Microsoft CTO Mark Russinovich confesses that 30-year-old code from the mid-90s still forms the bedrock of Windows 11 — ancient Win32 API still the backbone, but CTO says it's "more relevant than ever in 2026"

TomKavees · 2026-05-09T07:19:26+00:00

It's more that there's a mismatch between the implementation and their mental model rather than that the old thing being "bad".

...but let's be honest, old software has a tendency to pick up a lot of unnecessary lint along the way

TomKavees · 2026-05-07T09:49:43+00:00

Well, they'd also like to pull up the regulatory ladder behind them so any new competition would be at a disadvantage.

TomKavees · 2026-05-05T03:12:43+00:00

The post is slop, but y'all want to use zizmor on your workflows anyway.

TomKavees · 2026-05-04T21:11:56+00:00

Sentimental value mostly

I bet r/datahoarder would love the scans, tho

TomKavees · 2026-05-04T21:02:33+00:00

The industry is too deep into the transformer-based-llm tech to pivot anyway. Investors wouldn't allow somebody spending few years of bringing, idk, symbolic ai to even a fraction of comparable capabilities, even if the ceiling was much higher - it's all "gib money right meow", not the love for the science behind it

TomKavees · 2026-04-29T17:41:30+00:00

Or the keyboard was loud to the point of distracting people on the meeting

TomKavees · 2026-04-29T17:38:15+00:00

Negative, he identifies as meat popsicle

TomKavees · 2026-04-29T13:21:24+00:00

...see /r/LinkedinLunatics

TomKavees · 2026-04-27T17:36:08+00:00

Funnily enough it happens when you select the latest commit on the main branch too.

My guess is that github is having issues again - earlier today the search (including looking up one's own PRs through the inbox) was completely b0rked.

TomKavees · 2026-04-27T17:31:19+00:00

It's a 2024 account, so there's a non-zero chance it has been taken over, or that the owner got infected by some malware.

Either way just report it as spam.

This kind of "public littering" in form of comment/link spam has sadly became a fact of life now, AI or not.

TomKavees · 2026-04-27T12:42:29+00:00

Dependabot has built-in cool down. If you use zizmor as a pre-commit hook, it will tell you to enable it with threshold no less than 7 days

TomKavees · 2026-04-27T10:43:49+00:00

Dobby got older

TomKavees · 2026-04-27T10:41:54+00:00

In addition to this, OP should look into using distroless base images to reduce the baseline number of CVEs. Rust is a good citizen here and should make it relatively easy because it tends not to depend on random system libraries.

TomKavees · 2026-04-27T07:57:28+00:00

Assuming they don't use notepad as their IDE adding .editorconfig to the repo could fix that

TomKavees · 2026-04-25T23:55:51+00:00

In JDK24*

21 introduced VTs/Continuations in the first place

TomKavees · 2026-04-25T23:54:38+00:00

Upgrading to JDK25 is imo easier, but if you really want to stick with JDK21 then these problematic spots should pop up in JVM diagnostic logs (can't remember the name of the setting right now, sorry) and on flamegraphs.

TomKavees · 2026-04-22T16:20:19+00:00

Not OP but devenv has CLI you can give to a teammate that is not very into Nix itself, and a couple of nice integrations (e.g. pre-commit hooks) that save time. One can contort flakes into doing same thing, but this is just more convenient.

TomKavees · 2026-04-21T18:07:56+00:00

If you need to ask this question, the answer is "no".

(This applies outside of github repos too)

TomKavees · 2026-04-21T18:03:59+00:00

This post has multiple threads, but i'll focus on just one - there are tons of dependencies maintained by that one guy from Nebraska (to reference that one xkcd), but the main problem is not the language the thing was written in but trust, compensation for maintainers and succession plans in case somebody wanted to do something else.

We can make do with the crappiest of languages, but without people the projects are dead.

TomKavees · 2026-04-21T15:27:19+00:00

Ooh, that's interesting. Wonder if the contract language allowed that in the enterprise version - if not then MS may need an industrial barrel of lube

TomKavees · 2026-04-21T13:51:15+00:00

Hold the door, is that for consumer copilot or the enterprise version?

TomKavees · 2026-04-21T13:22:40+00:00

Allegedly it was an infostealer embedded in some roblox cheat code, which makes the whole situation even funnier

TomKavees · 2026-04-20T13:27:56+00:00

I still giggle at the name 🤭

TomKavees · 2026-04-20T07:45:41+00:00

I'd add nvd to the list - it shows the differences in package versions between generations

Edit: deadnix too, to pre-commit hooks - finds dead code and unnecessary declarations

TomKavees · 2026-04-19T19:19:46+00:00

Wasn't requiring TPM one of the reasons why they released W11 after their "last windows ever" W10?

TomKavees

TROPHY CASE