photog.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A place for your photos and banter. Photog first is our motto Please refer to the site rules before posting.

Administered by:

Server stats:

286
active users

#dev

11 posts11 participants0 posts today

New Kitten release

• Fix: messages that are promises are properly awaited before being sent.

kitten.small-web.org

Kitten automatically and transparently handles asynchronous content in your templates for you so you don’t have to worry about it. One place where this wasn’t working properly is if you addressed `this.component` to stream a custom update of your component manually instead of calling the `this.update()` method of Kitten component instances.

e.g.,

```js
export default class AdminPage extends kitten.Page {
// …
onSelectedPost (data) {
this.send(kitten.html`<${this.component} postId='${data.selectedPost.postId}' />`)
}
}
```

:kitten:💕

I'm not someone to point fingers and blame developers for mistakes they made, but if I run into incomprehensible code and the author says "I dunno what the code does; I just asked #chatGPT to generats it", I'm gonna be pointing lots of fingers. Six on each hand at least. #ai #dev

“slopsquatting, a new term for a surprisingly effective type of software supply chain attack that emerges when LLMs “hallucinate” package names that don’t actually exist. If you’ve ever seen an AI recommend a package and thought, “Wait, is that real?”—you’ve already encountered the foundation of the problem.

And now attackers are catching on.”

The Rise of Slopsquatting: How #AI Hallucinations Are Fueling... socket.dev/blog/slopsquatting- #npm #dev #infosec

Edit: more info: bleepingcomputer.com/news/secu

SocketThe Rise of Slopsquatting: How AI Hallucinations Are Fueling...Slopsquatting is a new supply chain threat where AI-assisted code generators recommend hallucinated packages that attackers register and weaponize.

New Kitten feature: Icons!

You can now make use of a subset of the icons in the Phosphor icons set by @minoraxis and @rektdeckard.

kitten.small-web.org/reference

Search through them in your editor by referencing `kitten.icons.categories` and `kitten.icons.tags`.

Add this to a file called index.page.js and run `kitten` to see a large duotone pink cat (because why not?):

export default function () {
return kitten.html`
<${kitten.icons.c.Cat}
size=40%
weight=duotone
colour=deeppink
/>
`
}

(And yes, the set includes icons for the fediverse. This one of the reasons I chose it.) ;)

Enjoy!

:kitten:💕

#Linux #Editors #Code #Dev

What are the editors available these days that *do not* use Chromium/Electron/Atom/etc?

On my system, in vscodium (and I tried zed too) there's a maddening bug where scroll-wheel events are accrued and when you switch-back to the editor, ZIP! you end-up at the bottom (mostly) of your code. 😡 💢

It makes it totally impossible to use, hence looking for other editors.

I even tried gvim again, but it's just so painful to use!

Save me!

🦇

Coming tomorrow to Kitten… Kitten icons!

Kitten will have built-in support for the Phosphor icons set with full authoring-time language intelligence where you can search for icons via category and tag (in addition to the canonical alphabetical categorisation).

Thought this was going to take me a few hours but it took a few days thanks to running into issues with size limits, type inference from JavaScript types in modules, etc., with the TypeScript language server but I believe I’ve finally cracked it :)

:kitten: 💕

Mastodon 🦣 - can you help me out?

If you can test on actual Safari (not another browser), does codepen.io/thebabydino/pen/Eax look the same for you as it does in my Epiphany screen? Or does the `conic-gradient()` cover the entire area?

Retoots appreciated if you cannot test. Thanks!

PS: Yes, I know it does NOT work in Firefox or Chromium browsers github.com/web-platform-tests/

#CSS#SVG#filter

I have now encountered several cases of unintelligible documentation - functional requirements, security measures, technical how-tos - where I had to ask the author for clarification, and getting as a reply "oh I don't know; I just asked #ChatGPT".

Now I can bash #ai tools, but people who produce documentation that they themselves don't understand have always been a blight on #IT. It's irresponsible, unprofessional, and makes work harder for everyone.

Hey fellow developers!

If you've ever accidentally caused a security incident, or been part of a team that did, I'd like to hear about it (privately if you want).

I have a few of my own, I'm not just hoping to laugh at others.

I'm writing a presentation about how security incidents come about, from a dev and product perspective. For our learning, but mostly for security people who are flummoxed as to why we would do the things we do.

#dev#devlife#django