2026 is the year Bluesky and the Atmosphere really come alive here's what's next bsky.social/about/blog/0...

My AI code generation has decided it can generate an inline private key pair by itself, and I think we might be in trouble...

Happy Cloudflare is down once again to all who celebrate

A perfect CVSS 10 🧑🏻‍🍳💋 CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Upgrade immediately!

Being hit by my first DDOS attack right now, it's all quite exciting!!!

Big milestone: HTTP Toolkit just crossed one million downloads! 🚀 Honestly I didn't think it'd ever get this far, I'm blown away. A huge thanks to all the users, contributors & supporters over the years ❤️. Onwards!

Europe has plenty of problems that need solving. But it’s surprising how the brain-virus of ‘Europe only produces regulations’ has taken root. In reality, EU exports are higher than the US and comparable to China’s. Or in supercomputing, Europe ranks 2nd in the world.

Just in case Shia-Hulud is making you paranoid as well, did you know you can link SSH keys to a Yubikey? ssh-keygen -t ed25519-sk -O resident -C "[email protected]" Requires a tap to confirm any git push. Even if malware steals your ssh key files, they're useless without the physical key.

cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents

These AWS & Cloudflare mega-outages are honestly embarrassing as an industry. Eugh. What are we doing??? We have so many tools & processes for ensuring reliability, but somehow two vendors can each single-handledly wipe everything out anytime.

The latest npm attacks & changes have pushed me to set up Trusted Publishing via GitHub Actions, and honestly it's actually fantastic. Didn't realise how much hassle & friction manual publishing was. npm version + push --tags is incredibly convenient (and safer + more verifiable for everyone!)

I've basically been listening to this album on a loop for the last couple of weeks now, highly recommended. I definitely don't like all jazz, but sometimes it really can be spectacular: open.spotify.com/album/5whNm4...

Barcelona is the first city in the world to commit to the UN's #opensource principles: ajuntament.barcelona.cat/digital/en/a... (specifically, these: unite.un.org/en/news/osi-..., including OSS by default, open participation & interoperability) Glad to be building HTTP Toolkit here! Great city.

i write to you with solemn news. i am in paris, writing my life’s only masterwork. i spend my days drinking good espresso and smoking inexpensive cigarettes, writing clear and hard about what hurts. as such, i cannot ‘Log On’ - and friend - i will not attend your ‘laser-focused mesh network webinar’

It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...

tired: it's always DNS inspired: ICANN feel it coming in the air tonight

Curious to see if after yesterday's AWS shitshow (a major outage, sure it happens, but also very poor communication & extremely slow recovery) anybody is considering alternatives? I'm honestly surprised by the level of dominance of AWS, there are plenty of other interesting options out there.

After the recent npm attacks, really feels like the wind is in the sails of passkeys. Unphishable auth suddenly seems like a core requirement! Currently going through providers to make sure I've got my yubikeys everywhere... Surprisingly limited options even in pure infra providers like @bunny.net.

Node v25 is here! github.com/nodejs/node/...

Another year of paying #opensource maintainers for their hard work 🦾 alongside the rest of the OpenSourcePledge.com#opensourcebusinesses, and to celebrate: we're back up on the NASDAQ tower in Times Square!

Very interesting to see engineering.fb.com/2025/10/07/o... but a bit sad. I'm yearning for a world where React simplifies down again and focuses on a core base, but it definitely feels like expansion & adding complexity is the name of the game right now. No change here.

I gave a talk today at @nordicjs.com about shipping Node.js packages in 2025...or how to transition from shipping dual/faux-ESM/CommonJS to shipping ESM directly! Slides at github.com/joyeecheung/...

messenger.abeto.co This is freaking insane. The level of polish necessary for this visual fidelity and it all runs flawlessly on mobile. Hats off.

RFC 9842 is HTTP Compression Dictionary Transport -- this is a big one! Congrats @Yoav and @PatMeenan ! https://www.rfc-editor.org/rfc/rfc9842.html

i wrote about atproto and why it matters

What if GraphQL leaned harder on straight JSON without the magic query & schema language, integrated effortlessly with TypeScript, worked bidirectionally, and supported full pipelining for transparently chaining queries & operations? This looks neat: blog.cloudflare.com/capnweb-java...

Today is the 30th anniversary of Hackers

> For context, I was using HTTP Toolkit to [briefly explain your intended use, e.g., testing API traffic during a penetration test engagement / debugging my application] Ah, thank you, yes that does indeed add some very useful context to your email.

Conclusion after playing around with this for a few months: it's still very rough and still quite immature sadly. Testing out Fly.io nowadays as an equivalent for testserver.host (which needs anycast + global distribution + persistence + easy automatic deploy/scaling) and it's going well so far 🤞

Is more funding possible for open source maintainers in Europe? 🇪🇺 A new study commissioned by GitHub explores why creating an EU Sovereign Tech Fund could provide sustainable resources for critical OS projects. Learn how you can help make it a reality.👇 github.blog/open-source/...

New milestone, first person being threatened with legal action for using HTTP Toolkit 😬 www.reddit.com/r/Avvocati/c...

Started exploring Meshtastic recently (meshtastic.org). It's... surprisingly mature? I expected something much rougher, but it's basically a very functional text/gps-only whatsapp that just doesn't need an internet connection. Feels like magic.

For 20 years Mozilla has developed one of the most useful tools for web devs. developer.mozilla.org/en-US/blog/m... Congrats to the MDN team on an awesome milestone. I'm happy that we've played a small part in its history and I'm excited to see it continue to be at the core of every web dev's job.

I've been doing some ridiculously neat reverse engineering recently. Check this out: github.com/httptoolkit/... That code is modifying functions inside Flutter apps, without debug info, by *fingerprinting known chunks of assembly* for each CPU architecture, and then scanning memory to find them 🤯

Love to see parody this good being delivered with a working Python implementation: robertheaton.com/minor-miner/

An exciting milestone: I just received my first "You must've removed/broken this feature, because ChatGPT said this would work but it doesn't" bug report, for a feature that has never existed 🤦

🚀 Help shape the future of Node.js! If you're a contributor or maintainer, the Next 10 Survey is your chance to make your voice heard. 🗳️ Take the survey + make a difference: linuxfoundation.research.net/r/2025nodene...

Pushing the boundaries of clean, maintainable Python. susam.net/elliptical-p...

Just spent 7 hours experiencing life sans electricity here in Spain - we're totally fine, but wow the world does not function in very basic ways, and if you don't own a radio you really have zero information or ability to communicate.

📅 Reminder: Node.js 18 is scheduled to reach End-of-Life on April 30, 2025. We recommend that you update to Node.js 20 or 22 as Node.js 18 will no longer receive security updates once it reaches End-of-Life.

hello, world

[bluesky timeline] me: [chanting] blogs, blogs- other users: blogs, BLOGS bluesky staff: [pounding their computers] BLOGS, BLOGS, BLOGS!

0.1 + 0.2 == 0.3

Styled components has officially moved into maintenance-only mode: https://opencollective.com/styled-components/updates/thank-you That's the bell I think, the era of runtime css-in-js libraries is now definitively over. So long and thanks for all the divs.

require(esm) was just enabled by default in the latest Node v20! Node v18 LTS support ends on April 30th, and as of that date you'll officially be able to use ESM & CommonJS together easily in all supported versions ♥️ #nodejs #esm #javascript https://github.com/nodejs/node/releases/tag/v20.19.0

What's going on with HTTP/3, where are the problems, and what comes next?

Today we're thrilled to announce our effort to port the TypeScript compiler and language service to native code, gaining a 10x speed boost in build times and editor responsiveness! devblogs.microsoft.com/typescript/t...

Just discovered Bunny's new magic containers feature and I've immediately stopped trying to learn Kubernetes, this honestly looks fantastic: https://bunny.net/magic-containers/ Proper docker container deployments, raw TCP/UDP support, automatic anycast, autoscaling, pay for what you use. Wow.

Made my 2nd PR to OpenSSL: github.com/openssl/open.... More than any other project, I feel very cautious about OpenSSL contributions - code & setup is complicated & fiddly, I'm not familiar with their patterns, and boy oh boy is it high-profile if you break it. Hopefully this is an easy one though!

In case you hadn't noticed, @nodejs.org has enabled some new funding methods for the project. Check out this doc: github.com/nodejs/TSC/b... Or just become a sponsor! github.com/sponsors/nod... opencollective.com/nodejs Great work @mhdawson.bsky.social on seeing this through!