Shai Hulud launches second supply-chain attack
The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets, injecting malicious code, and enabling widespread developer-environment takeover.
Leaving Gmail for Mailbox.org
This was a tough decision, having used Gmail since 2007/2008. However, I had to draw the line and stop giving Google my data for free. The problem with email is …
Menstrual tracking app data is gold mine for advertisers that risks women safety
Cambridge researchers urge public health bodies like the NHS to provide trustworthy, research-driven alternatives to platforms driven by profit.
Evidence that AI is destroying jobs for young people
A big nerd debate with bigger implications for the future of work, technology, and the economy
Switching from Pyenv to Uv
Premise The 0.4.0 release of uv does everything I currently do with pip, pyenv, pipx, pip-tools, and pipdeptree. Because of that, I'm in the process of switching to uv. This blog post covers switching
I tried Gleam for Advent of Code
A 12 day Advent of Code year convinced me Gleam is the real deal, thanks to Rust-like errors, great pipes, and surprisingly ergonomic FP.
ARC-AGI without pretraining
We solve 20% of ARC-AGI-1 with no pretraining by minimizing the description length during inference time, with the only data involved being the target puzzle itself.
Arduino published updated terms and conditions: no longer an open commons
The maker community worried Qualcomm would kill the Arduino ethos. New T&Cs confirm the community's worst fears. Here's what's at stake, what Qualcomm got wrong, and what might still be salvaged.
Writing an LLM from scratch, part 13 – attention heads are dumb
A pause to take stock: realising that attention heads are simpler than I thought explained why we do the calculations we do.
Debugging an Undebuggable App
This app has a surprising number of anti-debugging protections. Let's figure out how to bypass them.
Making Postgres slower
As an respectable unemployed person must do, I tried to make Postgres as slow as possible
Why English doesn't use accents
And why French is full of them
Why Self-Host?
Let me make the argument why you should start self-hosting more of your personal services.
Apple Notes Will Gain Markdown Export at WWDC, and, I Have Thoughts
It’s quite gratifying that Markdown has not only become so popular, but after 21 years, continues to grow in popularity, to the point now where there clearly are a lot of people who seemingly enjoy writing in Markdown more than even I do. But I think it would be a huge mistake for Apple to make Apple Notes a “Markdown…
TCP, the workhorse of the internet
What is TCP? This post is an exploration of TCP, the workhorse of the internet. This deep dive includes detailed examples and a step-by-step walkthrough. A simple TCP explanation.
How we rooted Copilot
After a long week, the Eye Security Research Team thought it was time for a small light-hearted distraction. So we rooted Copilot.
GitHub to Codeberg: my experience
In which I talk about the process involved in switching forges, and how well that went.
Writing an operating system kernel from scratch
Exploring a minimal implementation of a time-sharing kernel on RISC-V, implemented in Zig, on top of OpenSBI.
Running Pong in 240 browser tabs
What should you do with your unclosed browser tabs? I ran pong in mine.
I didn't reverse-engineer the protocol for my blood pressure monitor in 24 hours
The personal website of James Belchamber.
The side hustle from hell
11 months in The Side Hustle From Hell
TinyKVM: Fast sandbox that runs on top of Varnish
TinyKVM can be used to sandbox regular Linux programs or programs with specialized APIs embedded into your servers.
Nix – Death by a Thousand Cuts
thoughts, talks, docs and unpopular opinions
Apple unveils new Mac Studio
Apple today announced the new Mac Studio, the most powerful Mac ever made, featuring M4 Max and the new M3 Ultra chip.
Advice for a friend who wants to start a blog
What’s odd about you is what’s interesting.
Ollama Web Search
A new web search API is now available in Ollama. Ollama provides a generous free tier of web searches for individuals to use, and higher rate limits are available via Ollama’s cloud.
Why Android can't use CDC Ethernet (2023)
A detective story with a silly ending