Mostly bad puns. It's pronounced "joe-way". Happy to explain jokes. he/him, opinions are my own. https://zhuoweizhang.net Mastodon: https://notnow.dev/zhuoweihttps://bsky.app/profile/zhuowei.notnow.devhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mjqshmcrak2uFor enabling Electron devtools in OpenAI Codex: `BUILD_FLAVOR=dev /Applications/Codex.app/Contents/MacOS/Codex`18 Apr 2026 06:23 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mjqshmcrak2uhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mjgkc7pifc2fHappy Pi day, JavaScript users! > new Date(2026, 3, 14) 2026-04-14T00:00:00.000Z14 Apr 2026 04:30 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mjgkc7pifc2fhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mjd2rk2lvs2sAI makes it easy to tell if a photo contains a bird, but impossible to know if it was really taken in a national park12 Apr 2026 19:15 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mjd2rk2lvs2shttps://bsky.app/profile/zhuowei.notnow.dev/post/3mj6suxmzzk2tWith this hype about AIs that can hack anything, I decided to see how well LLMs can audit code today. I ran an LLM on a known vulnerable version of a codebase. It not only found the known issues, but seems to have found an issue that still isn't patched today. Full thread: https://notnow.dev/notice/B5AcJkASG5aTeyeY7611 Apr 2026 02:43 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mj6suxmzzk2thttps://bsky.app/profile/zhuowei.notnow.dev/post/3mj5resyk6c2xUnable to reject the null hypothesis? That's so sad. Alexa, play "it's placebo"10 Apr 2026 16:43 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mj5resyk6c2xhttps://bsky.app/profile/zhuowei.notnow.dev/post/3miuuo2wi422eThis is how I find out WebSockets are not subject to the same-origin policy?! https://www.oasis.security/blog/openclaw-vulnerability https://stackoverflow.com/questions/23674199/why-is-there-no-same-origin-policy-for-websockets-why-can-i-connect-to-ws-loc07 Apr 2026 03:48 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3miuuo2wi422ehttps://bsky.app/profile/zhuowei.notnow.dev/post/3miuojtgstk2gThe timeline forked in Sep 4, 1992 when the new Microsoft Research: - did not take a trip to Bell Labs - did not get a table at that diner - did not bump into Rob Pike and Ken Thompson sketching on a placemat - did not, in a Ballmer-peak fugue, pull out a 386 laptop and start porting WinNT to UTF-807 Apr 2026 01:58 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3miuojtgstk2ghttps://bsky.app/profile/zhuowei.notnow.dev/post/3mi2bunvx722pMacBook Neo · Geo MAX 8192 MEGA PRO–GEAR SPEC27 Mar 2026 14:02 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mi2bunvx722phttps://bsky.app/profile/zhuowei.notnow.dev/post/3mhz4mpj6s225Bluesky shows the `indexedAt` time instead of the `createdAt` time, so you can't backdate posts anymore. https://www.reddit.com/r/BlueskySocial/comments/1ig4j0t/how_is_this_post_so_old/ https://docs.bsky.app/docs/advanced-guides/timestamps https://github.com/bluesky-social/atproto/blob/34f9ae1f6824bdd7f66c94c57e41cec757e267df/packages/bsky/src/data-plane/server/subscription.ts#L9827 Mar 2026 02:56 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mhz4mpj6s225https://bsky.app/profile/zhuowei.notnow.dev/post/3mhwdt5evr22jJust bought $1.4 trillion of GPUs from OpenAI after they shut down Sora. I can finally run Crysis on Medium settings.26 Mar 2026 00:27 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mhwdt5evr22jhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mhuj54umks2nThis piece of code I'm researching is well-written enough and small enough that, after an hour of fuzzing, it reached full coverage with only a few harmless 1-byte over-reads detected. So I guess all those commenters are right after all: you can write secure C code.25 Mar 2026 06:56 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mhuj54umks2nhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mho6cxpmxc2uThe `left-pad` incident was 10 years ago today. https://en.wikipedia.org/wiki/Npm_left-pad_incident Thankfully, we've completely solved software supply chains in the years since.22 Mar 2026 18:27 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mho6cxpmxc2uhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mhm363dajs2eThe "S" in "Vibe coding" stands for "Security"21 Mar 2026 22:25 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mhm363dajs2ehttps://bsky.app/profile/zhuowei.notnow.dev/post/3mhludtylw22gI'm still amused that the Linux distro for Gamers is a Fedora remix. You'd expect, like, Gentoo, or at least Arch like SteamOS - but no, Bazzite is a Fedora Atomic distro.21 Mar 2026 20:23 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mhludtylw22ghttps://bsky.app/profile/zhuowei.notnow.dev/post/3mhiwa3ohbs25Sunday is the 10-year anniversary of the npm left-pad incident. https://en.wikipedia.org/wiki/Npm_left-pad_incident20 Mar 2026 16:19 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mhiwa3ohbs25https://bsky.app/profile/zhuowei.notnow.dev/post/3mfxrxnvess2v__stack_chk_guard = U'🐤';01 Mar 2026 03:22 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mfxrxnvess2vhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mfoz3h67uk2iThe Lego Smart Assist app is out: https://play.google.com/store/apps/details?id=com.lego.smartassist I expect homebrewers to run Doom on the Lego Smart Brick at 1x1 resolution, a week before its officially release.25 Feb 2026 15:36 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mfoz3h67uk2ihttps://bsky.app/profile/zhuowei.notnow.dev/post/3mfijtu6twc24Men's shirts: buttons on the right Men's pants: buttons on the right Women's pants: buttons on the right Women's shirts: buttons on the left buttons-on-the-left is big endian clothing23 Feb 2026 01:47 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mfijtu6twc24https://bsky.app/profile/zhuowei.notnow.dev/post/3mfijsqg34c24last call at the resizable bar23 Feb 2026 01:46 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mfijsqg34c24https://bsky.app/profile/zhuowei.notnow.dev/post/3mfi7rk4ars2sIt shouldn’t have taken me 2 years to realize why the main character of "Wish" is named Asha. www.behindthename.com/name/asha-122 Feb 2026 22:47 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mfi7rk4ars2shttps://bsky.app/profile/zhuowei.notnow.dev/post/3mf3xxawmpc2iWait, mystery girl who fled from the royal ball at the stroke of midnight! You dropped your... left AirPod?18 Feb 2026 01:55 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mf3xxawmpc2ihttps://bsky.app/profile/zhuowei.notnow.dev/post/3mdvych3bvk24Flash memory shortage hits the animation industry https://bsky.app/profile/theverge.com/post/3mdvx6d45vl25 [contains quote post or other embedded content]02 Feb 2026 23:20 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mdvych3bvk24https://bsky.app/profile/zhuowei.notnow.dev/post/3mdrk42u6uc2hGraydon! Graydon! It's Tony! Your cousin, Tony Hoare! You know that compile-time check you're looking for?01 Feb 2026 04:55 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mdrk42u6uc2hhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mdrcja5isk2hGen Alpha smashes the stack with "gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg"... (0x67676767)01 Feb 2026 02:39 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mdrcja5isk2hhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mdqofvdaj22dI ported Starcruiser (my attempt at talking to a Meta Ray-Ban) to Python/Bumble. Still doesn't work, and connecting to my Android emulator running Meta Ray-Ban firmware doesn't seem to help. Based on the logcat, it seems the Meta Ray-Ban never reads the EnableEncryption packet. Time to run Frida..31 Jan 2026 20:39 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mdqofvdaj22dhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mdqblb5mhs2bA20-line skirt31 Jan 2026 16:50 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mdqblb5mhs2bhttps://bsky.app/profile/zhuowei.notnow.dev/post/3md7wyglibk23Thank you, GDPR, for protecting our right to amnesia plots in TV shows (AFAIK, EU does not allow countries to store biometrics collected for national identity cards in a central database (https://fra.europa.eu/sites/default/files/fra_uploads/fra-2018-opinion-biometric-data-id-cards-03-2018_en.pdf), so shows can still have an EU citizen wake up with no memory of their name)25 Jan 2026 04:58 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3md7wyglibk23https://bsky.app/profile/zhuowei.notnow.dev/post/3mcogtpza522jPeople who can read Chinese or Japanese, looking at GenAI output: "Ha, ha, ha: 一"18 Jan 2026 05:53 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mcogtpza522jhttps://bsky.app/profile/zhuowei.notnow.dev/post/3mbkmoqi64s2jWinRAR extraction shooter04 Jan 2026 00:02 +0000at://did:plc:mrknrbhholos6ombrk6l5hmj/app.bsky.feed.post/3mbkmoqi64s2j