The Switzerland federal government requires releasing its software as open source, Google decides not to deprecate third-party cookies, Mark Zuckerberg says "open source" AI is the path forward, GitHub allows anyone access to deleted / private repository data & Tailscale wants to build a New Internet.
Brendan Gregg details how eBPF can help us have no more blue Fridays, Misty De Meo thinks GitHub is starting to feel like legacy software, Gavin D. Howard does not want Rust to be used for everything, The Notion team published a deep dive into how they used the WASM version of SQLite to improve browser performance & Gregor Ojstersek writes up how to build good relationships inside and outside your engineering teams.
Marcus J. Ranum's 2005 post on dumb ideas in computer security still holds up, Barry Jones argues why story points are useless, Posting is an HTTP client as a TUI, Varnish ceator Poul-Henning Kamp (_phk_) reflects on ten years of working on the HTTP cache & es-tookit is a major upgrade to Lodash.
Marcus Buffett writes his younger self programming advice, Swyx asks and answers whether or not DevRel is dead, the Ghost team opens up their ActivityPub server, Pongo is like MongoDB but on Postgres, Jack Kelly is funding Ladybird because he can't fund Firefox & Hyrum's Law.
Software developer jobs are trending down, the creator of dotenv creates a better dotenv, the Chrome team puts Gemini Nano AI model right inside your browser, a pollyfill.js supply chain attack hits 100k+ sites & Steph Ango asks, "What can we remove?"
Søren Fuglede Jørgensen builds a font thats also an LLM, Hugo Landau writes about the demise of the mildly dynamic website, SQL Studio is the simplest little database explorer ever, Mathew Duggan reviews GitHub Copilot Workspace & Stephan Schmidt lays out the case against mocking + what to do instead.
Luminousmen writes about Senior Engineer Fatigue, Microsoft rethinks its AI-based Recall feature, Mike Hoye gives a big shout out to the "diff" program, Thom Holwerda covers ChromeOS' quiet switch to Android Linux subsystems & Mihail Eric tells the inside story on how Alexa dropped the ball on being the top conversational system on Earth.
Apple announces its "new" style of AI, piku gives you "git push" deployment on your own servers, Dabo Chen rebuilds nanoGPT in a spreadsheet, Mark Seemann thinks you'll regret using natural keys in your database design & Glyph Lefkowitz describes his grand unified theory of the AI hype cycle.
A popular open source iOS authenticator app goes rogue under new ownership, Andreas Kling steps back from SerenityOS & forks Ladybird, Vhyrro takes a thought-provoking try at a "static effect system", Matt Bessey is over GraphQL & Marc-Andre Giroux still likes GraphQL sometimes (in the right context).
Swizec's article on not using AI to writes tests, LlamaFs is a self-organizing file system with Llama 3, a Pew Research analysis confirmed that the internet is full of broken links, Sam Rose built a spectacular interactive study of queueing strategies & Jordan Cutler shares a real-life experience of him writing clear/readable code... and it backfiring.
Taylor Troesh writes Kyle explaining "Legacy Software" to the aliens, Vitaly Friedman addresses why so many designers feel misunderstood and under appreciated in business contexts, Oracle dumps Terraform for OpenTofu & hackers discover how to reprogram NES Tetris from within the game.
Tim Fisken explains the problem with soft deletion, a simple measure of software dependency freshness is proposed, a deep-dive on sound design in software, a web app with over 80 handy developer tools built in & Luke Plant reminds us that programming mantras are proverbs, not laws.
Bahaa Zidan says your web framework doesn't matter, DHH writes about magic machines, Dylan Huang reviews thousands of opinions on HTMX, Tim Ottinger says programming is thinking & Tim Spann says small language models (SLM) for the win.
Daniel Hooper lists out all the good ideas in computer science, Jeff Geerling declares 2024 the year corporate open source dies, Jared Turner says all kinds of works-in-progress are waste, Daroc Alden covers the leadership crisis in the Nix community & John Hawthorn explains why Ruby may be faster than you think.
Forrest Brazeal is concerned about the open source threat from within, Vicki Boykis explains why Redis is forked, John O'Nolan and the Ghost team plan to federate over ActivityPub, Llama 3 is now available for "businesses of all sizes" & nolen writes up questions to ask when you don’t want to work.
YouTuber "Internet of Bugs" breaks down why AI "software engineer" Devin is no Upwork hero, Redka is Anton Zhiyanov's attempt to reimplement Redis with SQLite, OpenTofu issues its response to Hashicorp's Cease and Desist letter, Brian LeRoux introduces Enhance WASM & PumpkinOS is not your average PalmOS emulator.
HashiCorp sends OpenTofu a nasty-gram in the wake of Matt Asay's infringement claims, Polar is like Patreon but for software creators, a Common Corpus of LLM data is released on HuggingFace & Loki is an open source tool for fact verification.
The big story right now is the recently uncovered backdoor in _liblzma_ (aka _XZ_) – a relatively obscure compression library that happens to be a dependency of OpenSSH. This incident is noteworthy for so many reasons: the exploit itself, how it was deployed, how it was found, what it says about our industry & how the community reacted. Let's dig in!
Redis' re-licensing prompts forks like Drew DeVault's Redict, Matthew Miller thinks we need more community built software, Paul Gross makes the case that DuckDB is the new jq, Anton Zhiyanov shares how he makes a living as a developer despite being "pretty dumb" & Baldur Bjarnason chimes in on the state of the web developer job market.
A new badge for open source projects that won't be getting any maintenance, everything Chip Huyen learned from looking at 900 open source AI tools, CNBC writes up tech's renewed layoff trend, Teable is a Postgres-Airtable fusion & Target announces an open source fund.
Puter puts an entire operating system in your web browser, the kapa.ai team write down how to structure your docs for LLMs, Daytona is an open source Codespaces alternative, Gleam v1.0 has been released & Rolldown is a JavaScript bundler written in Rust.
Apple backs off killing web apps (but the fight continues), Luka Kladaric writes about how to ship quality software in hostile environments, Deno's new package registry is an npm superset, Martin Fowler on the value of periodic face-to-face & Eugene Ghanizadeh wants us to get more decentralized than the Fediverse. Leave us nice words!
GPTScript is a new scripting language to automate your interactions with LLMs, Adam Wiggins conducts a retrospective on Muse, Nikita Prokopov surveyed a bunch of popular websites to see how much JS they loaded on their pages, Pages CMS is a no-hassle CMS for GitHub pages & Jim Nielsen writes about the subversive hyperlink.
Ship It is back! IEEE Spectrum writes about quantum computing's reality check, Maxim Dounin announces freenginx, Nadia Asparouhova goes deep on AI & the "effective accelerationism" movement, Angie Byron helps first time open source contributors avoid common pitfalls & Miroslav Nikolov writes up his advice for high-risk refactoring.
Changelog Beats drops a new Dance Party album, Will McGugan's new Toolong (`tl`) terminal app, Mitchell Baker is out as Mozilla CEO, Microsoft's Jordi Adoumie announces sudo for Windows, Tatu Ylonen tells the tale of how they got SSH to be port 22 & Jack Lindamood gives an "Endorse" or "Regret" rating for ~50 different services, tools & processes he used over the 4 years he led infrastructure at a startup.
Geoffrey Litt thinks browser extensions are underrated, Adolfo Ochagavía on being a generalist in a specialist's world, Jack Garbus praises the Arch Wiki, Terence Eden tries to rebuild FourSquare for ActivityPub using OpenStreetMap & Sebastien Dubois teaches us how to connect ideas together.
The Rune team announces $100k in open source grants for indie game devs, the Zed code editor is now open source, the Ollama team releases Python & JavaScript libraries, Max Bernstein tells the story of Scrapscript & Pooya Parsa writes up some notes from a tired maintainer.
Alex Ellis' new actions-batch project uses GitHub Actions as a time-sharing supercomputer, DevDocs.io combines multiple API documentations in a fast, organized, and searchable interface, Jarred Sumner announces Bun's very own JavaScript shell, Shoelace is a forward-thinking library of web components & Martin Heinz writes an awesome guide to building an indoor air quality monitoring system with Prometheus, Grafana & a CO2 sensor.
Niklaus Wirth makes his plea for lean software, PocketBase puts your entire backend in 1 file, Vanna is a Python RAG framework for accurate text-to-SQL generation, Henrik Karlsson wants you to think more about what to focus on & Calvin Wankhede shares how he built a fully offline smart home (and you should too).
Daniel Stenberg is frustrated with the state of AI tooling for finding security bugs, Brian Birtles is surprised by weird things engineers believe about web dev, Feross Aboukhadijeh details the fallout from a nasty npm prank, Rob Pike shares what he thinks they got right and wrong with Go & Gavin Howard writes up why he believes "all code is tech debt" is all wrong.
