Sign in

Bret Comnes

@bret.io
202 followers 213 following 223 posts

bret.io @socket.dev @breadcrum.net

PostsRepliesMedia
Bret Comnes @bret.io · 29/09/2026
Quentin Dupieux Movies You Should Watch bret.io/blog/2026/qu...
bret.io
Quentin Dupieux Movies You Should Watch
A running log of announcements, projects and accomplishments.
000
Bret Comnes @bret.io · 29/08/2026
Whatsit do
000
Bret Comnes @bret.io · 20/08/2026
Sup
000
Bret Comnes @bret.io · 20/07/2026
Vouch for me on tangled.org/bret.io
tangled.org
bret.io
bret.io on Tangled
120
Reposted by Bret Comnes
Pelle Wessman @voxpelli.com · 12/07/2026
Trying out fetchrss.com to get RSS for sites that lack native RSS because especially in these AI-times it’s baffling how many sites are lacking RSS (and goes to show that vibe-coding is no replacement for knowing _what_ to do, it’s just a way to write out the code that _does_ it)
fetchrss.com
RSS Generator - FetchRSS
Online RSS feed generator. Create RSS for any website. Pick a content you are interested in. Get RSS generated by your rules.
011
Bret Comnes @bret.io · 25/06/2026
We got nailed by it on a Friday
100
Reposted by Bret Comnes
Pierre-Loup Griffais @plagman.bsky.social · 24/06/2026
We've just updated the SteamOS installation image to 3.8. This update improves compatibility with certain modern systems and includes a first-time setup. help.steampowered.com/en/faqs/view... If you have an AMD GPU, you can build your own Steam Machine now! More GPU support being worked on.
21471117
Bret Comnes @bret.io · 24/06/2026
Worth it bret.io/blog/2025/yo...
bret.io
You can just build a Steam Machine
I built a Steam Machine and so can you!
050
Reposted by Bret Comnes
Pelle Wessman @voxpelli.com · 08/06/2026
Very well done and scarily eye opening!
122
Bret Comnes @bret.io · 12/06/2026
Interesting thank you
010
Reposted by Bret Comnes
Joyee Cheung @joyeecheung.bsky.social · 11/06/2026
Today I gave a talk JSNation about the life cycle of ESM in Node.js, how it differs in other environments and the new features that will affect these stages. Slides: github.com/joyeecheung/...
github.com
13812
Bret Comnes @bret.io · 12/06/2026
Was it recorded?
100
Reposted by Bret Comnes
Feross @feross.bsky.social · 20/05/2026
Today is a big day for @socket.dev. We raised a $60M Series C at a $1B valuation, led by Thrive Capital. 20,000+ orgs, 1.5M repos protected, 1,000+ supply chain attacks blocked per week. 3/5 FAANG companies are customers. We're just getting started.
118514
Reposted by Bret Comnes
Feross @feross.bsky.social · 14/05/2026
🚨 node-ipc is compromised again. Three malicious versions (9.1.6, 9.2.3, 12.0.1) published via expired-domain account takeover. Payload steals credentials, SSH keys, cloud tokens, .env files and exfils over DNS. Socket flagged them as malware within 3 min. Details: socket.dev/blog/node-ip...
socket.dev
Popular node-ipc npm Package Infected with Credential Steale...
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
1225
Bret Comnes @bret.io · 12/05/2026
Dead art
010
Bret Comnes @bret.io · 28/04/2026
Neat. Editing multi-commit history (beyond squash) always felt too much like surgery.
010
Reposted by Bret Comnes
Feross @feross.bsky.social · 28/04/2026
. @socket.dev just acquired @secureannex.com, the extension security company built by @johntuckner.me. John is joining Socket. John built Secure Annex as a solo founder into a product that security teams at Reddit, Brave, Torq, and Movable Ink depend on.
2143
Bret Comnes @bret.io · 28/04/2026
✅ Embrace ✅ Extend 👉 Extinguish
000
Bret Comnes @bret.io · 28/04/2026
I tried this out again recently. It’s a cool feature but it requires EVERY dep to be exceeding well behaved and defined. It also relies on NODE_PATH and has weird issues with esm. Unfortunately something like this needs a runtime solution to work generally.
020
Bret Comnes @bret.io · 22/04/2026
True for what its strengths are, but it escaped containment into areas it sucks at.
100
Bret Comnes @bret.io · 22/04/2026
Apparently agents have issues with bloated html as well acceptmarkdown.com
acceptmarkdown.com
Serve Markdown to LLMs via the Accept Header
Serve Markdown to LLMs via the Accept header. Browsers keep getting HTML; agents get clean Markdown at the same URL — a practical way to serve both browsers and agent clients from one canonical URL.
211
Reposted by Bret Comnes
Pelle Wessman @voxpelli.com · 22/04/2026
Anyone publishing rel-alternate type-text/markdown link tags to their sites? `<link rel=”alternate” type=”text/markdown” href=”foo.md” />` Would enable discovery of a #markdown representation of the same content. /cc @bret.io
151
Bret Comnes @bret.io · 11/04/2026
Casting call with Mike White from White Lotus?
010
Bret Comnes @bret.io · 11/04/2026
Happy birthday!
010
Reposted by Bret Comnes
patak @patak.cat · 10/04/2026
@pnpm.io's experimental global virtual store is brilliant. The install performance gains are a game-changer for git flows. You get near-zero per-worktree overhead and instant installs for new worktrees as packages are already in the global store. @kochan.io can't stop making pnpm better 🤌
pnpm's experimental global virtual store

Without the global virtual store, each worktree would have its own .pnpm virtual store inside node_modules, with hardlinks or copies of every package. With enableGlobalVirtualStore: true, pnpm keeps all package contents in a single shared directory (the global store, which you can find by running pnpm store path), and each worktree's node_modules contains symlinks pointing there:

your-monorepo/                      (bare git repo)
> main/                           (worktree: main branch)
>> packages/
>> node_modules/
>>> lodash → <global-store>/links/@/lodash/...
>>> express → <global-store>/links/@/express/...
> feature-auth/                   (worktree: feat/auth branch)
>> node_modules/
>>> lodash → <global-store>/links/@/lodash/...  ← same target
>>> express → <global-store>/links/@/express/...
> fix-api/                        (worktree: fix/api-error branch)
>> node_modules/
>>> lodash → <global-store>/links/@/lodash/...  ← same target
>>> express → <global-store>/links/@/express/...
512110
Reposted by Bret Comnes
Pelle Wessman @voxpelli.com · 02/04/2026
And this is what that app contained. (Thankfully I never ran it)
022
Reposted by Bret Comnes
Socket @socket.dev · 02/04/2026
Axios maintainer confirms the npm compromise was caused by a targeted social engineering attack that led to full access to his GitHub and npm accounts. Open source maintainers continue to be high-value targets in supply chain attacks. socket.dev/blog/axios-m...
socket.dev
Axios Maintainer Confirms Social Engineering Attack Behind n...
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
0115
Reposted by Bret Comnes
Pelle Wessman @voxpelli.com · 02/04/2026
If it’s anything like what they attempted with me then a new modus operandi is to create social credibility and even group pressure, then have a planned video call on a faked version of a real streaming service, then show credible errors and urge to download a native app. This is what I got:
174
Bret Comnes @bret.io · 30/03/2026
Part of the fun of pc gaming is low latency/hot rodding the system, I get it but also still betting against streaming
000
Bret Comnes @bret.io · 27/03/2026
Buy my graphics card! www.ebay.com/itm/29816448...
ebay.com
GIGABYTE Radeon RX 7700 XT GAMING OC 12GB GDDR6 Graphics Card | eBay
It has probably less than 100 hours on it. Great 1440 card. It was used in a linux Steam Machine gaming PC build and worked great!
000
Bret Comnes @bret.io · 20/03/2026
Is Canada launching their own instance?
130
Bret Comnes @bret.io · 20/03/2026
Congrats on the release! If I’m already running on “Main” do I have this already?
000
Bret Comnes @bret.io · 21/02/2026
Cool game
110
Bret Comnes @bret.io · 21/02/2026
After reading and understanding the suggested approach, the I’ve concluded yes it’s good but that the criticism is just a universal issue with webhooks and common mistakes around them
000
Bret Comnes @bret.io · 21/02/2026
Zed + zed agent, Claud agent, coded agent
020
Bret Comnes @bret.io · 15/02/2026
Like is this still a good workflow? github.com/t3dotgg/stri...
github.com
GitHub - t3dotgg/stripe-recommendations: How to implement Stripe without going mad
How to implement Stripe without going mad. Contribute to t3dotgg/stripe-recommendations development by creating an account on GitHub.
100
Bret Comnes @bret.io · 15/02/2026
YES!
010
Bret Comnes @bret.io · 15/02/2026
Whats your favorite SaaS subscriptions/billing/invoicing reference implementation?
100
Bret Comnes @bret.io · 11/02/2026
Good thing I posted this because a 1st party preact adapter released 3 days later lol
000
Bret Comnes @bret.io · 07/02/2026
Small tutorial post on using @tanstack.com with @preactjs.com bret.io/blog/2026/si...
bret.io
Simple TanStack Query with Preact
Use npm package aliases to get @tanstack/react-query working in Preact without any bundler config.
000
Bret Comnes @bret.io · 07/01/2026
Zip folder of mp3 and m3u!
010
Reposted by Bret Comnes
nichoth @nichoth.com · 06/01/2026
+1 to all this. More-or-less the same experience even. Very open to things. If anyone is hiring.
031
Bret Comnes @bret.io · 22/12/2025
Cool!
010
Bret Comnes @bret.io · 12/12/2025
Do they sell nucs/mini pcs with ipmi?
100
Bret Comnes @bret.io · 11/12/2025
I just noticed they have a variety of add-ons that close the usability gap, mainly remote power management. jetkvm.com/products/dc-...
jetkvm.com
JetKVM Products - KVM over IP Devices & Extensions
Professional KVM over IP solutions including the main JetKVM device and extension modules. Ultra-low latency remote server management.
100
Bret Comnes @bret.io · 11/12/2025
It’s not perfect but gets the job done. Its main use so far is remote bios interactions. Normally I just use ssh.
100
Bret Comnes @bret.io · 11/12/2025
Pulled it off
120
Bret Comnes @bret.io · 08/12/2025
Good reference. Thanks for sorting that out in one place.
020
Bret Comnes @bret.io · 07/12/2025
Quality
000
Bret Comnes @bret.io · 06/12/2025
It is! Worst case ever don’t buy one.
120