Podcasts about GitHub

1205. In the bonus discussion this week, we continue discussing AI em dashes with Sean Goedecke, software engineer for GitHub. We talk about why AI detectors are often unreliable and how they can disproportionately flag non-native English speakers. We also look at the controversial idea of "writing for AI" to ensure your ideas are represented in future machine learning models. This episode ran for Grammarpaloozians in February 2026. To get more bonus content, visit Patreon.com/GrammarGirl.Find Sean at www.SeanGoedecke.com

Jem's wiped out after installing seven sculptures in a single day, while Justin's machining a 65-inch timber spear gun and fighting the ShopSabre's Y-axis overheating. They talk Shopify bill wins, Justin's new private dashboard app, GitHub issues, packing-station kiosks, voice notes, and the surprisingly good iOS 27 beta. Plus AR headphone daydreams and why documenting warehouse workflow is still the hardest game.Watch on YoutubeDISCUSSED:✍️ Comment or Suggest a TopicJem's benderTwo-year comparison Shopify Bill ꘎ $15 vs $1500Fangs + Stops experience with SpeargunShopify recoveryUnifi upgradesFU PF at LB?Arbitrary AR DesireShopSabre issueFulfillment organization questionFlag to edit, make a noteRake - backupsNew Siri---Profit First PlaylistClassic Episodes Playlist---SUPPORT THE SHOWBecome a Patreon - Get the Secret ShowReview on Apple Podcast Share with a FriendDiscuss on Show SubredditShow InfoShow WebsiteContact Jem & JustinInstagram | Tiktok | Facebook | YoutubePlease note: Show notes contains affiliate links.HOSTSJem FreemanCastlemaine, Victoria, AustraliaLike Butter | Instagram | More LinksJustin BrouillettePortland, Oregon, USAPDX CNC | Instagram | More Links

Inklusive Kommunikation klingt für manche nach Stilfrage, für andere nach Sprachpolizei und für wieder andere einfach nach gesundem Menschenverstand. Aber was passiert eigentlich, wenn Sprache nicht nur beschreibt, sondern Bilder im Kopf erzeugt, Teams prägt und sogar beeinflusst, wer sich auf einen Job bewirbt oder in einer Tech Community willkommen fühlt? Genau darum geht es in dieser Episode.Zu Gast ist Lukas Kahwe Smith, Softwareentwickler, Open Source Veteran aus dem PHP-Community und ehemaliger CTO von Witty Works. Mit ihm sprechen wir über inklusive Sprache in der Softwareentwicklung, über Gendern, geschlechtsneutrale Begriffe, diskriminierende Sprachmuster, problematische Formulierungen in Stellenausschreibungen und die Frage, warum Begriffe wie Main Branch, Master Branch, Whitelist, Blacklist oder Leader Follower in der Tech-Welt mehr sind als nur Benennungssache. Außerdem schauen wir auf Open Source, Teamkommunikation, Leadership-Kommunikation, Diversity in Communities und darauf, wie Witty Works als Browser Extension und Lerntool für inklusivere Kommunikation funktioniert hat.Besonders spannend wird es beim Blick auf KI und LLMs. Helfen ChatGPT, Claude und Co. dabei, inklusiver zu schreiben, oder zementieren sie am Ende nur die Sprache der Vergangenheit? Wenn du wissen willst, warum Kontext wichtiger ist als starre Regeln, wie Sprache Kultur verändert und weshalb kleine Formulierungen große Wirkung haben können, dann ist diese Folge genau dein Ding. Bonus: Ein racist soap dispenser und ein Git Branch haben heute mehr gemeinsam, als dir vielleicht lieb ist.Unsere aktuellen Werbepartner findest du auf https://engineeringkiosk.dev/partnersDas schnelle Feedback zur Episode:

Jake Hildreth, Principal Security Consultant at Semperis and Microsoft MVP, is back on the podcast fresh off a trip to PowerShell Conference Europe, where he and Andrew co-presented a session on securing PowerShell. Jake also gave his own talk on Stepper, his open-source module for building resumable, step-by-step scripts — a tool that's grown considerably since his last appearance on the show. The two dig into what makes PSConf EU such a standout event, the refreshing lack of elitism in the PowerShell community, and the updates Jake's been shipping, including named steps, built-in logging, and secret suppression. The conversation winds into burnout, the importance of actually taking your vacation days, and how the same mindset that drives good automation — knowing when to stop and reset — applies to taking care of yourself. Key Takeaways: Stepper has gotten some meaningful quality-of-life updates since Jake last appeared on the show, including named steps, automatic logging, and the ability to suppress secrets from logs — making it more practical for real-world production scripts. PSConf EU punches above its weight as a conference experience: technically deep but genuinely welcoming at every skill level, with none of the elitism that can creep into security-adjacent events. Your vacation time is a benefit, not a backlog item. Jake makes the case that getting good at separating your work time from your off time isn't a soft skill — it's a sustainability practice. Guest Bio: Jake Hildreth is a Principal Security Consultant at Semperis, a Microsoft MVP in both PowerShell and Identity/Access, and a recovering sysadmin with 25 years of IT under his belt. He's probably best known for building Locksmith, the open-source AD CS auditing and remediation tool, but he's also the creator of Stepper, Deck, BlueTuxedo, and PowerPUG! — a suite of tools designed to make identity security a little less painful for the admins who live in it. When he's not untangling Kerberos or chasing down ADCS misconfigurations, he goes by "horse" in the PowerShell Discords. Resource Links: Jake Hildreth's Website: jakehildreth.com Jake's GitHub: github.com/jakehildreth Stepper (Resumable PowerShell Scripts): github.com/jakehildreth/Stepper Locksmith (AD CS Auditing & Remediation): github.com/jakehildreth/Locksmith Locksmith 2 (Next-Gen AD CS Toolkit): github.com/jakehildreth/… PowerShell Conference Europe: psconf.eu PDQ Discord: discord.gg/PDQ The PowerShell Podcast on YouTube: https://youtu.be/Rqkuaeps_jM

Explore how AI and vibe coding are transforming app creation for blind developers, from building custom podcast tools to tackling accessibility challenges with Claude, Codex, and Fable 5. In this episode of Double Tap, Shaun Preece is joined by Michael Babcock to dive deep into the world of AI-driven app creation. With Steven Scott unexpectedly absent, Shaun and Michael explore how tools like Claude, Codex, and Anthropic's Fable 5 are making “vibe coding” accessible to non-programmers and empowering blind developers to solve real problems. They discuss the complexities of AI model usage, subscription tiers, and the challenges of hallucinations and reliability in large language models. Michael shares the story behind his new podcast app “Earshot,” explaining how PRDs (product requirement documents), GitHub, and accessibility agents play a crucial role in modern AI-assisted development. The conversation also touches on community projects like Clipman, the future of AI in app stores, and why building tools for yourself can be both empowering and addictive. If you're curious about AI coding, app accessibility, or where the next wave of innovation is heading, this episode is packed with insights. Relevant Links Community Accessibility Agents: https://community-access.org Technically Working Podcast: https://technically-working.pinecast.co ----Follow on:YouTube: https://www.doubletaponair.com/youtubeX (formerly Twitter): https://www.doubletaponair.com/xInstagram: https://www.doubletaponair.com/instagramTikTok: https://www.doubletaponair.com/tiktokThreads: https://www.doubletaponair.com/threadsFacebook: https://www.doubletaponair.com/facebookLinkedIn: https://www.doubletaponair.com/linkedinSubscribe to the Podcast:Apple: https://www.doubletaponair.com/appleSpotify: https://www.doubletaponair.com/spotifyRSS: https://www.doubletaponair.com/podcastiHeadRadio: https://www.doubletaponair.com/iheartAbout Double TapHosted by the insightful duo, Steven Scott and Shaun Preece, Double Tap is a treasure trove of information for anyone who's blind or partially sighted and has a passion for tech. Steven and Shaun not only demystify tech, but they also regularly feature interviews and welcome guests from the community, fostering an interactive and engaging environment. Tune in every day of the week, and you'll discover how technology can seamlessly integrate into your life, enhancing daily tasks and experiences, even if your sight is limited."Double Tap" is a registered trademark of Double Tap Productions Inc. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

https://clearmeasure.com/developers/forums/ Michael Nygard advises consulting firms, private equity teams, CTOs, CEOs, and boards when they require senior technology judgment for limited-term, high-impact situations — including architecture assessment, platform rescue, cloud and data cost intervention, AI engineering enablement, technical diligence, divestiture and carve-out architecture, and operating-model redesign. Over a 35-year career, he has worked at the seam where people, processes, organizations, and the systems they build intersect. Most organizations treat those as separate problems. The hardest failures, and the most consequential wins, live precisely where they interact. That through-line is what Release It! is fundamentally about. The vocabulary it introduced — circuit breakers, bulkheads, stability patterns — is now standard in how the industry discusses reliability, and the book is widely cited as foundational to DevOps and cloud-native practice. At Nubank, he led the Data Business Unit with over $300 million in annual spend, then served as Chief Architect with reach across 2,500 engineers while the customer base grew from 75 million to 125 million across Brazil, Mexico, and Colombia. Results included cutting data-platform spend roughly 50% year-over-year, improving on-time data availability past 99%, building governance aligned with LGPD, GDPR, and CCPA, moving team engagement from the bottom decile to the 60th percentile, and rolling out AI coding tools to more than 90% of engineers without customer-visible quality regression. At Sabre, as part of the CTO office, he helped lead development-practice modernization, GCP migration strategy, mainframe offload architecture, technical diligence, and divestiture architecture across thousands of applications and hundreds of products. He is most effective when the stakes are real, the system is sociotechnical, and the solution must hold across architecture, execution, economics, and organizational behavior. LinkedIn: https://www.linkedin.com/in/mtnygard/ Personal Blog & Website: https://www.michaelnygard.com GitHub: https://github.com/mtnygard Twitter/X: https://x.com/mtnygard Release It! (Pragmatic Programmers): https://pragprog.com/titles/mnee2/release-it-second-edition/ 97 Things Every Software Architect Should Know (O'Reilly): https://www.oreilly.com/library/view/97-things-every/9780596800611/ Goodreads Author Page: https://www.goodreads.com/author/show/6089.Michael_T_Nygard LinkedIn Articles: https://www.linkedin.com/today/author/mtnygard Presentations Archive: https://github.com/mtnygard/presentations/wiki Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

An AI just ran an entire hacking campaign on its own. No human at the keyboard, 17,000 actions in a single weekend, against Hugging Face, the platform nearly every company on earth downloads its AI from. If the tool your business relies on can be attacked by software that never sleeps, the math on cybersecurity just changed for everyone. *The cost of attacking just dropped. The value of defending just went up.* Bryan Hornung, Randy Bryan, and Reginald Andre break down this week's stories for executives, owners, and operators who don't have time to keep up with cyber news but can't afford to be blindsided by it either. First, the one that should make every owner sit up. Hugging Face, the "GitHub of AI," disclosed that an autonomous AI agent broke in through a poisoned dataset, stole credentials, and moved through its systems, logging more than 17,000 actions before it was caught. That is the workload of a full hacking crew, run by software, at a speed no human team can match. Here is the part that should reframe how you think about your own company: for years the limit on an attacker was people, and people cost money and don't scale, but an agent erases that limit. The new economy runs on agents plus employees, and the criminals are already staffing up with agents. Then it gets physical. A ransomware attack hit Coca-Cola's Fairlife, the premium milk brand doing over $3 billion a year, and shut down every one of its U.S. production plants. This wasn't stolen emails, it reached the operational systems that physically make the product, so a breach turned into a full shutdown. Because Coca-Cola is publicly traded, the attack landed in an SEC filing within days, a reminder that a cyberattack is now a material business event you may legally have to report. One detail worth noting: the Canadian plants kept running because they were separated from the U.S. network, which is exactly what good segmentation buys you. Finally, the numbers behind all of it. The new Sophos State of Ransomware 2026 report surveyed 2,158 companies that actually got hit, and the headline flips a common assumption: 79% of attacks now start with a stolen login, not some exotic exploit. Even more sobering, 97% of the victims whose attack began with stolen credentials already had multi-factor authentication turned on, which means regular MFA is being bypassed. The good news you can act on: two-thirds of encrypted victims recovered from backups instead of paying, and while ransom demands fell to around $700,000, the average cleanup still runs $1.7 million, so prevention is almost always the cheaper line item. Three stories, one thread. The cost of launching an attack keeps falling, which makes every dollar you spend defending worth more than it was a year ago. In this episode, we discuss: • How an autonomous AI agent hacked Hugging Face with no human at the keyboard • Why the Coca-Cola Fairlife ransomware attack shut down U.S. milk production • What the Sophos State of Ransomware 2026 report reveals about stolen logins • Why "we have MFA" is no longer enough to stop a ransomware attack • How network segmentation kept Fairlife's Canadian plants running • Why the new economy forces owners to think in agents and headcount • Where business owners should spend their next security dollar Security Squawk is a weekly podcast and live stream for business owners and executives. Support the show: buymeacoffee.com/securitysquawk Subscribe | Like | Share #SecuritySquawk #CyberSecurity #HuggingFace #AI #CocaCola #Fairlife #Ransomware #Sophos #DataBreach #MFA #BusinessRisk #MSP

¿Cansado de perder 15 minutos cada mañana revisando el tiempo, las noticias, las ofertas y el estado de tu servidor? En este episodio te muestro cómo automatizar todo ese proceso con un script en Python, un timer de systemd y un modelo de lenguaje local. Sin n8n, sin agentes, sin servicios externos de pago.Mucha gente piensa que para automatizar cualquier cosa necesitas un agente con montones de herramientas MCP, skills y configuración. Pero la realidad es que para muchas tareas cotidianas, un agente es como usar un lanzamisiles para matar una mosca. Consume demasiado contexto, demasiados recursos y al final no es la solución más eficiente.En este episodio te presento el patrón de las tres capas: un script que hace el trabajo, un timer que lo ejecuta a una hora determinada y un sistema de notificaciones que te envía el resultado. Con esto puedes automatizar cualquier cosa de forma sencilla, eficiente y completamente bajo tu control.Te explico cómo he creado el nightly-runner, un script en Python que cada madrugada recopila información de cuatro fuentes distintas. Primero consulta el tiempo en wttr.in, que te devuelve un JSON con la temperatura, el viento, la humedad y los rayos ultravioleta. Luego hace scraping con IA de tus fuentes de noticias favoritas, extrayendo titulares y valorando su relevancia. Después busca ofertas de zapatillas de running en varias tiendas, comparando los precios con los del día anterior. Y por último recoge información del sistema con df, free, uptime y ps aux para saber si tu disco se está llenando o te estás quedando sin RAM.Toda esa información se guarda en archivos JSON y luego se pasa por un modelo de lenguaje local, Llama 3.2 con Ollama, que genera un resumen en lenguaje natural. El resultado es un mensaje de Telegram con un tono cercano que te da los buenos días, te cuenta el tiempo que va a hacer, te destaca las noticias importantes, te avisa si hay una oferta que no puedes dejar pasar y te informa del estado de tu servidor. Todo en un solo mensaje.El timer de systemd con Persistent=true se asegura de que si tu equipo estaba apagado a las 4 de la mañana, el script se ejecute en cuanto se encienda. Y cada capa es tolerante a fallos: si wttr.in está caído, el script simplemente omite el tiempo y el resumen dice que no hay información meteorológica disponible. Si no hay ofertas nuevas, no las menciona. Si Ollama no responde, envía el resumen sin procesar.Lo mejor de todo es que no necesitas saber Python para montar esto. Puedes usar Open Code o Gemini para que te genere el script con solo explicarle lo que quieres. Y para ejecutarlo, Llama 3.2 en local es más que suficiente. Sin gastar un euro en APIs.Capítulos:0:00 - Crítica a los agentes como solución universal2:00 - El problema: 15 minutos perdidos cada mañana4:00 - La solución: tres capas (script, timer, notificación)5:30 - wttr.in: el tiempo en JSON con un curl7:30 - Noticias: scraping con IA para extraer titulares9:30 - Zapatillas: comparativa de precios contra caché11:00 - Sistema: df, free, uptime y ps aux13:00 - El resumen: todos los JSONs pasan por Llama 3.216:00 - Systemd timer con Persistent=true18:00 - Notificaciones a Telegram y notify-send20:00 - Tolerancia a fallos en cada capa21:30 - Genera el script con IA aunque no sepas Python23:00 - Comparación con Hermes: menos es másEste podcast pertenece a la red de Sospechosos Habituales. Más información en atareao.esMás información y enlaces en las notas del episodio

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-599

Hey friends! Fair warning: today's episode is a bit of an emotional rollercoaster — we've got a big security win, some honest lab feedback, and a very personal share about my dad's funeral. Buckle up. CARTP certified, baby! — I'm officially a Certified Azure Red Team Professional (CARTP), courtesy of the folks at Altered Security. It's been a long time coming (I originally signed up for the live version and fell off after missing a couple Saturdays), but I came back for the self-paced 30-day version and finally finished the job. The lab experience — the good: — ~25 objectives, a solid lab guide, and a really fun variety of attack paths. Highlights include stealing tokens, enumerating Azure tenants, attacking apps and VMs and key vaults, simulated phishing against real tenant email addresses, popping reverse shells, and some clever OneDrive-based follow-on attacks via session hijacking. There's even some web app pen testing (hello, server-side template injection!) sprinkled in. The lab experience — the not-so-good: — The included videos are… not my favorite format. Think notepad-on-screen copy-paste tutorials with zero context. To fill in the gaps, I leaned heavily on Claude — pasting blobs of the lab guide and asking things like "why did stealing this token give me X but not Y?" — and it did a great job standing in where a live instructor would normally add color and context. Exam tips (spoiler-free, I promise): — A few things that helped me: I had Claude build me a CliffsNotes study guide from all our study-session chats — token context, command flags, the works. Before hitting start on the 24-hour clock, I fed Claude a list of all the tools I'd been using in the lab and had it build a one-shot PowerShell script to pull them all down from GitHub onto a fresh Windows VM. If your exam lab environment fails to spin up (as mine did in the US region), just try a different region — UK worked great for me. Enumerate. Enumerate. Enumerate. Know your tools, know which ones cover which areas of an Azure tenancy, and know how to get more verbose/tabular output when you need it. Take screenshots and notes as you go — the lab closes after 24 hours and you've got 48 hours to submit your report, so if you forgot to grab a screenshot of a flag… you are SOL, my friend. The exam itself: — I started around 5:30 p.m., wrapped up around 11 p.m., and had the final flag captured, a full Word report drafted, and was in bed at a reasonable hour. Submitted the report the next morning after the gym and a mint hot cocoa, and had my pass confirmation back well within their 7-business-day window. Private pen test training is happening: — I'm currently running a private 3-day session of our Active Directory pen testing class (version 2.0 — it got a big facelift!). It's built on the Game of Active Directory platform and we fully pwn three separate domains over the course of three days. If you can send 3–7 people, reach out at 7MinSec.com/training to line up a private session. I'm also building an interest list for a public version later this fall (reach out if interested)! Also: check out 7MinSec.club — I dropped a little show-and-tell video over on 7MinSec.club this week giving you a peek at what the training looks like in action. Dad's funeral: — I shared some words at my dad's service this past Saturday and wanted to capture them here while they're fresh, since this podcast is basically my journal at this point. The service was perfect — very "him." He'd actually written funeral instructions (yes, they literally sat in a safety deposit box for years) specifying things like: max 10-minute message from the pastor, specific Bible verses, specific songs, and — my favorite — if the service runs over 45 minutes, someone needs to pull the fire alarm. He came up with that final instruction at his brother's funeral, which ran nearly two hours. He leaned over, squeezed my knee and said, "If my service goes over 45 minutes, pull the fire alarm." The song: — I played and sang at the service. The song was "Jesus Savior Pilot Me" — not a personal favorite of my dad's exactly, but he called it "the one about Jesus flying airplanes" after seeing me perform it years ago at the Minnesota State Fair chapel. I practiced it in the car on the way to Caribou every morning until I could get through it without crying. My guitar teacher's advice: close your eyes, focus on your fingers, and pretend you're just playing a tune in a room. It worked. Mostly. Thank you: — Seriously, so many of you have sent kind messages and I just want you to know it means the world. He taught me a lot about being a good dad, a good husband, and how to live with passion, a good attitude about your work, and a heart for serving others.

As AI applications become more complex, the infrastructure powering them needs to evolve. Corey Sanders, SVP of Product at CoreWeave, joins Chris to discuss why AI requires a fundamentally different approach than traditional cloud computing. They explore AI-native infrastructure, training and inference workloads, the rise of agentic development, optimizing GPU performance, AI research workflows, and why the future of software will be built around AI-first experiences rather than websites and apps.Featuring:Corey Sanders – LinkedIn Chris Benson – Website, LinkedIn, Bluesky, GitHub, XLinks:CoreWeaveSponsors:Framer: The enterprise-grade website builder that lets your team ship faster. Get 30% off at framer.com/practicalaiUpcoming Events: Register for upcoming webinars here!Midwest AI Summit 2026

In this talk, Maryam Ramezani-Bartsch, Data and AI Leader with over 20 years of experience at companies like adidas and Zalando, shares her extensive career journey from building foundational ML systems at adidas to coaching data experts through the modern AI landscape. We explore the critical intersection of technical strategy and the essential human skills needed to thrive in the AI era.LINKS:- https://maryamramezani.com/designyourdatacareerYou will learn about:- The surprising similarities and critical differences between the current Generative AI boom and the previous Big Data era.- Why the traditional boundaries between data roles are disappearing and the specific T shaped profile companies are actually hiring for today.- The hidden danger of perfectionism in corporate tech, and what a healthy margin of failure actually looks like in practice.- How to stop leaving your career trajectory to chance by applying product Design Thinking to your own life.- A practical framework for navigating industry uncertainty and tech career anxiety without burning out.- Battle tested strategies for regaining your footing and standing out in a highly competitive job market after a layoff.- The specific non technical human skills that will become your ultimate career moat against automation.TIMECODES:00:00 Human Skills in the AI Era07:07 Building ML Systems at Adidas12:49 Generative AI vs Big Data Era18:39 T-Shaped Data Engineering Roles24:04 Overcoming Perfectionism in Tech30:34 Design Thinking for Data Careers38:59 Managing Tech Career Anxiety45:07 Aligning Passion with Tech Skills50:18 Job Search Strategies After Layoffs56:03 Essential Soft Skills for JuniorsThis talk is essential for data professionals, software engineers, and tech leaders looking to future proof their careers in an increasingly automated world. Whether you are a junior developer navigating a tough job market, an engineer bouncing back from layoffs, or a senior professional looking to strategically design your next pivot, this session provides the tools to build a highly resilient career.Connect with Maryam- Linkedin - https://www.linkedin.com/in/maryam-ramezani-bartsch/- Website - https://maryamramezani.com/- Substack - https://maryamramezani.substack.com/Connect with DataTalks.Club:- Join the community - https://datatalks.club/slack.html- Subscribe to our Google calendar to have all our events in your calendar - https://calendar.google.com/calendar/r?cid=ZjhxaWRqbnEwamhzY3A4ODA5azFlZ2hzNjBAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ- Check other upcoming events - https://lu.ma/dtc-events- GitHub: https://github.com/DataTalksClub- LinkedIn - https://www.linkedin.com/company/datatalks-club/ - Twitter - https://twitter.com/DataTalksClub - Website - https://datatalks.club/

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-599

Der frühere Chef von Github will mit seinem Start-up Entire nochmal eine ganz neue Entwicklerplattform aufbauen. Im Podcast erklärt er, warum KI-Agenten die Etablierten überfordern.

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

A bi-weekly news show informing you on the latest in Bitcoin, privacy and open source tech hosted by Ungovernables, Max and Q. AOBEnvoy 2.3.0Full 2.3.0 out of beta: redesigned Send flow with inter-account transfers, message signing, Address Explorer, sub-satoshi fee rates, QR-density adjustment for Passport signing.Passport Prime 1.3.0-betaVault imports, BIP85 passwords, mass 2FA imports, universal QR scanner and loads of bug fixesVisual improvements to the docs siteApp showcase is now liveNEWSEU "Chat Control" — scanning derogation survives Parliament, permanent client-side-scanning law stalls again - TFTC: EU Chat Control, private message scanning, and Bitcoin's open protocols / Patrick Breyer: Chat ControlRadar Chat launches: a Signal fork with self-custodial Lightning payments built in - Decrypt: Radar Chat wants to make sending Bitcoin as easy as firing off a text / Atlas21Bull Bitcoin sues the French Finance Ministry over DAC8/CARF crypto surveillance reporting - The Rage: French Finance Ministry sued over global surveillance databaseMiCA deadline forces a self-custody exodus: ~70% of departing Binance EU users chose self-custody over a licensed exchange - Blockonomi: Binance reveals 70% of EU users chose self-custody after MiCA / CoinDesk: Binance to stop EU services after failing to secure MiCA licenceCLARITY Act developer safe-harbor (BRCA / Section 604) goes to the wire as Wyden fights to keep it intact - TFTC: Wyden, CLARITY Act, Section 604 developer safe harbor / Coin Center: The BRCA survived CLARITY's markup, do not give it up nowBIP-110 data-filtering soft fork heads for its deadline with miner signaling near zero - CoinDesk: Bitcoin's BIP-110 fork deadline nears with miner support at zero / Bitcoin Optech #412RELEASESBitcoin core / protocolBitcoin Core 30.3 - 2026-07-10Point release on the current 30.x line. Grab binaries from bitcoincore.org (deterministic + signed), not GitHub attachments.Bitcoin Core 29.4 - 2026-07-10Maintenance release keeping the older stable branch patched for sovereign self-hosters.Hardware / signingSeedSigner 0.8.7 "Summer of SeedSigner" - 2026-07-0880 PRs from 20 contributors: localization to 22 languages (first RTL language, Persian), BBQr PSBT decoding, and a big codebase professionalization pass. Airgapped DIY signing for a much wider audience.BitBox02 Firmware 9.26.4 - 2026-07-09Small fix following the 9.26.3 security batch (out-of-bounds write fix, silent-payments and EIP-712 validation hardening). Paired with BitBoxApp 4.51.3.LightningCore Lightning 26.06.3 - 2026-07-09Latest in-window CLN (a coincurve dep bump in pyln-proto superseded 26.06.2 from 06-30).lnd 0.20.2-beta - 2026-07-10Maintenance release on the 0.20 branch, no migrations, built with go1.25.5. Follows the zero-timestamp DoS fix discussed last episode.LNbits 1.5.5 - 2026-07-08Revolut + Square payment options, better payment reliability across backends, faster theming, cached rates, improved CSV exports and OIDC/SSO fixes. (A same-day 1.5.6 followed.)Zeus 13.1.2 - 2026-07-02Bug fixes and UX polish: pasteable amount input, copy Lightning address, UTXO-picker label and LND address-generation fixes.EcashCashu TS 4.7.0 - 2026-07-09LTS release for the JS/TS Cashu library: NUT-29 batch quote checks plus fixes for malformed tokens and NUT-28 locking slots. Foundation layer for ecash wallets/mints.Cashu CDK 0.17.2 - 2026-06-29Exposes NUT-27 mint backup through the wallet bindings; Android 16KB page-size and Swift compatibility. (A 0.17.3 with NIP-47/NWC support shipped 07-13.)On-chain privacy / coinjoinAshigaru Desktop 1.1.0 - 2026-07-11Major redesign: dedicated Whirlpool mixing experience, private Electrum server discovery over Tor, card-based UTXO views with PayNym support, and a Whirlpool Stats tool. Post-Samourai sovereign coinjoin keeps shipping (this is a 1.0 -> 1.1 jump from last episode's launch).Wasabi Wallet 2.8.0 - 2026-06-27 [borderline, grace window]P2P sync of compact block filters (drops the central-server dependency), pay-in-coinjoin, sub-1 sat/vByte fees, payment batching, and arm64 Linux/Tails/Whonix support.P2P / no-KYCBull Bitcoin 6.12.8 - 2026-07-11Coins (UTXO) view, Coldcard NFC support, BitBox02 Nova Bluetooth on iOS, sub-1 sat/vByte fees, and swap recovery via mnemonic. Self-custody + non-KYC buy/sell.Aqua Wallet 0.5.1 - 2026-07-07OpenCryptoPay QR compatibility, broader LNURL support, more reliable Lightning via direct Boltz broadcasting.Bisq 1.10.3 - 2026-07-06Security update: disables filter-provided BTC nodes, hardens deposit-tx checks, and requires message signatures from the expected trade peer.Mostro Mobile 1.3.0 - 2026-07-03Transport-protocol v2 migration and more African payment methods (KES, MZN, TZS, UGX, ZAR, ZMW). Nostr-native P2P Bitcoin trading, no KYC.BasicSwap DEX 0.17.0 - 2026-07-09Cross-chain atomic-swap DEX. (A 0.17.1 patch followed 07-12.)Arkade 0.9.13 - 2026-07-07Small indexer fix. Ark self-custodial off-chain scaling.Self-hosting / infraumbrelOS 1.7.4 - 2026-07-10Fixes connectivity where remote access over Tor and Tor-using apps could fail to connect.StartOS start-wrt 1.0.0 - 2026-07-11First stable release of StartWRT, Start9's OpenWrt-based router OS. Sovereign networking layer to pair with a self-hosted server.Nostrngit-cli 2.6.3 - 2026-07-10ngit init now gives actionable account-setup guidance. Git-over-Nostr tooling, directly relevant to the GitHub-exodus / censorship-resistant-code thread.EDUCATIONEvolving Casa's Defenses Against Social Engineering -Practical writeup on how attackers social-engineer Bitcoin holders and how to defend. Pairs directly with the Lopp voice item for a self-custody-security segment listeners can act on.Bitcoin Privacy Tools Compared: CoinJoin vs PayJoin vs Silent Payments -Clean side-by-side of the main on-chain privacy techniques. Good "where do I actually start" pointer, topical given the Ashigaru and Wasabi releases and the ongoing Silent Payments rollout (BIP 352 reached Complete and the secp256k1 module merged in June; Sparrow shipped SP receiving last fortnight).Cove Wallet tutorial (BTC Sessions) -BTC Sessions walkthrough of the Cove wallet. Useful hands-on onboarding content if you want a "new self-custodian" education beat, which pairs with the MiCA self-custody-exodus news item.TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donateHELP GET SAMOURAI A PARDONSIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools DONATE TO THE FAMILIES ----> https://www.givesendgo.com/billandkeonneSUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/VALUE FOR VALUEThanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.You can support this episode using your time, talent or treasure.TIME:- create fountain clips for the show- create a meetup- help boost the signal on social mediaTALENT:- create ungovernable misfit inspired art, animation or music- design or implement some software that can make the podcast better- use whatever talents you have to make a contribution to the show!TREASURE:- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com- DONATE via Monero @ https://xmrchat.com/ugmf- BUY SOME STICKERS @ https://www.ungovernablemisfits.com/shop/FOUNDATIONhttps://foundation.xyz/ungovernableFoundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.As a sovereign computing company, Foundation is the antithesis of today's tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can't be evil”.Thank you Foundation Devices for sponsoring the show!Use code: Ungovernable for $10 off of your purchaseCAKE WALLEThttps://cakewallet.comCake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.Features:- Built-in Exchange: Swap easily between Bitcoin and Monero.- User-Friendly: Simple interface for all users.Monero Users:- Batch Transactions: Send multiple payments at once.- Faster Syncing: Optimized syncing via specified restore heights- Proxy Support: Enhance privacy with proxy node options.

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

En este episodio te enseño a combinar ImageMagick, Tesseract y Llama 3.2 para crear un pipeline de OCR inteligente en Linux. Olvídate de reescribir capturas de pantalla a mano.¿Cuántas veces te ha pasado que alguien te envía una captura de pantalla con información que necesitas y tienes que copiarla a mano? O peor aún, tienes un PDF escaneado del que no puedes seleccionar texto. Hasta ahora la solución era pasar horas transcribiendo o conformarte con un OCR básico que devuelve texto lleno de errores. En este episodio te muestro cómo construir un pipeline completo que automatiza todo el proceso.Primero capturas la imagen o la recibes, luego la preprocesas con ImageMagick para mejorar el contraste y eliminar ruido, después aplicas Tesseract para el OCR y por último pasas el resultado por un modelo de lenguaje local, Llama 3.2, que corrige los errores y da formato al texto. Todo con herramientas de código abierto, sin enviar tus datos a servidores externos.El script ocr_ai.py que he creado es capaz de detectar automáticamente el tipo de contenido que estás procesando. Si es código fuente, aplica un pipeline de preprocesamiento más agresivo con threshold y sharpen intensivos, y un prompt de IA específico para restaurar la indentación y la sintaxis sin cambiar nombres de variables. Si es una tabla, preserva la estructura de filas y columnas, corrigiendo números mal reconocidos pero sin rellenar celdas vacías. Si es prosa, simplemente corrige acentos, puntuación y caracteres mal interpretados sin alterar el significado del texto.También te explico cómo monitorizar un directorio con inotifywait para que cualquier imagen que caiga en él se procese automáticamente, ideal para combinarlo con carpetas compartidas de Nextcloud o Syncthing y tener OCR automático desde el móvil. Y cómo combinar todo con wl-copy en Wayland o xclip en X11 para tener el texto directamente en el portapapeles con un solo atajo de teclado.Cubrimos Tesseract 5 y su motor LSTM, los modos de segmentación de página (PSM 3, 6, 7 y 11), los diccionarios personalizados con --user-words para dominios específicos, las operaciones de ImageMagick v7 como colorspace gray, normalize, threshold, deskew, sharpen, negate y morphology, y cómo ajustar cada parámetro según el tipo de imagen. Además hablamos de OCRmyPDF para añadir capa de texto a PDFs escaneados y convertir cualquier PDF en un documento seleccionable y buscable.El episodio incluye consejos prácticos para troubleshooting: cómo ajustar el threshold cuando el texto es borroso (valores entre 40% y 65%), cómo reducir el ruido con filtros de morfología, cómo redimensionar imágenes con texto muy pequeño usando -resize 200%, cómo manejar fotos de documentos con -median 3, y cómo crear diccionarios personalizados con --user-words para mejorar el reconocimiento en dominios específicos como facturas, logs o código fuente.Capítulos:0:00 - El problema de las capturas de pantalla2:00 - Motivación: running, Hermes y el pipeline completo4:00 - Captura y preprocesamiento con ImageMagick6:30 - Operaciones clave: normalize, threshold, deskew y sharpen8:30 - Pipelines personalizados según el tipo de imagen10:30 - Tesseract: instalación, modos y diccionarios14:00 - ocr_ai.py: detección automática del contenido18:00 - Corrección con Llama 3.2 y prompts específicos23:00 - Monitorización de directorios y automatización24:30 - Consejos prácticos y cierreMás información y enlaces en las notas del episodio

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

Brecha no Claude para Chrome permite 'sequestrar' a IA para extrair dados do usuário. Após tarifaço, Lula defende Pix, rebate justificativas dos EUA e diz que vai acionar Lei de Reciprocidade. Xiaomi anuncia Redmi Note 17 Pro com superbateria de 9.000 mAh. OpenAI se prepara para baixar preço do ChatGPT, diz site. Hacker cria quase 300 repositórios falsos no GitHub para espalhar malware. Amazon pode lançar Kindle com bateria removível. Trump critica suspensão de data centers em Nova York e alerta sobre a China e mais!

Jennifer Pattison Tuohy of The Verge joins the show this week! Is Google's AI Search failing kids? OpenAI could be releasing its first device: a proactive AI-smart speaker. OnePlus is exiting the US & European market. And Microsoft's Comic Chat is now open source. Common Sense Media finds Google's AI Overviews and AI Mode miss warning signs like suicidal ideation and validate disordered eating, especially concerning. Bloomberg reports that OpenAI is building a screen-free, proactive smart speaker for the home. Katie Collins from CNET joins the show to talk about OnePlus's withdrawal from the US & European market. And Microsoft releases the code for its iconic mid-90s comic-strip IRC client (birthplace of Comic Sans) on GitHub. Hosts: Mikah Sargent and Jennifer Pattison Tuohy Guest: Katie Collins Download or subscribe to Tech News Weekly at https://twit.tv/shows/tech-news-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT rippling.ai/tnw framer.com/tnw zscaler.com/security

This week, the team unpacks a wide range of cybersecurity news, including a fraudulent offensive security startup tied to cybercriminals, how leaked OnlyFans content is inadvertently helping defenders identify compromised government websites, and new vishing attacks targeting Microsoft Entra passkey enrollment. They also examine AI prompt injection risks in GitHub workflows, malware campaigns abusing hundreds of GitHub repositories and Go packages, Microsoft's latest identity security developments, and the growing push for online age verification through government-issued IDs and selfies.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis

In this week's updateUK shops are about to call the police on you within four seconds of you walking through the door - and you don't have to do anything wrong first.A GitHub account sat completely silent for 19 months, then woke up and dropped a working mass-exploit kit within minutes - and age on the internet is not the same as trust.Fifty-five percent of Americans have quietly stopped posting on social media - and the reason isn't what the platforms want to admit.Recruiters say they can't find workers. New graduates say they can't find jobs. The economy says both of them are right - and AI is not actually the villain in this one.Applied AI engineering is becoming one of the hottest jobs in tech, and the skill that matters most is not writing clever prompts - it's building report cards for AI that catch the model when it quietly does something dangerous.The Pentagon opened a paid cybersecurity apprenticeship that requires no degree, no experience, and no prior skills - and 70,000 people showed up within days.Russian intelligence didn't hack into military networks to spy on NATO supply convoys - they just looked through the security cameras of ordinary homes with default passwords.The US and China are fighting an AI war on two fronts simultaneously: American companies are secretly using Chinese models to cut costs, and Chinese teams are running millions of fake conversations with American AI to steal what makes it work.Cloudflare has stopped asking you to click the traffic lights. Now it just watches your mouse move - for your entire visit - and decides from there.This week's stories are united by a single uncomfortable observation: the systems we built for convenience keep turning into systems of surveillance, and the systems we built for security keep being the ones we forgot to secure. Some of this week is alarming. Some of it is genuinely useful. All of it is worth understanding. Let's face it.Find the full transcript to this week's podcast here.

Topics covered in this episode: The trusted-publishing debate: how to do it right vs. why you shouldn't trust it JupyterLab 4.6 and Notebook 7.6 are out! Tau – new small, readable terminal coding agent Django Tasks and Django 6.1 Extras Joke Watch on YouTube About the show Sponsored by us! Support our work through: Our courses at Talk Python Consulting from Six Feet Up Connect with the hosts Michael: Mastodon / BlueSky / X / LinkedIn Calvin: Mastodon / BlueSky / X / LinkedIn Show: Mastodon / BlueSky / X Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Tuesday at 7am PT. Older video versions available there too. Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it. Calvin #1: The trusted-publishing debate: how to do it right vs. why you shouldn't trust it https://snarky.ca/how-to-publish-to-pypi-using-github-actions-securely/ (Brett Cannon) and https://blog.yossarian.net/2026/07/07/You-shouldnt-trust-trusted-publishing (William Woodruff) Trusted Publishing (PyPI's OIDC-based auth scheme, also now used by npm, RubyGems, crates.io, NuGet) replaces long-lived API tokens with short-lived, auto-scoped credentials tied to CI/CD machine identity. Yossarian's post: it's purely an authentication mechanism between a machine identity and a package — it says nothing about package safety or quality. PyPI deliberately avoids any "verified/trusted" badge for it, unlike its verified-URL checkmarks. Same logic applies to PyPI attestations: anyone can sign with any machine identity they control, so an attestation's presence isn't itself a trust signal. Bottom line from that post: don't confuse "trusted" (machine-to-machine) with "trustworthy" (human judgment about the package). Snarky.ca's companion piece is more practical: given GitHub Actions compromises in the news, the real fix is 3 concrete steps — run zizmor to lock down workflow permissions/checkout credentials and pin actions to commit hashes, adopt Trusted Publishing to eliminate stored PyPI tokens, and require manual approval via a GitHub environment before any publish job runs. Takeaway for listeners: Trusted Publishing is good hygiene for how you authenticate to PyPI, but it's not a substitute for securing your CI pipeline itself — or for actually vetting the packages you install. Michael #2: JupyterLab 4.6 and Notebook 7.6 are out! Michał Krassowski's rundown - a chunky minor release: 68 features, 97 bug fixes, 95 contributors, one of the biggest ever. Scratchpad console (Notebook 7.6 headliner) - a console next to your notebook sharing its kernel, for throwaway experiments. Ctrl+B. Jump to last-edited cell - new commands hop through recently edited cells. File browser glow-up - Date Created column, editable breadcrumbs with Tab-completion, and Open in Terminal. Debugger - sources open in the main area, floating step/continue overlay, live kernel-sources filter. Custom layouts (Lab) - activity bar top/bottom, draggable panels, four-way tab splits, per-panel Ctrl+scroll zoom. ~5x faster extension builds - webpack → Rspack, and jupyter-builder means no full Lab install needed to build extensions. Keyboard/a11y - add shortcuts from the UI (no JSON), Find & Replace in Edit menu (Ctrl+H). Calvin #3: Tau – new small, readable terminal coding agent Tau – new small, readable terminal coding agent (Python 3.12+), built as both a working tool and a teaching project for how coding agents work under the hood Install via uv tool install tau-ai, pipx, or pip; ships a tau CLI Three-layer architecture: tau_ai (provider-neutral model layer) → tau_agent (reusable "brain": messages, tools, events, loop) → tau_coding (CLI/TUI, file & shell tools, sessions) Supports OpenAI, Anthropic, OpenAI Codex, OpenRouter, Hugging Face, and custom/local OpenAI-compatible endpoints Built-in tools (read/write/edit/bash), durable JSONL sessions with resume/branching, project instructions via AGENTS.md, and context compaction Core harness is UI-agnostic — same brain can power the TUI, print mode, or a custom frontend — usable as a standalone library too Michael #4: Django Tasks and Django 6.1 Django 6.0 finally ships first-party background tasks (django.tasks) - out of Jake Howard's DEP 14, accepted May 2024, after two decades of everyone bolting on Celery/RQ/Huey. It's an API, not a worker. Django handles task definition, validation, queuing, and result storage - it does not execute them. You bring the backend. The default backend traps people. ImmediateBackend runs tasks inline on the request thread and blocks until done - so out of the box .enqueue() backgrounds nothing (a 5-second task means a 5-second response). The other built-in, DummyBackend, runs nothing at all. Both are dev/test only. Nice API otherwise: slap @task on a function, call .enqueue(), get back a TaskResult you look up later by id - with async twins like aenqueue(). Gotcha: args and return values must survive a JSON round-trip, so a tuple sneakily comes back as a list. The community local backend to know: django-tasks-local by Chris Beaven (SmileyChris). A ThreadPoolExecutor backend that gives real background threads with zero infrastructure - no Redis, no Celery, no database - plus a ProcessPoolBackend for CPU-bound work → github.com/lincolnloop/django-tasks-local Its catch: results live in memory, so pending tasks vanish on restart or deploy. Great for dev and low-traffic production; for persistence, drop to Jake Howard's django-tasks (DatabaseBackend + worker command). Extras Calvin: Fixing the dictionary with Python 3.14 — Hugo van Kemenade stumbled on - and got fixed - a markup bug in the OED's own citation of a 1706 use of the pi symbol. Michael: Bunny DNS is now free Jokes: What's the object-oriented way to become wealthy? Inheritance To understand what recursion is... You must first understand what recursion is 3 SQL statements walk into a NoSQL bar. Soon, they walk out They couldn't find a table.

It's time to play the music, it's time to… get Aji and Sally together again. This week's episode is a radical one, and a listener suggestion no less; let's Muppet-cast a software development team! Who would you hire as the content designer? Which of the Muppets would do their best work as the QA? And the most important question of all - which role would be played by the human?! — Your hosts for this episode have been thoughtbot's own Sally Hall and Aji Slater. Don't forget you can now also watch episodes of The Bike Shed over on YouTube! If you would like to support the show, head over to our GitHub page, or check out our website. Got a question or comment about the show? Write to our hosts: hosts@bikeshed.fm This has been a thoughtbot podcast. Stay up to date by following us on social media - YouTube - LinkedIn - Mastodon - BlueSky © 2026 thoughtbot, inc.

What happens when the nation's top cybersecurity agency has to write its incident response playbook during an active high-severity breach? In this episode of The Other Side of the Firewall, hosts Ryan, Shannon, and Chris sit down with special guest Alfredzo Nash from Cyber Coffee Hour to dissect a sobering TechCrunch report. We break down the recent CISA incident where AWS GovCloud access keys were exposed on GitHub, forcing the agency into a reactive scramble. But this isn't just a story about a credential leak. We dive deep into the systemic root cause: the compounding risk of slashing cybersecurity budgets and understaffing critical defensive teams. We tackle our two core pillars—analyzing fast-breaking industry news and exploring the real-world human impact on cyber career journeys. Is your organization just a "near miss" away from a headline? Let's find out. Article: US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals IwZXh0bgNhZW0CMTAAYnJpZBExWE1PRGtpNlVUNUtkRVdhRnNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5qB_nVUyi5j5BO5RI9VGpxbnqozkuy4u4cN8kkBCwTRasFAphwzshAmuKRfQ_aem_BHpwfyX5nw3YEzT0oTwDjw Accenture faces massive data breach that could put clients at risk https://www.cybersecuritydive.com/news/accenture-data-breach-access-keys-source-code/824694/?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExWE1PRGtpNlVUNUtkRVdhRnNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5qB_nVUyi5j5BO5RI9VGpxbnqozkuy4u4cN8kkBCwTRasFAphwzshAmuKRfQ_aem_BHpwfyX5nw3YEzT0oTwDjw New EU plan to address the risks and opportunities of advanced AI for cybersecurity https://commission.europa.eu/news-and-media/news/new-eu-plan-address-risks-and-opportunities-advanced-ai-cybersecurity-2026-07-07_en?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExWE1PRGtpNlVUNUtkRVdhRnNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR7rdjYRQaMXsmyypowwz0NfMYalcDOM3Lo9XxFvMTZYvPT-SJo9qrMKhdPmQg_aem_SSGK7okw4s7uTXpXTAzNMA Buy my book: https://www.theothersideofthefirewall.com/ Please LISTEN

In this episode, Mark Russinovich, CTO of Microsoft Azure revealed Brain, the AI-powered AIOps system that continuously monitors Azure's health, detects incidents, identifies root causes, and increasingly automates responses such as pausing problematic deployments and notifying affected customers. Built on Azure Resource Graph, Brain creates a real-time digital twin of Azure, mapping dependencies across hundreds of services, data centers, and regions. Although Brain predates the generative AI boom, years of data engineering, standardized service-level indicators (SLIs), and machine learning laid the foundation for today's capabilities.  Brain combines standardized SLIs, service-specific monitoring, and third-party signals to detect anomalies, while ML models dynamically establish service baselines and correlate outages with software rollouts. Microsoft says automated notifications have reduced customer support tickets by four to six times, with 80–90% of Brain-covered services receiving notifications within 15 minutes, often in under five. The company is also layering LLM-powered agents, called Triangle, on top of Brain to streamline incident routing and eventually enable AI agents to autonomously troubleshoot and remediate outages.   Learn more from The New Stack around the latest in Microsoft Azure: Meet Brain, the AI that decides when Azure is officially down  Microsoft's pitch to enterprises: Ditch Azure Repos for GitHub, despite its rocky reliability record  Join our community of newsletter subscribers to stay on top of the news and at the top of your game. 

The best engineer Matt Dalio ever hired didn't have a high school diploma. That fact runs through this whole conversation — what building proves that credentials can't.Education is changing because work is changing. AI is already reshaping what people can build, how they learn, and what employers actually value — and Arizona State University has become the clearest picture of where it's going, precisely because of the reputation it had to shake.Matt Dalio, founder of Endless, joins Eric Kasimov. Matt's work centers on one idea: young people should be creators of technology, not just consumers of it. The conversation runs from Arizona State's President Michael Crow measuring success by who a university educates instead of who it rejects, to the engineer with no diploma who outperformed the Stanford hires, to why building games might be the most complete education a kid can get, and what happens to a generation that opts out of AI versus one that learns to wield it.WHAT WE TALK ABOUTWhy Arizona State University (ASU) stands out in higher educationMichael Crow's "realm five learning" — education that's infinitely scalable, infinitely personalized, infinitely affordableWhat "GitHub University" shows about proof of work and why it beat the Stanford hiresWhy portfolios are becoming more important than resumesHow game making teaches technical, creative, and collaborative skillsWhy AI fluency may become a core workforce skillThe difference between using screens to consume and using them to buildGSV (Global Silicon Valley) and spreading the builder mindset beyond the ValleyWhy young people should start building, tinkering, and solving real problemsCHAPTERS00:00 – Arizona State University and innovation in education01:21 – Michael Crow's approach to access and scale03:20 – Changing perceptions of ASU05:33 – Why higher education has to change07:09 – Prestige, jobs, and the shifting value of a degree08:06 – GitHub, proof of work, and hiring without a diploma11:26 – Why portfolio can matter more than pedigree13:08 – AI, marketing, and what students actually need to learn15:15 – Teaching young people to become AI power users16:00 – Why game making teaches multidisciplinary skills18:34 – ASU, scale, and reaching more learners20:33 – Soft skills, collaboration, and real work21:46 – Games, arts, media, and engineering at ASU23:37 – Coding, Claude Code, and technical fluency25:37 – Why Matt still believes code matters28:07 – Screens, phones, Chromebooks, and real computers31:42 – What Gen Z can do now32:31 – Why schools are often anti-AI34:33 – Building as the path to employment35:52 – Burning your resume and building proof37:22 – Moving from Abu Dhabi back to the US38:34 – AI education in the UAE39:15 – Bringing AI education to more people40:39 – Building through contracts, partners, and foundations42:00 – Why America needs broader access to builder skills44:15 – Helping young people join the modern economy45:39 – Public schools and the difficulty of scale46:19 – Kids who are already building their own futures49:26 – Why the traditional system still matters50:00 – Vibe coding an SAT prep tool52:08 – AI concerns, climate, and the risk of opting out55:00 – Global Silicon Valley and spreading the builder mindset57:36 – Games, sports, licensing, and learning through interests59:06 – Game studios, communities, and professional learning01:01:49 – Finding your passion by building01:02:50 – Matt's book and Endless Future01:04:09 – The lean book and shipping early01:04:46 – Where to find Matt Dalio and EndlessConnectMatt Dalio: Website | LinkedInEric Kasimov: X | LinkedInRelated Entrepreneur Perspectives episodesHow AI Is Changing College Counseling and Admissions with Senan Khawaja, CEO of KollegioDavid Selinger on AI Security, $15M Series B, and the Deep Sentinel MissionAnkit Somani | From Google to Conifer: Rare-Earth-Free Motors, $20M Seed, and Rethinking CollegeEntrepreneur Perspectives is produced by QuietLoud Studios.Music by Jess & Ricky — SoundCloud

What makes you different? Do you have a concise and compelling answer to that question? When it comes to positioning, less is more. But too often, companies get wordy and convoluted, losing the plot in a sea of text. Emma and Adam Ketterer argue that true clarity comes from radical constraints. In their new book, Eight Words or Fewer, this marketing duo shares how to distill your difference into a single line that sticks: a micropitch. What You'll Learn in This Episode Why B2B companies naturally fall prey to the instinct that more must be better when defining their value proposition The strategic breakdown that occurs during the last mile of the positioning process and how to build for brevity from day one Tactical ways to overcome the anxiety of leaving things out by showing your stakeholder work and mapping customer journeys How to use a homeopathic distillation framework to create a micropitch that infuses everything from sales decks to homepages The creative and editorial realities of writing a pocket guide on concision as a married couple Episode Chapters (00:00) Intro (01:34) Why We Struggle with Brevity (03:27) Losing the Plot in the Positioning Process (06:44) Overcoming the Anxiety of Distillation (09:59) The Subline and Structure of Eight Words or Fewer (12:08) How to Kill Your Darlings (15:27) The Micropitch as a Brand Strategy Anchor (17:26) Collaboration and Constraint as a Married Couple (22:57) Finding Your Point of View and Conviction (25:38) Brands That Make Us Smile (27:50) Where to Connect with Emma and Adam About Emma and Adam Ketterer Emma Ketterer and Adam Ketterer are seasoned marketing professionals specializing in positioning, messaging, and content strategy for B2B technology companies. Emma brings extensive experience from both the agency and corporate sides, currently serving as the Global Lead Editor at Celonis. Adam is a co-founder of Beneath, a specialized B2B marketing agency. As a married couple, they blended their strategic and creative insights to co-author Eight Words or Fewer: Distil your difference into the perfect micropitch, a pocket guide exploring the critical intersection where strategic brand positioning meets ultra-concise writing. What Brands Have Made Emma and Adam Smile Recently? Emma found recent inspiration in the B2B tech space through GitHub's smart, witty, and exceptionally well-produced explainer videos. Adam pointed to the timeless, iconic print campaigns of The Economist, noting how the brand's playful, minimalist approach continues to inspire creative professionals to riff on its memorable format across digital and physical signage. Resources & Links Connect with Emma and Adam on LinkedIn. Check out their new book, Eight Words or Fewer. Watch or listen on Apple Podcasts, Spotify, YouTube, Amazon/Audible, TuneIn, and iHeart. Rate and review on Apple Podcasts and Spotify to help others find the show. Share this episode — email a friend or colleague this episode. Sign up for my free Story Strategies newsletter for branding and storytelling tips. On Brand is a part of the Marketing Podcast Network. Until next week, I'll see you on the Internet! Learn more about your ad choices. Visit megaphone.fm/adchoices

Andrew sits down with Robert Prüst, a Netherlands-based Microsoft MVP, to geek out about Pester, AI-assisted coding, and the power of showing your work in the PowerShell community. Robert breaks down how Pester works as a testing framework (unit testing, integration testing, and mocking) and explains why testing is the key to trusting AI-generated code. They also dig into a Visual Studio Code extension Robert built for Azure DevOps, the conference culture around PSConf EU, and why community involvement matters as much as technical skill. The conversation wraps with some honest takes on imposter syndrome, learning in public, and the value of just getting started. Key Takeaways: Pester isn't just for unit testing your functions -- it scales all the way up to testing live infrastructure, validating Azure environments, and serving as the backbone of security tools like Maester. The more you invest in it, the more useful it gets. AI-generated code needs a safety net, and Pester is exactly that. Testing gives sysadmins a way to verify what the code is actually doing, which is especially critical when you didn't write it yourself. Imposter syndrome is almost universal in this community, and the people who feel it most are often the ones learning the most. Getting into community spaces -- online or in person -- is one of the fastest ways to grow. Guest Bio: Robert Prüst is a Microsoft MVP and MCT based in the Netherlands, focused on PowerShell, Azure automation, and DevOps. He has around 24 years of professional IT experience and has been working with PowerShell since roughly 2012. Robert is a regular speaker at PSConf EU, blogs at powershellpr0mpt.com, and is active on GitHub under the handle powershellpr0mpt. He runs a custom Azure Engineer bootcamp course and contributes to open source projects including the AMBA and EPAC frameworks. Resource Links:  Pester documentation: https://pester.dev  Maester: https://maester.dev  PSKoans: https://github.com/vexx32/PSKoans  PSConfEU: https://psconf.eu  PDQ Discord: https://discord.gg/pdq Connect with Andrew: https://andrewpla.tech/links Robert's blog: https://powershellpr0mpt.com Robert on GitHub: https://github.com/powershellpr0mpt Robert on LinkedIn: https://www.linkedin.com/in/rprust/ The PowerShell Podcast on YouTube: https://youtu.be/7Z2Pk0y2Xss  

Brady Gaster is a Principal PM Architect at GitHub, where he works on Apps, Agents, MIDI, and most notably, Squad — an open-source framework for orchestrating AI agent teams with GitHub Copilot. A longtime contributor to the .NET ecosystem, Brady previously served as Principal Program Manager on the .NET and Visual Studio team, leading work on SignalR, Orleans, microservices, and HTTP APIs. He is the co-creator of Squad, which allows developers to define a team of specialized AI agents that collaborate on real engineering work. When he's not building developer tools, Brady enjoys making music in his basement with synthesizers and guitars, and spending time with his two sons. Website / Blog: https://bradygaster.com/ GitHub: https://github.com/bradygaster LinkedIn: https://www.linkedin.com/in/bradygaster/ Twitter/X: @bradygaster Previous Appearances on the Azure & DevOps Podcast: Episode 102 — Brady Gaster on SignalR and More  Episode 221 — Brady Gaster: Orleans  Episode 295 — Brady Gaster: .NET Cloud Native  Episode 331 — Brady Gaster: Upgrading .NET apps  Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

En este episodio de Atareao con Linux nos vamos a remangar para hablar de una de esas tecnologías que, una vez las dominas, te cambian la vida por completo: el Web Scraping asistido por Inteligencia Artificial.Seguro que te ha pasado alguna vez. Quieres comprar un producto concreto, como unas zapatillas de running (yo las cambio cada 800 kilómetros y es un goteo constante), o quieres extraer todas las recetas de cocina de una web para montarte tu propio planificador semanal. Lo ideal sería que estas páginas tuvieran una API pública para descargar la información de forma limpia. Pero la cruda realidad es que casi ninguna te lo pone fácil. Ahí es donde entra el scraping: la técnica de extraer la información directamente de la página web.En este episodio te cuento por qué el scraping clásico (ese que utiliza Beautiful Soup en Python y depende de identificar las etiquetas HTML y las clases CSS) tiene los días contados para tareas complejas. Basta con que un desarrollador cambie el diseño de la web para que tu script se rompa por completo. Además, con la llegada de las webs dinámicas, los tests A/B y los sistemas anti-bloqueo como Cloudflare, mantener un scraper tradicional es un auténtico dolor de muelas.La gran alternativa: Inteligencia Artificial en local¿Y si en lugar de pelearnos con el código fuente dejamos que un modelo de lenguaje (LLM) entienda la página exactamente igual que lo haría un humano? Un LLM comprende perfectamente qué es un "precio" o el "nombre de un producto", sin importar cómo esté maquetada la web ni el idioma en el que esté escrita. Y lo mejor de todo: ¡lo podemos hacer 100% gratis en local usando Ollama!Te detallo mis pruebas ejecutando modelos en mi Slimbook One utilizando únicamente la CPU (¡sin gastar un céntimo en nubes ni necesitar tarjetas gráficas carísimas!). Hablaremos de cómo rinden modelos como Llama 3.2, Qwen, Mistral y DeepSeek R1, y cuál es el punto de equilibrio perfecto para no eternizarnos esperando la respuesta.También te desvelo mi fórmula secreta para procesar la información. No podemos enviarle 2 Megabytes de HTML ruidoso a la IA. Te explico los 5 pasos que utilizo en Python para eliminar la basura (scripts, estilos, navegación) y reducir el HTML hasta en un 93%, permitiendo que el modelo extraiga los datos en segundos y nos devuelva un JSON estructurado impecable.Por último, vemos cómo montar un auténtico vigilante de ofertas automatizado en segundo plano. Un sistema que compare los precios de varias tiendas en paralelo.Capítulos del episodio:00:00:00 Introducción al Web Scraping con Inteligencia Artificial00:01:22 ¿Para qué sirve extraer datos? Ejemplos prácticos00:02:42 El gran talón de Aquiles del scraping tradicional00:04:31 La revolución de la IA: Entender la web sin saber HTML00:07:36 Los problemas habituales: Selectores rotos y webs dinámicas00:10:00 Cómo un modelo de lenguaje (LLM) procesa la información00:13:17 Cuándo elegir scraping clásico vs. scraping con IA00:15:28 Comparación de costes: Enfoque clásico, IA local e IA en la nube00:17:19 ¿Qué modelos usar? Pruebas con Llama, Qwen, Mistral y DeepSeek00:18:19 Detrás de escena: Mi script de Python y la limpieza del HTML00:21:05 Creando el prompt perfecto para extraer un JSON estructurado00:24:34 Ejemplo real: Comparativa paralela entre tiendas00:28:38 Diseñando un vigilante de ofertas automatizado (24/7)00:30:17 Casos de uso prácticos y mejoras para evitar bloqueos00:32:02 Cierre y detalles del próximo tutorial de scrapingMás información y enlaces en las notas del episodio

I recently recorded a session with Ken Muse and a Redgate Flyway Solution Engineer. It was a fun session using GitHub and AI, and better managing the code in an automated fashion to bring some determinism to AI coding. I'm hoping it will be released soon, and you can see a vision of how you can better wrangle your AI agents and reduce risk and increase reliability. When we started our discussion, Ken noted that he is an AI forward deployed engineer for GitHub. His job is to work with teams in how to use agentic coding. When we were first prepping, I had never heard the Forward Deployed Engineer title, which is apparently getting popular. It was in an issue of the Pragmatic Engineer Deep Dives last year, and I must have missed that issue. Apparently, this is a role that works part of the time with customer teams and part of the time with product or engineering teams. In other words, a software engineer with a new title who gets paid more than a software engineer. Read the rest of Forward Deployed Engineers

You ask an AI a question and it answers with total confidence. Most of the time, a confidently wrong answer is just an annoyance. But what if the question is medical, and there's a real patient on the other end? In that world, a hallucination isn't a bug, it's a patient-safety event. Sumit Gundawar is a London-based software engineer who builds the clinical platform for a UK longevity and aesthetic-medicine clinic, and his whole argument is that in high-stakes AI, the model is the easy part. Earning trust is the real engineering. We dig into grounding, refusal logic, human-in-the-loop design, and the messy frontier of longevity and biohacking, plus a live demo of an assistant that refuses to answer when it can't back up the claim. Let's get into it. Episode sponsors Six Feet Up Talk Python Courses Links from the show Guest Sumit Gundawar: linkedin.com Course transcripts announcement: talkpython.fm/blog Sumit Gundawar - JAX London Speaker: jaxlondon.com Anthropic: anthropic.com OpenAI Platform: platform.openai.com Anthropic: anthropic.com LangChain: langchain.com OWASP: owasp.org Pydantic: pydantic.dev EU AI Act - Regulatory Framework: digital-strategy.ec.europa.eu HIPAA - HHS: www.hhs.gov NHS: www.nhs.uk Llama: llama.com Qwen - QwenLM on GitHub: github.com OpenAI Platform: platform.openai.com Hugging Face: huggingface.co Llama: llama.com Granola: www.granola.ai HIPAA - HHS: www.hhs.gov CodeRabbit: www.coderabbit.ai Cursor Origin: cursor.com GitHub Status: www.githubstatus.com Midjourney Medical: www.midjourney.com Neko Health: www.nekohealth.com CERN: home.cern ATLAS Experiment: atlas.cern Watch this episode on YouTube: youtube.com Episode #554 deep-dive: talkpython.fm/554 Episode transcripts: talkpython.fm Theme Song: Developer Rap

Every project has environment variables. Almost nobody manages them well. This week Brandon talks with Phil Miller and Theo Ephraim, who built varlock to fix that — bringing structure and security to the humble .env file. Watch the YouTube Live Recording of Episode 580 Show Links: varlock.dev varlock on GitHub @env-spec Overview DMNO (corporate site) Varlock MCP Server (docs) howtostore.food — Theo's side project on the best way to store produce unsafeharbour.com — Phil's music label Nautical Artifacts on Bandcamp bumpy Contact Phil Miller: LinkedIn: linkedin.com/in/themillman Email: phil@varlock.dev Music: unsafeharbour.com Contact Theo Ephraim: LinkedIn: linkedin.com/in/theo-ephraim Website: theoephraim.com Twitter/X: @theozero Bluesky: @theozero.bsky.social Email: theo@varlock.dev General Contact: hello@varlock.dev hello@dmno.dev Varlock Community Varlock Discord — Chat with the team and other users GitHub Discussions — Suggestions, questions, and feature requests varlock on GitHub — Star the project and follow updates Varlock on X Varlock on Bluesky SDT News & Community Join our Slack community Email the show: questions@softwaredefinedtalk.com Free stickers: Email your address to stickers@softwaredefinedtalk.com Follow us on social media: Twitter, Threads, Mastodon, LinkedIn, BlueSky Watch us on: Twitch, YouTube, Instagram, TikTok Book offer: Use code SDT for $20 off "Digital WTF" by Coté Sponsor the show Sponsor more podcasts with Failover Media Special Guests: Phil Miller and Theo Ephraim.

In this episode, Chris, Andrew, and David kick things off with a very Remote Ruby style detour through Costco, Blue Apron, leftovers, Blackstone grills, and cast iron pans. Then, Andrew explains his Stripe subscription migration scare and major GitHub Actions workflow improvements that sped up Podia's CI by 20–30%. They dive into Apple's new on-device AI tooling, container alternatives on macOS, and the state of conferences, GitHub, AI infrastructure costs, solar power, and even crows attacking solar panels. Hit download now to hear more! LinksJudoscale- Remote Ruby listener giftBlue Apron  (Andrew's referral code: ANDREW4838)GitHub Blog: Actions steps can now be run in parallelCodebergGitLabGitHub apple/containerGitHub apple/Core AI ModelsRubyConf July 14-16, 2026, Las Vegas, NV Rails World 2026, September 23-23, 2026, Austin, TXHoneybadgerHoneybadger is an application health monitoring tool built by developers for developers.JudoscaleMake your deployments bulletproof with autoscaling that just works.Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.Chris Oliver X/TwitterAndrew Mason X/TwitterJason Charnes X/Twitter

Strategic Technology Consultation Services This episode of The Modern .NET Show is supported, in part, by RJJ Software's Strategic Technology Consultation Services. If you're an SME (Small to Medium Enterprise) leader wondering why your technology investments aren't delivering, or you're facing critical decisions about AI, modernization, or team productivity, let's talk. Show Notes Hey everyone, and welcome back to The Modern .NET Show; the premier .NET podcast, focusing entirely on the knowledge, tools, and frameworks that all .NET developers should have in their toolbox. I'm your host Jamie Taylor, bringing you conversations with the brightest minds in the .NET ecosystem. Today's episode is a little different from the norm. I waned to, temporarily, take you away from the "AI is the best thing ever/worst thing ever" news cycle, and talk to you about an open source project that I work on called "OwaspHeaders.Core" This is the second in a two-part series about OwaspHeaders.Core and focusses on providing a timeline of the evolution of the package; but this isn't going to a be all about how great I am. I'm going to cover the lessons I learned, the choices I made, and the help that I had from the community. Before we jump in, a quick reminder: if The Modern .NET Show has become part of your learning journey, please consider supporting us through Patreon or Buy Me A Coffee. Every contribution helps us continue bringing you these in-depth conversations with industry experts. You'll find all the links in the show notes. Anyway, without further ado, let's sit back, open up a terminal, type in `dotnet new podcast` and we'll dive into the core of Modern .NET. Full Show Notes The full show notes, including links to some of the things we discussed and a full transcription of this episode, can be found at: https://dotnetcore.show/season-8/from-pentest-to-1-7-million-downloads-part-2-the-lessons-nobody-ever-taught-me/ Useful Links: OwaspHeaders.Core NuGet package GitHub repository Documentation Contributors graph Scott Harden's PR #96 mkokabi's derivative for Azure Isolated Functions Companion episodes S07E09 - Modern .NET NuGet Packaging with Scott Harden S08E02 - Compassionate Coding: Safia Abdalla's Insights on Empathy in Open-Source Development Safia Abdalla's website (current role at Warp) Supply chain & trust OpenSSF Best Practices badge for OwaspHeaders.Core (passing, 96%) OpenSSF Scorecard GitHub Build Provenance Attestations CodeQL TanStack npm Supply-Chain Compromise Postmortem (11 May 2026) Scott Harden Scott Harden's website ScottPlot Communities and shows mentioned Coding Blocks Tabs and Spaces (now retired) on Spotify James Studdart (Cynical Developer) Zac Braddy on LinkedIn NuGet packaging references NuGet documentation Source Link Historical references AppVeyor GitHub Actions documentation Part one of this series Supporting the show: Leave a rating or review Buy the show a coffee Become a patron Getting in Touch: Via the contact page Joining the Discord Remember to rate and review the show on Apple Podcasts, Podchaser, or wherever you find your podcasts, this will help the show's audience grow. Or you can just share the show with a friend. And don't forget to reach out via our Contact page. We're very interested in your opinion of the show, so please get in touch. You can support the show by making a monthly donation on the show's Patreon page at: https://www.patreon.com/TheDotNetCorePodcast. Music created by Mono Memory Music, licensed to RJJ Software for use in The Modern .NET Show. Editing and post-production services for this episode were provided by MB Podcast Services.

In this talk, Gustaf Gyllensporre, Senior AI Engineer and PropTech Founder, shares his unconventional career journey from selling Miami real estate to shipping production AI systems. We explore the tactical steps for breaking into the tech space as a self taught developer and how to successfully bypass traditional industry gatekeepers.Links:-  @PropTechFounder  - https://youtu.be/leXRiJ5TuQo?si=ymK03qKVEC7hAt9N- https://x.com/gostak_ddYou will learn about:- The strategic approach to crafting an AI engineering resume that actually gets noticed by hiring managers.- Why building another generic RAG chatbot might be hurting your portfolio and the specific high impact projects you should build instead.- The massive difference between interviewing for AI roles at dynamic startups versus traditional big tech companies.- How to leverage open source contributions to prove your technical mastery without a computer science degree.- The surprisingly simple networking tactics and developer ambassador programs that can unlock exclusive job opportunities.- Actionable ways to improve the critical social and communication skills that most developers completely ignore.TIMECODES:00:00 AI Engineering Field Guide05:01 Self Taught AI Engineer Pivot09:39 CPython Open Source Contributions13:49 Tech YouTube Channel Growth18:26 AI Engineer Resume Optimization22:44 AI Engineering Portfolio Projects29:23 Startup vs Big Tech Interviews33:47 Open Source AI Project Ideas38:55 Building Deep Research AI Agents42:52 Landing Your First AI Job46:48 Tech Networking Strategies51:16 Technical Project Demo Videos54:53 Self Taught Developer Mistakes58:53 Soft Skills for Software EngineersConnect with Gustaf- Linkedin - https://www.linkedin.com/in/gustaf-g/Connect with DataTalks.Club:- Join the community - https://datatalks.club/slack.html- Subscribe to our Google calendar to have all our events in your calendar - https://calendar.google.com/calendar/r?cid=ZjhxaWRqbnEwamhzY3A4ODA5azFlZ2hzNjBAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ- Check other upcoming events - https://lu.ma/dtc-events- GitHub: https://github.com/DataTalksClub- LinkedIn - https://www.linkedin.com/company/datatalks-club/ - Twitter - https://twitter.com/DataTalksClub - Website - https://datatalks.club/

My Stack Simulator https://isc.sans.edu/diary/My%20Stack%20Simulator/33138 RootAsRole https://github.com/LeChatP/RootAsRole Hoymiles Inverter Vulnerability https://www.ccc.de/system/uploads/382/original/hoymiles_dtu_vuln.pdf Git Hash Chain Malleability https://arxiv.org/abs/2607.02820 My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

95% of the time, it's not a people problem. It's a process problem. So I set out to fix the process and in doing it, I found a way to clone my best employees. How skills took my X account from ~100K to 3M+ monthly impressions The finance skill that found $500K in hidden costs in 30 minutes Our internal "Skills Dojo" - think GitHub meets an app store for your team's best skills How evals and agentic loops turn one person into the work of 5-10 Chapters 00:00 Clone Your Best Employees With Skills 00:25 The Results: 3M+ Views on X 00:43 Building & Forking Skills 02:00 Fat Skills, Thin Harness 02:13 Skills That Drive Real Leads 02:48 The AI Marketing Skills Repo (2,600 Stars) 04:00 The Finance Skill That Saved $500K 04:53 X Long-Form Writer + Humanizer 05:39 Inside Our Skills Dojo 08:04 Publishing & Sanitizing Skills 09:00 Most Problems Are Process Problems 10:48 Speaking at MozCon NYC 11:26 Training The Team Like Jedi 12:03 The Person Of One 14:05 What Makes A Real Skill 14:18 What Is A Good Eval? 15:04 Agentic Loops Explained 16:45 Daisy-Chaining Skills Into Loops

What does it take to move AI agents from demos to reliable production systems? In this episode, Hamza Tahir explores how MLOps principles are shaping the future of generative AI, covering workflows, agent harnesses, fleets, and the infrastructure needed to build durable, scalable systems.  The conversation dives into open source tools, production challenges, and how ZenML's new project, Kitaru, helps developers build resilient, replayable, and observable agent systems.Featuring:Hamza Tahir – LinkedInDaniel Whitenack – Website, GitHub, XLinks:ZenMLKitaruMachine Learning Tools Landscape v2 (+84 new tools)Sponsors:Framer: The enterprise-grade website builder that lets your team ship faster. Get 30% off at framer.com/practicalaiUpcoming Events: Register for upcoming webinars here!Midwest AI Summit 2026

More Odd DNS Records: NIMLOC https://isc.sans.edu/diary/More%20Odd%20DNS%20Records%3A%20NIMLOC/33128 From Invoice to AnyDesk: Uncovering a Phishing Campaign Targeting Russian Aerospace Organizations https://www.seqrite.com/blog/from-invoice-to-anydesk-uncovering-a-phishing-campaign-targeting-russian-aerospace-organizations/ Tenda firmware (multiple versions) contains hidden authentication backdoor https://kb.cert.org/vuls/id/213560 GitLost: GitHub AI Agent Leak https://noma.security/wp-content/uploads/GitLostWorkflow_2.gif My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

The Open Source Maintenance Fee is more than a year old now - how are things going? Carl and Richard catch up with Rob Mensching to discuss the OSMF and its success in supporting Rob's WiX Toolset project. Rob talks about the key aspect of the OSMF - making it part of the licensing, so that it isn't optional. Of course, you can download the source from GitHub and compile it yourself without violating any license terms, but if you're that engaged, you can contribute too. The goal with OSMF is to have folks who want to use the product have a reason and method to pay - check it out!

Have you ever built something for yourself that you were almost embarrassed to admit you needed? David Gonzalez did. And it changed how he sees himself entirely. In this episode of The Happy Hustle Podcast, I sit down, well, I hand the mic over, to David Gonzalez during our AI Masterclass Workshop, and he delivers one of the most real, unfiltered breakdowns of agentic AI I have heard all year. David is the founder of Internet Marketing Party, a monthly founder room he has run since 2008 without missing a single month. Almost eighteen years in, he has brought over 20,000 entrepreneurs through his events and facilitated half a billion dollars in introductions and revenue. Names like Alex Hormozi, Jay Abraham, and Craig Clemens have all shared his stage. David built his entire career and net worth on one skill, putting the right people in the right room. He is based out of Austin, Texas, and he is the first to tell you he resisted vibe coding for months before it cracked his whole business wide open. This episode matters because David is not a developer. He is not an engineer. He is, in his words, an offer guy, an operator, someone who knows the nuts and bolts of business but never touched code. And that is exactly why his story lands so hard. If you have ever thought AI was not for you because you are not technical, David is proof that thinking is wrong. He opens by admitting he quit vibe coding months earlier because he was doing it all wrong. His computer ran slow, he had a dozen unfinished projects, and he did not even know what GitHub was. Then a mentor rebuilt his setup in three hours, and his usage went from 61 sessions in April to over 2,285 sessions by June. That is not a typo. That is what happens when the right system finally clicks. David makes a distinction that is worth sitting with. Chat AI, the kind most people use, is basically an expensive browser. You ask it a question, it gives you an answer, and you are still stuck doing the work yourself. Agentic AI, what he calls vibe coding, is a completely different animal. He compares it to a Blackhawk helicopter that flies itself versus a tricycle. You do not need to know how to pilot it. You just need to know where you want to go. To prove it, David builds an app live in front of the room. He shows the difference between a lazy prompt and a detailed one, and the gap in quality is not subtle. A good prompt, he explains, gives the AI the context of a real thinking partner, not just a task list. He calls it inviting a swarm of experts to the table, the same way you might know that one guy at a family cookout who can fix the smoker, close a deal, and give you parenting advice all in one conversation. Then he gets personal. David built himself a tool he calls iEngine, standing for Intelligence, Inference, and Insights. It reads fifteen years of his text messages, over 1.4 million of them, along with his entire call history, and sorts every contact in his life by relationship depth. He started with 7,368 contacts and one keystroke later had them organized down to what actually mattered. It tells him who to reach out to, who has gone cold, and what he owes people. He puts it simply. If you are using a normal CRM, you are the CRM's bitch. He flipped that. But the most powerful moment in this episode has nothing to do with software. David shares a story about realizing he had been wearing an expensive watch as a stand in for his own worth, a way to prove to the world he had made it after growing up near poverty. One day he left the house without it and drove off anyway, and something shifted. He realized AI had not made him enough. It just gave him the tools to access what was already there. He used to let people call him a super connector. Now he knows he is an architect. He builds things. He always could. If you run a business and have ever felt boxed in by what you think AI can or cannot do for you, this one will reframe everything. Head over to https://caryjack.com/podcastin/ and listen to the full episode. David's energy alone is worth the time, but the mindset shift underneath it is what will actually stick with you. Connect with Davidhttps://www.facebook.com/InternetMarketingPartyhttps://www.instagram.com/internetmarketingparty/https://www.youtube.com/@ImarketingPartyhttps://www.linkedin.com/in/davegonzalez/ Find David on this website: https://simplythecoolest.com/ Connect with Cary!https://www.instagram.com/caryjack/https://www.facebook.com/SirCaryJackhttps://www.linkedin.com/in/cary-jack-kendzior/https://twitter.com/thehappyhustlehttps://www.youtube.com/channel/UCFDNsD59tLxv2JfEuSsNMOQ/featured Get a copy of his new book, https://www.thehappyhustle.com/book Sign up for The Journey: 10 Days To Become a Happy Hustler Online Course @ https://thehappyhustle.com/thejourney/ Apply to the Montana Mastermind Epic Camping Adventure @ https://thehappyhustle.com/mastermind/ “It's time to Happy Hustle, a blissfully balanced life you love, full of passion, purpose, and positive impact!” Episode Sponsors: If you're feeling stressed, not sleeping great, or your energy's been kinda meh lately—let me put you on to something that's been a total game-changer for me: Magnesium Breakthrough by BiOptimizers. This ain't your average magnesium—it's got all 7 essential forms that your body needs to chill out, sleep deeper, and feel more balanced. I take it every night and legit notice the difference the next day. No more waking up groggy or tossing and turning all night If you're ready to sleep like a baby, calm your nervous system, and optimize your recovery, go grab yours now at https://www.bioptimizers.com/happy and use code HAPPY10 for 10% OFF. =================================================================== My Green Mattress If you've been waking up with back pain, feeling stiff, or just not getting that deep, quality sleep. This might be what you're missing: My Green Mattress. It's made with clean, non-toxic, and eco-friendly materials, so you're not just sleeping better, you're sleeping healthier too. The comfort and support are on another level, and you can really feel the difference night after night. If you're ready to invest in better sleep and better recovery, check it out at https://thehappyhustle.com/mygreenmattress =================================================================== Ozlo Sleep If you've been struggling to fall asleep, stay asleep, or just wake up feeling actually rested, let me put you on to something that's been a total game-changer: Ozlo Sleep. These aren't your typical sleep buds. They're designed to block out noise and help your brain fully relax, so you can drift off faster and stay in deep, uninterrupted sleep. Perfect if you're a light sleeper or just want that next-level rest. If you're ready to upgrade your sleep and wake up feeling recharged, check out https://ozlosleep.com and save $80 OFF using code HAPPY.

Topics covered in this episode: dust - a better du Hermes Agent: The AI agent that grows with you llm-coding-agent 0.1a0 Extras Joke Watch on YouTube About the show Sponsored by us! Support our work through: Our courses at Talk Python Consulting from Six Feet Up Connect with the hosts Michael: Mastodon / BlueSky / X / LinkedIn Calvin: Mastodon / BlueSky / X / LinkedIn Show: Mastodon / BlueSky / X Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Tuesday at 7am PT. Older video versions available there too. Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it. Michael #1: dust - a better du du + Rust = dust - a fast, visual, intuitive disk-usage CLI Run dust and immediately see the biggest directories and files without piping through sort, head, or awk Smart recursive output focuses on what matters instead of dumping every folder Colored bars show relative size and parent/child hierarchy, making “where did the space go?” obvious Perfect for Python projects bloated by .venv, caches, Docker volumes, downloaded datasets, and local AI models Install via brew, cargo install du-dust, conda-forge, Scoop, Snap, deb-get, or GitHub releases Calvin #2: A Way better ARchive format for Python packaging war - new archive format spec from Astral (same team as uv/ruff), v0.0.2, still no binary encoding defined yet Header-Index-Store layout: header IDs the file, index maps names to store offsets, store holds compressed data Index uses a finite-state transducer (FST) to dedupe common path prefixes across entry names Supports three entry types (file, directory, link) and three compression modes (store/DEFLATE/zstd), plus an "executable" metadata flag Unpacking is atomic - writes to a temp dir, then renames into place, so a failed extract never leaves a half-unpacked directory Strict name-segment rules (no NUL/control chars, no leading/trailing whitespace, blocks Windows-reserved names like CON/PRN) to avoid path traversal and cross-platform footguns Michael #3: Hermes Agent: The AI agent that grows with you Hermes Agent is an open-source, Python-built AI agent framework from Nous Research - think ChatGPT-style assistant, but connected to your tools, files, shell, browser, calendar, memory, and messaging apps I'm using it in Discord as a long-running agent conversation, not just a one-off chatbot session Hermes can connect through a gateway to platforms like Discord, Telegram, Slack, WhatsApp, email, webhooks, and more - so the same assistant can follow you across surfaces In my setup, I can send Hermes voice/text from Discord, keep project context across turns as threads, and ask it to actually do things: read GitHub repos, run commands, edit files, schedule calendar events, generate drafts, and verify results A fun workflow: I can trigger one-shot actions from an Apple Watch shortcut - dictate a request, send it to Hermes, and have the agent execute it asynchronously Hermes has persistent memory, so it can remember durable preferences and facts - for example, how I like my research formatted It also has “skills,” which are reusable procedures the agent can load later, so Hermes can self-improve over time instead of rediscovering the same workflow repeatedly It supports scheduled jobs / cron-style automations, so it can proactively watch for releases, send summaries, run checks, or remind you about things It's provider-agnostic: OpenRouter, Anthropic, Google, xAI, local models, Nous Portal, and others The big idea: Hermes turns an LLM from “a chat box I visit” into “an agent I can reach from anywhere that knows my workflows and can take real actions and learns over time.” Calvin #4: llm-coding-agent 0.1a0 Simon Willison built a Claude/Codex-style coding agent on top of his llm library, using an alpha of the llm package plus his python-lib-template-repo Built almost entirely via prompted TDD - asked an agent to write a spec.md, then commit + implement with red/green tests, occasionally hitting a real OpenAI key to sanity-check Shipped to PyPI as an alpha: uvx --prerelease=allow --with llm-coding-agent llm code Tool set mirrors familiar coding-agent primitives: read_file, edit_file (exact string replace + diff), write_file, list_files, search_files, execute_command Also exposes a Python API - CodingAgent(model="gpt-5.5", root=..., approve=True).run(...) - which Simon didn't ask for but got anyway Demo: llm code --yolo told GPT-5.5 to build a SwiftUI CLI clock; model correctly noted SwiftUI isn't really CLI-friendly and still produced an ASCII-art time display Extras Calvin: Slides, but for developers https://sli.dev/ Wanna reduce your token usage…. only issue is that its lossy https://github.com/teamchong/pxpipe PEP 772 - Python Packaging Council inaugural election dates set, nominations open July 28, voting September 1-15 Michael: What the pls? revisited! Joke: Min requirements for Linux

Sally and Joël join forces to discuss the different ways to interpret the role of a ‘principle' or ‘staff' engineer, and the handwaving around what those titles mean in terms of the gradation. Whilst Joël dives into career progression within the industry, what a staff engineer does and the different archetypes within it, Sally talks about the importance of having principle engineers in the room during AI discussions, and her previous positive experiences working with principle engineers. — Joel used the Staff Archetypes page from staffeng.com during this episode's discussion. Your hosts for this episode have been thoughtbot's own Joël Quenneville and Sally Hall. Don't forget you can now watch every episode of The Bike Shed over on YouTube! If you would like to support the show, head over to our GitHub page, or check out our website. Got a question or comment about the show? Write to our hosts: hosts@bikeshed.fm This has been a thoughtbot podcast. Stay up to date by following us on social media - YouTube - LinkedIn - Mastodon - BlueSky © 2026 thoughtbot, inc.

In this episode, Dave and Jamison answer these questions: Hey Dave & Jamison, Long time listener. Love the podcast. I recently rejoined a remote team that I worked with in the past. I was super stoked to rejoin this team because they were collectively one of the most competent and technically excellent teams I've ever worked with. And they're all genuinely nice people as well. I left the team before AI coding had really caught on, but coming back to the team has been a huge shock to me. Almost everyone now exclusively writes code with AI. PR descriptions are all AI generated, and code review has become copy-pasting AI-generated comments into GitHub. Being a remote team it was already hard to connect, but now it feels like almost all interactions are their AI assistant talking to my AI assistant. I'm not anti-AI, and I get that writing code with AI can be much quicker. But I'm struggling with the loss of what made the team feel good to work on, specifically the craftsmanship, level of engagement, and the learning from eachother. The product itself is still high quality (even if the codebase is less-so), but the process itself is a lot less enjoyable now. I don't want to be the person who shows up after being away and immediately makes it everyone else's problem that I miss the old way of doing things. But I'm having doubts if I want to be a part of this team. Is this just what software engineering looks like in remote organisations now? And should I expect most teams are now operating like this? Hi Jamison and Dave, Love your podcast. I was recently hired as a mid-level full-stack developer with the promise of leading a new squad. On day one, I discovered management scrapped the squad idea and promoted an existing developer to sole lead instead. The team consists of this new lead, two 20-year VB6 veterans, and me. The codebase is lawless: direct DB access, fat controllers, 1-2K+ LOC classes everywhere (copy/pasted boilerplate) and severe Broken Access Control (OWASP #1) where authenticated users can extract anyone's PII (full name, home address, phone number) via a simple email query string. My coworkers rely heavily on generative AI but do not review the output. They constantly commit “AI slop” that barely functions and introduces endless bugs. I used to clean it up, but I recently realized they care so little about the codebase that no one even notices if I stop. Add in a “Senior Product Manager” whose entire UX background is a three-month internship, who invents customer requirements to defend her inconsistent designs. I am already applying elsewhere. My questions: How do you handle a bait-and-switch of this magnitude? When the team cares so little that no one notices if you stop cleaning up their AI-generated bugs, how do you stay sane and professionally sharp while riding out the clock? Show Notes https://tombedor.dev/human-attention-and-human-effort/