Javier Callico — Software Engineer

Recent Activity

X• Reposted•

Moxie Marlinspike (@moxie)

Let this Linux kernel CVE related to IPv4 (unused!) options be a reminder to us all: we didn't have to do this IPv6 thing. The IPv4 header has unused options fields that were already variable length to 40 bytes! We could have just cannibalized a few of those bits way back in 1995, had plenty of address space to work with this whole time, and as a bonus not had this remotely exploitable vulnerability in the Linux TCP stack. ubuntu.com/security/CVE-2026…

View on X
X•

Javi (@jcallico)

How much does the harness/agent maters? I find that the same model, let’s say say Opus 5.5, feels “smarter” when using #claude than #copilot

View on X
GitHub•

Closed issue: Harden CI/CD supply chain (permissions, pinned actions, Dependabot, audits)

No workflow sets top-level `permissions:`; actions are pinned to mutable tags; `publish.yml` requests OIDC but still passes `secrets.PYPI_API_TOKEN`; no Dependabot, pip-audit/OSV or Gradle wrapper val

agent:implementingclosed
View on GitHub
GitHub•

Pushed 1 commit to JCallico/imap-migration-tools

Add grouped Dependabot updates and dependency audit tooling (#91) Add weekly grouped Dependabot updates for Python, Gradle, and GitHub Actions dependencies. Add pip-audit and a make audit target. Document audit preparation, the wxPython coverage gap, and why workflow changes require a maintainer. Implements #81 from the administrator-approved analysis. Co-authored-by: imap-tools-agent[bot] <342463850+imap-tools-agent[bot]@users.noreply.github.com>

BRANCH: main
View on GitHub
Web Mention•

JCallico/imap-migration-tools - gitstars.io

This repository contains a set of Python scripts designed to migrate emails between IMAP servers (supports Gmail, Outlook, etc.), verify the migration, and manage folder states.

View on Web Mention
GitHub•

Pushed 1 commit to JCallico/photo-airt

v0.5.2 (#21) Bumps the app, the SDK and every built-in style (`Cargo.toml` and `plugin.toml`) from 0.5.1 to 0.5.2, and regenerates `Cargo.lock` (workspace crates only). v0.5.2 ships #19 and #20, which keep the top bar and side panels usable when a tiling window manager makes the window narrower than its 1100 px minimum. The full local check sequence passes (tests, clippy, fmt, docs, `cargo deny`, whitespace).

BRANCH: main
View on GitHub