iiinova — where your digital self keeps evolving

David Mytton @davidmytton.social · 12/08/2025

Capability-based sandboxing in Wasm can lock down the external communication leg of @simonwillison.net's AI lethal trifecta. Private data via APIs + user prompt (untrusted content) + no fetch capability. This is what Microsoft is going for with Wassette opensource.microsoft.com/blog/2025/08...

052

Reposted by David Mytton

Sacha Greif @sachagreif.com · 10/08/2025

The State of CSS 2025 survey results are now available: 2025.stateofcss.com/en-US/ Big thanks to @amitsheen.bsky.social, @saron.bsky.social, @miocene.io, @sjoy.lol, @joshwcomeau.com, @kilianvalkhof.com, and all the other contributors!

2025.stateofcss.com

State of CSS 2025

25024

David Mytton @davidmytton.social · 05/08/2025

Moving to NYC! 🇺🇸 Packing the essentials

010

Reposted by David Mytton

Corbin Crutchley @crutchcorn.dev · 04/08/2025

Today's the day! We're releasing a new major feature of @tanstack.com Form for all adapters that allows you to change the validation mode based on submission. (For React nerds that's how RHF works OOTB) No breaking changes, trivial to implement; try it out! tanstack.com/form/latest/...

tanstack.com

Dynamic Validation | TanStack Form React Docs

In many cases, you want to change the validation rules based depending on the state of the form or other conditions. The most popular example of this is when you want to validate a field differently b...

0111

Reposted by David Mytton

Gergely Orosz @gergely.pragmaticengineer.com · 05/08/2025

Wow - CNN’s front page is the investigation “Inside North Korea’s effort to infiltrate US companies.” 4 months ago covered this same threat in @pragmaticengineer.com with exactly this AI filter. If you’re hiring full remote as a tech company, you NEED to expect NK to try and infiltrate

35611

Reposted by David Mytton

Ben Holmes @bholmes.dev · 05/08/2025

🔥 The MacOS Stickies app is so underrated. - Little floating windows to take notes throughout the day - Can pin/float on top of whatever you're doing - Can color-coat to organize thoughts ...Probably hasn't been changed since the 90s, but you can't knock stable software

5353

David Mytton @davidmytton.social · 02/08/2025

So many JS runtimes. Node.js. Edge runtime. Bun. Deno. workerd. At least one of these has already been deprecated, which is an issue if you've built your entire app around its APIs!

100

Reposted by David Mytton

TypeScript @typescriptlang.org · 01/08/2025

TypeScript 5.9 is now available! 📣 This release brings: ✅ An updated tsc --init ✅ Type-checking for the new 'import defer' ✅ Actual summaries in more DOM APIs ✅ Expandable quick info hovers (✨preview✨) and more! Read up more on our blog: devblogs.microsoft.com/typescript/a...

devblogs.microsoft.com

Announcing TypeScript 5.9 - TypeScript

Today we are excited to announce the release of TypeScript 5.9! If you’re not familiar with TypeScript, it’s a language that builds on JavaScript by adding syntax for types. With types, TypeScript mak...

014426

Reposted by David Mytton

Scott Hanselman 🌮 @scott.hanselman.com · 02/08/2025

The S in MCP stands for security

1951494

David Mytton @davidmytton.social · 02/08/2025

A prize to anyone who can name all my laptop stickers 👀 www.youtube.com/watch?v=Cuem...

000

David Mytton @davidmytton.social · 01/08/2025

Useful security assumptions for 2025: - All your personal data has already been "lost" - A random dependency has been compromised with a malware post-install script - Your washing machine has a zero day and is now part of a botnet

000

David Mytton @davidmytton.social · 30/07/2025

That you need to use react-hook-form to do anything more than the most basic form... The next Next.js <Form> component is a good first step, but it only supports POST requests right now yorickpeterse.com/articles/thr...

yorickpeterse.com

Three HTTP versions later, forms are still a mess

The last few weeks I've been working on adding an HTTP 1.1 stack to the standard library of Inko as part of this pull request. The work is still ongoing but the initial set of changes will include an…

000

Reposted by David Mytton

Opal @opalescentopal.bsky.social · 27/07/2025

With Tom Lehrer's passing, I suppose this is a moment to share the story of the prank he played on the National Security Agency, and how it went undiscovered for nearly 60 years.

14386183601

Reposted by David Mytton

Kevin Webb @kevinwebb.io · 04/06/2025

One of the best examples of LLM developer tooling I've heard is from a team that supports software from the 80s-90s. Their only source of documentation is *video interviews* with retired employees. So they feed them into transcription software and get summarized searchable notes out the other end.

0497

Reposted by David Mytton

Tech on the Rocks @totrrocks.bsky.social · 19/12/2024

Join us at another episode of Tech on the Rocks, this time with @davidmytton.social of Arcjet. We talk about security as code, security in a world of AI and dev tooling. Check the episode here: buff.ly/4ggWGeO

041

Reposted by David Mytton

Filippo Valsorda @filippo.abyssdomain.expert · 18/11/2024

A friend got her (Android) phone stolen and the thieves were able to quickly pivot into her Google account and then bank. I’ve been wondering how they did that and my best guess is SMS password resets (aka SMS 1FA). So yeah, SIM PINs (or eSIMs) might help. Also no text body on lock screens.

4367

Reposted by David Mytton

Matt Pocock @mattpocock.com · 18/11/2024

'AI Engineer' means you build things that contain AI - LLM chains, agents, multi-modal stuff. So, what is its opposite? What do we call a 'normal' software engineer?

16302

Reposted by David Mytton

Arcjet @arcjet.com · 15/11/2024

Creating an email parser requires combining local part parsing with domain parsing to ensure we validate the syntax against the RFCs...but of course just following the RFC doesn't quite work in the real world!

101

David Mytton @davidmytton.social · 14/11/2024

Developer <-> security interaction today is pretty negative. After coding, testing, deploying...they get hit from 2 angles:

110

David Mytton @davidmytton.social · 12/11/2024

Love the minimalism of iCloud Mail on the web especially now it has primary inbox, and dark mode that works properly. Gmail's "dark" theme really is terrible - the web UI is such a mess.

000

Reposted by David Mytton

console.dev @console.dev · 01/11/2024

Interesting devtool of the week: rsbuild.dev by @rspack.bsky.social What we like: Designed as an alternative to Vite and Create React App/Webpack. Compiles TypeScript, Sass, Wasm, JSX. Handles image compression, CSS builds e.g. PostCSS, and type checking. Not tied to a UI framework

rsbuild.dev

Rsbuild

The Rspack-based build tool

131

David Mytton @davidmytton.social · 01/11/2024

Great seeing so many developers and founders interested in devtools & infra on Monday at the first console.dev San Francisco devtools meetup!

031