Kissaki

joined 2 years ago
MODERATOR OF
[–] Kissaki@programming.dev 2 points 1 day ago

Great writeup, good argumentation, and excellent sourcing, linking to external resources

[–] Kissaki@programming.dev 3 points 1 day ago (2 children)

Typo on “Free, Open Source Software does not a social movement make.” Presumably “does not make a”?

[–] Kissaki@programming.dev 2 points 2 days ago* (last edited 2 days ago)

uuh, I see Zed's been available for Windows for a month now. That has always been a blocker for me. I'll definitely try it out.

[–] Kissaki@programming.dev 1 points 2 days ago

Yes, forks remain as they are. Yes, the fork network has a shared data repository on GitHub.

Consequently, rewritten history will break history compatibility, possibly requiring manual fixups on forks or work based on it.

[–] Kissaki@programming.dev 5 points 2 days ago* (last edited 2 days ago) (4 children)

I can't currently use VS Code with extensions to check, but you should be able to uninstall or disable Copilot and MCP. When I search for MCP in the settings, I see several settings, some of which can restrict MCP use/start.

Alternatively, maybe you want to try a VSCode fork, like Codium (dunno if they only drop telemetry or some of the Copilot stuff as well now), or an alternative similar IDE, like Geany.

[–] Kissaki@programming.dev 7 points 2 days ago (6 children)

Looks like it's just random commenters taking random guesses because those have happened before.

What is a “repository reset”? One commenter writes:

There was a temporary similar “outage” back in July with rewritten history, apparently something inappropriate was recorded in the repo history they wanted cleaned out. The repo came back after that. I have no idea if this is the same thing, or if they just got tired of maintaining it.

Seems strange to me. You can prep locally and then force-push. I don't see why rewriting history would require taking the repository down.

[–] Kissaki@programming.dev 2 points 3 days ago (1 children)

"Vibe" coders produce code though, right? This is about analysis and issue reports. They didn't produce code.

[–] Kissaki@programming.dev 2 points 3 days ago (1 children)

In what way did they “gamify” their unit tests? You mean through presentation of test state/successes?

[–] Kissaki@programming.dev 1 points 3 days ago (1 children)

I always read the weekly post title and am tempted to write and comment. I've written an entire post before. But then I notice it's in c/cybersecurity - which my work is not in specifically. 😅

[–] Kissaki@programming.dev 2 points 3 days ago

Now if only I had the motivation and commitment to create something similar!

[–] Kissaki@programming.dev 2 points 3 days ago

In my interpretation, the gains will be

  1. Google Store apps will have identities linked, making it harder to mass-produce and mass-publish scam apps
  2. Enabling app installs outside of the Google store will have an additional barrier to combat scammers interactive pressure, maybe a cooldown of 24 hours or something like that
[–] Kissaki@programming.dev 3 points 3 days ago

So they're addressing students and private hobbyists, but not open source and hobbyists willing to publish.

Sounds like it will be a kind of sideloading onto your own devices.

that allows experienced users to accept the risks of installing software that isn't verified

So for F-Droid, a vetting and curating publisher, users will have to go through this expert process. The announcement that activation under pressure will be prevented makes me thing of a time cooldown, like activate now, and it becomes active by tomorrow, 24 hours later.

Scamming is a real problem, and to a degree, it may end up being a good thing. As long as Google does not take this opportunity to push hidden agenda of increasing accessibility and choice, to seize more control not for security but as market and platform strategy.

F-Droid says they don't want to impersonate other projects in order to be able to publish their projects, arguably decreasing security, which is a valid concern. As long as there's a setting to allow this kind of sideloading and the use of F-Droid like before, I guess it is what it is, and may be acceptable.

If only they had started from where they are now. It's plainly obvious there's these kinds of users and use-cases. Did they really need "the community feedback" to learn about everything outside of their primary "linear" users?

3
submitted 5 days ago* (last edited 5 days ago) by Kissaki@programming.dev to c/visualstudio@programming.dev
16
Announcing .NET 10 - .NET Blog (devblogs.microsoft.com)
submitted 5 days ago* (last edited 5 days ago) by Kissaki@programming.dev to c/programming@programming.dev
 

What's new in .NET 10

.NET 10 is a LTS (long term support) release.

With C# 14, F# 10, .NET Libraries, ASP.NET Core, Blazor, .NET MAUI, Entity Framework Core 10, Visual Studio 2026, SDK releases.

 

binfmt_misc (short for Binary Format Miscellaneous) is a Linux kernel feature that allows the system to recognize and execute files based on custom binary formats. It’s part of the Binary Format (binfmt) subsystem, which determines how the kernel runs an executable file.

In 2019, SentinelOne published a two-part analysis describing a persistence technique called Shadow SUID (Part 1, Part 2): Shadow SUID is the same as a regular suid file, only it doesn’t have the setuid bit, which makes it very hard to find or notice. The way shadow SUID works is by inheriting the setuid bit from an existing setuid binary using the binfmt_misc mechanism, which is part of the Linux kernel.

Interestingly, this technique seems to have fallen into oblivion again, as neither MITRE ATT&CK nor the five-part Elastic Security “Linux Persistence Detection Engineering” series mentioned it (the last part here with links to all other parts). As of 2025, however, the technique works wonderfully and would probably be very difficult to detect (see the hunting section later).

 

Central to Copilot Studio’s innovation is its deep integration with .NET, including the use of .NET on WebAssembly (WASM).

This post explores how Copilot Studio utilizes .NET, the benefits realized from platform upgrades, and the resulting performance, cost, and productivity improvements.

Copilot Studio is a low-code experience for creating conversational and autonomous agents, but the runtime executing those agents is based on .NET.

 

Four more days until dotnet 10 release. Are you excited?

I am. There's always a ton of new things, some quite pleasant and exciting to use. C# extension usually have the biggest impact on me. This time, I'm excited for

  • Null-conditional assignment
  • Simple lambda parameters with modifiers
  • field backed properties

Last week I tried/had to try RC2 and assess release notes for changes because [developing and] debugging Blazor WebAssembly in dotnet 9 is bothersome. I wasn't successful in making the switch, but I found a service worker registration bug fix noted with "should also be applied to dotnet 9 projects" which solved the biggest issue for now (deployed app not updating).

I'm still concerned about the Blazor WebAssembly tech complexity and indirection (we're working on an offline-capable website/PWA), but I'm somewhat hopeful dotnet 10 will improve working with and on it a bit.

4
submitted 3 weeks ago* (last edited 3 weeks ago) by Kissaki@programming.dev to c/dotnet@programming.dev
 

Today we are excited to announce the new NuGet.org Sponsorship feature which makes it easier than ever for consumers to recognize and support the authors behind their favorite packages.

Approved sponshorship platforms: GitHub Sponsors, Patreon, Open Collective, Ko-fi, Tidelift, Liberapay

 

Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/

Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.

Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.

Bleepingcomputer:

Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.

 

Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/

Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.

Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.

Bleepingcomputer:

Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.

 

This post marks the successful completion of my Google Summer of Code 2025 project: Complete Build Retooling of jenkins.io. Over the past months, we’ve transformed the Jenkins documentation infrastructure from legacy systems to a modern, performant, and well-organized platform.

view more: next ›