miniblog.

I find it odd that people recommend Docker for sandboxing agentic coding tools. Isn't it easier to just create a separate user account on the machine? It's an established security boundary, and viewing output is easy (just make the user's home directory world readable).

Today in aggravating edge cases: difftastic would crash when line-wrapping content where Unicode combining characters occurred on the boundary. Argh.

The assumptions C/C++ compilers make, and an argument in favour of giving the compiler more flexibility regarding struct layout and padding. (I believe Rust gives the compiler more freedom for structs that don't cross an FFI boundary.) https://twitter.com/shafikyaghmour/status/991370524008759296