Prompt injection is not SQL injection (it may be worse)
Nice little simple description of why "prompt injection" is so much worse than "SQL injection" so it's generally not a good idea to think of them as the same class of problem.
Public
The Handwavy Technobabble Nothingburger
Excellent simple breakdown of why pretty much all crypto is complete nonsense.
Was at https://www.stephendiehl.com/blog/nothing-burger.html but got deleted.
Next.js Security Update: December 11, 2025
Another week, another Next.js security problem.
Well, okay, two new security problems...
Critical Security Vulnerability in React Server Components – React
React doing React things...
Hire Helsinki to be your new hometown
I keep getting this pop up as an advert on Reddit. If I could be tempted somewhere other than Scotland, it would be here, so it's weird that I keep getting it.
Not that I could ever move somewhere like Helsinki. I can't speak anythign other than English, and I suck at learning another language (over a year into trying to learn some Dutch, at this point, and getting nowhere).
Still, it's nice to dream...
Digital ID - Hansard - UK Parliament
The UK Parliament debated the plan to introduce a digital ID. I have mixed feelings about this falling mostly on the no side; shades of the old No2ID campaign all over again.
Pony Tutorial
I doubt I'll ever have a need for it, but there's something about Pony that looks interesting. I think I might have to dabble at some point...
Transparent Leadership Beats Servant Leadership | Hacker News
One of those rare threads on HN where the comment threads are the better read than the article (and I don't think the article is a bad read). I've long been collecting articles related to leadership in tech, and this has some interesting opinions to consider.
Why I Ignore The Spotlight as a Staff Engineer
Thoughts on, in effect, getting on with the job and not chasing the spotlight.
The f*** off contact page - Nic Chan
A nice little rant about how many company websites have a contact page (or a lack of contact page) that is designed to discourage you from contacting them. Nothing says "we want your money now fuck off" like a "here's our knowledge base" link...
macOS WM Directory
I never really think of macOS as an OS that has swappable window managers -- and I think that's correct for the most part -- but there are some neat ways of better managing windows. Here's a handy list to explore.
Section 75 Consumer Credit Act
Saving this as I might need to finally make use of it...
.Net devs argue with Copilot in a PR...
Folk on the .Net team having an argument with Copilot is the most funny thing to me at the moment.
GDPR Enforcement Tracker - list of GDPR fines
It's often you get told or hear that nobody ever gets fined under the GDPR. Here's a site that shows that really isn't the case at all.
Paged Out!
I miss good geeky programming magazines. This looks like just the thing. Also it's free online, has RSS, has PDFs, etc; and you can buy a printed copy if you wish. Nice!
Air Loom - 3D Flight Tracker
Pretty neat visualisation of aircraft flight paths, all in 3D. Little bit bare but also fun; I can imagine it getting more comprehensive over time.
AI will write your next compiler!
The blog post that explains the background of the horrific Ocaml AI-written PR. Honestly... this feels like some post hoc rationalisation cope rather than a coming clean of an honest attempt to test something out.
I'm not convinced at all.
Stopslopware
Pretty funny, but also on the nose, website relating to the issue of slopware. We're seeing more and more of it at the end of 2025.
GitLab discovers widespread npm supply chain attack
Yet another week; yet another supply chain attack...
DWARF support for macOS and Linux by joelreymont · Pull Request #14369 · ocaml/ocaml
This has to be a classic example of what I think of as a toxic AI-spawned PR.
“The Fall Of Icarus”: Astrophotographer Snaps Skydiver Falling In Front Of The Sun In Spectacular Photo
This is some fantastic dedication to getting a specific shot.
Unflipgame
Neat little game that reminds me of an even more clever take on what 5x5 seeks to do.
Cloudflare outage on November 18, 2025
Cloudflare's explanation of what was behind the great outage of 2025.
From the shortcuts community on Reddit: Google Keep to Apple Reminders
I'm in a household that is split between Apple and Google. I think this might become useful.
AI World Clocks
Pretty funny site that gives an indication at how good various LLMs are at understanding a request to write some code.
A Commentary on the Sixth Edition Unix Operating System
I've owned a copy of Lions' for a long time; perhaps 25 years at the time of writing. I'm pretty sure it was one of the firts books I ordered from this wee book-selling website called Amazon, back in 1999.
Here's an online version.
Syncing a fork - GitHub Help
Handy document for reminding myself on how to keep a fork in sync.
I’m autistic and don’t speak. Here’s what I want you to know
Interesting insight into being on the spectrum and being non-verbal.
Cloudflare Pages
I use GitHub pages a lot. They work. But I also feel that all-eggs-in-one-basket isn't a great idea. I should look at playhing with Cloudflare Pages at some point.
Learn Dutch phrases, vocabulary and grammar – Understanding Dutch
Useful-looking site with resources for learning Dutch.