iiinova — where your digital self keeps evolving

Tommy McCormick @jan0ski.net · 07/10/2026

Full circle. Just heard about github.com/golang/go/is... on @fallthrough.fm's "Continue" podcast about notable Go proposals. Now I see how it's even more useful in the context of VMs. Super interesting.

github.com

000

Tommy McCormick @jan0ski.net · 02/10/2026

Your candor and vulnerability at the beginning of the talk, flowing into deep technical expertise and your engaging storytelling was really inspiring. Well done, Nick. Thanks for sharing!

110

Reposted by Tommy McCormick

Erica Windisch @ewindisch.ontological.observer · 29/09/2026

My former boss is currently at Anthropic and hiring. I assume publicly disagreeing with the org won't do me any favors... but neither will quietly allowing cybersecurity to be outlawed. Companies that can't secure their systems are lecturing us on cybersecurity and taking tools from defenders

33010

Tommy McCormick @jan0ski.net · 24/09/2026

Heard a lot of talk about teams favoring monorepos as more effective context management for coding agents. Have folks had success with polyglot build systems like buck2 alongside this paradigm? What about small teams?

010

Reposted by Tommy McCormick

Isaac Corbrey @isaaccorbrey.com · 20/04/2026

If I had to drop @jj-vcs.dev I honestly don't know what I would do with myself. The megamerge workflow is so incredibly powerful for me that my brain short circuits trying to do anything else isaaccorbrey.com/notes/jujuts...

isaaccorbrey.com

Jujutsu megamerges for fun and profit

A practical guide to creating and maintaining powerful megamerge workflows in Jujutsu for faster, conflict-free development.

66920

Reposted by Tommy McCormick

Rust Bytes @rustaceans.bsky.social · 15/09/2026

Rustc now properly garbage-collects finalized incremental compilation sessions, roughly halving query cache size and cutting target directories 27–31%, saving substantial disk space. cc: @charliermarsh

Image:Rustc now properly garbage-collects finalized incremental compilation sessions, roughly halving query cache size and cutting target directories 27–31%, saving substantial disk space.

1623

Reposted by Tommy McCormick

Bryan Cantrill @bcantrill.bsky.social · 13/09/2026

The contagion of fear bcantrill.dtrace.org/2026/09/13/t...

bcantrill.dtrace.org

The contagion of fear | The Observation Deck

1624283

Reposted by Tommy McCormick

P(aul) Frazee @pfrazee.com · 13/09/2026

Let’s try not to confuse AI safety with infra security. If the problem is that the networks are insecure then it seems like we make that the priority. If LLMs are answering “make this website” prompts with “the logical solution is to kill all humans” that’s a separate problem

1626320

Reposted by Tommy McCormick

Dirkjan Ochtman @djc.ochtman.nl · 03/09/2026

PSA: if you depend on Hickory DNS, upgrade now: github.com/hickory-dns/... DNS implementations (not just Hickory) have been hit pretty hard by LLM-assisted vulnerability research.

github.com

Release v0.26.2 · hickory-dns/hickory-dns

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in pars...

33411

Tommy McCormick @jan0ski.net · 13/08/2026

Your Claude: *Does a breakthrough* My Claude: *Tries to guess UUIDs...*

Output from Claude Code saying: "My delete calls used UUIDs I'd guessed from 8-character prefixes — they silently 404'd, which is why the conflict persists. Getting the real IDs:"

020

Reposted by Tommy McCormick

David J. Bianco @davidjbianco.bsky.social · 17/07/2026

HuggingFace got hacked by an AI. What stuck out to me was the guardrail asymmetry. The attacker had no constraints, but HF's response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local models. Another aspect for your IR plans. huggingface.co/blog/securit...

220546

Tommy McCormick @jan0ski.net · 17/07/2026

We should be critiquing the result not the tools. There is excess in being "the machine" at every turn, but criticism should be specific to the *outcomes* of this to be helpful in finding the balance between the two roles.

000

Tommy McCormick @jan0ski.net · 17/07/2026

Lots of disagreements about AI seem to paint LLM users as "the machine" - being required to punch in each and every question or problem they come across. While this is possible - and probably unhealthy - dismissing all LLM use as this mindless behavior is just not anchored in reality.

100

Tommy McCormick @jan0ski.net · 17/07/2026

The questions would vary in difficulty - "the machine" would dominate the complex questions to start, then "the brain" would win handedly at simple arithmetic. "The machine" would get frustrated at the constraint of needing to punch in "2 x 2" before answering. I think about this a lot these days.

100

Tommy McCormick @jan0ski.net · 17/07/2026

In elementary school, my teacher did this exercise with the class where one student was "the machine" and one was "the brain". Both students would compete to answer a series of math questions for which "the brain" had to answer them manually and "the computer" *must* use a calculator.

110

Reposted by Tommy McCormick

Nafnlaus 🇮🇸🇪🇺🇺🇦 @nafnlaus.bsky.social · 17/07/2026

Zig's Basilisk has hatched ;) archive.today/on3H4 @avengingfem.me 😂

1210616

Tommy McCormick @jan0ski.net · 17/07/2026

Saw this in real time and literally couldn’t tell if they were trolling

110

Tommy McCormick @jan0ski.net · 17/05/2026

Normally I'd just reboot to fix any intermittent issues on Ubuntu like sound, printing, bluetooth, etc. Lately, I've sicking Claude on it and end up finding some wild root causes. Chrome was refusing to open and it was determined to be Discord leaking X11 connections. Neat!

A Claude Code terminal window that reads:

"Now try the shortcut. Two underlying things worth knowing for next time:

- Long Discord sessions leak X11 connections until Xorg refuses more clients (your case: 208/256 held by Discord). Killing/restarting Discord fixes it. Worth restarting
it occasionally, or filing/tracking the upstream issue.
- Discord's window-close doesn't quit it — only pkill -9 -f /discord/app- or a real Quit does.

If the shortcut still fails after this, paste the new journalctl --user --since '1 min ago' | grep chrome output and I'll keep digging — but the X-server saturation was the root cause this round."

010

Tommy McCormick @jan0ski.net · 13/05/2026

Of course! It was fun to see how it’s all built and learn more about Illumos in the process.

000

Tommy McCormick @jan0ski.net · 13/05/2026

They have a Helios image build and control plane services all open source, so a few hours following their dev documentation in the Omicron repo on a decently powerful machine would do it. There’s also a video on of their engineers made:

110

Tommy McCormick @jan0ski.net · 12/05/2026

Yeah I got it running (not well) on an old laptop with some tweaks. It definitely needed more resources but it did mostly work. @matthewsanabria.com later posted his guide, which is probably a good place to start if you want to take stab at it: www.youtube.com/watch?v=qwXt...

youtube.com

Running Oxide at Home for Local Development

YouTube video by Matthew Sanabria

1131

Tommy McCormick @jan0ski.net · 29/04/2026

Does anyone actually use OSS ML Ops platforms in production? Something like TensorZero looks interesting unsure if it raises the bar for evals or the like more than just the provider logs themselves

020

Tommy McCormick @jan0ski.net · 28/04/2026

Design.md, Agents.md, Skills.md, Soul.md ... obligatory XKCD

XKCD Comic:
A three-panel black-and-white stick-figure comic titled “How Standards Proliferate (see: A/C chargers, character encodings, instant messaging, etc.).”

Left panel: Text reads, “Situation: There are 14 competing standards.”

Middle panel: Two stick figures talk. One says, “14!? Ridiculous! We need to develop one universal standard that covers everyone’s use cases.” The other responds, “Yeah!”

Right panel: Labeled “Soon.” Text reads, “Situation: There are 15 competing standards.”

010

Tommy McCormick @jan0ski.net · 17/02/2026

Needed a `pkg update` to fix propolis/bhyve since this was a few months old Helios installation, but there was eventual success!

An Oxide ubuntu VM instance showing "running" status

An Oxide serial console showing a prompt for an "ubuntu" user login

020

Tommy McCormick @jan0ski.net · 17/02/2026

Yeah you've basically nailed it. - I adjusted the configs to have just 3 U.2 vdevs, expanded those vdevs from the 20GiB default to 60, reduced the control plane storage buffer from 250GiB to 1 for all, and modified the fleet policy code's `<SERVICE>_REDUNDANCY`constants to have single replicas.

100

Tommy McCormick @jan0ski.net · 17/02/2026

Took quite a while, with a few retries, but got the image uploaded and a VM creating... will be shocked if the thing actually boots

The oxide control plane software showing an ubuntu VM disk image successfully uploaded.

A instance in Oxide showing it is in "starting" status, showing full configuration including 2 vCPUs, 4GB memory, and a local IP.

230

Tommy McCormick @jan0ski.net · 17/02/2026

A bit of pain on this machine (32Gib / 1TB HDD) but fought through some issues with too many service replicas (causing OOMs), slow file-backed vdevs, and resizing zpools to fit everything, but I think we're off

The Oxide control plane software "images" page showing an ubuntu vm image upload in progress

220

Tommy McCormick @jan0ski.net · 17/02/2026

Had an old gaming laptop lying around and managed to get @oxide.computer's platform booted up on it

The inventory page of the Oxide control plane software UI, showing a single machine connected and a URL of "localhost:8080".

5451

Reposted by Tommy McCormick

spooky tail latency @bluespacecanary.bsky.social · 11/02/2026

jj is super powerful if you need it, but tbh I think the pitch is even stronger for non-power users. In 6 months of regular use I've never needed to consult the Deep Tomes to unfuck a repo, and the only time I ended up remotely off the happy path it was a limitation of the underlying VCS, not jj

310212

Reposted by Tommy McCormick

Matt Keeter @mattkeeter.com · 21/01/2026

lol, lmao, etc

screenshot of the Gas Town token price, which spiked on Jan 16 and collapsed days later

912014

Tommy McCormick @jan0ski.net · 14/01/2026

Definitely calling this one the "sig-seven" vulnerability. 🫴 🫴

030

Reposted by Tommy McCormick

Steve Klabnik @steveklabnik.com · 10/01/2026

i think a core beef that i have with a lot of this "automation is bad" sentiment lately is that there is no inherent moral good in laboring the story of humanity is one of invention, where we improve our conditions by building things that help us do more things more easily

3946265

Tommy McCormick @jan0ski.net · 10/01/2026

It’s good practice for when you encounter the occasional human.

130

Reposted by Tommy McCormick

Filippo Valsorda @filippo.abyssdomain.expert · 04/01/2026

Do you have an idle cluster? Can you spare a couple core-years? Help me bruteforce some test vectors for RSA key generation edge cases! Here are the instructions, it's just a matter of running a single self-contained cross-compilable Go binary that will report the results autonomously.

gist.github.com

RSA test vector crowdsourcing instructions

1411032

Reposted by Tommy McCormick

🦅 Dan 🦅 @chase4hof.bsky.social · 09/12/2025

The reason the Eagles didn’t just fly the ring into Mordor is that Kevin Patullo was coordinating their offense

514433

Reposted by Tommy McCormick

Zack Whittaker @zackwhittaker.com · 10/11/2025

Politico is reporting that the breach at the Congressional Budget Office is "ongoing." “Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.

politico.com

Cybersecurity breach at Congressional Budget Office remains a live threat

Library of Congress employees were informed to take caution when emailing the office of the congressional scorekeeper.

10304187

Tommy McCormick @jan0ski.net · 02/11/2025

If you're coming into Atlanta for Kubecon next week and looking to explore outside the conference, reach out! I'm nearby in East Atlanta and happy to recommend some local favorites and/or catch up over a meal or a beverage.

010

Reposted by Tommy McCormick

Simon Willison @simonwillison.net · 21/10/2025

Wrote up my first impressions of ChatGPT Atlas, OpenAI's new browser - I remain unconvinced by the entire category of "browser agents", the security and privacy challenges still feel insurmountable to me simonwillison.net/2025/Oct/21/...

simonwillison.net

Introducing ChatGPT Atlas

Last year OpenAI hired Chrome engineer Darin Fisher, which sparked speculation they might have their own browser in the pipeline. Today it arrived. ChatGPT Atlas is a Mac-only web browser …

812518

Reposted by Tommy McCormick

conputer dipshit @davidcrespo.bsky.social · 08/08/2025

if the presence of hype makes you completely unable to think about reality independent of the hype, that is not resisting hype, it is surrendering to it totally

311225

Reposted by Tommy McCormick

Xe @xeiaso.net · 12/06/2025

It's not you, cloudflare, npm, firebase, and google cloud are all having issues. If you are affected, go touch grass. There's nothing you can do about it.

923247

Tommy McCormick @jan0ski.net · 12/06/2025

Lots of services in all regions now reporting impact due to an IAM issue: status.cloud.google.com/incidents/ow...

status.cloud.google.com

Google Cloud Service Health

010

Reposted by Tommy McCormick

Riley @jbomukti.bsky.social · 12/06/2025

Also seeing issues in us-central1

031

Tommy McCormick @jan0ski.net · 12/06/2025

status.cloud.google.com/regional/ame... No incidents reported, yet...

220