Sign in

Neyts Zupan

@zupo.bsky.social
132 followers 133 following 158 posts

Born a geek, learned to love sports later in life. Bootstrapped & powered by Open Source. Founder of ParetoSecurity.com, MayetRX.com, OceanSprint.org, niteo.co. When not geeking away I am chasing waves, winds and adventures with my two kids.

PostsRepliesMedia
Neyts Zupan @zupo.bsky.social · 28/09/2026
Twenty years of opinions about how to build web apps properly, almost all of it buried in code reviews and my own head. Finally wrote it down. Making it readable for Claude made it so much better for humans too! github.com/teamniteo/cl...
000
Neyts Zupan @zupo.bsky.social · 22/09/2026
Finally time to move on from @heroku.com. I've been one of their early customers and evangelists, loved what they did to web-dev with 12factor.net. But the platform still has trivial bugs I reported 5+ years ago. Nothing moves. Enough. Thinking of going with @fly.io. Good/bad?
000
Neyts Zupan @zupo.bsky.social · 22/09/2026
topk(5, ...) is just such a nice hack to make Grafana panels actually readable, I'm sprinkling it everywhere these days prometheus.io/docs/prometh...
000
Neyts Zupan @zupo.bsky.social · 14/09/2026
When I see an issue in Sentry, I just give the link to Claude. In the vast majority of cases I have a PR with the fix ready in minutes. Context is king! Sentry MCP is what makes it work: github.com/getsentry/se...
000
Neyts Zupan @zupo.bsky.social · 07/09/2026
AI + #nix makes self-hosting so damn easy! We've been moving tons of cloud services onto our own servers. And that's coming from someone who's made a career saying "you shouldn't host that yourself" ... SaaS is sooo doomed :(
110
Neyts Zupan @zupo.bsky.social · 06/09/2026
Every bug is shallow, given enough e̶y̶e̶b̶a̶l̶l̶s̶ tokens.
000
Neyts Zupan @zupo.bsky.social · 05/09/2026
Magpie is adversarial PR review. Several AI models review independently, debate the findings, then a code-aware verifier reads the real source to confirm each issue and drop the false positives. Runs on the CLIs you already pay for. github.com/liliu-z/magpie
000
Neyts Zupan @zupo.bsky.social · 31/08/2026
Coding agents burn a shocking number of tokens just reading shell output. rtk sits in front of every bash call and compresses the result before the agent ever sees it. After 2,500 commands, my global stats say 46.8% of bash tokens saved. github.com/rtk-ai/rtk
040
Neyts Zupan @zupo.bsky.social · 25/08/2026
One flake, three systems. nixos-unified puts NixOS, nix-darwin and Home Manager behind a single `nix run .#activate`, local or over SSH. Autowiring picks up new hosts and users straight from your directory layout, so there are no hand-written flake outputs to maintain. nixos-unified.org
000
Neyts Zupan @zupo.bsky.social · 20/08/2026
Grafana kiosk mode strips out the side menu, the top nav and all the editing chrome, so what's on the external screen is just pure information, nothing else. Three ways in: user menu, d+k, or ?kiosk on the URL. Esc exits. grafana.com/docs/grafana...
000
Neyts Zupan @zupo.bsky.social · 17/08/2026
Installing NixOS on a remote machine over SSH, in one command. nixos-anywhere kexecs into an installer from whatever Linux is running there, partitions the disks with disko, then deploys your flake. No ISO, no console, no rescue mode. github.com/nix-communit...
000
Neyts Zupan @zupo.bsky.social · 07/08/2026
Chrome DevTools MCP can attach to your already-open Chrome. Sign-ins and session state, already there. Select a failing request in DevTools, then point your agent at that exact one. Run it with --autoConnect. developer.chrome.com/blog/chrome-...
000
Neyts Zupan @zupo.bsky.social · 01/08/2026
Like ngrok, but nothing to install. Pinggy gives your local service a public URL over plain SSH: ssh -p 443 -R0:localhost:1234 a.pinggy.io Handy for showing someone a localhost demo, or catching a webhook that cannot reach your laptop. pinggy.io
010
Neyts Zupan @zupo.bsky.social · 20/07/2026
It's been 3.5 years since the community first asked for more variety in comment reactions on GitHub. Still no word about it :s github.com/orgs/communi...
000
Neyts Zupan @zupo.bsky.social · 17/07/2026
After more than a decade using exclusively a touchpad, this past year I rediscovered my love for the mouse. Now I use both, interchangeably, and honestly, it's awesome.
010
Neyts Zupan @zupo.bsky.social · 14/07/2026
An unexpected benefit of using Claude: it lowers the activation energy of tasks. I finally do the long-overdue cleanup and nice-to-have projects I used to dread, the ones I never started because I knew they'd eat my whole evening. Now I just start.
010
Neyts Zupan @zupo.bsky.social · 10/07/2026
My daily non-negotiables: • 7 hours of sleep • 100g of protein • 1 hour of movement Simple, but they compound.
010
Neyts Zupan @zupo.bsky.social · 18/06/2026
We open sourced the tool we used to migrate from WordPress to Markdown. It handles posts, pages, categories, tags, and images and fits nicely into static site workflows. hakuto.dev/blog/wordpre... #wordpress #opensource #webdev
hakuto.dev
We open-sourced our WordPress-to-Markdown script | Hakuto
The Python script Claude built to move our blogs off WordPress is now its own repo. Drop in a WXR export and a media folder, get clean Astro-ready markdown.
030
Neyts Zupan @zupo.bsky.social · 11/06/2026
A great insight into what went down at our little hacker gathering in sunny Lanzarote fulltimenix.com/episodes/oce...
fulltimenix.com
Full Time Nix | Ocean Sprint 2026
Ocean Sprint 2026 took place in April. While I was not there myself, I did have remote conversations with several participants during the sprint. To learn of their experiences and what they were wo...
000
Neyts Zupan @zupo.bsky.social · 10/06/2026
Cut a new release of pyramid_openapi3, get it while it's hot! * much faster building of large responses * support for openapi-core 0.23 and jsonschema-path 0.4 github.com/Pylons/pyram...
github.com
Release 0.22.0 · Pylons/pyramid_openapi3
What's Changed Validate responses without unmarshalling by @dz0ny in #305 feat: Support openapi-core 0.23 and jsonschema-path 0.4 by @zupo in #311 New Contributors @dz0ny made their first contri...
000
Neyts Zupan @zupo.bsky.social · 09/06/2026
Hakuto is now a Claude Code plugin. Generate and manage Astro websites directly from Claude Code using the same workflows we already use internally. hakuto.dev/blog/hakuto-... #ai #astro #webdev
hakuto.dev
Hakuto is now a Claude Code plugin | Hakuto
Hakuto moved from a git-clone template to a Claude Code plugin. Install once, scaffold anywhere, update in place.
010
Neyts Zupan @zupo.bsky.social · 02/06/2026
Hakuto is no longer running on WordPress. We rebuilt everything with Astro, Markdown, and Tailwind and honestly should’ve done it sooner. hakuto.dev/blog/bye-bye... #webdev #astro #opensource
hakuto.dev
Bye-bye WordPress - a move done in less than an hour with Claude Code | Hakuto
How we migrated 64 WordPress blog posts to Astro in under an hour using Claude Code, going from 147 media files down to 11.
280
Neyts Zupan @zupo.bsky.social · 26/05/2026
We started building a Lovable-style AI website builder. Then Claude Code made us realize we only needed the framework and workflows underneath. So we open sourced them. hakuto.dev/blog/how-we-... #ai #opensource #webdev
hakuto.dev
How we killed our new AI product | Hakuto
How a failed attempt at building a Lovable competitor turned into an open-source site builder powered by Claude Code.
180
Neyts Zupan @zupo.bsky.social · 22/05/2026
You can authenticate correctly. You can authorize correctly. And still get the wrong outcome. That is the real problem with AI agents. @1password.bsky.social shows how prompt injection does not break access control. It abuses it. 1password.com/blog/ai-secu... #Security
1password.com
The next layer of AI security | 1Password
AI security does not stop at identity and access. Learn why AI agents need runtime controls to govern how permissions are used in context.
100
Reposted by Neyts Zupan
Shahar "Dawn" Or @mightyi.am · 08/05/2026
Ocean Sprint 2026 took place in April. While I was not there myself, I did have remote conversations with several participants during the sprint. To learn of their experiences and what they were working on check out this latest episode, Ocean Sprint 2026. fulltimenix.com/episodes/oce...
001
Neyts Zupan @zupo.bsky.social · 11/05/2026
Finally zsh & fish support in devenv. Support now comes via libghostty, which means zsh, fish, and nushell users can use devenv properly too. devenv.sh/blog/2026/05... #nix #shell #opensource
devenv.sh
devenv 2.1: Nix with zsh, fish, and nushell via libghostty - devenv
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix
030
Neyts Zupan @zupo.bsky.social · 23/04/2026
You can authenticate correctly. You can authorize correctly. And still get the wrong outcome. That is the real problem with AI agents. @1password.bsky.social shows how prompt injection does not break access control. It abuses it. 1password.com/blog/ai-secu... #Security
121
Neyts Zupan @zupo.bsky.social · 17/04/2026
And it’s a wrap! #OceanSprint
020
Neyts Zupan @zupo.bsky.social · 17/04/2026
Tacos for dinner 🌮🌮🌮 #OceanSprint
010
Neyts Zupan @zupo.bsky.social · 17/04/2026
As we're wrapping up #OceanSprint, I want to do another shout-out to our sponsors, who made the event possible and kept the sprinters fed and productive!
000
Neyts Zupan @zupo.bsky.social · 17/04/2026
mercury.com/ is a repeat supporter of #OceanSprint and this time, Arian van Putten and his coworkers took over an entire room.
000
Neyts Zupan @zupo.bsky.social · 17/04/2026
This #OceanSprint was again full of secunet Security Networks AG's folks, hacking away during all hours of the day.
000
Neyts Zupan @zupo.bsky.social · 17/04/2026
Jacek Γαλοwιcζ, founder of @nixos.org Academy, was doing an amazing job narrating our daily standups, as he does with their NixOS trainings.
000
Neyts Zupan @zupo.bsky.social · 17/04/2026
One more and then I'm done: the way we share Claude configs, skills, and rules in niteo.co/ is public so everyone can learn from it. Powered by @nixos.org. Check it out: github.com/teamniteo/cl... #OceanSprint
github.com
GitHub - teamniteo/claude: One CLAUDE.md to rule them all.
One CLAUDE.md to rule them all. . Contribute to teamniteo/claude development by creating an account on GitHub.
010
Neyts Zupan @zupo.bsky.social · 17/04/2026
Another day on #OceanSprint, another opensource release! This time, a JWT plugin for trypyramid v2: pypi.org/project/pyra...
pypi.org
pyramid-jwt2
JWT authentication security policy for Pyramid 2.0+
000
Neyts Zupan @zupo.bsky.social · 16/04/2026
Very high seniority level 🎩 #OceanSprint
010
Neyts Zupan @zupo.bsky.social · 16/04/2026
Windsurfing regatta during #OceanSprint ⛵
000
Neyts Zupan @zupo.bsky.social · 16/04/2026
Note to self: look into using github.com/lassulus/wra... instead of HomeManager #OceanSprint
github.com
GitHub - Lassulus/wrappers: A Nix library to create wrapped executables via the module system
A Nix library to create wrapped executables via the module system - Lassulus/wrappers
000
Neyts Zupan @zupo.bsky.social · 16/04/2026
Lunch time! Massive thanks to our sponsors that enable us to serve catered lunch right in the #OceanSprint venue, so everyone can keep hacking and not get distracted by bodily needs! 🤓 oceansprint.org/
000
Neyts Zupan @zupo.bsky.social · 16/04/2026
Today we are opensourcing our AI website builder because we realized there is no product to build. @anthropic.com got too good. hakuto.dev/blog/how-we-...
hakuto.dev
How we killed our new AI product | Hakuto
How a failed attempt at building a Lovable competitor turned into an open-source site builder powered by Claude Code.
000
Neyts Zupan @zupo.bsky.social · 16/04/2026
You know you are at a proper hacker event when folks are rocking customized split keyboards 😎 #OceanSprint
000
Neyts Zupan @zupo.bsky.social · 15/04/2026
Introduction to #Lanzarote wines on #OceanSprint
010
Neyts Zupan @zupo.bsky.social · 14/04/2026
When your AI coding tool hits API limits, everything stops. This setup switches to a local model automatically when quota runs out. Simple idea, but very practical. Feels like the right direction. Less dependency on external APIs, more control. boxc.net/blog/claude-... @anthropic.com
110
Neyts Zupan @zupo.bsky.social · 14/04/2026
#OceanSprint in full swing!
000
Neyts Zupan @zupo.bsky.social · 14/04/2026
Yoga-time at #OceanSprint, to break up those long sitting sessions🧘
010
Neyts Zupan @zupo.bsky.social · 13/04/2026
OH: #OceanSprint is the Yugoslavia of #nix
010
Neyts Zupan @zupo.bsky.social · 10/04/2026
So @github.com Web-based merge conflict resolution is the first conflict resolution UI that I understand and use. VSCode’s just confuses me and I go back to the terminal. Well done!
121
Neyts Zupan @zupo.bsky.social · 08/04/2026
Distributed systems fail in the worst possible ways. @fly.io had a global outage caused by a subtle Rust concurrency issue. Instead of patching around it, they rethought the whole system and replaced consensus with a gossip based approach. fly.io/blog/corrosi... #Engineering
fly.io
Corrosion
Corrosion is distributed service discovery based on Rust, SQLite, and CRDTs.
000
Neyts Zupan @zupo.bsky.social · 01/04/2026
Good behind the screen look into epic clusterfucks that happen in software world more often than anyone would think. By my favorite YouTube Channel @veritasium.bsky.social youtu.be/aoag03mSuXQ
youtu.be
The Internet Was Weeks Away From Disaster and No One Knew
How a single hack infected the world’s most important operating system. Sponsored by NordVPN - Get exclusive NordVPN deal here: https://NordVPN.com/veritasium It’s risk free with Nord’s 30 day money-back guarantee! If you’re looking for a molecular modelling kit, try Snatoms, a kit I invented where the atoms snap together magnetically - https://ve42.co/SnatomsV Sign up for the Veritasium newsletter for weekly science updates - https://ve42.co/Newsletter ▀▀▀ 0:00 The Free Software Foundation 5:03 Why is Linux so popular? 9:57 The XZ Weakness 12:07 End To End Encryption - SSH 18:40 How To Compress Data 23:47 How The .XZ Hack Worked 34:24 A Bug In Jia’s Code 38:27 Henry Hacks Derek 43:16 The Back Door Is Exposed 47:16 Who is Jia Tan? 50:33 Open Vs Closed Source ▀▀▀ A huge thank you to everyone who made this possible: Rich Jones for his openness throughout this project. Denzel Farmer for his incredible breakdown - https://youtu.be/Q6ovtLdSbEA?si=qlbcg6skR-BoS5z1 Karsten Nohl @hackingmatters, Yannis Hofmann, and Matthias Marx at SRLabs for their help throughout this project. Fabian Fäßler @LiveOverflow Alex Schlögl and the rest of the Cure53 team for their technical insights on the project. Tom Scott, and Computerphile for their excellent videos on compression. Josh at @breakfastserial for the filming inspiration. Planet Money for a podcast that helped inform our research and @fern-tv for inspiration. Thomas Roccia for his technical feedback on the video. And Ed at @LowLevelTV for helping out early on! ▀▀▀ References: https://ve42.co/XZHackRefs ▀▀▀ Special thanks to our Patreon supporters: Adam Foreman, Albert Wenger, Alex Porter, Alexander Tamas, Anton Ragin, armedtoe, Balkrishna Heroor, Bertrand Serlet, Blake Byers, Bruce, Charles Ian Norman Venn, Daniel Martins, Data Don, Dave Kircher, David Johnston, David Tseng, EJ Alexandra, Evgeny Skvortsov, Garrett Mueller, Gnare, gpoly, Hayden Christensen, Hong Thai Le, Ibby Hadeed, Jeromy Johnson, Jesse Brandsoy, Jon Jamison, Juan Benet, Kelcey Steele, KeyWestr, Kyi, Lee Redden, Marinus Kuivenhoven, Mark Heising, Martin Paull, Meekay, meg noah, Michael Krugman, Moebiusol - Cristian, Orlando Bassotto, Parsee Health, Paul Peijzel, Richard Sundvall, Robson, Sam Lutfi, Shalva Bukia, Sinan Taifour, Tj Steyn, Ubiquity Ventures, Vahe Andonians, wolfee ▀▀▀ Writer, Director & Producer: Henry van Dyck Presenters: Derek Muller & Henry van Dyck Editor: Trenton Oliver Animators: Fabio Albertelli, Domonkos Józsa, Andrew Neet, Alex Drakoulis & Emma Wright Illustrators: Jakub Misiek & Nataly Zhuk Researchers: Aakash Singh Bagga & Sophia Rose Additional Editing: James Stuart & Peter Nelson Thumbnail Designers: Abdallah Rabah, Ren Hurley, Ben Powell & Henry van Dyck Production Team: Josh Pitt, Matthew Cavanagh, Anna Milkovic, Katy Southwood & Jess Bishop-Laggett Executive Producers: Derek Muller & Casper Mebius Additional video/photos supplied by Getty Images & Storyblocks Music from Epidemic Sound
010
Neyts Zupan @zupo.bsky.social · 30/03/2026
It will be extremely hard for me to fly a non-starlink flight from now on. This is insane. @airbaltic.bsky.social #starlink #businessclass
000