technical.cx Sources

Lobsters

taken.

What the page already knows about you, revealed as you read it. No input. No permission. No exception.

Lobsters

Postmortem: TanStack npm supply-chain compromise | TanStack Blog

On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 malicious versions across 42 @tanstack/* packages on npm....

Lobsters

Zig vs Rust in 2026

Nearly 3 years ago, before coding agents, I wrote a bytecode VM and garbage collector in Zig and unsafe Rust, and felt that the human ergonomics of writing unsafe code was in Zig’s favor.

Topics: Programming

Entities: Programming

Lobsters

Chris's Wiki :: blog/programming/EmacsLspModeToEglot

Recently, I decided to take my long standing, perfectly good GNU Emacs lsp-mode setup and completely replace it with Eglot, the now built in GNU Emacs LSP solution. At one level I didn't have any particularly strong specific reason to switch; I started by...

Topics: Programming

Entities: Programming