|
Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam
-
snyk.io
-
8 months ago
-
eng
In November 2025, a large-scale surge of package publications on the NPM registry with similar structures and naming patterns was discovered. Understand the details of the incident.
|
|
I discovered that my RSS feeds were rendering the title inside the description. Titles should go in the title field! I know I know. How embarrassing. Honestly it’s some sort of miracle of miracles that I even have RSS feeds that work at all. When I wrote the static site generator, I figured out how to do serverside components using just regular javascript and ejs templates, and that was pretty cool. It occurred to me that I could use the ....
|
|
Just pushed a pretty significant update to docker-harness. It was a tool I created originally to power some of my Docker containerized database tests. I pulled out the dependencies for each database to modularize it a bit. Each database module (MySQL, PostgreSQL, Redis, Memcached) now has its own go.mod and go.sum, which means you only pull in the dependencies for the databases you actually need. Also added some dependency updates, taking o..
|
|
What AI I Use How and When (November 2025 Update)
-
everything.intellectronica.net
-
8 months ago
-
eng
|
|
Building an AI Agent in RavenDB is very much like defining a class, you define all the things that it can do, the initial prompt to the AI model, and you specify which parameters the agent requires. Like a class, you can create an instance of an AI agent by starting a new conversation with it. Each conversation is a separate instance of the agent, with different parameters, an initial user prompt, and its own history. Here is a simple exam....
|
|
Building an AI Agent in RavenDB is very much like defining a class, you define all the things that it can do, the initial prompt to the AI model, and you specify which parameters the agent requires. Like a class, you can create an instance of an AI agent by starting a new conversation with it. Each conversation is a separate instance of the agent, with different parameters, an initial user prompt, and its own history. Here is a simple exam....
|
|
There is a difference between calming things down, achieving a state of calm, and a chaos-free life. Learn why it matters and how to be intentional about cultivating a calmer life.
|
|
Organizations Achieve 288% ROI with The Snyk AI Trust Platform, According to New Forrester TEI Study
-
snyk.io
-
8 months ago
-
eng
Organizations achieve 288% ROI with the Snyk AI Trust Platform, according to a new Forrester TEI study. Improve developer productivity, enhance security, and consolidate AppSec tools with Snyk.
|
|
In [[carling-outlier-detector]], I evaluated the probability of outlier detection for samples from the Normal distribution across different outlier detectors. I performed numerical simulations for small sample sizes, then confidently extrapolated the results to larger samples. As it turns out, this approach led to the wrong conclusion. This post corrects that error by extending the simulation to much larger sample sizes and updating the a....
|
|
Like it or not, WhatsApp is a necessity for some of us. I wish it weren't the case, but here we are. Given the circumstances, I wish I could use WhatsApp a little more on my terms. And by that, I mean from an Emacs client, of course. Surely I'm not the only one who feels this way, right? Right?! Fortunately, I'm not alone . With that in mind, I've been hard at work prototyping, exploring what's feasible. Spoiler alert: it's totally p....
|
|
In [[carling-outlier-detector]], I evaluated the probability of outlier detection for samples from the Normal distribution across different outlier detectors. I performed numerical simulations for small sample sizes, then confidently extrapolated the results to larger samples. As it turns out, this approach led to the wrong conclusion. This post corrects that error by extending the simulation to much larger sample sizes and updating the a....
|
|
I hate cloudflare so fucking much. In return for providing a few nice services, they fucked up the internet. What Can they provide? They can provide a lot. Here are a few things. Content delivery networking Distributed denial of service protection Web application firewall SSL Load balancing Analytics Bot management A lot of their services are provided for free. This naturally brings in many users. ~20% of the websites on the internet depend..
|
|
Two days of very frustrating debugging Github Actions with Gemini, who seems to have completely perfected being a lemming and confidently launching itself into ever more precarious situations, and every time I have to descend into the depths of hell just to make the tinniest bit of progress, and somehow find a way out of the trail of destruction it has caused. Currently rebuilding a very complex workflow from scratch. I've had to build se..
|
|
My last story about ChatGPT scraping Google and leaking prompts received a lot of attention, and I was especially pleased to see that OpenAI said that they’ve fixed the issue. So what was “the issue”, and what did they fix? My research with Slobodan Manić on the topic showed two things: Some raw ChatGPT prompts […] The post Yes, OpenAI Scrapes Google Search appeared first on Quantable Analytics .
|
|
It’s that time of year for .NET when we get a new major version and a bunch of exciting features. .NET Conf 2025 kicked off earlier today, bringing with it the release of .NET 10, as well as ASP.NET Core 10, C# 14, and F# 10. Congrats (and a big thank you) to the .NET […] The post Heroku Support for .NET 10 LTS: What Developers Need to Know appeared first on Heroku .
|
|
Optimize Your Raspberry Pi to Run Fully from an SSD Cloning your Raspberry Pi OS from an SD card to an SSD can dramatically improve speed, reliability, and disk longevity. In this guide, we’ll walk you through a complete setup, from cloning to SSD optimizations. Step 1: Boot from the SSD After cloning your SD […]
|
|
Secure by Design: The Future of Threat Modeling for AI-Native Applications
-
snyk.io
-
8 months ago
-
eng
Explore how Snyk's Evo Threat Modeling Agent automates and contextualizes security for AI-native applications, addressing prompt injection, data exfiltration, data poisoning, and agentic vulnerabilities.
|
|
The meeting stakes are high when you can get hung up on As you may remember, or completely not know, I have a bit of a fascination with old rotary phones . Occasionally, when people learn about this fascination, they donate their old rotary phones to me, so I have ended up with a small collection. The other thing I have a fascination with is meetings. Well, I say “fascination”, but it’s more of a burning hatred, really. One day, a few m..
|
|
I’ve been getting back into analog media this year - reading paper books, listening to vinyl, subscribing to print magazines, even getting the Sunday New York Times. For some of the blogs I follow, su...
|
|
I’ve been getting back into analog media this year - reading paper books, listening to vinyl, subscribing to print magazines, even getting the Sunday New York Times.
|
|
Understanding the Browser's Layout Engine: Formatting Contexts, Stacking, and Compositing Explained
-
www.codemancers.com
-
8 months ago
-
eng
This blog provides a comprehensive explanation of the browser's layout engine, including formatting contexts, stacking, and compositing. It covers the key concepts and processes that enable the browser to render web pages efficiently and accurately.
|
|
Hello, I recently found this piece of code that allows me to quickly generate elements in vanilla JS: (() => { const assignDeep = ( elm , props) => Object.entries( props ).forEach(([ key , value]) => { if ( typeof value === 'object ') return assignDeep( elm [ key ], value) ; try { Object.assign( elm , {[ key ]: value}) ; } catch (e) { elm.setAttribute(key, value); } }) ; Array.from([ 'a ', 'abbr ', 'address ', ....
|
|
Hello lainons, have a case of bad cyberbullying campaign in regards to a child. Before I even begin, the thing should've been dealt with some decent parent supervision and some opsec, but sadly it did not happen. Basically a friendgroup formed on Playstation Network, with them playing together. Some of the people playing are genuine 20 year olds who play with kids as low as 8 year old. They hold contact on whatsapp as well. Playing sever....
|
|
I needed to check the payload my alertmanager in OpenShift was sending out to the target-system (which was not under my control and I couldn’t check what was received). There is some documentation online. However at the time of writing, the example in the documentation was not usable out-of-the-box since there was a route (or ingress) missing. I also wanted a fully-featured webhook-tester that showed me the received payload in a nice we....
|
|
Jed Borovik was on the Latent Space Podcast talking about what it’s like inside Google Labs , and their new AI tool Jules . I liked his description of the direction he sees things going in [08:06]: “We have an API, so people are using it for all kinds of things. Triggering it when something happens. We saw an example where someone is triggering Jool’s to do all kinds of updates to their site, and then they have a Github action that i....
|
|
The RavenDB team will be at Microsoft Ignite in San Francisco next week, as will be yours truly in person 🙂. We are going to show off RavenDB and its features both new and old. I'll be hosting a session demonstrating how to build powerful AI Agents using RavenDB .I’ll show practical examples and the features that make RavenDB suitable for AI-driven applications. If you're at Microsoft Ignite or in the San Francisco area next week, I'd ..
|
|
As our project grows, we're always looking for ways to streamline development, improve performance, and enhance the developer experience. Recently, we've been exploring a shift from our traditional Django REST Framework (DRF) API patterns to a combination of Django Ninja API and Pydantic. This blog post will delve into our motivations for this change, the benefits we've observed, and some considerations for others contemplating a similar tr....
|