Sign in

Jamie Taylor

@gaprogman.com
235 followers 164 following 2.4K posts

Technology consultant & fractional CTO specializing in .NET architecture & security. Former Microsoft MVP | Host of The Modern .NET Show | Open source contributor

PostsRepliesMedia
Jamie Taylor @gaprogman.com · 6h
A thing both of my sites do that almost nobody knows about. Append index.md to any URL on rjj-software.co.uk or dotnetcore.show and you get that page as plain markdown. The navigation and the cookie banner are simply absent, because none of that was the part you wanted.
100
Jamie Taylor @gaprogman.com · 11h
Our industry rewards the fast responder. First into the incident channel, first with a theory, first to push a fix. Sometimes that is exactly right. It is also how a team turns a small problem into a large one.
100
Jamie Taylor @gaprogman.com · 29/09/2026
Version 11 of my OwaspHeaders.Core middleware will install an agent and Claude skill when you build (there are opt-out steps) to help you use it. Version 11 has a few breaking changes, all of which will be documented, so the skill is there to help with upgrades and new installs of the package.
Output from Claude Code. The user has asked it to describe the /owaspheaders-core skill, and it responds detailing what the skill can do and why it exists.
000
Jamie Taylor @gaprogman.com · 29/09/2026
The thirty second version of last week's audit, for anybody who did not fancy building a tool. List your agent-discoverable directories. Sort the files by the date of the last commit that touched them. Take the five oldest to your next retrospective.
100
Jamie Taylor @gaprogman.com · 28/09/2026
I only just read about WorldLabs in Fast Company, and they sounded impressive then. Now theyre part of AMD. www.worldlabs.ai/blog/amd-ann...
worldlabs.ai
World Labs is Joining AMD
Accelerating the future of AI research and compute
000
Jamie Taylor @gaprogman.com · 28/09/2026
Twenty minutes into an incident. Dashboards red, support queue filling, six people in a call that started with two. Someone says it is probably the cache. It sounds right, it fits the last time this happened, and somebody is already writing the change to flush it.
100
Jamie Taylor @gaprogman.com · 28/09/2026
Jackson's timeout signal was perfect. Musicians can learn timing from him. And Loop's kick was legendary. How did the Cowboys lose control, at the 5 yard line, with 7 seconds left? The Ravens, that's how.
110
Jamie Taylor @gaprogman.com · 27/09/2026
I was using my OWASP Headers middleware for #dotnet earlier today and found a pretty big bug. The power of dogfooding. github.com/GaProgMan/Ow...
github.com
Bug report: UseCacheControl flags are not combinable and the default lacks no-cache · Issue #261 · GaProgMan/OwaspHeaders.Core
The Bug CacheControl.BuildHeaderValue() (src/Models/CacheControl.cs) treats the UseCacheControl flags as mutually exclusive. It returns early on the first flag that is set (noCache, then private, t...
000
Jamie Taylor @gaprogman.com · 27/09/2026
Teacher friends, how are you dealing with students using LLMs to answer their homework? I used to be a teacher, and it blew my mind when I saw Mr. 15 feed his homework questions into ChatGPT, then wrote out the answers. I asked him what he learned, and he said....
100
Jamie Taylor @gaprogman.com · 27/09/2026
Sunday thought, from Carole Rennie Logan on Friday's episode. We always Googled. We went to the docs, we copied, we pasted, we altered it. It was never the case that we rewrote every single line ourselves. This is just the new way of getting there.
100
Jamie Taylor @gaprogman.com · 26/09/2026
I'm a very happy beta tester of Dot (the Modern .NET Show pal), and you should check out the family of Pals: palstudio.whitefishcreative.co.uk
palstudio.whitefishcreative.co.uk
Desktop Pals – PalStudio by WhiteFish Creative
Clippy-style desktop pals for Mac and Windows from WhiteFish Creative. A blast back to the early 2000s – without the viruses, malware or spyware. Just a bit of fun to make your day brighter.
100
Jamie Taylor @gaprogman.com · 26/09/2026
Deleting an abandoned skill is the easy half. The half people get wrong is what happens to the reasoning. Somebody chose spec-kit, ran it for six weeks, and concluded it was too heavy for the work in front of them. That conclusion is the return on the experiment.
100
Jamie Taylor @gaprogman.com · 25/09/2026
New episode, and an unusual one. It was recorded on a stage at Codegarden in front of a room full of Umbraco developers, as a collaboration with the Candid Contributions podcast. The question: how should an open source project feel about pull requests written with the help of an LLM?
120
Jamie Taylor @gaprogman.com · 25/09/2026
New post. Here is a repository shape I keep running into, composited from several clients so that nobody is identifiable. The main branch carries spec-kit. It also carries BMAD. Somewhere in there is Gastown, and a directory belonging to get-shit-done.
100
Jamie Taylor @gaprogman.com · 25/09/2026
S09E02 - It's Still Your Code: AI Contributions to Open Source, Live at Codegarden A live panel from the Codegarden stage, recorded with the Candid Contributions podcast: Emma Burstow, Lotte Pitcher and Carole Rennie Logan on whether open source should accept AI-assisted contributions, and who is
dotnetcore.show
S09E02 - It's Still Your Code: AI Contributions to Open Source, Live at Codegarden
A live panel from the Codegarden stage, recorded with the Candid Contributions podcast: Emma Burstow, Lotte Pitcher and Carole Rennie Logan on whether open source should accept AI-assisted contributions, and who is responsible for the code once it lands.
000
Jamie Taylor @gaprogman.com · 25/09/2026
I wonder if @libsyn.com are aware of the multiple times that users get an alert box with the strong "0" in it when accessing their account.
A webbrowser's alert dialogue shows the message "0" with an OK button.
101
Jamie Taylor @gaprogman.com · 24/09/2026
Its 2026 and of 4,688 small business websites tested (by this one page) 49.7% is then didn't have security headers present: rackcrunch.com/security-hea... If you're running a #dotnet website, you can get the majority of them for free using my NuGet package: gaprogman.github.io/OwaspHeaders...
rackcrunch.com
Security Headers Study 2026: Local Businesses | RACKCRUNCH
We scanned 7,040 directory-listed U.S. local-business websites for security headers. Half met none of seven criteria. Full report, data and code.
020
Jamie Taylor @gaprogman.com · 24/09/2026
Reaching out with "why haven't you invited me onto your podcast! You need to have me on your podcast!" is the quickest way to ensure you don't get to be on the podcast. Be nice to each other folks.
000
Jamie Taylor @gaprogman.com · 24/09/2026
Did... Did they just make Fifteen Million Merits a thing? I think they just made Fifteen Million Merits a thing. www.youtube.com/watch?v=Smwo...
youtube.com
Microsoft’s Terrifying New Patent | LG-Style ACR for Games & Software
YouTube video by Gamers Nexus
010
Jamie Taylor @gaprogman.com · 24/09/2026
The thing people keep telling me they did not expect from the new series: the destination is not the newest version of .NET. It is a version your organisation can stand still on.
100
Jamie Taylor @gaprogman.com · 24/09/2026
Friends who use NuGet packages (which is, pretty much all #dotnet people), you might need to be aware of this 👇
000
Jamie Taylor @gaprogman.com · 23/09/2026
There is a fight going on about AI-assisted contributions to open source, and it is being had almost entirely by people who are certain. From where I sit it looks like a 50-50 split between this is the worst thing that has ever happened and this is the best thing that has ever happened.
100
Jamie Taylor @gaprogman.com · 22/09/2026
Some interesting news coming out of JetBrains today blog.jetbrains.com/blog/2026/09... I'd be very interested in how all the other tooling vendors respond to this.
blog.jetbrains.com
JetBrains Air: Building a System of Products for Agentic Software Development - The JetBrains Blog
AI can produce code. Organizations still have to produce software. Agentic development is changing how software gets made, but it hasn’t changed what it costs to be wrong. Six months ago, we began
010
Jamie Taylor @gaprogman.com · 22/09/2026
One more from last week's post, because it is the line people argued with most. Regular in-person social contact lowers the risk of depression. Emails and phone calls, on their own, do not. That is in Rebecca Seal's "Solo", and it is uncomfortable if you lead a distributed team.
110
Jamie Taylor @gaprogman.com · 21/09/2026
Did you know that you can throw "/index.md" on the end of any show notes page URL and get an agent friendly markdown version of the show notes? dotnetcore.show/season-9/you... I'm working on content negociation, too.
dotnetcore.show
https://dotnetcore.show/season-9/you-are-not-behind-why-you-are-still-on-net-framework/index.md
--- title: "S09E01 - You Are Not Behind: Why You Are Still On .NET Framework" url: https://dotnetcore.show/season-9/you-are-not-behind-why-you-are-still-on-net-framework/ date: 2026-09-11 author: "Jam...
011
Reposted by Jamie Taylor
UK Prime Minister, Some Say Sinister @joemuggs.bsky.social · 21/09/2026
Me: the whole conception of "instant Karma" is a dumb bit of magical thinking, a borderline colonialist misunderstanding of the philosophy and cosmology of th- wait, WHAT?
Danny Tommo's boat for policing Channel accidentally sinks
Daniel Thomas, whose Patriot Platform group caused havoc in Dover and Portsmouth, had purchased the vessel to interfere with Border Force operations
46213
Jamie Taylor @gaprogman.com · 21/09/2026
Dead code is inert. An unused function can sit in your codebase being quietly wrong for years and cost you nothing, because nothing calls it. Static analysis will usually tell you it is unreachable. The worst it does is waste a moment of your attention on the day you finally read it.
100
Jamie Taylor @gaprogman.com · 20/09/2026
I love US TV. I'm watching the Saints @ Ravens game and this happened: -" kick off when we come back" - 3 minutes of ads - "Ravens will kick off, when we come back" - 3 minutes of ads Literally 6 minutes of ads for 15 seconds of content.
000
Jamie Taylor @gaprogman.com · 20/09/2026
I asked a coding agent to commit and push some work on a client codebase. At pull request review, one of their lead developers noticed the commit messages were written in a style the team had stopped using months earlier. Not wrong, exactly. Just old.
210
Jamie Taylor @gaprogman.com · 20/09/2026
Sunday thought, from Rebecca Seal: no job is inherently meaningful. Not nursing, not medicine, not charity work. We cannot force ourselves to find meaning in work which is not meaningful for us as individuals.
100
Jamie Taylor @gaprogman.com · 20/09/2026
One of my all-time favourites by LRR.
000
Jamie Taylor @gaprogman.com · 19/09/2026
Still the most saved thing I have written this year, so one more pointer to it. Five questions to ask an engineer instead of asking which AI coding tool they use. Every one of them survives a change of tooling.
100
Jamie Taylor @gaprogman.com · 19/09/2026
The most practical thing in Rebecca Seal's "Solo" is almost embarrassingly simple. When she is struggling to focus, or getting bored, or losing motivation, she puts her shoes on and goes for a little walk to get some fresh air. That is the advice.
100
Jamie Taylor @gaprogman.com · 18/09/2026
Episode 200 of the show was going to be a little self indulgent, a look back at where it's come from and where it's going. Then I started doing research for the .NET Framework series and found this: learn.microsoft.com/en-us/azure/... Long URL, right?
learn.microsoft.com
Migrate Consumption plan apps to Flex Consumption in Azure Functions
Learn how to migrate an existing function app in Azure running in an Azure Functions Consumption hosting plan to instead run in the Flex Consumption hosting plan.
100
Jamie Taylor @gaprogman.com · 18/09/2026
Are we not sure that the AI techbros had happened on "The Year 2000" by The Flight of the Conchords? Is this why they're all quitting? Can't be the upcoming IPOs. It's got to be this one song, sure. www.youtube.com/watch?v=2IPA...
youtube.com
Flight of the Conchords-Robots
YouTube video by R
000
Jamie Taylor @gaprogman.com · 18/09/2026
New post. Rebecca Seal's "Solo" was written for freelancers and the self-employed. Read it with a remote engineering team in mind and something clicks: she wrote a book for people who work alone, and if you lead a remote team you employ a room full of them. Except there is no room.
100
Jamie Taylor @gaprogman.com · 16/09/2026
This 👇
111
Jamie Taylor @gaprogman.com · 16/09/2026
In the spring of 2020 I went from the occasional day at home to working from my spare room every single day, indefinitely. I have called that period the wobbliness ever since, partly as a joke and partly because it is the most accurate word I have for it.
100
Jamie Taylor @gaprogman.com · 16/09/2026
Ever thought, "gee, I wish I could use an LLM to tell me whether this number was Numberwang or not"? Well... github.com/GraafHenk/nu...
github.com
GitHub - GraafHenk/numberwang: A small neural network that decides whether a number is Numberwang.
A small neural network that decides whether a number is Numberwang. - GraafHenk/numberwang
000
Jamie Taylor @gaprogman.com · 15/09/2026
In 2016 the first project I had ever shipped on my own went out for a penetration test. The report came back with pages of findings marked CRITICAL. Almost every one of them was an HTTP header I had never heard of.
100
Jamie Taylor @gaprogman.com · 15/09/2026
You know how I've been saying words to the effect of "we've always been in the business of manufacturing code" recently on The Modern .NET Show? Well, I've been saying it publicly since 2022: rjj-software.co.uk/blog/continu... But have been saying it privately for decades.
rjj-software.co.uk
Continual Professional Development - 2022
Communication, Empathy, and Leadership where the focus of 2022's CPD. In this blog post Jamie discusses 10 of the best books that he read in 2022 as part of his continual professional development.
040
Jamie Taylor @gaprogman.com · 14/09/2026
Worth my filling in the form for OwapHeaders. Core?
000
Jamie Taylor @gaprogman.com · 14/09/2026
Yet another wonderful episode of Nomad's podcast. If you're interested in #retroGaming, you should totally listen to @retrowildlands.bsky.social. It was lovely to get a shout out, too. Though I wasn't at the Michigan Retro Game Expo... maybe next year.
060
Jamie Taylor @gaprogman.com · 14/09/2026
A podcast that opens by telling you its producer has a commercial interest in the thing it is about to discuss, and then spends six episodes arguing you should probably not do it. The Modern .NET Show came back from its summer break on Friday, and season nine opens with exactly that.
110
Jamie Taylor @gaprogman.com · 13/09/2026
You know, I've wanted to get NFL gamepass for years and this year is that year. We're an hour away from the first game for my chosen team. Let's go #ravens
011
Jamie Taylor @gaprogman.com · 13/09/2026
Sunday thought. Every generation of this industry has produced a version of the same mistake: screening people on the name of the thing they used, rather than on what they did with it. C against C++. Java against C#. Now AI harnesses.
110
Jamie Taylor @gaprogman.com · 12/09/2026
A shorter word for anyone who has been on the receiving end of this. One commenter on my original post argued that developers should stop selling the tools they use and start selling their outcomes.
100
Jamie Taylor @gaprogman.com · 12/09/2026
The summer break is over. Season 9 of The Modern .NET Show started yesterday, and it opens a six-part series I have wanted to make for a long time: Bridging the Gap, for developers still working on .NET Framework.
131
Jamie Taylor @gaprogman.com · 11/09/2026
If you're having to put your emails through an LLM in order to understand them, surely that's a problem with the person who sent you the email in the first place, right?
000
Jamie Taylor @gaprogman.com · 11/09/2026
If my HackerNews feed is anything to go by, FizzBuzz has been replaced with "build a coding agent." There's a bunch of people on there who clone Pi and rewrite it in {language du jour} it seems.
000