Marius g.

@dangoodin@infosec.exchange half of a continuation of a report, and half a tech blog discussing the internal security harnessing. Strange to read how it switched between the two and answering interesting questions in the FAQ. I find confusing the fact that I couldn't find a list for all the invidually tracked bugs (?). Even though they are "rolled up"/grouped under a single CVE, they are tracked individually and that would be a more interesting thing to look at. And I'm really surprised about the no. of fixed bugs graph, especially for April. How could they handle that jump in volume? More people working on Firefox? More focus on security than other work? "Looks good to me" merges?

@mitchellh reasonable argument building on the back of what you're doing with Ghostty, and the effects you're seeing. You're the only person I follow from the "AI proponent sphere", and I think your attention to quality is higher than other people co-building with AI. At least that what's I've seen from your posts, even if you state that overall the quality bar is lower. But I cannot ignore, than in my "informational and experience bubble", there has been a degradation of service quality, and support, across the corporate world, in the last 6-9 months while vibe coding has picked up. I would hope that companies will pay the anti-UX cost with user retention, as to give rise to more human-serving software. But one can only hope while the world is inching towards a "rewrite often, refactor almost never" approach; while actively unlearning practices that are to the benefit of the user.

@EC_DIGIT sure seem to avoid anyone that dropped out of university even if closing in on 20 years of professional experience.

@molly0xfff there's no shortage of really repulsive characters in this timeline