𝗣𝗼𝘀𝘁 𝟭/𝟰: End of a heavy week covering CVE-2025-55315 across podcast episodes and technical analysis. If you're running ASP .NET Core applications and haven't taken action yet, you're accepting significant risk. The exploitation window is already open.

S08E08 - Building on .NET 10: A Chat with Kajetan Duszyńsk, Author of '.NET 10 Revealed' Join Jamie Taylor as he discusses the latest updates and exciting features in .NET 10 with Kajetan Duszyńsk, a renowned expert in the field. From the new book ‘.NET 10 Revealed’ to the future of ASP.NET Core,

It's when you realise that Apple's deal with TV and Movie producers state that the villains can't use Apple products, it kinda ruins most content where people use mobile phones.

Fifteen Years xkcd.com/3172/

Do you use #ClaudeCode and want it to be set up with #secureCoding best practises? Then check this repo out github.com/TikiTribe/cl...

𝗣𝗼𝘀𝘁 𝟭/𝟱: I've written a comprehensive analysis of CVE-2025-55315 (the Funky Chunks vulnerability) for decision makers who need to understand business impact beyond just "update your software". rjj-software.co.uk/blog/cve-202...

Because of course. www.mikeayles.com#kidoom But also (and I've been banging this drum for many years) its because the Doom engine is one of the best software engineering projects out there. Go read the Doom source code, and I guarantee you'll become a better engineer.

I don't know whether it's a #ClaudeCode thing or a #dotnet thing, but I keep finding Claude unable to detect when .NET commands complete. It usually spins waiting for a term signal (or something), but I've seen that it throws a long timeout on the command then just waits.

Did you know about Nuggy by @captainsafia.com? I've been using it along side my LLM agents to take a look through NuGet packages that have little to no public docs, but docs embedded in the package. github.com/captainsafia... ...

Mobile phone OS developers, I have some advice for you: the power button? It's for power related operations, not screenshots, opening the camera (with one press), anything other than power operations We have decades of UX telling us that "press the power button and power things will happen."

𝗣𝗼𝘀𝘁 𝟭/𝟲: ⚠️ We just released an urgent bonus episode about CVE-2025-55315. Microsoft calls it one of the worst .NET vulnerabilities ever. CVSS score: 9.9 out of 10. This affects ALL ASP .NET Core apps from .NET Core 3.0 onwards. dotnetcore.show/season-8/hay...

I've been using GitHib Copilot to check my PRs recently and have enjoyed the experience so far. But I've learned a few things along the way, and wanted to share them. (I might expand this to a blog post in the near future).

𝗣𝗼𝘀𝘁 𝟭/𝟱: New episode of The Modern .NET Show is live with Hayden Barnes from HeroDevs. We talk about why open source maintenance needs a complete rethink, especially when .NET's 3-year LTS cycle forces enterprises into constant migration mode.

I've been going through my music library, by album, in alphabetical order. I've been rating individual songs as I go. Until I hit "Songs In The Key Of Life", which is banger from start to finish. A true testament to the phrase "get out of the way and let the artist do what they do."

Want to learn a bit more about me? Well, pages 40 and 41 are about me; so you could start there, I guess. (link should take you directly to page 40) smenews.digital/issues/q4-20...

Oh boy. I'd forgotten about what merging sln files was like. I sure am glad that slnx exists. As soon as I can, I'll be upgrading this project to use slnx.

𝗣𝗼𝘀𝘁 𝟭/𝟰 Friday reflection on the week: Started with award recognition for strategic consulting work. Explored testing automation with Playwright. Discussed programming principles around simplicity. Connected it all: accessibility and simplicity drive better outcomes.

If you learn one thing today, please let it be about CVE-2025-55315. And if you want a place to start, you could try this conversation I had with @unixterminal.bsky.social: dotnetcore.show/season-8/hay...

S08E07b - Hayden Barnes and CVE-2025-33515 In this bonus episode of The Modern .NET Show, we welcomed Hayden Barnes back to the recording booth to talk about what has been called ’the worst .NET vulnerability ever’, what it is, how it affects you (because it will), and what you need to do to prot

S08E07 - Hayden Barnes on .NET NES: Why We Need a New Approach to Open Source Maintenance In this exclusive conversation, Jamie interviews Hayden Barnes from HeroDevs, a company that offers ‘Never Ending Support’ (NES) services to help organizations keep their applications running smoothly. The t

𝗣𝗼𝘀𝘁 𝟭/𝟯 Week's wrap: simplicity, strategy, and sustainable practices. From award recognition to testing automation to programming principles, the theme stayed consistent: Remove unnecessary friction. Manage complexity. Build sustainable systems. Easy to say. Hard to do.

Wrapped on a recording with @unixterminal.bsky.social about this very thing a few hours ago. It's with the editor, and it'll be released as soon as it's ready.

𝗣𝗼𝘀𝘁 𝟭/𝟰 This week's theme: simplicity drives better outcomes. Playwright makes testing accessible through natural language. "The Rules of Programming" emphasises interface simplicity over implementation complexity. Different domains, same fundamental truth.

𝗣𝗼𝘀𝘁 𝟭/𝟰 "Programming is complicated, and your productivity is gated on that complexity. Keep things simple." Just revisited "The Rules of Programming" by Chris Zimmerman. The insights hit different when you've spent years debugging overcomplicated solutions. Thread 👇

I wonder if anyone in the #dotnet space would be interested in doing a really short PSA-style bonus episode about the recent "worst CVE in .NET" and what folks need to do about it. I'm thinking a super short, 30 minute discussion, gonzo style one shot. I'll be recording in the next 24 hours.

This is super cool. Not only do I remember playing Honda Castrol Superbike back in the day, but this whole article is full of interesting forensics about the game. Compiled in debug mode, didn't check bounds properly, etc. We don't always get things right, and that's ok. seri.tools/blog/castrol...

𝗣𝗼𝘀𝘁 𝟭/𝟰 Latest Modern .NET Show episode with Debbie O'Brien from Microsoft is brilliant. Playwright + MCP Server = testing with natural language. The AI actually navigates your website and sees what's there. Not guessing. Taking actual snapshots. Mind. Blown. 🤯

𝗣𝗼𝘀𝘁 𝟭/𝟰 Big news! RJJ Software has been named Best Strategic SME Tech Consultancy 2025 by SME News. This validates our pivot from "we'll build your software" to "we'll help you make better technology decisions." Knowledge transfer over dependency creation 🎯

I wonder whether we can change the narrative around LLM use. It's not about increasing productivity, it's about reducing toil. What LLMs are really, really good at is the crappy little tasks that you have to do, day in and day out. It's not about the big tasks, it's about the smaller ones.

If you'd like to talk #dotnet with me on The Modern .NET Show, please do get in touch. We have slots available for the March and April episodes, but they're filling up fast.

RJJ Software recognised as Best Strategic SME Tech Consultancy 2025! This award celebrates our work helping companies navigate technology decisions through fractional CTO services. Thanks to our amazing clients and the tech community for the support! Read more: rjj-software.co.uk/news/rjj-sof...

S08E06 - Testing Made Easy: Debbie O'Brien Explains Playwright and its Game-Changing MCP Server In this exclusive conversation, Debbie shares her insights on how to harness the power of AI-driven testing tools to improve your web development skills. From playing with GitHub Spark to leveraging Yo

(𝟭/𝟯) The Modern .NET Show with @mikekistler.bsky.social covered why MCP deliberately keeps humans in the loop. When an LLM wants to use a tool, it asks YOUR application for permission. You approve or deny. The LLM can't go rogue and rm -rf your system. Brilliant design decision.

Three awards is great, but when you have four lanyards.... (p.s. this shelf is behind me on all calls, at all times)

And just like that OwaspHeaders.Core supports #dotnet 10. The change was really trivial: just add net10.0 to the TFM and rebuild. (there was some GitHub cruft to clear up and CodeQL doesn't seem to support .NET 10 just yet) NuGet: www.nuget.org/packages/Owa... Attestation: github.com/GaProgMan/Ow...

(𝟭/𝟯) "What's she going to contribute to technical discussions?" Three weeks later, that Customer Success rep casually mentioned a manual workaround customers were doing daily. One developer fixed it in five lines. Customer satisfaction jumped 15%. That's the CoP magic 💭

This. I grew up using Windows. I started with 3.11, and've used most versions since. What Dave says here is constructive criticism, and I agree with his points. I don't use Linux and MacOS because "Microsoft = evil", I use those because they don't get in my way. www.youtube.com/watch?v=oTpA...

(𝟭/𝟰) Latest episode of The Modern .NET Show dropped, and it's a goodie. @mikekistler.bsky.social from Microsoft breaks down OpenAPI and Model Context Protocol. Both are transforming how we build APIs and AI-powered tools. Some genuinely mind-blowing moments in this one 👇

Apple just released the Mankini for iPhone www.apple.com/newsroom/202...

"Most of the time, when someone is yelling at you it is because they are having the worst day of their life." Fantastic single-line piece of advice from @superdillin.bsky.social's appearance on "Daily Tips That May Or May Not Help You" www.youtube.com/watch?v=g3GB...

I once asked, over on Mastodon, whether it was time to move off of LibSyn, and @james.crid.land mentioned that it wasn't something to be too worried about. But with LibSyn closing their own podcast (The Feed) without much fanfare, it might be time to migrate The Modern .NET Show.

Long overdue in my opinion. Super over the moon about Mega Ran being nominated, and am looking forward to hearing the results. #VoteMegaRan

A sample of some of the really super cool things coming in .NET 10, which releases tomorrow. Get reading friends.

(𝟭/𝟰) Watching two teams discover they'd been building the same solution for three months was painful. What happened next was magic. A Community of Practice turned that waste into their innovation engine. Here's how👇

Do you know what I really dislike about SOME (heavy emphasis on the SOME part) of the tech community? "I learned the hardest, so you have to too." Can that attitude please go die in a dumpster fire? The reason we've made things easier is not to dumb them down, but to lower the barrier to entry.

Based on the recent conversation I had with @mikekistler.bsky.social, I'm looking at creating @ #ModelContextProtcol server specifically for searching the podcast website (dotnetcore.show). I already have a few ideas. Let's see if I can figure it out.

🎤 TODAY 4PM: "Empathy, Sympathy, and Compassion" at #Umbraco in the City! Final session before closing. Completely refreshed content featuring new quotes from open source experts and unreleased Modern .NET Show episodes.

S08E05 - Building the Future of APIs: Mike Kistler's Insights on OpenAPI and MCP In this exclusive interview, Mike Kistler delves into the world of open API documentation with us, discussing the latest developments in Microsoft’s MCP initiative. From its origins to its current applications, Mike

💙 Tomorrow 4PM: "Empathy, Sympathy, and Compassion" closes #Umbraco in the City. Core message: "When we build technology without compassion for users, we perpetuate a legacy of contempt that's been with us since the 1960s. Time to break that cycle."

An oldie, but a goodie wthhyb.sacha.house