CVE-2026-33870 - GitHub Advisory Database Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

One thing AI has been very helpful with is helping me very concretely understand the impact of CVEs on my software, in a very very short amount of time.

For instance, the exact conditions required to exfil victim data in a request smuggling vulnerability.

github.com/advisories/G...

Quarkus has great performance – and we have new evidence Quarkus: Supersonic Subatomic Java

Neat article on Quarkus throughout performance

quarkus.io/blog/new-ben...

Thanks for sharing. Lots of food for thought and room for reflection from tis.

TIL `!unread` and also "system message"s, but also, unread messages being a the bottom feels like a bug too.

Releases · lloydmeta/enumeratum A type-safe, reflection-free, powerful enumeration implementation for Scala with exhaustive pattern match warnings and helpful integrations. - lloydmeta/enumeratum

Last 2 releases of enumeratum have been made using GH-hosted Copilot.

Not saying AI-all-the-things, but it has its usecases... esp for small, unpaid open source libs.

github.com/lloydmeta/en...

Come for cameras leave with wisdom.

This weekend, I used AI to close out 2 issues in enumeratum. All within Github. What a world.

* github.com/lloydmeta/en...
* github.com/lloydmeta/en...

Release 3.30.8 · quarkusio/quarkus Complete changelog #52137 - Address MDC data regression : preserve types instead of squashing to String #52138 - Using Otel results in modifying MDC data types if they were not Strings

TFW a new version of #Quarkus web framework is released, with just your fix, when the normal cadence is once a week.

Thanks @quarkus.io team.

github.com/quarkusio/qu...

I honestly haven’t noticed any issue with build times.

But then again I come from Scala and Rust….

Kids are overrated.

Showed my 10 yr old a live concert from the 90s and remarked that there was no one with a smartphone recording instead of enjoying the show.

She asked me if the band were still alive.

[Regression:3.30.5] Using Otel results in losing MDC data set in RequestFilters · Issue #51808 · quarkusio/quarkus Describe the bug When using OpenTelemetry's @WithSpan annotation (e.g. in a normal method and/or in an HttpAuthenticationMechanism), MDC (Mapped Diagnostic Context) values set in JAX-RS request fil...

Found some odd behaviour (regression?) in MDC handling in the latest (3.30.5) Quarkus release. If you're using MDC, might want to tread with caution.

github.com/quarkusio/qu...

Happy new year !

🌿

Lambda Cold Starts benchmark | maxday Visualize 10 Cold Starts for each runtime, updated daily

maxday.github.io/lambda-perf/

What on earth…. Apparently Rust on Lambda was experimental until ~a month ago

aws.amazon.com/blogs/comput...

Didn’t know that when I wrote bsky.app/profile/beac...

I usually try to avoid that stuff these days…

If you buy freshly made taiyaki, and want to eat it in the comfort of your home instead of while walking, but are afraid of it getting soggy by the time you get home.

Put it in the toaster when you get back.

Late-late 30s seems to involve wondering if that white hair is mine or my dog’s or trying to figure out why there’s a bruise there.

ArC migrates to Gizmo 2 Quarkus: Supersonic Subatomic Java

Interesting. There are possible breaking changes for Quarkus *extensions* (not applications) in Quarkus 3.30 due to the migration to Gizmo2, if they use the low level ArC APIs.

quarkus.io/blog/arc-mig...

Speedtest by Ookla - The Global Broadband Speed Test Use Speedtest on all your devices with our free desktop and mobile apps.

TIL 5G (+/SA) is fast as hell.

www.speedtest.net/result/i/682...

Revisiting this email that resulted in the withdrawal of string templates (preview) at the 11th hour.

Still makes sense to me and I can only hope I can do the same if put in a similar situation in the future.

mail.openjdk.org/pipermail/am...

Elastic DiskBBQ introduction: An alternative to HNSW - Elasticsearch Labs Introducing DiskBBQ, an alternative to HNSW, and exploring when and why to use it.

Techniques like DiskBBQ that allow performant vector search in memory constrained situations are neat

www.elastic.co/search-labs/...

Interesting ... upgrading to Tahoe seems to have been good for my x86 Mac...

Porting InstaBeach to Rust: A 10-Year-Old Play App Goes Serverless How I rewrote a decade-old Scala/Play application in Rust and deployed it to AWS Lambda to save money after the yen crashed.

Ported an old Scala app to #Rust , now running it as a #lambda, wrote about it

beachape.com/blog/2025/10...

When you take *3* chopsticks out of the dishwasher.

#odd

I watched it a LONG time ago when I was a kid, and only now realised it is set in #Kobe, where my wife is from, with many setings in the movie actually _in_ her neighbourhood.

Also, the dialect used is exactly what my in-laws have, making the experience even more profound.

Kobe in the background.

Grave of the Fireflies - Hotaru no Haka is a movie that, I'm fairly sure, if you have even an ounce of empathy, by the end of it, will have you super sad.

It's on Netflix now www.netflix.com/title/557010.

“Pause program … appuyer”

@swallez.com looks like you’ve enabled 🇨🇦 locale? 😜

> no tracking of any kind

Fair enough and glad to hear it!

Thanks for a fun time.

new Date("wtf") How well do you know JavaScript's Date class?

I scored 8/28 on jsdate.wtf and all I got was this lousy text to share on social media.

I guess....not horrible considering I write JS once very 100th blue moon or so.

@samwho.dev : curious if you have stats on the scores :D

Automating Dependabot with GitHub Actions - GitHub Docs Examples of how you can use GitHub Actions to automate common Dependabot related tasks.

Interesting !

I think `github.event.pull_request.user.login` is mentioned as safe and using dependabot/fetch-metadata. Those are what GH mentions in their guide.

docs.github.com/en/code-secu...