vchrombie retweeted
Employee: 2k, 2k, 2k, 2k, 2k
Freelancer: 800, 3k, 0, 6k, 1k, 4k
Founder: 0, 0, 0, 0, 0, 0, 300k
Open Source Maintainer: 0, 0, 0, 0, "thanks bro"
vchrombie retweeted
not all of us were made to cook. some of us were made to have conversations with the person cooking.
vchrombie retweeted
I believe everyone who is obsessive about their productivity should (attempt to) have their own version of a TODO list.
I built my own TODO app: No Voids.
2 main motivations: I wanted something personal. And something that is only personal.
There’s an ocean of apps in this space. Many of them great, and a few I managed to stick to. I know the places where I usually stay consistent, and the common reasons I fall off. Most apps either got in the way of my strengths or didn’t help cover my weak areas.
The top apps also drift toward teams: delegation, comments, sprints, workflows. I don't need all that.
So I built something that works for me.
vchrombie retweeted
"Babe wake up"
We got another supply chain attack
Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.
The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.
To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.
ALT Screenshot of mistralai PyPI package v2.4.6 compromise
vchrombie retweeted
Remembering the innocent lives lost in the gruesome Pahalgam terror attack on this day last year. They will never be forgotten. My thoughts are also with the bereaved families as they cope with this loss.
As a nation, we stand united in grief and resolve. India will never bow to any form of terror. The heinous designs of terrorists will never succeed.
vchrombie retweeted
For my friends who are still using UV and might be a little weary about recent compromises to PyPi packages, stick this in your pyproject.toml.
You can let all of those pip users find and report the compromises...
vchrombie retweeted
If you use GitHub (especially if you pay for it!!) consider doing this *immediately*
Settings -> Privacy -> Disallow GitHub to train their models on your code.
GitHub opted *everyone* into training. No matter if you pay for the service (like I do). WTH
github.com/settings/copilot/…
vchrombie retweeted
With agentic slop, we are trading software reliability for shipping velocity and calling it progress. It isn't. Systems are more fragile than ever, and engineers building them no longer trust their code to hold up in real-world edge cases.
I am pro-AI, but this will backfire - big time.
vchrombie retweeted
- XZ utils backdoor: found by guy debugging 200ms latency
- LiteLLM hack: found by guy debugging oom issue
These could have been the most impactful compromises ever.
Forget security vendors, weaponize your engineers’ autism.
vchrombie retweeted
LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below
vchrombie retweeted
someone built a VS code extension
that turns your claude code agents into pixel art characters working in a little office
each agent gets its own character
> typing when it's writing code
> reading when it's searching files
> speech bubble when it's waiting for you
> sub-agents spawn in with matrix animations
you can even customize the office lol
this is the most unnecessary thing i've ever wanted to install immediately
free AND open source too
vchrombie retweeted
Designers & Builders 👀
Something is wrong in this dashboard table. Most people miss it at first glance.
But once you see it, you can’t unsee it.
Guess what’s wrong here in this table 👇
vchrombie retweeted
One thing worth remembering:
Typography decisions shouldn't stop in Figma.
If the behaviour isn’t implemented in code, the interface will fall back to default font behaviour.
Use font-variant-numeric: tabular-nums in your code.👨💻
