @oxide.computer sled. A little early days but really promising start. www.crowdsupply.com/baochip/dabao

Defuddle now returns Youtube transcripts!

Paste a YouTube link into defuddle·md to get a markdown transcript with timestamps, chapters, and pretty good diarization

...or if you just want to read it, try the new Reader mode in
@obsidian.md Web Clipper powered by Defuddle

A google sheets chart

A google sheets chart, this has a big jump down

A google sheets chart, this bounces back up

A google sheets chart, the trend continues

TIL: The "AVERAGE" function in google sheets (and probably excel) handles things correctly when some cells in the range are missing.

This means you can have (for example) a 7-day moving average, centered on the current data, that includes the next 3 days that don't exist, then update when they do!

💿Veridis Quo//Daft Punk🤖 This melody is so nostalgic🥹🎶. And it's great fun to filter the sound of my Sewing-Gurdy with my mini Theremin! (Talk-Wha Filter this time 👌😎) #hurdygurdy #sewinggurdy #bardco... TikTok video by Gabriel / SingerSoundSystem

There's a chap on TikTok who has built a custom instrument out of a hurdy-gurdy and a Singer sewing machine (plus an attached theremin) which he uses for Daft Punk covers and they are genuine bangers www.tiktok.com/@singersound...

Dabao Evaluation Board for Baochip-1x A powerful new RISC-V microcontroller with mostly open RTL

Interested in trying out a Baochip-1x? The 'dabao' evaluation board is now taking pre-orders on Crowd Supply: www.crowdsupply.com/baochip/dabao

GitHub - dani-garcia/vaultwarden: Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs - dani-garcia/vaultwarden

Shout out to github.com/dani-garcia/..., which:

* Is a Rust compatible server for the Bitwarden password manager
* Is easy to self-host
* Still works with the official desktop/mobile/browser apps, which also work to store/sync TOTP

It means I now have password syncing, across devices, self hosted!

The madlads at @pimoroni.com overclocked an RP2350 microcontroller from the base clock of 150 Mhz to a whopping 861.6 MHz.

It looks like 400-500 MHz can be stable on most Pico 2s, which is still wild.

See: learn.pimoroni.com/article/over...

In case anyone else needs to know:

Using Apple Virtualization with UTM with a linux guest (and maybe only with bridged networking+VLANs?), TCP Segmentation Offload makes the interface crawl. Installing ethtool and running:

sudo ethtool -K YOUR_INTERFACE sg off tso off

makes everything fast again.

Token Anxiety Nikunj Kothari C @nikunj • Feb 13 A friend left a party at 9:30 on a Saturday. Not tired. Not sick. He wanted to get back to his agents. Nobody questions it anymore. Half the room is thinking the same thing. The other half are probably checking the progress of their agents. At a party. All the parties are sober now. Young people don't drink because they're going back to work after. Not inspired by Bryan Johnson, although that's probably a factor. The buzz they want now runs on tokens per day.

I keep noticing it on walks through the Mission. Laptops glowing everywhere. Cafes, sidewalks, heck even park benches. People walking with screens open like a flashlight guiding them somewhere. Less drunk laughter on the streets these days. More keystrokes. Dinner conversations used to start with "what are you building?" That's over. Now it's "how many agents do you have running?" People drop the number the way they used to drop their follower count. Quietly competitive. The flex isn't what you've accomplished anymore. It's what's working while you're sitting here not working. The vocabulary is what really gets me though. People describe models the way sommeliers describe wine. This one has better taste. That one hallucinates with more confidence. Opus is bold, Codex is smooth. They talk about harnesses and reins like they're controlling horses. Invisible whips directing invisible labor. Someone at a dinner said they keep

labor. Someone at a dinner said they keep "Claude on a tight leash for code review but give it more slack for creative work." We've started borrowing the language of how we treat animals for something none of us actually understand yet. Waking up and checking what your agents produced overnight is the first thing now. Before coffee. Before texts. You open your laptop and grade homework you assigned in your sleep. Some of it is good. Most needs rework. But you start shipping a plan before you sleep just so you can wake up to more code written overnight. Saturdays became uninterrupted build windows. No meetings, no Slack, twelve hours of you and your agents. Sunday morning X is all terminal screenshots and shipping receipts. "What'd you ship this weekend?" replaced "what'd you do this weekend?"

The anxiety is rational, which is why it sticks. Every week some new benchmark drops that makes last month's workflow feel prehistoric. Codex ships overnight processing. Opus gets faster. Context windows double. None of it reduces the pressure. It multiplies it. You can do more now. And someone already is. The window to be first at anything feels like it's shrinking by the day. Literally, by the day. I replaced Netflix with Claude Code. I lie in bed thinking about what I can spin up before I fall asleep, what can run while I'm unconscious. Reading a novel feels indulgent now. Watching a movie without a laptop open feels wasteful. This voice in my head that says "something could be running right now" just doesn't shut off. I'm not even building a company. I'm just addicted to building my random ideas. Everyone here knows they should step away more. That's not the problem. The problem is what your brain does when you try. I still take a x ss walks. The agents come with me now.

Token Anxiety

i think i mostly echo this for myself. with so much that can be done, i often feel like i *should* be doing something, always

Deep Blue We coined a new term on the Oxide and Friends podcast last month (primary credit to Adam Leventhal) covering the sense of psychological ennui leading into existential dread that many …

On the @oxide.computer and friends podcast last month we (primary credit @ahl.bsky.social) coined the term "Deep Blue" for the sense of psychological ennui leading into existential dread that many software developers are feeling thanks to LLMs right now simonwillison.net/2026/Feb/15/...

Obsidian uses local files, so all your standard terminal commands work for editing/moving/searching/etc

Obsidian CLI adds everything else:

- interacting with the UI
- internal functions e.g. base queries, orphans, etc
- devtools, console, screenshots, eval, etc

See the CLI docs!

Also shout out to the @nordicsemi.com PPK2. Just a generally pleasant tool to use, and less than like 100 EUR. No brainer to have around for stuff like this.

A text slide saying "turing complete things" and listing: C/C++ Arm Assembly Code PowerPoint Excel The x86 “mov” instruction

Towards fun topics in teaching computer architecture (this 5 min video on powerpoint as a computer is worth watching: www.youtube.com/watch?v=uNjx...)

Particle Comes Full Circle, Becomes Part of Digi — Whose XBee Inspired the Company's Founding "The Spark Core [was] heavily inspired by Digi's XBee," Particle's CEO Zach Supalla explains — and now Particle itself is a Digi company.

Particle has announced that it has been acquired by Digi — the very company that inspired CEO and founder Zach Supalla to create Particle in the first place.

And yes, we’re hiring!

oxide.computer/careers

i think a core beef that i have with a lot of this "automation is bad" sentiment lately is that there is no inherent moral good in laboring

the story of humanity is one of invention, where we improve our conditions by building things that help us do more things more easily

Resistors soldered to the edge of a TSSOP package, with a bodge wire connected to them.

It has been 0 days since I forgot i2c pullups. 🥲

Hackware - Jan 2026 · Luma It's 2026 🎉 Hackware is a monthly meetup for developers and enthusiasts to share hacks and developments in the hardware, electronics, and IoT scene, promote…

Our monthly electronics/hardware meetup is back this week. We'll be at @hackerspace.sg, and we still have a slot available if you'd like to share your project/hack! luma.com/ux511670