Posts

Yesterday, Serena and I went to see Spellbound Contemporary Ballet’s The Art of Fugue, a performance based on J.S. Bach’s unfinished work. I have been gifting Serena two subscriptions to our city’s theater’s dance season for some years. She loves dance, both classic and contemporary. I thought I did not. Usually, she goes with one of her best friends. I don’t remember ever going before, and yesterday, I only went because none of her friends were available. ...

I have been following Cowboy Bebop on Netflix (the anime, not the spinoff TV series). The opening is a visual and musical marvel; I’m enthralled by it. The show’s soundtrack is a unique blend of jazz (big band hard bop, mainly), blues, and a bit of rock, which I’ve never seen before in anime and probably in movies. Even episode titles pay tribute to jazz, blues and rock tracks. We have “Valtz for Venus,” “Sympathy for the Devil,” “My Funny Valentine,” and stuff like that. Adorable. Episodes may appear rambling and superficial at first glance, but they are far from that. They strike a perfect balance between comedy and thought-provoking, often philosophical themes. ...

Vicki Boykis has a good piece on Redis’s recent vicissitudes. At the same time, she recaps where we stand and sings the praises of a project that many are fond of, and not just for its technical worth. I, like many developers who have worked on high-scale, low-latency web services over the last fifteen years, have an intimate relationship with Redis. At any new job, when you ask where the data is, and someone points you to a server address with port 6379, you know you will meet an good, reliable friend there. ...

Molly White’s experience with LLMs corresponds more or less with my own, but she is much better at recounting, critiquing, and drawing conclusions than I am. I find my feelings about AI are actually pretty similar to my feelings about blockchains: they do a poor job of much of what people try to do with them, they can’t do the things their creators claim they one day might, and many of the things they are well suited to do may not be altogether that beneficial. And while I do think that AI tools are more broadly useful than blockchains, they also come with similarly monstrous costs. ...

I am thrilled to have the opportunity to present at an international conference once again. On May 9th, I will speak at the ABP Donet Conf'24. My session, titled C #12: What’s New and Interesting, is on a topic I’m passionate about. With the alignment of C# and Dotnet Core release cycles, the C# release cadence has increased (we’re on a yearly cycle now), while feature quantity has reduced for individual releases, which is good. The faster, smaller iterations allow for quicker course corrections, and introducing fewer new features makes it easier to embrace the changes. ...

Among the essential reasons I continue to make presentations at various conferences is that the preparation required to deliver good content forces me to learn and comprehend a topic in greater depth. I always try to talk about the stuff I am working on: the commitment to explaining what I am learning in public forces me into a higher level of knowledge. In the past few weeks, I have spoken about OAuth2 at two different conferences, and OAuth2 has been precisely the subject of my work for the past few months, and it still is now. It goes like this: I study and implement things, and while doing that, I say to myself, hey, this could be an exciting topic for other devs, too. I let the idea cool down for a few days, and then, if it still seems good, I start looking for a fitting call for papers. Magic happens if the proposal is accepted: I am forced to turn from a superficial connoisseur to someone close to a field expert. That’s the level of competence to aim for if one wants to talk publicly, especially on a technical topic. ...

I wish I was morally bankrupt enough to be a productivity guru. I could, like, charge $50k to stand behind a podium in a hotel ballroom and spout nonsense at desperate people in an attempt to get them to buy my book and planners. It would be awesome. – snakeyjake

The so-called “XZ attack” is all over the internet these days, and for good reason. Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also happens to be a dependency of OpenSSH sshd on Debian, Ubuntu, Fedora, and other systemd-based Linux systems. That backdoor watches for the attacker sending hidden commands at the start of an SSH session, giving the attacker the ability to run an arbitrary command on the target system without logging in: unauthenticated, targeted remote code execution. ...

Happy Easter, everyone. This morning, I completed the long-overdue move of all my ripped CDs from my old 2012 MacBook Pro to the new one and, then, to my iPhone. I’m using Doppler on both devices. I like Doppler, a simple yet elegant MP3 player app with few well-thought-out features. I am increasingly convinced that returning to purchased music is the way. I’ve been listening to streaming services for so long that I almost forgot the accomplishment of listening to music I own. This music was so significant when I first listened to it that it was worth buying and carrying along over the years. It’s tangible, too: it’s sitting right next to me, on my hard disk and my phone; I can look at it and, yes, touch and move it as I please, as I can with my original CDs. The same goes for the new music I buy on Bandcamp or elsewhere. ...

I spent the day doing remote maintenance on multiple Linux machines via ssh. The revelation is that ChatGPT is the bomb for these tasks: What does that command option do? I am trying to remember. What syntax is to install that peculiar and rarely used package on Debian? I am getting this locale configuration error; what was the fix again? All this stuff is answered much sooner than searching online, no matter the search engine. ...