Notes by `dpc`
Bitcoin is under siege, and you should pay attention because your software ecosystem is likely to be next. Bitcoin is first because it is an easy place to search for vulnerabilities and exploiting them can be extremely profitable. Most of its software is public, and a working exploit can move money immediately and irreversibly. The recent COLDCARD hack made the threat impossible to ignore. A…
I recently joined a podcast to talk about my shift from AI skeptic to what I jokingly call “AI psychosis mode.” We discussed building Tau , treating coding agents as powerful tools that demand equally serious safety measures, and why good software architecture matters even more when AI can produce code so quickly. We also touched on boutique software: small, focused tools shaped around their users…
The Slop Side of Code is a pathway to many abilities some consider to be… unnatural. Not much we can do now. Should have stopped or warned him while it was still early. It started so innocently. He was only doing Slop recreationally, in small doses . He thought he could stop at any time... just review every change and you're safe, right? Yeah, right. Now he's gone, and this post is…
There has been lots of chatting about software supply chain security recently, motivated by popular package exploits. Well, I have some relevant news: cargo-crev now supports LLM-assisted code reviews. Go try it! Read on to get more information and background. History # I started working on Crev in 2018. The idea was (is) simple: if each of us (developers) reviewed at least some of our…