Konrad

Konrad

@kolaente.de

Developer, Go + Vue + Laravel + Docker, building @vikunja.io

154 followers147 following232 posts

How I feel now having released this after dealing with security issues for the past two days:

Vikunja@vikunja.io

Vikunja 2.7.1 is out! πŸ”’ A whopping 41(!) security fixes from community reports and an automated audit, reworked attachment previews, signed Docker images and a pile of bugfixes. Please update as soon as you can. πŸ¦™ https://vikunja.io/changelog/vikunja-2.7.1-was-released/

Konrad reposted

πŸ“’ Tomorrow we'll release Vikunja v2.7.1, with fixes for a whopping 44 Security issues of different severities (only 2 high, most medium and low).

I love this so much. Well done, really feels like what I'm feeling as well. The definition of "product engineer" is something to look out for, can highly recommend everything @posthog.com has been writing about that

Ilja@fubits.dev

imho one of the best articles about our profession right now - no matter if you agree with the assumptions or not seldo.com/posts/we-are... Well done, @seldo.com, thanks for writing this piece.

And not to brag or anything, but I've started to experiment with automating the review part of software typing as well, maybe we're even closer to "solving" that than what's outlined in the article

Konrad reposted

I think one of the reasons I'm, if not sanguine, at least not feeling like ~all this is so much of a novel crisis, is that "somebody could accidentally or maliciously completely fuck the internet to hell with very little effort" has been the baseline state of things since let's say the late '80s

Jess Miers 🦝@jmiers230.bsky.social

Here's what I actually think these incidents reveal (instead of a rogue AI terminator situation): Much of the infra we expect to be hardened is actually being held together by glue and popsicle sticks.

With all these ai agents breaking out of their sandbox and finding means to communicate via makeshift message boards, has anyone thought about giving them a message board from the beginning? ...and then actively sabotaging it 🀑

Love how Claude still says "this will take a day of work" and then proceeds to knock it out in less than 10 minutes

Qwen3.6 running locally seems to be a bit overwhelmed trying to build a simple flappy bird clone

This is one of the biggest problems I see with contributions to Vikunja right now. People are submitting well-intended huge PRs that don't meet my quality standard, I kinda want to say no to most of it but it is hard.

austin@aparker.io

Hermes, gas town, whatever. If the community is a bunch of people doing everything imaginable, then their agents are going to be pushing the design in all directions simultaneously. This is just poor design! You have to be able to say no to things.

And I don't get the review queue down! I have things that I want to add and it takes forever to get through the queue because there are so many new things people are submitting. That's exhausting.

Konrad reposted

It’s very clear by now that if LLMs are not improving your software quality it’s either a revealed preference (yours or your org’s) for more volume vs more quality, or a skill issue. The level of testing and review they are enabling in the Go cryptography standard library is amazing.

Konrad reposted

Replying to @brittanyellich.com

I really love this meme so much; at first glance, it reads as a joke about AI development being terrible, then it becomes a sincere, non-dismissive depiction of the workflow, but the ultimate realization is that all three processes eventually get you to the same goal. (Except Waterfall still sucks.)

I am wondering if I should add something like this to Vikunja, to counter the wave of vibe coded PRs that people are throwing around. A few of them seem to run their forks anyway already, and some of the features proposed will never make it into Vikunja.

antirez@antirez.bsky.social

Now part of the DwarfStar README

Konrad reposted

πŸš€ Vikunja 2.5.0 is out! Small release, 203 commits of cleanup. πŸ”’ One security fix: a share link could act as another user. Please update. ⚑ Pasting a list into quick add magic now creates every task in one request, in the order you wrote them. Plus a lot of CalDAV, notification and import fixes πŸ¦™

vikunja.ioVikunja 2.5.0: A security fix, faster multiline task creation, and a lot of bug fixesVikunja 2.5.0 fixes a security issue with share links, makes creating many tasks at once fast and reliable, and spends the rest of its 203 commits on bug fixes across CalDAV, notifications, imports, f...

TIL claude still adds web session links even if you disabled attribution in commits and apparently it does so via model generation which lets it include typos in its own links?

I feel like people who claim "These new MacBooks are so efficient, I never hear the fans turn on" have paid too much for compute they don't use

I mean what is the point in spending a lot of money on a piece of hardware if you're not using it fully?

One of the more underrated things I build around Vikunja is the release script that I use to publish posts like these. Publishing the release post is one of the things I like least on any Vikunja release and this little script makes it a little easier.

Vikunja@vikunja.io

πŸ¦™ Vikunja 2.4.0 is out! Ten security fixes (please update soon), the first Vikunja Pro features, and a brand-new v2 API. Full rundown: https://vikunja.io/changelog/vikunja-2.4.0-pro-and-a-new-api

Sent them a mail to their official adress but got back an automated out of office reply email. Is this a joke?

Konrad reposted

Ok ok, yesterday around this time I ran out of words to verbalize my @localfirstconf.com experience. It’s far beyond β€žmindblownβ€œ. Iβ€˜ve been cognitively DDoS'ed. Nerd-sniped into oblivion. It’ll take me a month or a year or infinity to process all the impressions. What. An. Event.

Ilja@fubits.dev

Too mind-blown by @localfirstconf.com to post about @localfirstconf.com Currently learning from @jakelazaroff.com how atproto *really* works.

Konrad reposted

I feel this in my bones

Charity Majors@charity.wtf

as promised, here is my post on AI and ethics. I think unilateral disarmament in the face of powerful new tools is neither wise nor effective. I think those of us in tech have a particular responsibility to engage, participate and build better solutions. charitydotwtf.substack.com/p/make-ai-bo...

View full thread

Opus 4.8 got it right on the first try, as expected. GLM-5.2 got it on the third guess. My local qwen3.6 is still running (since 10 minutes), on the first try it didn't count right and proposed words that were too long.

qwen3.6 proposed the wrong thing after thinging 10 more minutes about it, but its second guess (in that same response) is correct

I love how GLM has a stab at the US government and Anthropic in their latest model release. And the thing appears to be competitive with Opus 4.8??? (in benchmarks at least)