This is great news! GitHub will require use of passkeys for 2FA when publishing to NPM. What a huge step up in security compared to other phishable 2FA methods that were historically supported 🎉 github.blog/security/sup...

ok i'm finally starting the atproto longread. i want a better sense of what's been happening on the network. what are most exciting projects in the ecosystem and why? i want to mention a few at the end. interested not just in "atproto apps" but things that showcase the atproto spirit

Holy shit. This guy saved a PNG to a bird. (he drew a bird into a spectrogram, played that sound to a starling, and the starling reproduced it back to him with enough accuracy he got his bird drawing back in their call's spectrogram) www.youtube.com/watch?v=hCQC...

Some initial thoughts on the requirements for AT's private data model

Surprise! A second leaflet on private data in AT, this time exploring some schemes that might be used to implement shared-private data.

TFW you can't find any software that will let you track map locations connected to structured data in a table in one interface so you have to vibe code it yourself. Felt, Airtable, etc. were all $100+/month for the right to do this. Lol, nope. One day of GPT-5 vibe coding and problem solved.

Built a couple tools to download historical Certificate Transparency logs into the Static CT format, and compress them into self-verifying zip files, each coving a subtree of height 24. This will let us store these datasets at @archive.org for future research (e.g. archive.org/details/ct_d...).

This looks interesting. Github is Microsoft. Own your host. @tangled.org

We are hiring a Senior Software Engineer (Elixir) — join my team at the BBC to design, build and scale #Elixir services used by millions careers.bbc.co.uk/job/Senior-S... Please share 🙂 #elixirlang #myelixirstatus #hiring

The Ruby community deserves to know who voted for this and what information they were acting on. Ruby Central is actually very opaque. They don’t publish donations, they don’t publish votes, the community has no say who’s on the board. There is no accountability.

1. Bluesky doesn’t downrank links 2. You can choose your own algorithm from among thousands 3. The whole app is open source This keeps it a free and open platform by design, leading to better click-throughs and traffic to your site. We 💙 the open web.

Leaked memo from Amazon that warns existing H1B holders to avoid travel back into the USA after the September 21st deadline - their lawyers evaluated the new executive order as not just affecting new applications

i'm putting the feelers out for frontend-y dev rel-y docs-y gigs that are 2-3 days a week. if you know someone looking for someone who can do gleam/elm/react/write words, hit me up 💕

Those on an H1B cannot return to the US from tomorrow (Sunday) unless paying $100K. This is an out-of-the blue presidential action. We’ll see software engineers stranded abroad. One easy to predict outcome: those on US visas will travel less… for work, for conferences etc.

Wow! This is very unfortunate for the Ruby ecosystem.

There's another Gleam meetup! This time, Spanish speaking Gleamlins are meeting online, on 15 Oct. More details TBA, join our discord to learn more ⭐

So much great stuff 💖

What if you had *full stack types* for SPAs built with tech like #React, #Inertia, #Vue, #Svelte... but all of the power #AshFramework and #ElixirLang on the backend? Well, you can now.😉 hexdocs.pm/ash_typescri...

Photos from #goatmire look 🤯 I pray for recordings? #ElixirLang

This talk by @giacomocavalieri.me is already older, but if you're still not into snapshot testing … 🙄 youtu.be/DpakV96jeRk

Rust 1.90.0 has been released! ✨🦀 This release makes LLD the default linker on x86-64 linux-gnu and adds `cargo publish --workspace` to publish an entire workspace all at once! Check out the blog post and release notes for more: blog.rust-lang.org/2025/09/18/R...

I'm ready to accept a definition of "agent" that I think is widely-enough agreed upon to be useful, at least in the AI engineering space: An LLM agent runs tools in a loop to achieve a goal (I've been dismissing the term as hopelessly ambiguous for years) simonwillison.net/2025/Sep/18/...

I made a magic quadrant about how to choose your tech stack Seriously, DYOR: no one will do it for you. Try out stuff. See what works. Ignore reports from people who don't do the work and are pay-to-play anyway

One more reminder that Slack is a terrible choice for communities, and extorts even nonprofits. Even when it’s one teaching teens to code, for free. Hack Club is moving to Mattermost. They really have no choice. Just a poor taste how Slack demands $50K in a week, no real notice

Next week is the GEM (Global Elixir Meetup) week: join @elixirsydney.bsky.social virtually on 23 Sept www.meetup.com/elixir-sydne... And @joshcprice.bsky.social is heading to the Elixir Melbourne Meetup on 25 Sept & would love to see you there! www.meetup.com/elixir-melbo...

Hello everyone! Announcing Eurosky Live: Berlin 2025. Join founders, developers, media, policy-makers, and investors for a full-day public programe exploring the European open social web. If you're building on ATProto and interested in showcasing, please reach out! To register: luma.com/knk1342n

No, way... Turso, a Rust rewrite of SQLite that is approaching public beta, is actually experimenting with incremental view maintenance and query subscriptions. I thought it was beyond hoping to get that kind of feature in SQLite, but we might be a lot closer than I thought. @tur.so is insane! 🤩

🚨 Update: The "Shai-Hulud" supply chain attack has expanded to nearly 500 trojanized npm packages, including several from CrowdStrike, all using the same malware first seen in Tinycolor. Full details and package list: socket.dev/blog/ongoing... #NodeJS #JavaScript

In 2022, the US banned high-end NVIDIA GPU exports to China, wanting to slow down AI development in China. So China invested in homegrown AI chip production, and caught up in 3 years. Now they are banning buying NVIDIA AI chips. The kind of secondary effect a ban can have:

The b-tree skip scans improvement is especially exciting (www.crunchydata.com/blog/get-exc...). Oban makes _heavy_ use of multi-column indexes.

UUID v7 ❤️

I was about to ask for verified commits in @tangled.sh, but look - they already do it 😍🕺

Behold my latest keyboard, the JuggleKeyboard! Just click the letters as they're juggled, it's an easy* way to type. * it's not easy

I really like where 2.0 is going ❤️

😲 We have a ✨packed✨ agenda for the September edition of the Automerge Community Call on the 24th! Updates & talks featuring @chee.party, @daffl.me, @spiralganglion.com, @seaofclouds.com, @patternist.xyz, @expede.wtf, and John Mumm! Don't miss out — RSVP here: luma.com/70fuozje

For the past four decades, finding the fastest route to every destination in a network involved sorting the routes by distance. This meant that algorithms could only work as quickly as they could sort. No longer.

If you use release-plz and trusted publishing, you don't need to use the crates-io-auth-action anymore, as that logic is implemented into release-plz itself now 👍 Advantage: your CI will request a token only when a release is needed 🥳

$ duckdb D .mode line D SELECT stargazers_count FROM read_json('https://api.github.com/repos/duckdb/duckdb'); stargazers_count = 32768 In other words:

There‘s still a bit to go to making this happen. Rebar is an important piece to using erlang not just for erlang, but just as much for elixir, gleam, … Consider backing this effort.

Random #rust tip: Did you know that by hitting ctrl-j you can see the list of jobs and their bindings in #bacon ? BTW this menu is customizable and I had totally forgotten about it to the point I pondered about adding the feature...

A passkey is like a password, but instead of a word, it's a key

Cmon gang you’re really gonna let haskellers skew the results here???

💖

In other news, life on Mars! (Probably. Maybe. Billions of years ago. But still: we are not alone. Necessarily. Look, it’s something, ok? Take what you can get.) www.theguardian.com/science/2025...

"Compiler: GCC/4.2.1 (Linux 5.4; Linux; x64) LLVM/9.0 (MSVC, like Borland) Clang/9.0" (by @vriska.bsky.social)

Good news is I just setup CI to automatically deploy a static site and websocket server for mergeparty. So now you can just click and type, no command-line necessary. (This is @inkandswitch.com 's @automerge.org library, + Partykit [@threepointone.bsky.social]) github.com/substrate-sy... #devlog

Oh nice, Claude Code can now be used as a agent from Zed via agent client protocol 🚀