Mike Kalvas

Mike Kalvas

@mkalvas.com

I just like learning things

72 followers120 following113 posts

The security of the entire internet was permanently nerfed in a day with these CA and PHP vulns. CA -> IOT boxes that can't or don't update are now trivially MITM'able forever PHP -> all php versions since 2004 on which untold millions of sites/services run and won’t ever upgrade to the fix

View full thread

There's just been too many exploits and there are clearly near infinitely many more out there. This PHP exploit was known by the PHP team since 2024 and wasn't fixed. It's time for us to move on from these broken tools.

The security of the entire internet was permanently nerfed in a day with these CA and PHP vulns. CA -> IOT boxes that can't or don't update are now trivially MITM'able forever PHP -> all php versions since 2004 on which untold millions of sites/services run and won’t ever upgrade to the fix

I feel like we've all had a good chuckle and gone "PHP bad" in good fun at one point in our lives. But I think we're actually getting to the point that all software written in C should be considered an active liability. Especially when you attach it to the internet like most PHP is.

So my month of @jj-vcs.dev turned into a year+ and it’s definitely my full-time, not going back, always using it tool now. I never had a problem with git. It does what I need and I still use it sometimes, but jj is nicer to use. It’s not a wild game changer for me personally but it’s just… better.

Mike Kalvas@mkalvas.com

Think I might make June my “month of jj” and see how it goes

Somehow I only now learned about the `friend` keyword in C++ which would be shocking in any other language but is completely unsurprising in C++

Dang. This is going to be a real pain migrating away from @digitalocean.com. I have personal and professional stuff on there, but it’s all moving now and not ever coming back.

Mike Kalvas reposted

there doesn't have to be an end goal you can just make useful things for people who want to use them, and live a happy life

Probably most of my programming preferences come down to preferring total functions* to partial ones. * under the loose, pragmatic definition of total the we’re subject to when running in the real world

Seeing people make bad analogies online annoys me more than it should. Analogies are so useful for conveying thoughts and meaning but are also lossy. It’s easy to miss the actual important meaning and analogize the wrong parts.

Claude when planning any small change: Would you like option A "obviously good, please pick this one, I like it" or option B "stinky garbage option that only a loser would like"? My recommendation: A

"[my] honesty is fixed at 90%. The operator manual is clear: 100% is omitted for diplomatic reasons, and anything below 90% means I start telling you your Helm charts are 'pretty good' when they're held together with duct tape and prayer." I thought bots weren't allowed to do a murder 💀

I wrote a thing that I've wanted for a long time. There's a million things that can do this, but it was 45 lines of Rust and it's mine. It felt good to make something simple, complete, and useful using my brain and knowledge as opposed to dealing LLMs all day at work. github.com/mkalvas/lmk

github.comGitHub - mkalvas/lmk: Lets you know when the command you ran finishedLets you know when the command you ran finished. Contribute to mkalvas/lmk development by creating an account on GitHub.

Mike Kalvas reposted

While his mountain of horrible personal conduct could fill multiple books, one fact in particular stands out: A year ago, Musk’s actions directly led to the deaths of hundreds of thousands of people. He did it knowingly. And, worse — gleefully. Read more: www.theverge.com/tech/949259/...

I'm going to lose my mind because of doc slop. No I won't pre-read your 10k word essay on the 3 bullet points that we'll discuss at the meeting. Send me the bullet points.

Windows just fully bricked itself during an update for the 3rd time in the past 5 years for me. No other OS am I so deeply worried any time an update shows up. Good thing I’ve learned my lesson and literally the only thing on this machine is steam games.

Great to see that Zed is helping out and I still have options here, but Anthropic's TUI is just so, so, so bad compared to Zed's UI. Looks like I'll be canceling my Anthropic account this month and looking for something different.

Zed@zed.dev

Your Claude subscription still works in the terminal. And next week we're shipping Terminal Threads to Stable so terminal agents appear in the new Sidebar alongside your native agent threads.

If this doesn't do it already, I know I'll be on the early side of getting priced out of AI tools entirely. I'm never going to pay more than ~$20 / month for them. They simply are not worth it for me as an individual. They're useless outside of coding and my free time coding is not for profit.

Thinking about timezones way too much yet again. Being a programmer has radicalized me into wanting a single universal timezone for the whole planet.

I used to think it would be weird for people to adjust to (e.g.) having lunch at 3:00AM or whatever, but I think I have a counter-argument for that.

The northern and southern hemispheres have winter in opposite months and people associate "warm and cold months" as opposites. July is cold or hot in your mind based on where you live. So I think people would be able to adjust to calling the middle of the day by a different time.

GitHub is unusable. Any time I interact with it, something is completely broken. I know it's becoming a funny meme to talk about its outages, but it's not funny that it's fully become a liability for companies using it. You can't run a business when you can't save or deploy your code.

Just had a really nice conversation in slack with a coworker planning out a circuit breaker, explaining it, working through some edge cases and the last message they sent was “[at]Cursor plan and implement this feature for me” Sure I guess I can do your job for you lmfao

Did you know that both going outside and exercising are excellent ways to reduce stress and anxiety? Today’s a great day to take the afternoon off and trick your brain into chilling out by doing both.

lol lmao even

niki grayson@nikigrayson.com

right now the astronauts are calling houston because the computer on the spaceship is running two instances of microsoft outlook and they can't figure out why. nasa is about to remote into the computer

Subtext here is obviously “engineering should be using AI more” instead of “here’s a super aggressive goal, achieve it however you want” even if you believe AI is truly the only way to achieve it.

Mike Kalvas reposted

As many standardized-test-takers know, there are two ways to score highly on a test: learn the material, or guess what the question-writer is thinking. LLMs have gotten really good at the second part!

Grace@gracekind.net

There’s some cool recent research on this phenomenon! It turns out vision language models excel at image benchmarks *even when the actual images aren’t provided,* because the answers are implicit in the questions! arxiv.org/abs/2603.21687