1981
Oh no, not again a meditation on NPM supply chain attacks
For enterprise software, the software supply chain presents some of the biggest risks today to data privacy and security.
New
The latest blog posts to take off on Hacker News. 21,818 posts.
1982
I got the highest score on ARC-AGI again swapping Python for English
Using Multi-Agent Collaboration with Evolutionary Test-Time Compute
1983
Implicit ODE solvers are not universally more robust than explicit ODE solvers
A very common adage in ODE solvers is that if you run into trouble with an explicit method, usually some explicit Runge-Kutta method like RK4, then you should try an implicit method. Implicit methods, because they are doing more work, solving an implicit system via a Newton method having “better” stability, should be…
1984
If all the world were a monorepo
The R ecosystem and the case for extreme empathy in software maintenance
1985
Public static void main(String[] args) is dead
Holy fucking shit did this suck 1 . There is a comments section below. Give your eulogy for that piece of shit sorcerous incantation there or wherever else.
1986
Why do we keep gravitating toward complexity?
The Great Pyramids took decades to build. It was a monumental feat of human ingenuity and collaboration. Today, we software developers erect our own pyramids each day - not from stone, but from code. Yet despite far more advanced tools, these systems don’t always make the experience better. So why, when KISS (Keep It…
1987
Addendum to GPT-5 system card: GPT-5-Codex
This addendum to the GPT-5 system card shares a new model: GPT-5-Codex, a version of GPT-5 further optimized for agentic coding in Codex. GPT-5-Codex adjusts its thinking effort more dynamically based on task complexity, responding quickly to simple conversational queries or small tasks, while independently working…
1988
React is winning by default and slowing innovation
Exploring how React's dominance by default stifles frontend innovation, and why deliberate framework choices lead to better tools for performance, developer experience, and ecosystem diversity.
1989
GPT-5-Codex
Codex just got faster, more reliable, and better at real-time collaboration and tackling tasks independently anywhere you develop—whether via the terminal, IDE, web, or even your phone.
1990
Asciinema CLI 3.0 rewritten in Rust, adds live streaming, upgrades file format
News about asciinema development and new releases
1991
Programming Deflation
When Code Gets Cheaper Every Day
1992
A dumb introduction to z3
Exploring the world of constraint solvers with very simple examples.
1993
Which NPM package has the largest version number?
I spent way too much time on this
1994
Writing an operating system kernel from scratch
Exploring a minimal implementation of a time-sharing kernel on RISC-V, implemented in Zig, on top of OpenSBI.
1995
Safe C++ proposal is not being continued
One year ago, the Safe C++ proposal was made. The goal was to add a safe subset/context into C++ that would give strong guarantees (memory safety, type safety, …
1996
RIP pthread_cancel
I posted about adding pthread_cancel use in curl about three weeks ago, we released this in curl 8.16.0 and it blew up right in our faces. Now, with #18540 we are ripping it out again. What happened? short recap pthreads define “Cancelation points”, a list of POSIX functions where a pthread may be cancelled. In…
1997
1998
How Container Filesystem Works: Building a Docker-Like Container from Scratch
Learn how Linux containers are built from the ground up. Starting with the mount namespace and a root filesystem, see why PID, cgroup, UTS, and network namespaces naturally follow - and how this foundation makes concepts like bind mounts, volumes, and persistence in Docker or Kubernetes much easier to grasp.
1999
My first impressions of Gleam
What I’ve learned in my first few hours using Gleam for a small project.
2000
AI coding
In my old age I’ve mostly given up trying to convince anyone of anything. Most people do not care to find the truth, they care about what pumps their bags. Some people go as far as to believe that perception is reality and that truth is a construction. I hope there’s a special place in hell for those people.
2001
Java 25's new CPU-Time Profiler
Learn all about Java 25's new CPU-time profiler and why it matters in this weeks blog post from the creator himself.
2002
I used standard Emacs extension-points to extend org-mode
Recently I read this beginners guide to extend Emacs. The guide is perfect for starting out with elisp and it shows a lot of care in teaching how to interact with Emacs.
2003
Migrating to React Native's new architecture
Shopify successfully migrated two of its largest apps, Shopify Mobile and Shopify Point of Sale (POS) to React Native's New Architecture while maintaining weekly releases and serving millions of merchants. This migration involved a complex codebase with hundreds of screens and native modules, extensive custom…
2004
UTF-8 is a brilliant design
Exploring the brilliant design of UTF-8 encoding system that represents millions of characters while being backward compatible with ASCII
2005
A beginner's guide to extending Emacs
How to build a custom completion backend for emacs from scratch.
2006
Crates.io phishing attempt
Earlier this week, an npm supply chain attack. It’s turn for crates.io, the main public repository for Rust crates (packages). The phishing e-mail looks like this: And it leads to a GitHub login pa...
2007
Many hard LeetCode problems are easy constraint problems
Use the right tool for the job.
2008
Death to type classes
Death (XIII) Symbolizes significant change, transformation, and endings, rather than literal physical death. Have you ever seen a Number grazing in the f
2009
PythonBPF – Writing eBPF Programs in Pure Python
I brag about my newest obsession.
2010
Rails on SQLite: new ways to cause outages
This post was originally given as a talk for Friendly.rb and Kaigi on Rails. The slides are also available. Between Litestack and the Rails 8 trifecta of Solid Cable, Solid Cache, and Solid Queue, it’s easier than ever to spin up a Rails app that doesn’t need a database service, or a redis service, or a file storage…