Jan de Muijnck-Hughes

345 Followers
239 Following
3K Posts
Lecturer of type-driven approaches to trustworthy-systems (CyberSecurity) at Strathclyde. Professionally interested in PL & FM Methods; socially interested in coffee, politics, music, the outdoors, sci-fi, high fantasy, & much much more! My work doesn’t define me; it is not my identity.
wwwhttps://tyde.systems/
Pronoun’she/his
Locations🇳🇱 🏴󠁧󠁢󠁷󠁬󠁳󠁿 🇬🇧 🇪🇺
Back to books - Sweden's schools give up digital learning https://www.bbc.co.uk/news/articles/cly0vk77vdko
Back to books - Sweden's schools give up digital learning

Swedish classrooms swap laptops for books, pens and paper, raising concerns from the tech sector.

BBC News

The UK government has blanked the risks of US tech dependency for too long.

Our digital infrastructure is a strategic asset.

But that understanding is absent in how we hand out public sector contracts and allow UK tech sector sell-offs to foreign companies.

We must shift the dial.

Read more ⬇️

https://www.openrightsgroup.org/blog/the-case-for-digital-sovereignty-and-the-digital-commons/

#DigitalSovereignty #bigtech #tech #opensource #ukpolitics #ukpol

The case for Digital Sovereignty and the Digital Commons

Our new report asks a profound question: just how dependent is the UK on US technology, and what could that mean for the UK’s sovereignty?

Open Rights Group
Our department is hiring an assistant professor in computer science (including programming languages). If you would like to join our small but diverse PL group in beautiful little Delft, please don't hesitate to apply! Also feel free to reach out to me if you want to know anything about our department or academic life in the Netherlands.

Deadline for applications: 11th of May

academictransfer.com/en/jobs/360114/assistant-professor-in-computer-science/

#TUDelft #AssistantProfessor #Hiring #ComputerScience #SoftwareTechnology #ProgrammingLanguages #TypeTheory #SoftwareVerification #Agda #Rocq
Assistant Professor in Computer Science

Develop the next generation of CS and AI intelligence technology that powers science and society at TU Delft. Combine research with real technological impact while educating talented students. Job description Are you inspired by shaping the next generation of…

AcademicTransfer

Current thoughts: assessment design so that students authentically document their thought-process more than their outputs.

GenAI is hurting those that attempt assessment of fundamental concepts authentically (without using GenAI) and those that lean on GenAI to get a mark.

(This whole thing makes me sad for my students)

Qapla' !

Custom Git log formats, Markdown, Pandoc are your friends:

```
git log --patch --pretty=format:"\`\`\`%n</details>%n# Commit %h %s%n%n+ Author :: %an%n+ Email :: %ae%n+ Date :: %ad%n+ Long Commit :: %H%n%n <details><summary>Commit Mesage</summary>%n%n\`\`\`%n%s%n%b\`\`\`%n</details>%n <details><summary>Code Difference</summary>%n\`\`\`%n" \
<files I am interested in>
| sed '1d' \
| sed '$a```\n<details>' \
| pandoc --from=markdown --to=html5 --table-of-contents --standalone \
--metadata=title:"Git Log for <reg no>" > <reg no>-logs.html
```

where `<reg no>` is the students registration number, and `<files I am interested in>` are paths to files I am interested in.

Caveats:

+ log format is *just* for logs, so too is `--output`. So if you want to include code changes then you need to capture `stdout`;
+ capturing patches means you need to have a leading end delimiter and a trailing start deliminter;
+ `sed` magic removes the first leading end delimiter, and inserts a final end delimiter;
+ markdown/commonmark to insert raw html for foldable summaries of commit message and code diff
+ pandoc to get standalone html files and tocs

Dos anyone know if there are good utilities to generate a static interactive html pages for #git log files. Need to submit evidence to those not tech savvy.

fuck the browsers for making this even possible. do I have to go and disable all .js???

https://browsergate.eu/

LinkedIn Is Illegally Searching Your Computer

Microsoft is running one of the largest corporate espionage operations in modern history. Every time any of LinkedIn’s one billion users visits linkedin.com, hidden code searches their computer for installed software, collects the results, and transmits them to LinkedIn’s servers and to third-party companies including an American-Israeli cybersecurity firm. The user is never asked. Never told. LinkedIn’s privacy policy does not mention it. Because LinkedIn knows each user’s real name, employer, and job title, it is not searching anonymous visitors. It is searching identified people at identified companies. Millions of companies. Every day. All over the world.

BrowserGate

I teach cybersecurity. And I genuinely don't know what to tell my students after this one. Federal reviewers spent years trying to get basic encryption documentation from Microsoft for its GCC High government cloud. They couldn't get it. One reviewer called the system a "pile of spaghetti pies," with data traveling from point A to point B the way you'd get from Chicago to New York: a bus to St. Louis, a ferry to Pittsburgh, and a flight to Newark. Each leg is a potential hijacking. They knew this. They said this out loud in writing. Then they approved it anyway in December 2024, because too many agencies were already using it. 🔐 That's not a security review. That's a hostage negotiation. Two things in this story should make every CISO and CIO uncomfortable:

🧩 Microsoft built its federal cloud on top of decades of legacy code that it apparently can't fully document itself
👮 "Digital escorts" often ex-military with minimal software engineering backgrounds are the firewall between Chinese engineers working on the system and classified U.S. networks 🤦🏻‍♂️

The scariest line in the whole ProPublica investigation isn't the "pile of shit" quote. It's this: FedRAMP determined that refusing authorization wasn't feasible because agencies were already using the product. Read that again. The security review process reached a conclusion based on sunk cost, not risk. Ex Post Facto Fallacy

If that logic holds, the compliance framework is just documentation theater. And right now, CISA is being hollowed out, so there are fewer people left to even run the theater.

https://arstechnica.com/information-technology/2026/03/federal-cyber-experts-called-microsofts-cloud-a-pile-of-shit-approved-it-anyway/
#Cybersecurity #Microsoft #FedRAMP #Leadership #RiskManagement #security #privacy #cloud #infosec

Federal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway

One Microsoft product was approved despite years of concerns about its security.

Ars Technica

I gave a research lecture to students today at #TypeSig #Triple. #UoE The topic was that of my #TYPES2025 talk: Being Positively Negative About Dependent Types.

Great range of speakers from organisers, even though it was @mspstrath heavy! One student came at the end to say they enjoyed the talk as it was accessible to them. I like that.

Also nice to see the other talks in the tracks I attended. Especially those that are related! (Two sided type systems)

The journey home even gave me space to think about research…

From the other site, but too good to not share:

https://x.com/robertgraham/status/2036208633814639088

There is a post about the importance of the BBC’s ‘pips’ arising form commenting on someone demonstrating a plugin that plays the BBC news countdown (that includes the ‘pips’) as the countdown to a teams meeting. I wish I could get this before all meetings I have to attend…

Robert Graham (@robertgraham) on X

These beeps started in 1924. Back then, people could get "astronomical time" by telescopes looking at the stars. You knew when it was 12am by the exact time when a certain star appeared overhead. The Greenwich Observatory would calculate this time daily, and have a ball drop at

X (formerly Twitter)