joseph.yaml

functional systems are like a box of chocolates, you never know what you're gonna get

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another researcher skipped coordinated disclosure entirely and dropped a critical 1-click GitHub token theft in public because he doesn't want to deal with MSRC. In his own words: "I really don't want to deal with MSRC on VSCode bugs."

The bug: just clicking a link can hand an attacker a GitHub token that reads AND writes to all your repos, including private ones. It lives in github[.]dev, GitHub's browser-based VSCode editor, which passes the browser an OAuth token that isn't scoped to a single repo. That token can touch everything you can.

Researcher Ammar Askar found that VSCode's sandboxed "webviews" leak keyboard events to the main editor. A malicious repo opened via one link can simulate keystrokes, install a local extension that skips VSCode's publisher-trust check, and exfiltrate your token. He published a working proof-of-concept.

He says when he reports github[.]dev bugs, GitHub tells him they're out of scope and to go report to MSRC, and a prior VSCode bug he reported was silently fixed with no credit. One commenter summed up the mood: "MSRC has turned into Feedback Hub."

[joseph.yaml @zephinzer]

spotify anniversary playlist ain't half bad https://t.co/OFShuuLd3l

[Avid @Av1dlive]

Anthropic's applied AI team just showed how to actually prompt Claude properly.

24 minutes. free. from the people who built it.

watch the workshop. bookmark it.

you've been prompting Claude for months without the 6 elements.

I built a skill that applies them for you. read the guide below.

[Melissa Chen @MsMelChen]

CCP propagandists are trying to drag Singapore🇸🇬 into the row between Japan and China based on recent remarks by Prime Minister Lawrence Wong.

He basically said that Southeast Asia has put history aside and moved forward, and that he hopes China and Japan can do the same and settle their differences amicably.

According to survey after survey, Japan 🇯🇵 has been the most trusted country in the region. They wouldn't have earned this trust if Singapore, Malaysia, the Philippines etc. had clung to historical grievances about the invasion and occupation by the Japanese Imperial Army during WWII.

This trust is built on Japan's consistent post-war role as one of the region's most responsible citizens - supporting economic development and partnership through institutions like JICA and the ADB, maintaining regional stability, and upholding a rules-based order. Furthermore, Japan's soft power - think anime and Nintendo - is unrivaled. Japan has NEVER threatened its neighbors with military coercion in the modern era. Compare and contrast to the situation with China, which has military and territorial disputes with many Southeast Asian nations.

PM Wong merely highlighted this, saying that Japan is a trusted trading and security partner and that he hopes Japan plays a bigger role in the region. It was quite an innocuous remark frankly.

Nevertheless, China seems to have got offended and are mounting a propaganda campaign against Singapore and PM Lawrence, particularly in Chinese-speaking media and on social media.

They are well aware that 75% of Singaporeans are ethnically Chinese and know that some would swallow the CCP's talking points wholesale.

Over the last few days, I have noticed that Chinese state media has made a barrage of posts about Japanese war crimes against other Southeast Asian countries during WWII. Yes it's horrible, and it's important to recognize the truth about what happened. But today's Japan is not Imperial Japan. And what's happening now is an attempt to weaponize history for modern political gains.

If Beijing wants to be taken seriously as a "good neighbor," it should just start acting like one, instead of the spoiled kid in the region who wants everyone to lower their voices while it raises its fists.

[joseph.yaml @zephinzer]

everything comes with a cost. next time something seems "free" to you, consider what the invisible cost is. it's very likely "free" because of privilege or being unaware

[joseph.yaml @zephinzer]

i use chatgpt in my personal work a lot, generated code is good for a starting point but it scares me a little to think about unknowing juniors out there using generated code as-is

[Jane Zhang @jjanezhang]

It's been about a year since my team has fully adopted all the AI coding tools (Cursor, Claude Code)

And day to day I am feeling the added cruft in the code base. Unit tests are not catching regressions. Unneeded mocking, comments, are left in between. More refactoring is needed to add new features.

I find myself sitting down and rewriting files to ensure completeness, correctness, and ease for future developers more than I ever have before.

[joseph.yaml @zephinzer]

some people shouldn't be granted free will

[joseph.yaml @zephinzer]

being based in southeast asia is nice in times like these

[joseph.yaml @zephinzer]

til

[joseph.yaml @zephinzer]

the axe forgets, the tree remembers

[Marc Menninger @MarcMenninger]

🔍 How to Investigate a Phishing Email Like a Pro

You just got a sketchy email. It looks urgent, maybe even legit. One wrong click could mean stolen credentials, malware, or a full-blown security breach.

Before you panic (or click anything), here’s how to break down a phishing email and spot the red flags like a security pro.
🧵

[joseph.yaml @zephinzer]

the system is rotten, all hail the system

[joseph.yaml @zephinzer]

issue #420 and they missed their chance to do something great with it 🌚

[joseph.yaml @zephinzer]

have i overstayed my welcome?

[Mark Manson @Markmanson]

The older I get, the more I realize that success at most things isn't about finding the one trick or secret nobody knows about. It's consistently doing the boring, mundane things everyone knows about but is too unfocused/undisciplined to do.

Get good at boring.

[joseph.yaml @zephinzer]

overly-homogenous groups can bring out the worst in people

[joseph.yaml @zephinzer]

judge a human not by how many friends they have right now, but by how many friends they have lost along the way