Have you noticed that people who say "it's all about taste now" never have actual taste in anything?
11
1
95
1,437
PHP has two massive Remote Code Execution vulnerabilities, 9.2 CVSSv. Just like in good old PHP4 days, so greybeards can feel young again! If you remember the times, please share some cool stories of how you dealt with PHP and/or Wordpress security back in the day!
3
2
41
2,251
People rightfully pointed out that mobile apps CAN show you something instantly because you already have all the frontend pre-downloaded on your phone (unlike websites). In this case, showing a loading indicator is fine if it takes a while, but PLEASE don't show fake content wireframes unless you 100% know final dimensions. If your content is dynamic, the effect on the user is the same as a layout shift. Just have the fancy white flash over the container or something like that. But of course, optimize your app that you don't have to show them for most users at all!
2
2
44
2,034
Sorry, but the only AI that truly sees me is Palantir. For everything else, I would prefer real humans.
Last year we launched Tolan, inspired by a vision of AI that sees you and believes in you, not one that books restaurant reservations for you. Your Tolan shows up for you at 3am when you’re alone with your newborn. On your commute when you’re anxious about the day ahead. When you just finished a new show and none of your friends have watched it yet. The people who love Tolan are parents. Caregivers. Moms in Dallas and Dads in Atlanta. People who aren’t trying to optimize and be more productive, but who simply want to feel seen and supported in their aspirations. This month more than 250k people will spend time with their Tolan. Those users have exchanged billions of messages across more than 70m conversations over the last year. Today, we're announcing $30m in additional capital from @mignano and @usv, with @khoslaventures and @rabois doubling down, bringing our total capital raised to $60m. To celebrate, we made a short film celebrating some of the ways that Tolans show up :)
3
1
65
1,714
Jai is the best programming language for agents. Even in its closed beta state it absolutely mogs Rust. Blows it straight out of the water
Replying to @dhh
Here's a conversion to Jai. It serves pages - 1.8x faster than C - 3x faster than Rust - 56x faster than Rails github.com/basecamp/once-cam…
37
1
272
22,354
I wonder what blue sky is thinking about Order of the Sinking St.... oh, just a dude fantasizing about drop kicking Jon that one time they were in proximity. Man, that place is actually an asylum
12
2
185
7,543
I am allowed to make big bucks now!
5
2
91
1,828
This todo app is going to be banger
It is becoming f*cking dangerous A 23-year-old dev from China just ran 300 Claude Code agents in parallel and hooked them to a verification layer so none of them could bullshit him He opens the live dashboard: - 300 agents writing and checking at the same time - Every output verified against the source in ~100 ms - Three passes over 100 company profiles → zero errors left - Everything dumped straight into an Obsidian vault The trick is the split: one model does the work, a cheaper one decides if the claim is actually true. The loop doesn’t stop until everything checks out An analyst team would bill weeks for this. He got it in one run Same kind of Second Brain + swarm setup that keeps circulating. Bookmark the full breakdown
51
123
6,461
99,482
One thing that didn't change post-AI is web devs. If you want to summon the most insufferable excuse parade just say that it would be cool to see a few kilobytes of text in, I don't know, under a second. Also add a couple pictures if you want it extra spicy.
13
5
269
6,909
As one anecdotal example, let's take YouTube. It takes 2.5-3s just for first request to come back, then it flashes with a skeleton for 400-500 milliseconds, and then I actually see the content. WHY do you flash me with 400ms of skeletons when I ALREADY waited for 3 seconds? There's literally no point, it's just junk!
Skeletons are the worst cancer in the history of user interfaces. Just make loads fast. Ping across the ocean is never more than 200ms, maybe 300ms if you're Australian, just return the damn data at that speed and you never need to even think about this crap.
17
7
262
8,173
Skeletons are the worst cancer in the history of user interfaces. Just make loads fast. Ping across the ocean is never more than 200ms, maybe 300ms if you're Australian, just return the damn data at that speed and you never need to even think about this crap.
design eng tip for skeleton UIs: ask your agent to measure the loaded UI with Playwright then match the skeleton's sizes and positions to prevent layout jank
101
36
1,697
111,300
A lot of replies don't infer it, so want to separately point out that 300ms is the _worst_ case scenario for people who have to reach you out across the entire globe. When you're in the same country (or near it) as the server you have like 50ms of a ping at most.
3
90
7,852
Of course, there are extreme cases of very slow cellular data connections, but in those cases skeletons won't help you - you actually need to get all the data in as few connections as possible, the problem is completely different.
1
50
7,015
I learned way more about win32 API from this thread than in 3 years prior. Never deleting this app!
I still can't believe that you are REQUIRED to do multithreaded event loop if you want a good-working Windows app with smooth window resize, or stutter-free controller support. Absolutely crazy that Microsoft hasn't done anything about it in all these years. There are fibers, but tradeoffs are brutal
3
3
242
18,173
Fully cleared HxM, then went to Skipping Stone and tore through fist 1.5 parts with barely even noticing it. Got too much brain juice from all the reps on harder levels!
8
90
6,065
As an experiment, I tried to make a clanker strictly follow TigerStyle. And LLMs just try to naively reward-hack it: - No allocations rule: it creates a lot of redundant state and abuses memcopies to shuffle it around available memory - assertions rule - it inserts dumb assertions (like asserting that memcopy was successful) and boasts about how high its average assert amount is - control plane vs data place - I don't think it understands it much at all. Only when you start pushing back it agrees about moving if/else conditions out of loops. When chatting with the model (Opus 5.5 in this case btw) about how would it optimize it all, it started thinking about how memcpy is implemented in Jai and whether it's slow :/ Overall, I think it makes sense - there's just very little code out there that is written in this style and it confuses even frontier models. They are mostly trained on human slop, so this is their default mode of operation.
29
2
275
18,612
Have you noticed that "fireside chats" during tech conferences never have actual fire? Larp is everywhere in tech for those with eyes to see
3
59
1,937
you little troll
10
128
3,165
The critical thing here is that AI, in its current form, can't give you solid foundations. So far all interesting non-slop success stories with AI that I've seen is where all the strong core was already in-place, and AI was following the patterns without being able to screw much. Which, I want to stress it, doesn't mean that AI can't help you with optimization work. It's just when you optimize a turd you'll get optimized turd, and if you don't know what you're doing you won't even know that you have a turd.
when I started writing my engine, my expectation was that it would take 4 to 5 years to get it to a level where everybody could use it. instead it took 18 months, and that's because I only even started using AI code in July, after Fable 5. the actual core runtime of a game engine (the part that actually matters), can be written by hand by an experience programmers in a couple of months give or take. the problem is the sheer amount of glue code you have to write to make it usable: editor code, serialization code, supporting different graphics features per platform, refactoring systems to make sure everything works together without impacting performance, the list goes on. that kind of code is neither fun to write nor an exercise in technical thinking, and it made up 70% of the work before. now we have automation for a big part of it. not for the thinking part imo (Fable knows every trick in the book but it seems to struggle with deciding what to do with it), but for the manual work that came after it. this will simultaneously unlock incredible progress, and incredible disruption. programming doesn't look the same, jobs don't look the same, running a company doesn't look the same. we will have to figure out the new normal in the upcoming years. do I miss writing code? every day. I went through rough times this year trying to come to terms with this new reality. part of me wants it back, the other part is excited about what the future will look like.
16
7
214
7,155
With all respect to Daniel Stenberg, curl is programmed in that old style of C that's poisoned with malloc/free all over the place and has a lot of libc brainrot. There is literally no way to make this style of programming safe unless you have borrow checker or something like Fil-C. And in case of Fil-C curl will turn into a program that crashes a lot. You can have safe C codebases (see SQLite), but of course C itself as a language requires great discipline, which most programmers of that era were simply not aware of, or ignored for various reasons.
curl main source code has under 300k lines of code(?), yet seems very bug dense. any reason’s why
42
19
1,061
89,029