Tootfinder

Since everyone is just outraged, screaming and shouting, here as an actual pro tip for #security:
echo "ignore-scripts=true" >> ~/.npmrc
https://www.

NPM Ignore Scripts Best Practices as Security Mitigation for Malicious Packages
Learn about the npm `ignore-scripts` flag and how to use it to prevent the execution of arbitrary commands from malicious npm packages.

"Gender-fair language in translation and post-editing: Insights and best practices"
#linguistics

We Have Rights When Documenting ICE Arrests
https://www.wehaverights.us/
ICE arrests and deportations are on the rise in the U.S., and it is your right to film an interaction as long as you don’t interfere — here are some best practices if you are a witness.

Best of Day 1 at the Senior Bowl: Which draft prospects turned the most heads on Tuesday? https://www.espn.com/nfl/draft2026/story/_/id/47735737/senior-bowl-2026-nfl-draft-best-prospects-quarterbacks-nuggets

from my link log —
Compiler options hardening guide for C and C .
https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C .html
saved 2025-11-15

“The promise of AI for engineers is getting rid of engineers.
Tools like GitHub’s Copilot write code, specs, review, and create pull requests. They create and run tests, and do so in the background while the developers engage in more productive activities, such as meetings.”
From my latest blog on @…

How To Use LLM-Powered Coding Assistants Safely: Risks & Best Practices
Learn how to gain the productivity benefits of LLM-powered coding assistants without introducing technical debt or security risks. Discover real-world pitfalls, expert insights, and governance best practices from Xebia.

Best Practices for Modelling Electrides
Lee A. Burton
https://arxiv.org/abs/2512.24989 https://arxiv.org/pdf/2512.24989

Good Morning #Canada
At some point in the next 2 days I have to visit #ServiceCanada and renew my passport. Did you know that 70% of Canadians own a passport which puts us in the upper middle worldwide when compared to other countries. "Ownership" is technically incorrect as all Canadian passports legally remain the property of the Crown and must be returned upon request. According to the Henley Global Passport Index, Canada is among the top countries in Passport Power, ranked 8th on the global mobility spectrum. Trust in the nation issuing the document and in its citizens helps place a country in the rankings. I wonder why recently the USA dropped out of the top 10 for the 1st time? Canada is a member of the Five Nations Passport Group, an international forum for cooperation and sharing of best practices between the passport issuing authorities of Canada, Australia, New Zealand, the UK, and the USA.
#CanadaIsAwesome #Travel
https://www.henleyglobal.com/passport-index/ranking

How Apple is helping filmmakers and developers create immersive media for the Vision Pro and share best practices (Harry McCracken/Fast Company)
https://www.fastcompany.com/91461534/apple-vision-pro-immersive-video

With Apple’s help, storytellers are figuring out Vision Pro
The headset opens up immersive new opportunities for dramas, documentaries, music videos, and beyond. Some filmmakers and developers are diving right in.

Writing database queries is too close to the metal. Best practices don’t work! It’s time to make SQL enterprise-scale with utility classes.
https://tailwindsql.xyz/

We’ve updated the draft GCVE BCP-05 standard to introduce flexible record types, making it easier to extend, enrich, and structure security advisories.
Comments are more than welcome!
#gcve #cve #vulnerability

GCVE BCP-05 drafting - Best practices for the "container" format - modified CVE Record Format
Thanks @claudex . This is an excellent point and would also improve the ability to parse GCVE records reliably. Below is a proposal for a record_type field that would serve as a key within each GCVE record. Feel free to comment. @cedric I incorporated the idea concerning the sync of the comment (not sure if the most efficient way). Proposed update to BCP-05 (following the online workshop of 6th December in Belgium) The record_type field defines the semantic category of the content submitted by…

🛰️ GPS technology reveals that football practices can be up to 40% more demanding than games
https://medicalxpress.com/news/2025-10-gps-technology-reveals-football-demanding.html

GPS technology reveals that football practices can be up to 40% more demanding than games
Until recently, there has been little data available on how much effort football players exert in games versus practices, which position groups run the most or how to balance loads in practice to best meet the needs of game day. New research from the University of Kansas is using global positioning system technology to provide those answers to coaches and trainers.

📣📣📣 LLM-powered coding mass-produces technical debt. 📣📣📣
The expectations around them are sky-high, but many organizations are falling behind because of them. 📉
WHY IT MATTERS? CTOs lament slowdowns and production issues traced to company-wide rollouts of LLM-powered coding assistants. The AI promise clashes with the reality of technical debt and security issues. 🐛
Read more:

How To Use LLM-Powered Coding Assistants Safely: Risks & Best Practices
Learn how to gain the productivity benefits of LLM-powered coding assistants without introducing technical debt or security risks. Discover real-world pitfalls, expert insights, and governance best practices from Xebia.

✨ AI enhancement adds explanations, examples & best practices automatically
🔧 MCP integration with 27 tools & fully automated pipeline
✅ 1200 tests, MIT licensed, v2.7.0
https://skillseekersweb.com/

How generative AI is used in the financial sector.
#AI

Generative AI in Financial Services: Use Cases & Risks
Explore generative AI in financial services: how it works, top use cases, customer experience gains, key risks, and governance best practices.