Soapbox

Opinion and argument. Where I plant a flag on something and defend it.

The junior developer pipeline is collapsing, and the cause is not the thing everyone is blaming. Who is left when the greybeards retire.

Refereeing the memory-safety retrofit argument from someone who ships framework code in both Rust and Go, and likes them for different reasons.

An export-control directive suspended my AI assistant mid-task, which is a useful lesson in what you are actually depending on.

The national vulnerability database is buckling under defunding and volume, which changes what a severity score is actually worth.

Operational telemetry can be personal data, and a web service has no first-run prompt to ask on. So plumbing is not an answer.

Signed but poisoned packages show a signature proves who sent something, not what is in it. Nobody is coming to clean this up for you.

Agentic AI gives senior engineers a lift and juniors a drag, which tempts firms to automate away the entry level entirely.

The cash prize for anything that looked like a finding was the accelerant, and AI only made plausible-looking reports free to produce.