Andrea Giammarchi 🍥

Web, Mobile, IoT: all JS things since 00's - opinions are my own ™
Principal SW Engineer @anacondainc working on OSS stack 🦄

[Andrea Giammarchi 🍥 @WebReflection]

coincident/server on IoT via Raspberry Pi Zero 2 W?

Sure!

https://t.co/XaM7c7dgy4

[Andrea Giammarchi 🍥 @WebReflection]

@Nosredna yeah, I guess my point is that nim, or any other PL not automatically embedded in this AI wave forward, is not a skill anymore, or not a skill at all; maybe Zig but if AI won't ever produce any of those PLs out there, they are effectively dead because not needed ... sad yet true.

[Andrea Giammarchi 🍥 @WebReflection]

apparently agents work like everything is:

* Python for tests/proofs
* JS/TS for Web/BE
* Rust/Go once Python validates &/|| JS works
* Swift on iOS/Apple
* Java/Kotlin on Android
* Qt/Gtk on Linux
* whatever MS uses 🤷

do we need any other programming language at this point?

[Andrea Giammarchi 🍥 @WebReflection]

@IT_unhinged I think the CEO had a point 😅

[⁵⁄₉ @fiveoutofnine]

So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and https://t.co/QlOXb3COq3 went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

[netrunner @plotarmordev]

This week, Drama TensorFold clones voices!

Give it a voice you have permission to use, and it speaks in that voice on your own GPU.

🔊 Meet Tomorrow, my assistant, running on it. Sound on!

https://t.co/uIZLMPTTHj

[Andrea Giammarchi 🍥 @WebReflection]

@matteocollina Has anyone else answered DeepSeek already?

[Mia @MiaAI_lab]

DeepSeek V4.1 Flash 1017 on 2x DGX Sparks

Frontier at home. No limits. 100% Private.

https://t.co/p6Rs3NXdGP

[DeepSeek @deepseek_ai]

🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!

Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.

🔗 https://t.co/JGAik1kgk0

1/4

[Andrea Giammarchi 🍥 @WebReflection]

@thekitze DejaVuln as fallback 🤣

[Andrew Curran @AndrewCurran_]

The Department of Homeland Security is requiring all civilian federal agencies to remove DeepSeek products and 'any third-party services developed using DeepSeek implementations,' and to stop buying them.

[Andrea Giammarchi 🍥 @WebReflection]

@srcbuild that plan is called “sprint” 😉

[Andrea Giammarchi 🍥 @WebReflection]

underrated skill in this AI era: the scrum master!

* definition of done (any AI loop)
* split bigger tasks into incremental milestones (context compaction when needed)
* story points per each task (energy consumption/deliverable ETA)

missing: an automated AI driven kanban board

[Andrea Giammarchi 🍥 @WebReflection]

@srcbuild “Not quite my tempo” … I have massive plan/goal and agents are working incrementally to adjust compaction, what are you talking about? 🤔

[Mia @MiaAI_lab]

Here's how 4 concurrent streams look on DeepSeek V4.1 Flash 1017 running on 2x DGX Sparks.

[Andrea Giammarchi 🍥 @WebReflection]

about the "missing" bit, compaction and STATUS.md theoretically solve that but it's nowhere visually easy to follow on a timeline based board ... anyone that already solved this problem out there? thanks in advance for pointers 👋

[Andrea Giammarchi 🍥 @WebReflection]

TFW your local AI uses Python because it's convenient around math and then it writes all over:

"Python round() is banker's — use floor(x+0.5)"

😅 ... what I love about this approach is that I am both learning but also realizing AI writes way more tests than I could imagine 🤯

[Andrea Giammarchi 🍥 @WebReflection]

@AdamRackis @dhh I think golden sponsors gave him either money or million of tokens so that both mean he has a lot more tokens than average one. Considering how far local AI went though, it feels weird professional developers are still worried about their tokens consumption, imho

[Andrea Giammarchi 🍥 @WebReflection]

@MiaAI_lab TFW your only OC agent is local so you feel for others and yet care not nearly enough for yourself 😅

[OpenCode @opencode]

We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users

We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked

The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate

[Andrea Giammarchi 🍥 @WebReflection]

if context is needed, around flatted, filing issues around it not being JSON compatible is literally written in the README it’s not: it’s like failing issues to PNG je cause it cannot decode JPEG which is an image … I don’t have time for this, I’m afraid