pcollins123
He asked me "So, how would you make the Internet better at Google?".
My response, "Setup preferences in Chrome to eliminate all popups including Cookie banners".
I never got a call back for the second interview.
We ran 10 models over the same 10 pull requests, each carrying one planted access-control bug (IDOR, missing auth, broken authorization), five times per model, and scored every finding against the actual code.
The result is a clear cost/quality frontier. Open AI’s GPT-5.6 Sol dominates. It found all vulnerabilities at a very affordable $0.70 per PR. For comparison Fable only found 88% and cost $3.61 per PR. No Anthropic model reaches the frontier at all.
This is NOT a harness quirk, we tested and found similar results in the Claude Code and Pydantic harnesses.
Details of our methodology and synthetic repos in the publication.
ESPHome Fan Controller
The software is ESPHome and Home Assistant. The hardware is an ESP32 with a regular 12v 120mm Computer Fan (PWM) and a simple Temperature Sensor (DHT11).
Of course if you also wire a solar charger next to the battery… maybe it will never run out.
React Storefront
In my mind, all negative news about Tesla is now called into doubt as being news peddled by shorts. This is the challenge of declining journalism standards: all news now has someone with a vested interest behind it.
There, fixed that for you.
Look, I'm very progressive, but we need to firmly stand behind "innocent until proven guilty" especially when it is so easy to create a slander campaign against a political opponent. And, yes, even the democrats are capable of that.
In the case of Amazon, the relevant options are:
1. Likert scale of quality:
a junk, just don't buy it
b cheap and works good enough for occassional use
c higher quality: willing to spend more and you'll get a much better outcome.
d overpriced
2. bad shipping, bad vendor, poor customer service
I hate seeing a bad review for a product based on the last item, they're normally outlier issues or whiners and I normally try to filter them out.In the case of rotten tomatoes it is, again a different set of parameters.
Owen Garrett at nginx has summarized the reasons as follows:
- it is a non-essential and optional part of http/2
- if the client already has the resource cached, then by pushing it to them you might be unnecessarily wasting bandwidth.
- server push spec might change in the future.
- Link headers as hints is useful, but usage has been low from web developers.
- server push has been available as part of SPDY and was not utilized by many web developers.
Read his original comments here[1]. This table[2] accurately describes the pro's and con's of server hints vs server push.
Personally this disappoints me because I think this would be a valuable feature for web developers willing to invest the time to optimize page speeds. I also know that some large CDN's like Cloudflare have implemented their own version within nginx to optimize page downloads.
[1]: https://www.nginx.com/blog/http2-r7/
[2]: https://www.chromium.org/spdy/link-headers-and-server-hint
Doesn't this lead to the most highly used static assets being pushed for every subsequent request? Isn't that wasteful?
I use varnish cache extensively and am considering writing a probabilistic server push module. It could keep track of subsequent requests and push the next set of assets. This is more of a server module approach rather than client side.
Any thoughts on that?
I learned SpriteKit and Swift for fun and started making games with my kids. So rewarding and a nice break away from real world programming. But not something I would want to do for a living.