2026-04-06 Notes
https://youtu.be/cbgSkrQ3HNg?si=VJ2kqj8XD0P6ukI_
Publishing rhythm
BumpMesh by CNC Kitchen
Add displacement textures to STL, OBJ, and 3MF models directly in your browser. Preview, mask, bake, and export printable textured meshes locally.
BumpMesh · bumpmesh.com [1]
Absolutely sick texture app from cnc kitchen. Like him I’ve spent a bunch of time attempting and failing to learn blender, I’m so glad someone else vibe coded out such a good app that can just add texture to stls with basic masks and is the very basics of what you would want to add to 3d prints to make them interesting, I’m excited to use this for some real projects.
[2]
[3]
References:
[1]: https://bumpmesh.com/
[2]: https://dropper.waylonwalker.com/file/d959e3dc-3fde-410b-acaf-8f0574f68a1a.webp
[3]: https://dropper.waylonwalker.com/file/e10dddf6-0f2e-498f-bef7-81901afced7b.webp
What is this job anymore
The job of writing code is dying, models are getting better, the average person
will have their average features implemented in average ways with no effort by
agents, the writing is on the wall. We are still trying to review most of the
critical code, this is slowing us down, is it really stopping any bugs or
giving us any more familiarity with the product, marginally.
The time is now to grease up your UAT, testing, deployment pipelines. Dont let
agents delete entire regions. Review your backup and restore strategy, you do
have a DR plan right?
Things are changing fast, the best of us are still better than the clankers.
Most of us have more context than the clankers. Most of us have more intuition
of what and where to implement fixes. Context windows and memory will be
solved problems. Your DR plan, UAT, testinng and QA environments will not come
for free, you need to make them, and deeply integrate them into your processes.
-
Bush on tiny desk. Iconic band on an iconic platform. Will be re-listening to this several times.
[1]
References:
[1]: https://dropper.waylonwalker.com/file/3b67304c-41cc-4040-b6cd-7e0c16633e3d.webp
Ping 47
The year of the supply chain attacks
I think I'm starting to understand my role as a platform developer in 2026.
* least priveleged access
* default deny + explicit allow
* understand your blast radius
* **GREASED** creds rotate process
* PIN EVERYTHING
* keep packages up to date
* but not too up to date, use dependency cooldowns
GitHub - kraanzu/smassh at terminaltrove
Smassh your Keyboard, TUI Edition. Contribute to kraanzu/smassh development by creating an account on GitHub.
GitHub · github.com [1]
smassh is the coolest monkeytype tui clone, its impressively accurate. Easy to install and run, all the same themes appear to be there and everything. maybe a good way to get a few reps in while agents are running these days.
35102587-dffe-48ec-920a-a037917e7776.mp4 [2]
I need to go back and brush up on my skills I’m down a good 20wpm from what I should be doing.
References:
[1]: https://github.com/kraanzu/smassh?ref=terminaltrove
[2]: https://dropper.waylonwalker.com/file/35102587-dffe-48ec-920a-a037917e7776.mp4
The final nail for Windows?
Easy anticheat for linux is out.
!!! tip
look at the date
If this were real what would you play first? For me it's `skate .` is really
the only thing I care about and I'm fine without it.
What Happens When AI Stops Being Artificially Cheap
The subsidy era is ending. Here
danielmiessler.com [1]
I’ve been thinking about this for awhile and Daniel makes some great arguments here. Interestingly keeping inference cheap removes the incentives to make our tools better, help us choose the right model, lean on local models, open weight models. The frontier models are so affordable through subsidized subscription models why would you deal with anything less intelligent at this point. The tooling we use is not optimized for it, and why should it be.
References:
[1]: https://danielmiessler.com/blog/ai-stops-being-artificially-cheap
External Link
baty.net [1]
emacs config so bad he launch obsidian, YIKES! grantid I’m using obsidian currently on my phone, not for this post, but for journal entries while I’m away from my desk. Use this as a reminder that you can swim through murky waters with your dotfiles for awhile, but occasionally its good to do a clean up, pin it, put em in a docker image, have a good fallback to go to if shit really hits the fan. Iv’e been using https://github.com/waylonwalker/nvim-manager as part of my strategy for awhile now.
References:
[1]: https://baty.net/journal/31mar26/
[1]
uv adds dependency cooldowns via #16814 [2]. Well needed feature in todays world, far from a guarantee, but its something.
References:
[1]: /static/https://github.com/astral-sh/uv/releases/tag/0.9.17
[2]: https://github.com/astral-sh/uv/pull/16814
Package Managers Need to Cool Down
Today's LiteLLM supply chain attack inspired me to revisit the idea of dependency cooldowns, the practice of only installing updated dependencies once they've been out in the wild for a …
Simon Willison’s Weblog · simonwillison.net [1]
2026, finding the balance between fixed bugs and zero days. There is very unlikely ever a reason you need to be running bleeding edge packages in prod most package managers now support cool downs.
References:
[1]: https://simonwillison.net/2026/Mar/24/package-managers-need-to-cool-down/