-2147483648
banner
jcoglan.com
-2147483648
@jcoglan.com
this is him here
I write books about programming --> https://shop.jcoglan.com/
thanks to the government repeatedly capitulating to right-wing demands on immigration, the times of london now feels comfortable publishing "hurrah for the gestapo"
I read “It is hard to imagine that taking place in Britain” initially as “thank goodness”. Then I realised that Phillips *wants* this for Britain! He wants a Britain where visible minorities live in fear of abduction and deportation? WTAF?
Just a jaw-dropping paragraph in Trevor Phillips's column for The Times.

This is a policy that, by his own account, has left parents of a particular race too frightened to walk their children to school.

And that's the example he chooses of the "vigour" we "need".
www.thetimes.com/comment/colu...
November 25, 2025 at 12:32 PM
I swear labour are just leaking bits of the budget and seeing what the line does
November 25, 2025 at 12:05 PM
just learning that letting users run containers should be understood as giving them root, which is not remotely obvious b/c `docker run` itself does not require root and can be done by a normal user. really great ergonomics and affordances work here
November 25, 2025 at 11:59 AM
starting to think putting the CI config inside the artefact it's supposed to be there to check was not a good idea
November 25, 2025 at 11:41 AM
today I learned you can alter your access to a directory by mounting it into a docker container? is this intentional? socket.dev/blog/shai-hu...
Shai Hulud Strikes Again (v2) - Socket
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
socket.dev
November 25, 2025 at 11:25 AM
ah cool, all the same mistakes as the ocaml dwarf PR: using LLMs to generate the code, to review the code, to test the code, etc. awful.systems/post/6382888
Don’t cite the Adversarial Poetry vs AI paper — it’s chatbot-made marketing ‘science’ - awful.systems
Not even poetically sound https://www.youtube.com/watch?v=CnIDt3xATVw&list=UU9rJrMVgcXTfa8xuMnbhAEA [https://www.youtube.com/watch?v=CnIDt3xATVw&list=UU9rJrMVgcXTfa8xuMnbhAEA] - video https://pivottoa...
awful.systems
November 25, 2025 at 11:17 AM
it used to be that I knew half the people on the npm team personally. now I couldn't even name a single person working there. does anyone know anyone who can comment on this situation
November 25, 2025 at 10:38 AM
it is really astonishing that npm has not even publicly acknowledged the potentially ongoing credential-stealing worm attack. what is going on in there
November 25, 2025 at 10:19 AM
mister tonly
November 25, 2025 at 9:25 AM
when you call console.log() this is what happens
November 24, 2025 at 11:19 PM
"AI has a very deep understanding of how this code works. Please challenge me on this." a sufficient response to this would be "no it doesn't"
November 24, 2025 at 8:00 PM
guy goes to write for the economist and forgets what capitalism is, makes sense
November 24, 2025 at 4:50 PM
also did we not get rid of postinstall scripts
November 24, 2025 at 3:16 PM
seems ~obvious to me that npm should yank all affected releases of packages here and should reinstate the ability for publishers to yank releases. unfortunately everybody took a knee-jerk entitled position after left-pad that yanking should never be allowed for any reason
November 24, 2025 at 3:10 PM
does anyone know why this latest npm worm can propagate despite the new 2fa requirements that npm implemented recently? helixguard.ai/blog/malicio...
HelixGuard
Supply chain security, vulnerability intelligence, and malware detection.
helixguard.ai
November 24, 2025 at 2:56 PM
I got into journalism to speak* truth** to power***

* print
** endless articles
*** of wealthy people bleating about paying taxes
November 24, 2025 at 2:35 PM
call me ishmael, charlie brown
November 24, 2025 at 2:01 PM
"this black friday season" I'm sorry what the hell are you talking about
November 24, 2025 at 1:53 PM
gravity's rainbow (1973)
Terumaru, a bright young lightbulb and the mascot of the Tokyu Denki electric company, trapped in a door yesterday:
November 24, 2025 at 12:26 PM
strongly suspect that the twitter location data is inferred from a bunch of heuristics, some of which may be AI content analysis, and is very frequently wrong
November 24, 2025 at 10:02 AM
fun side effect of AI is I now hate this typeface and have to see it everywhere. also why can't it count to 19
November 23, 2025 at 9:58 PM
so it's a fight between these guys and the ones building a big mirror to banish the night
A 25-person startup is developing technology to block the sun and turn down the planet’s thermostat.

The stakes are huge — and the company and its critics say regulations need to catch up.

Read more: politi.co/4iaojIc
November 23, 2025 at 9:16 PM
this is the sort of thing that gets produced by a culture where people are incentivised to bullshit their way through life instead of saying they don't know something
November 23, 2025 at 1:52 PM
one americanism I really wish had not infected every piece of software I use is "the week starts on sunday"
November 23, 2025 at 1:45 PM
I've seen several posts claiming that turning off smart features in gmail breaks filtering. this isn't true; I did not enable smart features when I was first prompted to do so and all my filters still work. my email would be absolutely unusable without them
November 23, 2025 at 1:39 PM