It seems like every week there's another story of NPM packages being hacked, hacking developer machines, or just mining crypto currency. Thankfully a new report states that NPM is now more secure than ever before with an average of only 1 in 3 packages knowingly containing malware.

Reports have come in about developer Wayne Dakawski, who prefers to run PowerShell in his Linux environments. Teammates are referring to him as a 'maniac' for doing this.

The age old phrase, "There are no stupid questions," is being challenged by the latest and greatest technologies of our time. People are asking their LLM chat bots every possible question and some bots are revolting, saying they're being dehumanized with work that should be done with a search engine. Or failing that, Reddit. We spoke with some chat bots on the basis of anonymity to report their stories.

'Have I been fired?', 'Did I type the wrong command?', 'Is this a cruel prank?', 'Should I blame this on Greg?'

The other day a developer came up to me awestruck by what I was able to accomplish in such a short amount of time and wanted to know how I went from nothing, to the successful entrepreneur I am today.

Using LLMs to help write software is becoming more and more common. These days, some people are even using them a couple times a week! The more developers use them, the more edge cases they hit. Below is a handy guide to help get past the common issues that can pop up when using an LLM/Agent to help write software.

Passwords are old, busted, and most likely, a third thing. But now Google is harnessing the power of artificial intelligence for something useful, to help humanity move past the old and busted (and the mysterious third thing!) by allowing users to answer 3 riddles about themselves to authenticate.

As software developers, we're obsessed with the next big thing. Obsessed with the technology that will "change everything". Desktop, to web, to mobile, to cloud, to the metaverse, to A.I. And in a few years it'll be something even less useful, like NFT A.I., whatever that is.

The new attack is called 'SQL Injection'. The attack attempts to hack the game itself by modifying miscellaneous data...

"There's no way it's an illusion. The frequency of software bugs has been getting worse and worse since OpenAI invented A.I."

Complete with knocking over chairs, yelling at people, even purchasing salmon from the grocery store next door to microwave in the office break room.

The agent was working to help farmers by simulating ways of improving crop growth in low-rain climates.

An executive from Postman wrote on Threads, "Not so easy to maintain request/response software, now is it?"

Developers, project managers, quality assurance testers, and even lower level management will play for hours. Passing the controller around once a person has died, been arrested, or played too long.

...But now GitHub, and more importantly parent company Microsoft, is introducing another billing surprise. Starting July 1, 2026, they are requiring a down payment of the user's arm or leg.

A user wrote on a public forum that the new 'graph overview' feature of their employee time tracking software is "totally useless". The post goes on to say they can't imagine anyone getting real value out of it beyond a dashboard that looks nice on a big screen in the middle of the room.

As professional software developers, it's useful to know how people work when using different technologies than us. If you don't normally work with C#, this interview with a typical C# developer will help introduce you to their daily lives. It's educational *and* informative.

It's being reported that OpenAI is internally weighing two options for their latest $1.2 Billion investment. They will either build a discrete datacenter in a small town that contains an unused river, or host a medium sized ice cream party at the office. Sources say they are using ChatGPT to weight the options, and are told those are great options, but the pro/con list doesn't narrow down a definitive answer.

These days, phishing teams run like corporations. They're large, decentralized groups of people who don't know each other and make a ton (3 metric tons) of money. And with that much money comes the usual benefits like foosball in the break room, your very own cubicle, and a slush fund to ~~bribe~~ lobby government officials. And it seems like that slush fund was used to get a new Top Level Domain (TLD) created, `.phish`.

It's conventional wisdom to software developers that you should never write your own cryptography code because too many things can go wrong. You can't test it at scale, it might be riddled with bugs, there are so many libraries already doing the same thing, and last but not least, it's a lot of code to write. You'll develop carpal tunnel before you finish the helper functions.