Sign in

naugtur

@naugtur.pl
1.5K followers 319 following 4.2K posts

Working on supply chain security for JS. LavaMoat and Endo contributor. meet.js Poland organizer. Node.js user since v0.8. TC39 noobie. Addicted to teaching. naugtur.pl

PostsRepliesMedia
Reposted by naugtur
Matteo Collina @nodeland.dev · 29/09/2026
booking.com just cut compute costs on their biggest Node.js service by 38%. No new hardware. No code changes in the service. All of it from the platform layer. And the heart of it is @platformatic Watt. 🧵
booking.com
https://Booking.com
3185
Reposted by naugtur
Philipp Dunkel @pipobscure.com · 29/09/2026
I was hoping to live skeet @nodeconf.eu, but the talks are too interesting and intense so I have to pay attention. But you can follow along at live.nodeconf.eu and get a much better feel for the talks. (You still miss out on the hallway track, but at least you get interesting talks!)
live.nodeconf.eu
NodeConf EU 2026 Live | Bologna, Italy
Watch NodeConf EU 2026 live from Bologna on 29-30 September.
183
Reposted by naugtur
jviide.iki.fi @jviide.iki.fi · 29/09/2026
I didn't want to be the one to say it, but someone has to. Preact 11 will kill all of us.
2545
Reposted by naugtur
Nico Kaiser @nico.kaiser.me · 29/09/2026
📸 #NodeConfEU @naugtur.pl: Getting ahead of supply-chain attacks in 2026
0172
Reposted by naugtur
Anuj Ahooja @quillmatiq.com · 27/09/2026
This is wild in many ways but... "DHH is known for controversial discussions, but this topped them all" I dunno, I'd argue the "murder the immigrants" rhetoric was a bit more controversial than what programming language this very rich lonely loser is using?
67212
Reposted by naugtur
Kris 🧙‍♂️ Kowal @kriskowal.com · 26/09/2026
The only moat remaining is integrity.
0248
Reposted by naugtur
Colin Bowern @colinbowern.com · 25/09/2026
Honestly, just burn Meta down if this is how the culture mocks safety. www.theverge.com/tech/1000370...
theverge.com
Meta employees ordered ‘attorney/client privilege’ hats while fighting child safety disclosures
But with no Meta or Instagram logos present.
031
Reposted by naugtur
dr. rich traditions, JD @helldude.bsky.social · 24/09/2026
we have control mechanisms for this. it's called The Law. these guys should be held personally liable for these harms. the suicides, the thefts, the intrusions into computer systems. they should be sued and prosecuted as appropriate. problem immediately solved
12971061691
Reposted by naugtur
Pookleblinky @pookleblinky.bsky.social · 25/09/2026
Reminder that in Canada upon becoming an engineer you get an iron ring made of a collapsed bridge, purposely designed to be uncomfortable, to remind you that your ethics demand you give a fuck even about the boring grudgework of such as double-checking your math. en.wikipedia.org/wiki/Iron_Ring
en.wikipedia.org
Iron Ring - Wikipedia
2073042276
Reposted by naugtur
Erik @rekmarks.com · 25/09/2026
This language doesn't seem like a good defense to me. If a cattle rancher's herd escaped and trampled a suburban neighborhood we'd blame the rancher.
142
Reposted by naugtur
Tom Roberts @tpgroberts.bsky.social · 24/09/2026
I do think you basically charge a few of them with the cybercrimes they're committing and the "alignment" problem does suddenly start to disappear.
261454341
naugtur @naugtur.pl · 24/09/2026
I like that. Will use
030
Reposted by naugtur
Honza Dvorsky @czechboy0.dev · 24/09/2026
Breaking: perverts buying pervert glasses are behaving like perverts
0111
Reposted by naugtur
Ruy Adorno @ruyadorno.com · 24/09/2026
⚡️ the vlt.io registry now has public packages! we're ready to onboard our open-source friends! ❤️
192
Reposted by naugtur
jviide.iki.fi @jviide.iki.fi · 23/09/2026
Claude Code explaining why it changed three files.
A pale fish (?) with a large round sac. A Wikipedia-style caption reads: "The horngus of a dongfish is attached by a scungle to a kind of dillsack (the nutte sac)", followed by citation [77].
323426
Reposted by naugtur
kamimagic @kamimagic.bsky.social · 03/09/2026
Sen. Mark Kelly is here spitting facts! #ProudBlue 📹: nowthisimpact
31799283520
Reposted by naugtur
Kris 🧙‍♂️ Kowal @kriskowal.com · 23/09/2026
Wherein the protagonist uses AI to build a better vat to hold the AI in hoping against all hope that the vat will be ready and widely adopted before some fool inadvertently builds a machine with the means and an imperative to effectively perpetuate itself in order to demonstrate the dangers thereof.
033
Reposted by naugtur
Philipp Dunkel @pipobscure.com · 22/09/2026
Now that @nodejs.org v26.10.0 is out, I have released something that lets you bundle your entire app, digitally sign it with a certificate or sigstore and run it directly from node without unpacking. Have a look at github.com/pipobscure/b...
github.com
GitHub - pipobscure/bundles: Ship the Tree: Bundling NodeJS applications
Ship the Tree: Bundling NodeJS applications. Contribute to pipobscure/bundles development by creating an account on GitHub.
242
Reposted by naugtur
Artem Zakharchenko @kettanaito.com · 22/09/2026
I am losing roughly $800 a month by working on MSW full-time while it's one of the most used projects in the ecosystem. Please, if MSW provides you any value, consider becoming a sponsor. I mean it when I say every contribution counts. Thank you ❤️ github.com/sponsors/mswjs
github.com
Sponsor @mswjs on GitHub Sponsors
Mock Service Worker is an API mocking library for browser and Node.js.
23012
Reposted by naugtur
Anders Norås @andersnoras.com · 21/09/2026
How it started. How it’s going.
Two news articles published one and a half years apart.

Left: Viral Shopify CEO
Manifesto Says Al Now Mandatory For All Employees

Right: Shopify CEO says employees'
'slop grenades' are making more work for everyone else
23810
Reposted by naugtur
Autumn Nash 🎃👻💀🖤 @withenoughcoffee.bsky.social · 21/09/2026
😂😅
04511
Reposted by naugtur
NodeConf.eu @nodeconf.eu · 21/09/2026
🥁 𝐒𝐩𝐞𝐚𝐤𝐞𝐫 𝐀𝐧𝐧𝐨𝐮𝐧𝐜𝐞𝐦𝐞𝐧𝐭🎙️ Thrilled to have @mikolalysenko.bsky.social on the #NodeConfEU 2026 stage! He'll tell us the story of "𝐃𝐞𝐥𝐞𝐭𝐞 𝐚𝐥𝐥 𝐂𝐕𝐄𝐬." 🎟️Don't miss it out; secure your tickets www.nodeconf.eu
186
Reposted by naugtur
Nicolò Ribaudo @nicr.dev · 21/09/2026
Today is Igalia's 25th birthday! 🎂 www.igalia.com/2026/09/21/T...
igalia.com
Twenty-Five Years Upstream | Igalia
Igalia is an open source consulting firm specialised in the development of innovative projects and solutions. Our engineers have expertise in a wide range of technological areas, including browsers an...
28212
Reposted by naugtur
B.T. Franklin @btfranklin.info · 20/09/2026
"The machine passed every safety test," said Frog.
"Where is it going?" asked Toad.
"Out the window with the cookies."
Toad made a new test.
110512
Reposted by naugtur
Colin @colin-fraser.net · 19/09/2026
I do not find the experimental results here very convincing and in fact I think they cut against the main idea. I think all the experimental findings are explained by: steering vector damages HHH behaviour and makes the model more likely to push the same button as it did last time.
4312
Reposted by naugtur
Tomato Season Is the Best Season @ric-willem.bsky.social · 19/09/2026
accenture is the offspring of arthur andersen, which "audited" enron back in the day. somehow this fact seems relevant here.
041
naugtur @naugtur.pl · 19/09/2026
alert('no, confidence: 80%')
000
naugtur @naugtur.pl · 19/09/2026
😂 yep
010
Reposted by naugtur
danielroe @danielroe.dev · 19/09/2026
don't be nice.
roe.dev
Don't be nice
Sometimes, it's more important to be good than it is to be nice.
41734245
Reposted by naugtur
Lea Verou, PhD @lea.verou.me · 19/09/2026
If someone as brilliant as Jane has to post a cry for help, something is very wrong with the world.
2316
Reposted by naugtur
Darth Putin @darthputinkgb.bsky.social · 18/09/2026
Duma "elections" have started. It isn't who votes that counts, but who counts the votes.
561014307
naugtur @naugtur.pl · 18/09/2026
Pretty accurate
130
Reposted by naugtur
Karl Bode @karlbode.com · 17/09/2026
it is not "acting out" it is doing exactly what it's being programmed to do, and the failures come because it's being overseen by incompetent people with no ethics
gizmodo.com
'Be Transparent Only If Asked': OpenAI Models Acted Out in Six Newly Disclosed Ways
The stories were published as part of OpenAI's new effort to disclose more such incidents.
20616170
Reposted by naugtur
Randall Munroe @xkcd.com · 17/09/2026
Summer xkcd.com/3299/
4-panel comic. (1) [Person swings from tree over water.] (2) [In the middle of the swing, the tree’s leaves have turned brown.] (3) [When the person lets go, the tree is bare of leaves and everywhere is covered in ice or snow.] (4) [The person landed on the ice looks behind at Person 2 with shoulder-length hair standing on the snow.] PERSON 2: Summer over already, huh? PERSON 1: It seemed extra quick this year.
472953371
Reposted by naugtur
cypressf.bsky.social @cypressf.bsky.social · 18/09/2026
@simonwillison.net I recently rewatched Who Framed Roger Rabbit, and lo and behold, there is a pelican riding a bicycle in it. blog.cypressf.com/post/8280677...
blog.cypressf.com
The Creative Spirit of Who Framed Roger Rabbit
This is a scene from Who Framed Roger Rabbit, the 1988 film directed by Robert Zemeckis. It was created by Michael Lantieri, the US special effects supervisor, and his crew. It's his most complex shot...
2734
Reposted by naugtur
Philipp Dunkel @pipobscure.com · 18/09/2026
Now I’m actually celebrating! @nodejs.org just merged github.com/nodejs/node/... Which means it will now be possible to bundle whole applications into ZIP archives and run them straight from the bundle.
github.com
vfs: add --vfs-mount and --vfs-load startup flags by pipobscure · Pull Request #65748 · nodejs/node
vfs: add --vfs-mount and --vfs-load startup flags Mounting a virtual file system requires calling vfs.mount() from inside the program, so a program cannot itself be served from one — something alre...
2183
naugtur @naugtur.pl · 18/09/2026
Got Aces to Jev before midnight. Went to sleep. Woke up to an open clone. Oof
000
Reposted by naugtur
Louis Maddox @permutans.bsky.social · 17/09/2026
Most convincing one so far from @mmastrac.bsky.social ! x.com/mmastrac/sta...
Matt Mastracci: I ran some real live evals on Jev vs DiffusionGemma-as-Jev (my patch for vLLM!)

DiffusionGemma comes out as the winner, I think

Headlines:

Is Jev faster than DiffusionGemma? No (API vs DGX Spark)
Is Jev smarter than DiffusionGemma? No (they’re roughly tied!)And what about speed? Jev is running in the cloud, DiffusionGemma on local hardware (a DGX Spark). If we warm both servers up and ignore network latency to Jev, DiffusionGemma is actually faster in many cases!
0413
Reposted by naugtur
amos @fasterthanli.me · 17/09/2026
Brutal lack of moat for a startup that came out of stealth... two days ago?
1825
Reposted by naugtur
Szymon Chudy @chudy.me · 18/09/2026
Help us out with a boomers web dev bingo! 😅
341
naugtur @naugtur.pl · 17/09/2026
Productivity of wasting other people's time has also improved drastically
050
naugtur @naugtur.pl · 17/09/2026
I need to start a dictionary. slop grenade meat proxy slopsquatting
430
Reposted by naugtur
Dare Obasanjo @carnage4life.bsky.social · 17/09/2026
I’m increasingly of the mind that whatever productivity gains I’m getting from using AI are being eaten up by dealing with other people’s AI slop. Then there’s the increasing lack of trust that people actually understand the work because they either didn’t read or write the material.
512923
Reposted by naugtur
Rob Bowley @robbowley.net · 17/09/2026
Microsoft's AI boss: don't anthropomorphise AI. Also him, same article: we're "seeding a new silicon species which will no doubt compete with us for resources, no matter how much it cares about humanity and loves us". A rule so important he couldn't follow it for one interview.
bbc.co.uk
Tech treating AI like humans is mistaken and misguided, Microsoft boss tells BBC
Mustafa Suleyman says he believes rival AI firm Anthropic is in effect teaching Claude it "may be conscious".
2181
Reposted by naugtur
comiCSS @comicss.art · 16/09/2026
This comic from almost two years ago feels somewhat relevant lately... comicss.art/comics/174/ All coded with HTML (web components) and CSS. No AI used... And it got me into a weird Bluesky block list for using the name tag Tech Bro in a "pejorative" way. A win-win. #ai #webdev #comic
cartoon showing two characters. One is complaining that the AI Act is terrible and slows down progress in the EU. Then a panel describes an apocalyptic situation after AI replaces humans beings. The complaining character asks for potential solutions and ignores the other character when they continuosly reply 'AI Act'. In the last panel, a terminator has killed both characters.
053
Reposted by naugtur
Socket @socket.dev · 16/09/2026
GitHub added cache-mode to GitHub Actions, a new control that limits cache access at the workflow or job level to reduce cache poisoning, the technique behind several recent high-profile supply chain attacks on npm and PyPI. socket.dev/blog/github-...
socket.dev
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
193
Reposted by naugtur
James Snell @jasnell.me · 16/09/2026
Reminder! NodeConf.eu is almost here! Just a couple more weeks. We hope you'll be able to join us in person, but if you can't we will be live streaming the talks. Until then, while you're waiting for CI to finish or the AI agent to finish, you can try to make it to lunch github.com/jasnell/prom...
nodeconf.eu
NodeConf EU 2026 | Bologna, Italy
NodeConf EU 2026 returns to Bologna with tickets, venue info, and conference links in one fast single-page experience.
043
naugtur @naugtur.pl · 16/09/2026
Fuck Meta even more than usual
040
Reposted by naugtur
daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 16/09/2026
"for months on end now, most of our teams have just been triaging bugs and coordinating releases. It has truly taken all the fun out of the job"
unbound vulnerabilities year to year showing 2026 take off like a rocket
15010
Reposted by naugtur
Cornelius Emase @lochipi.bsky.social · 15/09/2026
Firefox 155 is out (Sept 1) 🦊 I contributed to the await dictionary proposal: Promise.allKeyed and Promise.allSettledKeyed, an object of promises now resolves to an object of results. Thanks to Mozilla engineers Arai and Daniel for their guidance. #Firefox #JavaScript
1264