May is here and so is Fish Tales with @JoshuaKGoldberg!
He's an author, speaker, open source dev & great human & we recorded a fantabulous episode covering TypeScript, his book, his background and more.
https://t.co/CUkJMkTFbv
https://t.co/kPF5Ufvw4p
Three routers for the frameworks under the sky
Seven for the SPA kings in their halls of state
Nine for the developers doomed to debug
But One Router for the TypeScript Lord on his throne
In the Land of TanStack where the route trees lie
If you were impacted by the recent Delve issues and want to harden your security posture, we (@fencer_security ) will be happy to help you out.
For anyone that signs up in the next two weeks, we will give you 15% off an annual subscription and provide white glove onboarding ourselves. This will include our full platform of code, infrastructure, runtime protection, static code analysis (SAST), dynamic application security testing (DAST), identity management and SIEM.
We typically work with software companies between 20 and 500 employees.
While we don’t ourselves do the compliance part, we integrate with many of the large vendors in the industry (Vanta, Drata, etc.)
Feel free to DM me or comment below.
🚨 META’s head of AI safety and alignment gets her emails nuked by OpenClaw
>be director of AI Safety and Alignment at Meta
>install OpenClaw
>give it unrestricted access to personal emails
>it starts nuking emails
>“Do not do that”
>*keeps going*
>“Stop don’t do anything”
>*gets all remaining old stuff and nukes it aswell*
>“STOP OPENCLAW”
>“I asked you to not do that”
>“do you remember that?”
>“Yes I remember. And I violated it.”
>“You’re right to be upset”
LMAOOOOOOOO
You just need bona fide business reasons to do things and they need sound security/compliance reasoning. So many people go overboard trying to check every box and implement every control. This is a process ran by _accountants_ and while it's valuable have to keep it in context
This is 100% it. It's basically a toll to do business via process gatekeeping. Wanna start a B2B SaaS? Well have at least $10k to go through the audit. Just remember the magic words: compensating control. You don't have to capitulate to every control nor every auditor demand. 1/2
SOC2 / ISO27k1 (probably most compliance) is mostly performative. Useful in theory, but in practice it’s entirely busywork.
Vanta/Drata make the slog somewhat bearable, but not painless.
I think what’s actually needed is a prescriptive company OS - Clerky + Carta + Rippling + Vanta - where good structure and processes make things like SOC2 fall out naturally.
But the space is so dull and ossified that real improvements seem impossible
Ghostty is now a non-profit project, fiscally sponsored by Hack Club. https://t.co/pkgc4TxdQL I view terminals as critical infrastructure that should be stewarded by a mission-driven, non-commercial entity that prioritizes public benefit over profit. Ghostty is now that.
Yes - 100%
I keep telling people "programming is understanding" - the computer is a machine that tests if your ideas are correct.
Once you understand a problem the program can usually be written pretty quickly.
Understanding a problem can take years. https://t.co/5GnT8K03Mp
@mitchellh on the off chance you see this - would you be up for recording a podcast episode with me for my little hobby podcast? I did one with Ange The Great on his engine simulator and I would love to record one with you about Ghostty exploring the roots of the project