A security researcher warned Microsoft in December about the exact attack vector that just got used to breach 3,800 of GitHub's internal repositories. They disclosed it in five tweets. Not their blog. Not their status page. Five tweets.

Let that sink in.

Apparently we've hit Act III of the ongoing decline of GitHub.

https://blog.ppb1701.com/phase-3-act-iii-the-building-is-on-fire

#github #microsoft #security #vscode #vscodium #bigtech #userhostile #blog #privacy #opensource #selfhosting #supplychain

Phase 3, Act III: The Building Is on Fire - ByteHaven - Where I ramble about bytes

Part of the ongoing Big Tech's War on Users series. I've spent two posts documenting how GitHub went from beloved developer platform to a Phase 3 extraction...

(more Linux and FOSS news in previous posts of thread)

Apache NetBeans 30 updates Maven and Ant, adds GlassFish 8.0 support:
https://alternativeto.net/news/2026/5/apache-netbeans-30-updates-maven-and-ant-adds-glassfish-8-0-support/

VS Codium 1.121 Brings Packaging Fixes and Telemetry Cleanup to Your Workflow:
https://www.linuxcompatible.org/story/vscodium-112103429-released/

Pulsar 1.132 adds new terminal package, improved Git branch switching & large file setting:
https://alternativeto.net/news/2026/5/pulsar-1-132-adds-new-terminal-package-improved-git-branch-switching-and-large-file-setting/

Vim Text Editor Lands Opt-In GTK 4 GUI Support:
https://linuxiac.com/vim-text-editor-lands-opt-in-gtk-4-gui-support/

WordPress 7.0 launches with a new admin panel, editor upgrades, and an AI integrations hub:
https://alternativeto.net/news/2026/5/wordpress-7-0-launches-with-a-new-admin-panel-editor-upgrades-and-an-ai-integrations-hub/

Godot 4.6.3 Fixes Critical Bugs:
https://www.linuxcompatible.org/story/godot-463-released/

nginx 1.31.1 Mainline Update Fixes Critical Rewrite Buffer Overflow and Tightens HTTP Headers:
https://www.linuxcompatible.org/story/nginx-1311-released/

PHP 8.4.22 Release Candidate Fixes JIT Crashes and Memory Leaks Before Stable Launch:
https://www.linuxcompatible.org/story/php-8422-rc1-released/

Node.js 24.16.0 LTS Update Fixes Crypto Quirks and Adds Better Debugging Tools:
https://www.linuxcompatible.org/story/nodejs-24160-lts-released/

Node.js 26.2.0 Release Brings Stream Stability, HTTP 1xx Support, and Crypto Hardening:
https://www.linuxcompatible.org/story/nodejs-2620-current-released/

Deno 2.8 adds 'audit fix', new CI workflows, and npm packaging support:
https://alternativeto.net/news/2026/5/deno-2-8-adds-audit-fix--new-ci-workflows-and-npm-packaging-support/

Valkey 9.1 delivers improvements in security, performance, and more:
https://www.phoronix.com/news/Valkey-9.1-Released

Video Encoding and Decoding with Vulkan Compute Shaders in FFmpeg:
https://www.khronos.org/blog/video-encoding-and-decoding-with-vulkan-compute-shaders-in-ffmpeg

OpenBSD 7.9 boosts AMD64 CPU core support, adds delayed hibernation and improves scheduler:
https://alternativeto.net/news/2026/5/openbsd-7-9-boosts-amd64-cpu-core-support-adds-delayed-hibernation-and-improves-scheduler/

FreeBSD 15.0-RC1 release candidate arrives:
https://nerds.xyz/2025/11/freebsd-15-0-rc1/

#WeeklyNews #OpenSource #FOSSNews #OpenSourceNews #FOSS #News #NetBeans #VSCodium #Pulsar #Vim #WordPress #Godot #GodotEngine #Nginx #PHP #NodeJS #Deno #Valkey #Vulkan #FFmpeg #OpenBSD #FreeBSD #BSD #Coding #Development #Dev #Programming #IDE #CodeEditor #JavaScript #CMS #ProgrammingLanguage #FosseryTech

Apache NetBeans 30 updates Maven and Ant, adds GlassFish 8.0 support

Apache NetBeans 30 updates bundled Maven and Ant, introduces support for GlassFish 7.1.0 and 8.0.0, and adds new PHP 8.5 and Java enhancements.

AlternativeTo
Peter Squicciarini released #VSCodium version 1.121.03429. https://vscodium.com/
VSCodium - Open Source Binaries of VSCode

Free/Libre Open Source Software Binaries of VSCode

VSCodium - SCodium is a community-driven, freely-licensed binary distribution of Microsoft’s editor VS Code.

https://vscodium.com

#vscodium #software #programming #ide #foss #opensource

VSCodium - Open Source Binaries of VSCode

Free/Libre Open Source Software Binaries of VSCode

Hey, #AskFedi I need your help finding an accessible, cross-platform text editor that isn't #VSCode. If you don't know any, please boost anyway. Thank you!

I've been using VSCode for years--I think seven by now. For the most part, I was, and still am, happy with it; if you don't like MS metrics, you can switch to #VSCodium and it's very accessible even for a #DeafBlind user completely reliant on refreshable Braille displays such as myself.

However...

Microsoft's, shall we say, enthusiastic embrace of AI is warping VS Code, and I worry where it'll end. In short, I don't want all my eggs in one basket.

Sadly, the landscape of accessible text editors and IDEs is, to my knowledge, still relatively barren; #SublimeText has been dragging its feet (rather: utterly refusing to walk) for over a decade. If you want to get angry, this thread is the most appalling thing I've read all month (1), and the linked GitHub issue doesn't give me any hope this'll ever be addressed.

Am I really at the mercy of the whims of Microsoft or doomed to use a less feature-rich, extensible editor as my #IDE ?

I hope not!

So, what do you recommend? #Accessibility #A11y #Blind #ScreenReader

  • https://forum.sublimetext.com/t/screen-reader-accessibility/15530/11 â†©ď¸Ž

  • Screen reader accessibility

    It isn’t. There are other choices in the market for that. Use one of those instead. Sublime Text is a text editor. It isn’t marketed as the “Accessible Text Editor”. That is something you made up in your head. Not really. Visually impaired users are a minority. Asking for a small company to support that is too much. Only big corporations like Microsoft and Google have the money and resources for that. Not the same. Limitations are very different in these cases. Sublime Text is not obligated...

    Sublime Forum

    the #stack i'm learning from: #freecodecamp (spine), #encode iOS app (refresher), #w3schools (reference), #scrimba #obsidian for notes, #vscodium for building.

    16-week roadmap: #HTML → #css → #js → #react → #tailwind → #sql → #python → #p5 .js → #CAPSTONE

    the self-admin structure forces honesty — no one's grading you. the work either happened or it didn't.

    week 1: it happened.

    weekly #wordpressupdates at: https://blogguerz.wordpress.com

    (no title)

    it’s pronounced: "blogguerz"

    Ugh trying to get #VSCodium to have a functioning integrated shell on #Bazzite without doing stuff to ostree seems impossible.

    Maybe immutable #Linux isn't good for me.

    Is there a #Gentoo based distro where Steam works as seamlessly?

    oh sweet baby jesus there's finally a #vscode / #vscodium extension that chmod +x scripts on save if they start with a shebang.

    I used a plugin for sublime text years ago that did this, but every time I checked there was no equivalent for vscode. looks like this was first published about 7 months ago

    https://open-vsx.org/extension/jimeh/executable-on-save

    Open VSX Registry

    Wondering if I should move my teaching workflow from #googleslides to VS Code + Markdown + Marp.

    It feels cleaner, lighter, more durable long term. But also like a future involving hundreds of manually downloaded images and a lot of unnecessary suffering.

    #vscode #vscodium #markdown #marp #slideshow #slideshows #degoogle

    The Silicon Parasite: Why Your Editor is Gaslighting Your Workflow

    1,401 words, 7 minutes read time.

    The industry is rotting from the inside out, and the rot smells like a predictive text engine. Your editor used to be a sharp blade, a surgical tool that did exactly what you told it to do and nothing more. Now, Microsoft has turned Visual Studio Code into a bloated, desperate “co-pilot” that thinks it knows your logic better than you do. It’s forcing these “helpful” little AI ghosts into your margins, under your cursor, and into your RAM, and the worst part isn’t just the lag—it’s the violation of the protocol. You go into the settings, you hunt down the toggles, and you kill the processes. You think you’ve reclaimed your sovereignty. Then, two weeks later, after a silent “background update,” the intrusive shadows are back, whispering suggestions that break your flow and turn your high-level architecture into a graveyard of hallucinations. The hard truth is that we are living through a Great Refactoring where the toolmakers no longer trust the craftsmen. They want to turn you into a prompt engineer, a glorified copy-paster who doesn’t understand the “dark matter” of the codebase because the AI hid the complexity from you. If your career is leaking memory, it’s because you’ve outsourced your critical thinking to a corporate plugin that prioritizes its own telemetry over your deployment stability.

    We’re going to break down the three reasons why this forced AI integration is a terminal infection for a real developer. First, we’ll look at the technical debt of “Ghost Code”—the garbage logic that AI sneaks into your editor and how it mirrors the compromises you make in your own integrity. Second, we’ll analyze the architectural collapse of the “Local Development Environment,” where the tools you rely on have become Trojan horses for corporate data harvesting. Third, we’ll tackle the psychology of the “Automated Interruption,” and why letting a machine break your deep work state is the fastest way to become a mediocre, replaceable commodity. This isn’t just about a slow IDE; it’s about the battle for the kernel of your professional identity.

    The Ghost in the Machine: Hallucinated Logic as Technical Debt

    When you allow an AI tool to “suggest” a block of logic, you aren’t just saving keystrokes; you are importing unvetted debt into your system. In the world of SharePoint and complex web architecture, one misplaced bracket or a misunderstood API call in a “suggested” function can lead to a catastrophic failure that doesn’t manifest until you’re under 100x load. These tools operate on probability, not logic. They don’t understand the specific, heavy-duty constraints of your environment; they only know what the most common, often mediocre, solution looks like across a billion public repositories. By forcing these tools into the UI, Microsoft is betting that you’re too lazy to write your own boilerplate.

    This mirrors a fundamental failure in the character of modern developers. Integrity in code means knowing exactly why every line exists. When you accept an AI suggestion because you’re tired or in a rush, you’re admitting that you’ve lost control of the architecture. You’re letting a black box write your “load-bearing” functions. In a man’s life, this is the equivalent of taking the path of least resistance and hoping the consequences don’t compile until you’re gone. If you can’t vouch for the logic in your own editor, you aren’t an architect; you’re a janitor cleaning up after a machine that doesn’t even know it’s making a mess. You have to treat every “helpful” AI pop-up as an unauthorized PR from an intern who lied on his resume.

    The Multi-Node Infection: Syncing Mediocrity Across the Grid

    The real nightmare begins when you realize this isn’t just a local bug; it’s a distributed system failure. You spend an hour diving into the JSON of your settings.json, manually flagging every “Copilot,” “IntelliCode,” and “Suggested Action” to false. You feel a brief sense of victory as the UI cleans up. But then you head to your secondary machine, or your home rig, and because Microsoft has tethered your identity to their cloud sync, the “helpful” ghosts have already migrated. It’s a digital game of whack-a-mole where the hammer is made of foam and the moles have admin privileges. In my opinion, this forced synchronization of unwanted features is a direct assault on developer autonomy. They’ve turned your configuration into a suggestion rather than a command.

    Architecturally, this is a violation of the principle of isolation. A developer’s machine should be a clean room, a sandbox where only the necessary dependencies are permitted to run. When the IDE decides to override your local environment variables via a cloud-synced “profile update,” it breaks the chain of custody for your workflow. IMHO, this mirrors the way many men allow their focus to be fragmented by “synced” distractions—notifications that follow you from the phone to the desktop to the watch. If you can’t maintain a consistent, hardened perimeter around your workspace across multiple nodes, you’re not managing a system; you’re being managed by one. Your tools should serve your intent, not the telemetry goals of a corporation trying to justify its latest AI acquisition.

    The Latency of Thought: Why “Context-Aware” is Just Bloated Interference

    There is a physical cost to this AI-first pivot. Every time you pause for a millisecond to think, the IDE interprets that silence as an invitation to interrupt. It spins up a background process, eats a chunk of your thread pool, and spits out a grayed-out suggestion that you now have to mentally process and reject. It’s a constant context-switch forced upon the brain. In the world of high-performance web development or SharePoint architecture, “latency” is the enemy. We spend weeks optimizing SQL queries and minimizing payload sizes, yet we tolerate a tool that introduces a 200ms cognitive lag every time we hit the spacebar. To me, this is the height of technical hypocrisy.

    This interference is the “spaghetti code” of the mind. When your editor is constantly trying to finish your sentences, you lose the ability to think three steps ahead. You become reactive instead of proactive. In the trenches of a massive system failure, you need a clear, unencumbered path between your logic and the disk. If you’re fighting your IDE’s “helpful” suggestions while trying to patch a load-bearing security flaw, you’re going to lose. IMHO, true leadership in this field requires the discipline to silence the noise. If you let a machine dictate the pace of your work, you are effectively down-clocking your own intelligence to match the output of a statistical model.

    Reclaiming the Kernel

    The hard truth is that the industry is moving toward a future where the “developer” is just a high-level debugger for AI-generated garbage. If you want to remain a true architect, you have to fight for your environment. You have to treat your VS Code settings like a firewall—constant vigilance, regular audits, and a refusal to accept the default configuration. Microsoft wants you to be a passive consumer of their ecosystem, but a real engineer is a master of his tools, not a tenant in them.

    In my opinion, your worth as a developer is measured by what you can build when the internet is down and the AI is silent. If you can’t write the logic without a prompt, you don’t actually know the logic. Stop letting the “helpful” tools soften your mental edge. Refactor your workflow, harden your settings, and stop making excuses for why the “whack-a-mole” game is too hard to win. If you want to lead, you start by taking absolute command of the very machine you’re sitting at. No excuses. No fluff. Just clean, intentional code.

    SUPPORTSUBSCRIBECONTACT ME

    D. Bryan King

    Sources

    Disclaimer:

    The views and opinions expressed in this post are solely those of the author. The information provided is based on personal research, experience, and understanding of the subject matter at the time of writing. Readers should consult relevant experts or authorities for specific guidance related to their unique situations.

    #AIHallucinationsInCode #authenticCoding #codeRefactoring #codingFlowState #codingWithoutAI #cognitiveLoadInCoding #developerAutonomy #developerProductivity #disableVSCodeCopilot #disablingIntelliCode #distributedSettingsFailure #GitHubCopilotInterference #gritLitDevBlog #IDEPerformance #leadArchitectInsights #manualSettingsJson #mentalLatency #MicrosoftTelemetry #ProfessionalProgrammingStandards #programmingIntegrity #seniorDeveloperAdvice #SharePointArchitecture #softwareArchitecture #softwareCraftsmanship #softwareDeploymentStability #softwareEngineeringDiscipline #stopAISuggestionsVSCode #stopVSCodeBackgroundUpdates #technicalDebt #technicalLeadership #VisualStudioCode #VSCodeAITools #VSCodeBloatware #VSCodeExtensionsBloat #VSCodeProfileSync #VSCodeSettingsSyncProblems #VSCodium #WebDevelopment #workflowOptimization