yaml

Anyone who builds software with client side validation should go read about phreaking

How To Measure AI's Organizational Impact By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction.

By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction.

By @stevefenton.co.uk

LOL they won't listen to me, maybe they'll listen to @mattmoor.dev

Should Your Team Be Vibe Coding? Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.

Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.

By @mattmoor.dev, thanks to Chainguard

PSA: attacks on public infrastructure like software package registries are on the rise. Here’s an active one targeting folks who have crates.io accounts.

“On the rise” feels like such an understatement. 😞

h/t to @castrojo.bsky.social for nudging us in the bootc direction 🙏

I think we are looking into bootc compatibility, but no that’s not how we are building them.

We are currently declaratively assembling EFI partitioned boot disks in apko style to compose with all of the infrastructure we have built up to assemble (and custom assemble) thousands of images at scale.

Why Chainguard Is Doubling Down on Virtual Machines in a Container World Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees.

Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees.

By @darrylktaft.bsky.social

Should Your Team Be Vibe Coding? Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.

Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them.

By @mattmoor.dev, thanks to Chainguard

ko, jib, apko, Bazel rules_oci, …

Most are last mile tools, but the key is avoiding imperative RUN.

“SSH” 😂

There’s a difference between genAI not being good and not being able to get good results when using genAI.

For CI reasons (speed), I wrote a FUSE filesystem to act like the $GOMODCACHE directory to make it look like all world's #golang modules are available locally on disk without having to download them.

Then the FS downloads them if/as needed, storing them in git trees/blobs (no commits) for de-dup.

I always knew it as “principle of least surprise”

Sounds like ko for swift 😁

Cool to see AWS notifying customers of misconfigured OIDC trusts which are vulnerable!

I would like to subscribe for a future Chicago trip 😁

Is this separate from the annual gifting limit? This seems… small compared to that…?

I can gift that to my daughter in a way that I bear the tax burden (IDGT), so in addition to gifting far more, it also grows (from their standpoint) tax free.

Your home having an open foundation sounds like a terrible idea 😝

Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’

Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’
theonion.com/report-...

What if the demo is an integration with Google Slides?

You can get an external keyboard from Apple with Touch ID

It costs nothing yet the feeling it generates is priceless when you let people know you appreciate the work they’re putting in.

I thought it was just me 😂

lol its not short!

Yeah, we watched the second a couple nights ago, and it was pretty disappointing (and long)

a man is sitting in a chair with his eyes closed and smiling . ALT: a man is sitting in a chair with his eyes closed and smiling .

"Matt Damon famous?"
"Well, maybe Ben Affleck famous..."