Posts

Vicki Boykis has a good piece on Redis’s recent vicissitudes. At the same time, she recaps where we stand and sings the praises of a project that many are fond of, and not just for its technical worth. I, like many developers who have worked on high-scale, low-latency web services over the last fifteen years, have an intimate relationship with Redis. At any new job, when you ask where the data is, and someone points you to a server address with port 6379, you know you will meet an good, reliable friend there. ...

Molly White’s experience with LLMs corresponds more or less with my own, but she is much better at recounting, critiquing, and drawing conclusions than I am. I find my feelings about AI are actually pretty similar to my feelings about blockchains: they do a poor job of much of what people try to do with them, they can’t do the things their creators claim they one day might, and many of the things they are well suited to do may not be altogether that beneficial. And while I do think that AI tools are more broadly useful than blockchains, they also come with similarly monstrous costs. ...

I am thrilled to have the opportunity to present at an international conference once again. On May 9th, I will speak at the ABP Donet Conf'24. My session, titled C #12: What’s New and Interesting, is on a topic I’m passionate about. With the alignment of C# and Dotnet Core release cycles, the C# release cadence has increased (we’re on a yearly cycle now), while feature quantity has reduced for individual releases, which is good. The faster, smaller iterations allow for quicker course corrections, and introducing fewer new features makes it easier to embrace the changes. ...

Among the essential reasons I continue to make presentations at various conferences is that the preparation required to deliver good content forces me to learn and comprehend a topic in greater depth. I always try to talk about the stuff I am working on: the commitment to explaining what I am learning in public forces me into a higher level of knowledge. In the past few weeks, I have spoken about OAuth2 at two different conferences, and OAuth2 has been precisely the subject of my work for the past few months, and it still is now. It goes like this: I study and implement things, and while doing that, I say to myself, hey, this could be an exciting topic for other devs, too. I let the idea cool down for a few days, and then, if it still seems good, I start looking for a fitting call for papers. Magic happens if the proposal is accepted: I am forced to turn from a superficial connoisseur to someone close to a field expert. That’s the level of competence to aim for if one wants to talk publicly, especially on a technical topic. ...

I wish I was morally bankrupt enough to be a productivity guru. I could, like, charge $50k to stand behind a podium in a hotel ballroom and spout nonsense at desperate people in an attempt to get them to buy my book and planners. It would be awesome. – snakeyjake

The so-called “XZ attack” is all over the internet these days, and for good reason. Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also happens to be a dependency of OpenSSH sshd on Debian, Ubuntu, Fedora, and other systemd-based Linux systems. That backdoor watches for the attacker sending hidden commands at the start of an SSH session, giving the attacker the ability to run an arbitrary command on the target system without logging in: unauthenticated, targeted remote code execution. ...

Happy Easter, everyone. This morning, I completed the long-overdue move of all my ripped CDs from my old 2012 MacBook Pro to the new one and, then, to my iPhone. I’m using Doppler on both devices. I like Doppler, a simple yet elegant MP3 player app with few well-thought-out features. I am increasingly convinced that returning to purchased music is the way. I’ve been listening to streaming services for so long that I almost forgot the accomplishment of listening to music I own. This music was so significant when I first listened to it that it was worth buying and carrying along over the years. It’s tangible, too: it’s sitting right next to me, on my hard disk and my phone; I can look at it and, yes, touch and move it as I please, as I can with my original CDs. The same goes for the new music I buy on Bandcamp or elsewhere. ...

I spent the day doing remote maintenance on multiple Linux machines via ssh. The revelation is that ChatGPT is the bomb for these tasks: What does that command option do? I am trying to remember. What syntax is to install that peculiar and rarely used package on Debian? I am getting this locale configuration error; what was the fix again? All this stuff is answered much sooner than searching online, no matter the search engine. ...

I am not a fan of TV series. However, I have been following the Shogun miniseries with a fair amount of interest, mainly because I am intrigued by the setting and historical period covered. As is always the case with modern TV series, it started very well (the first two to three episodes). Then it slowed down, getting stuck in the main characters’ fanciful and improbable personal affairs and agendas, straying from the main plot, essentially muddling along until, I assume, the last episode of the season that will end with a bang. ...

Yesterday I went for a walk in the mountains. This tour starts from Bocconi (on the road to Muraglione Pass) and the nice humpback bridge that is just below the village (I think it’s called “della Brusia”). Ponte della Brusia, Bocconi (FC) It is a nice hike, with the ascent that becomes quite challenging in the final part, towards the ridge tops, which, once reached, you’ll follow for a long time, partially on a forest road, before plunging back downhill, initially following a lovely descending ridge da makes most of the descent quite pleasant. During the ascent, several detours were necessary to get around the landslides that originated during the infamous May floods (there are still several traffic lights on the roadway leading up from Forlì, all due to the restoration works following the flood). Hats off to the volunteers who maintain the trail: they have had to work hard this year. At some point, they had to ‘dug out’ complete new sections to get around the more enormous landslides. ...