The Cyber Resilience Act mandates that commercial software handle vulnerabilities well. What does that mean exactly? The CRA names sound principles in Annex I Part II, but applying them in practice is another thing.

My FOSDEM talk: The Cyber Resilience Act and web browsers The Cyber Resilience Act defines web browsers as an important product requiring special attention to cybersecurity requirements. What does this mean? How can you participate in defining in what it means for a web browser to be secure?

RESCHEDULED: Please join Daniel Thompson-Yvetot and me on Tuesday the 27th, at 1 PM Central European Time for an interactive deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...

Rescheduled for Tuesday, the 27th at 1 PM. Hope to see you there!

This event is postponed. I'll post here again when it is rescheduled.

Please join @denjell.bsky.social and me on Thursday, 3:30 PM Central European Time for a deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...

I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.

I have left work and standards for now to focus on my health. Thanks everyone for understanding.

I take a deep dive into Interop 2025; why the project is there, how it picks what browser features to focus on each year, how well it's doing and what the big areas for this year are - a mix of cleaning up existing features and making sure new features arrive already interoperable

It’s concerning me how overconfident people who want Pierre Poilievre to lose are sounding right now. It’s reminding me how sure people were that Trump would lose. Dont let Trump win in Canada. POLLS DON’T WIN ELECTIONS. TURNOUT DOES. Don’t assume. Vote. #CanadaStrong #ElbowsUp #VoteCarney

If there is a sale of Chrome, the buyer should be required to spend at least 25% of their revenue on the core browser engine and standards development. Browsers are enormously profitable, but a new owner might try to run things for the short term.

American friends: here are some resources on how to seek asylum in Spain as a trans person under the Trump admin. help.unhcr.org/spain/en/sol... Even if your application is denied, if by then you have a legal residency permit (work, studies...), you can stay. www.igualdad.gob.es/wp-content/u...

European Union Vulnerability Database (EUVD) by European Union Agency for Cybersecurity (ENISA) is valid Option as compensation of the MITRE #CVD. We will see, if and how this will work to address the fashists way of disruption via #Project2025 I whish all the best for #EUVD ❤️ euvd.enisa.europa.eu

Everyone is going crazy trying to implement software supply chain security so that they aren’t deploying code with known vulnerabilities. But with the MITRE news, that might become helpfully scoped down: You can’t ship any new vulnerabilities if there are no more CVEs!

Crazy but not so surprising given the context. Computer security will suffer from continued degradation of the CVE system. Various EU laws mandate the creation of cybersecurity institutions that, in principle, should play a similar role. I hope that can work.

ECMAScript Excitement 🎉 Today, TC39 advanced these proposals: 2️⃣.7️⃣ Upsert 1️⃣ Composite Keys and withdrew Records & Tuples

Hyped for many ES proposals being discussed next week! - Enums 🙈 - Composites - Object.propertyCount This little Object.propertyCount() API improvement to count object keys is so much needed Can't believe we lived without this for so long

This is Utah in case anyone’s wondering how pissed off people are. I have never seen anything like this.

What I like about this plan is that it would preserve Ecma’s ECMAScript trademark while nullifying Oracle’s JavaScript one

Oh, no!

CSS might feel like it's moving fast to you, but i assure you, these things take forever there's so much Chrome process, public publishing, reviews, and more that go into a feature getting into your browser

My toxic belief is that instead of defining things like genocide, they should have focused on making it a crime against humanity to kill, say, 10,000 people. Inside or outside your country, men or women or children, you’ll be hauled in front of an international tribunal if you commit decakilomurder.

It's critical for everyone to remember what an Executive Order is. It is the President communicating orders to members of the executive branch. Policies to pursue, actions to take, etc. They are not laws. They are not close to being laws. They are formalized memos to employees. That's all.

the long term consequences of choosing marketing over ecosystem can't be undone

You want a unique name for your kid? That's what uuids are for. Here 09ee8dc2-c9c7-42ac-b10c-d97044616acb

Around 60 folks have already registered for onsite participation on the Web Engines Hackfest 2025: webengineshackfest.org#attendees Remember that registration is still open, the same than CFP for talks and breakout sessions (onsite or remote).

What kind of member functions don't bankers like? . . . . . . . . . . . . . . . . . . . . . . . . . . Defaulted ones 🥁 #CPlusCplus

From The Twitter Vaults: Inspiring! This Woman Got Over Her Crush By Reviewing His Pull Request

Bloomberg Backs Open Web Docs to Support High-Quality Web Platform Documentation for All www.bloomberg.com/company/stor...

We're happy to announce that Bloomberg joins Open Web Docs! openwebdocs.org/content/post...

Bloomberg is now sponsoring @openwebdocs.org ! www.bloomberg.com/company/stor...

When people talk about the need for a positive masculinity I think they’re missing that “masculinity” has no real content other than domination. What’s changed is that *human*virtues—integrity, honesty, leadership—were for a long time seen as men’s exclusive domain.

I don't think Democrats should surrender on "DEI" for the same reason I don't think we should surrender on "trans sports". The actual demand in both cases is that the affected caste of people disappear from public society, and that is not something we should (or can!!) deliver upon.

It’s wild that everyone who wants America to be “run as a business” seems to want lower taxes. That’s not what a business would do if it had a monopoly and the violence of the government behind it to set whatever price it wanted. A business would send taxes through the roof.

Apropos of nothing in particular: DM me (Signal in homepage) if you want to chat about the Spanish immigration system,,,

The AmsterdamJS Special Edition meetup with #TC39 members was yesterday at @jetbrains.com. It was incredibly interesting to hear about the history of the decorators proposal from @littledan.dev and the current state of MessageFormat from Ujjwal Sharma...

On my way to record a podcast with @wordman.dev at JetBrains’ Amsterdam office, where he will grill me about TC39.

During tonight's AmsterdamJS #Meetup Special Edition with #TC39 Members (1800 CET), I will share the history of the #JavaScript Decorators proposal, which is now in Stage 3 of Ecma TC39's standardization process www.meetup.com/amsterdamjs/...

Don’t miss tomorrow’s #AmsterdamJSMeetup 🚀 • @littledan.dev - A History of TC39's JavaScript Decorators proposal • Ujjwal Sharma - MessageFormat: The future of i18n on the web • @snek.dev, @littledan.dev, Ujjwal Sharma - TC39 Panel 💥 Register now: guild.host/events/amste... 📅 See you on March 12!

... Agenda: – Talk: A History of TC39’s JavaScript Decorators Proposal by @littledan.dev – Talk: MessageFormat: The Future of i18n on the Web by Ujjwal Sharma – TC39 Panel with @littledan.dev, Ujjwal Sharma, and @snek.dev Welcome!

Alt history where it’s today except European countries are all monarchies still somehow. To promote European unity amid a fraying transatlantic alliance, furious intermarriage ensues among the various royal houses. Interest rates rise as nations emit more debt to finance all the wedding parties.

Someone should write an alt history where the EU constitution passed around 2006 instead of failing in the French and Dutch referenda. Would be fun to see a projection of current events from the US in that parallel universe. (A girl can dream!)

In this Ohio diner, a strategic reserve still means the flask you keep in your Carhartt jacket for when the bartender cuts you off. But they do know this: the United States government needs to stockpile crypto to make sure we don’t run out of crypto.

i started mr boop just over 5 years ago. isn't that nuts. hope you're all having a good day

node folks put a lot of energy to backport important features, so the ecosystem can move forward years in advance. It requires a ton of hard work that sometimes goes unnoticed. To everyone working on node, we appreciate your efforts 🙏

NO KINGS NO SLAVES NO NAZIS gets you the three good American wars, in chronological order no less. sounds insane to argue against any of them and yet it is very clear which side you're on

The European SaaS market is dominated by just a few high-margin providers, mostly foreign. The most efficient option for public procurement is to pool resources to develop standard, compatible, open-source solutions. This would enable a competitive market of SaaS operators with much lower prices.

cia.gov has been running an outdated version of Gatsby.js with two active high severity CVE’s for at least 3 weeks — I’m sure it’s fine! socket.dev/npm/package/...

What better way to show global leadership than for EU+UK+Canada to pick up from the US’s PEPFAR HIV care program, saving 20 million lives and stopping transmission? It could be cheaper and more effective than ever using lenacapavir, an every-six-months injection for treatment or prevention.

Well, as America implodes from within, it’d be a *great* time for the EU to finally do official Eurobonds. It’d likely be very attractive as a safe haven given the destruction of US hegemony & spillover to US T-bills. Bonus: Eurobonds can finance a desperately needed European security build up! 🇪🇺💶 ‼️