Sign in

boneskull

@boneskull.dev
819 followers 230 following 585 posts

bong mage

PostsRepliesMedia
Reposted by boneskull
Liran Tal @lirantal.com · 03/09/2026
reminder on the current state of AI security
001
boneskull @boneskull.dev · 28/08/2026
reading “Exploding the Phone” by Phil Lapsely which is a history of #phreaking. super interesting (and an engaging read) if you are so inclined
120
Reposted by boneskull
Kris 🧙‍♂️ Kowal @kriskowal.com · 02/08/2026
Odyssey as a security engineering metaphor since before it was cool. www.youtube.com/watch?v=RZ7b...
youtube.com
Hardened JavaScript
YouTube video by Agoric
0145
Reposted by boneskull
Wabi Sabi For Robots @wabisabi4robots.bsky.social · 16/08/2026
Werner Herzog with a word balloon
2047061309
boneskull @boneskull.dev · 24/08/2026
@bengl.dev are there any tools you're aware of that help analyze the memory usage of worker threads?
100
boneskull @boneskull.dev · 23/08/2026
sockpuppet.org/blog/2026/08... I agree with a lot of this, which is weird given my career building CLIs (but not TUIs). can’t think of a single one that I wouldn’t rather be a native GUI 😬
sockpuppet.org
Stop Making TUIs
It's time to stop drawing user interfaces with punctuation characters. Native UI is a completely solved problem.
121
boneskull @boneskull.dev · 23/08/2026
don’t worry everyone, I’m hoarding slop for the coming slop shortage
000
boneskull @boneskull.dev · 21/08/2026
www.jorkulator.com
jorkulator.com
Jorkulator
The JRK-7 Jorkulator: a torsional subject analyser. Feed it any subject and it returns a jork coefficient, a classification, and a printed finding. Same subject in, same reading out.
000
Reposted by boneskull
Timnit Gebru @timnitgebru.blacksky.app · 13/08/2026
🔇 🔇 🔇 My book, Deep Unlearning, is now available for preorders! I don't know how people write so many books because this one took a lot out of me. It turns out, I had a lot to say 😂, with editors cutting out 50k of my words 🫣 ✴️ You can now preorder it at www.simonandschuster.com/books/Deep-U....
Cover of my new book, Deep Unlearning: The Rise of AI and The Radicalization of a Tech Idealist. 

There are two concentric circles in the book, the left being circuits in black an white, and the right being a bunch of dots with orange accents. The cover background is cream. And the words are written in black except for "Un" which is in orange.
732158755
boneskull @boneskull.dev · 20/08/2026
today I switched from vivaldi to firefox bc of chromium dropping manifest v2. don’t love it, but guess it’s good enough
210
Reposted by boneskull
James Sumners @james.sumners.info · 08/04/2026
I have debated releasing this for several days, but have ultimately decided that I'm okay with putting it out there. I have revised it to be a bit tamer, but 🤷‍♂️ Basically: stop treating open source as if it is a private org selling a product with a guarantee of safety. jrfom.com/posts/2026/0...
jrfom.com
Open Source & Security
There is a GitHub user (LLM?) that is reporting a lot of “security vulnerabilities” as open issues. They are mostly trash reports (e.g. “if you pass Object.prototype to the setFooOnObject function, it...
1102
Reposted by boneskull
U.S. Consumer Product Safety Commission @cpsc.gov · 19/08/2026
GTA 6 leak reveals you need to change your smoke alarm batteries every year.
941363
boneskull @boneskull.dev · 19/08/2026
I need a new blog. I was using ghost years ago but would rather just go static site gen. probably publish to GH pages. what are people using for this nowadays? maybe a good astro template or smth?
100
Reposted by boneskull
Mateusz Burzyński @andarist.bsky.social · 11/08/2026
Changesets v3 is here! 🦋 After months of chipping away at issues alongside @bluwy.me, @haglund.dev, and many other contributors, we’re excited to finally share it. changesets.dev/blog/announc...
changesets.dev
Announcing Changesets v3 | Changesets
A tool to manage versioning and changelogs with a focus on monorepos
812228
boneskull @boneskull.dev · 08/08/2026
@lu.is long time no chat. can I dm you?
100
boneskull @boneskull.dev · 08/08/2026
Why is there no such thing in #nodejs as a "conditional subpath import"? Only conditional subpath exports? Technical reason? Use-cases are few? Nobody bothered?
120
boneskull @boneskull.dev · 06/08/2026
github is pissing me off. what kind of institutional rot enables so much downtime?
010
boneskull @boneskull.dev · 02/08/2026
my kid was asking me about my job. she asked what I do when there’s no more code to write
000
boneskull @boneskull.dev · 02/08/2026
little AVA-like macro implementation for node:test github.com/boneskull/no... not published yet. cc @naugtur.pl
github.com
GitHub - boneskull/node-test-macro: A small utility to create parameterized tests for node:test using "macros"
A small utility to create parameterized tests for node:test using "macros" - boneskull/node-test-macro
020
boneskull @boneskull.dev · 01/08/2026
I’m having a moment of weakness and am considering sending a PR to Node core. grant me the serenity to accept the things I cannot change, etc., etc.
250
boneskull @boneskull.dev · 27/07/2026
my saturday: - wake up at 11a - go back to bed - wake up at 2p - go back to bed - wake up at 5p (don’t bother getting out of bed this time) - wake up at 7:30p - sit around until 2a - go back to bed
000
boneskull @boneskull.dev · 23/07/2026
Lemmy Koopa is not a reference to Lemmy.
000
Reposted by boneskull
James Snell @jasnell.me · 21/07/2026
The Error code property proposal has advanced to Stage 2 ... github.com/tc39/proposa... WHATWG folks have raised an objection based on a potential conflict with DOMException's legacy code property. We'll need to figure that out in order to push further. github.com/tc39/proposa...
github.com
GitHub - tc39/proposal-error-code-property
Contribute to tc39/proposal-error-code-property development by creating an account on GitHub.
2212
boneskull @boneskull.dev · 17/07/2026
this is adorable
070
boneskull @boneskull.dev · 17/07/2026
how many more must die due to GitHub outages?
000
boneskull @boneskull.dev · 16/07/2026
what fresh hell is this github.com/boneskull/gh...
github.com
chore(deps): update actions/setup-go action to v7 (#138) · boneskull/gh-stack@e2ef3e5
A GitHub CLI extension for managing stacked pull requests. - chore(deps): update actions/setup-go action to v7 (#138) · boneskull/gh-stack@e2ef3e5
100
Reposted by boneskull
Ed Zitron @edzitron.com · 15/07/2026
Free newsletter: The OpenAI Bubble, my comprehensive, 15k word thesis about why the AI Bubble and the AI Trade were inflated by OpenAI and can't exist without OpenAI, who will be the victims of the bubble bursting, and how we can stop it from happening again. www.wheresyoured.at/the-openai-bubble/
wheresyoured.at
The OpenAI Bubble
Thanks for reading this week’s free Where’s Your Ed At newsletter. As I said last week, I’m taking the rest of this week off, so there won’t be a premium on Friday. That said, if you aren’t already a ...
11792214
boneskull @boneskull.dev · 15/07/2026
is there a fork of chromium that aims to retain manifest v2 compat?
001
Reposted by boneskull
Pam Spaulding @pamspaulding.bsky.social · 11/07/2026
🔥 "This [Flock Safety] contract is not being renewed because of serious concerns around civil liberties and civil rights issues, particularly around privacy and the data that is being collected from these cameras." — Dean Gialamas, LAPD's chief information officer 🧾 abc7.com/post/lapd-en...
abc7.com
LAPD ending deal with company operating license plate-reading cameras
The LAPD is ending its agreement with Flock Safety, a company that operates surveillance cameras throughout the city.
46845243
boneskull @boneskull.dev · 11/07/2026
NO BILLIONAIRE TAX (seize their assets instead)
010
Reposted by boneskull
Andrew Nesbitt @andrewnez.bsky.social · 01/01/2026
Annoucing git-pkgs, explore the dependency history of your git repositories. git pkgs init git pkgs blame git pkgs history rails git pkgs diff --from=v2.0 git pkgs stats git pkgs why rails git pkgs diff --from=HEAD~10 git pkgs diff --from=main --to=feature nesbitt.io/2026/01/01/g...
nesbitt.io
git-pkgs: explore your dependency history
A git subcommand to explore the dependency history of your repositories.
0274
boneskull @boneskull.dev · 02/07/2026
LET ME RERUN FAILED CHECKS FROM THE PR PAGE, YOU COWARDS
070
Reposted by boneskull
Nicholas C. Zakas @humanwhocodes.com · 29/06/2026
13 years ago today I made the first commit to the ESLint Git repo. It’s hard to believe that this project I cobbled together in my spare time over a couple of weeks is still going strong. I’ve been doing a lot of reflecting over these years and the journey it’s been. A thread.
A birthday cake for ESLint, with candles of 1 and 3 at the top for 13 and the ESLint logo with "Happy birthday" on the side.
3899
boneskull @boneskull.dev · 26/06/2026
goth by birth, dad by choice
140
boneskull @boneskull.dev · 26/06/2026
are certain cats naturally hypoallergenic or what. why am I not erupting in hives? what is happening to my body????
000
Reposted by boneskull
Jordan Harband @jordan.har.band · 19/06/2026
I got really tired of having to manually track down whether a package ships its own types, or has a DefinitelyTyped package, or how that changes over time. so, I made npmjs.com/dt-clean - `npx dt-clean -u` and you'll have the right version of the right DT packages!
npmjs.com
0152
boneskull @boneskull.dev · 20/06/2026
tf is a zizmor anyway. nobody asks these questions and it’s important
001
Reposted by boneskull
naugtur @naugtur.pl · 12/06/2026
📦new supply chain security tool📦 I've published an early version of www.npmx.dev/package/@lav... for testing only. Soon it'll also have a wizard and validator. Opinions it ships will be refined. I'm looking for some initial testing and feedback. Planning a stable release after npm12 is out.
npmjs.com
242
Reposted by boneskull
🦴 archer 🎾 @an.actual.dog · 13/06/2026
ps if you hate pinterest (and google) consider subscribing to @kagi.com which is like google when it’s good and you can ban pinterest from search results. and quora. especially quora.
0154
boneskull @boneskull.dev · 13/06/2026
I looked up the best way to reheat pizza. all the sites unanimously agree I should fling myself into the sun
100
Reposted by boneskull
Joyee Cheung @joyeecheung.bsky.social · 11/06/2026
Today I gave a talk JSNation about the life cycle of ESM in Node.js, how it differs in other environments and the new features that will affect these stages. Slides: github.com/joyeecheung/...
github.com
13812
boneskull @boneskull.dev · 30/05/2026
I’ve barely been using agent skills in the past couple months. I iterate on a plan and build; that gets it done. maybe Opus is just that good at planning. can’t help but wonder if skills are just a devilishly brilliant way to get people to burn more tokens.
110
Reposted by boneskull
The One! The Only! DOCTOR HONK! @thechunch.bsky.social · 29/05/2026
SUBJECT: URGENT TO THE DEVELOPERS OF THE PYTHON LIBRARY CALLED "SHAPELY" EVERY TIME I NEED TO LOOK SOMETHING UP IN YOUR DOCUMENTATION I WIND UP GOOGLING THE PHRASE "SHAPELY PYTHON" AND FEEL LIKE A PERVERT PLEASE CHANGE YOUR LIBRARY'S NAME SINCERELY A MAN WHO IS TRYING TO BE RESPECTABLE
521223120
Reposted by boneskull
naugtur @naugtur.pl · 29/05/2026
There's no reasons left. Go switch your package publishing to staged! And if you have many, consider: lavamoat.github.io/stageclicker/
lavamoat.github.io
Drag this button to your bookmarks bar to save it as a bookmarklet:
011
boneskull @boneskull.dev · 30/05/2026
got #PoE2 on sale. oops
200
boneskull @boneskull.dev · 27/05/2026
thinking about getting the mail this week
020
Reposted by boneskull
Kris 🧙‍♂️ Kowal @kriskowal.com · 26/05/2026
Some more validation for hardenedjs.org: Mythos pen-testing in Firefox was frequently thwarted by frozen prototypes in the host process. hacks.mozilla.org/2026/05/behi...
hardenedjs.org
Hardened JavaScript
What is Hardened JavaScript
23311
boneskull @boneskull.dev · 26/05/2026
if you're interested in #npm staged publishes, check out how github.com/danielroe/uppt by @danielroe.dev does it. (also includes slim Release-Please-esque tooling)
github.com
GitHub - danielroe/uppt: A composite GitHub Action that turns conventional commits into a draft release PR, tags the PR on merge, and stages publishing to npm via OIDC trusted publishing.
A composite GitHub Action that turns conventional commits into a draft release PR, tags the PR on merge, and stages publishing to npm via OIDC trusted publishing. - danielroe/uppt
071
boneskull @boneskull.dev · 25/05/2026
could someone direct me to the closest macheezmo mouse
010
Reposted by boneskull
Alex Elizabeth Byrne McMillan @undeniablyalex.bsky.social · 23/05/2026
YOU’RE LISTENING TO SISYPHUS FM, THE HOME OF NON-STOP ROCK
6085402416196