~/devreads

23 Sept 2025

18 min read

Update: In several recent posts, I've attempted to address how the structure of standards bodies and their adjacent incubation venues accelerates or suppresses the potential of the web as a platform. The pace of progress matters because platforms are competitions, and actors that prevent expansions of basic capabilities risk consigning the web to the dustbin. Inside that framework, there is…

22 Sept 2025

1 min read

In this Executive Function series from OpenAI, discover how CNA is transforming its newsroom with AI. Editor-in-Chief Walter Fernandez shares insights on AI adoption, culture, and the future of journalism.

3 min read

I have shown how to use Copilot instructions file to generate better end-to-end Cypress tests. In this blog post I will show a specific trick I use to make my test writing a lot more precise and much faster. When we are writing end-to-end tests, we constantly need to look up the best test selectors to use to find elements…

21 Sept 2025

21 min read

Photo by Photo by Artan Sadiku Commentary about browsers and the features they support is sometimes pejorative towards pre-standardisation features. Given Apple's constriction of Mozilla's revenue stream and its own strategic under-funding of WebKit, this usually takes the form "Chromium just ships whatever it wants." This is true, of course, but not in the way commenters intend; and not only…

19 Sept 2025

18 Sept 2025

RisingStack Engineering 6 min read

In today’s AI hype you cannot miss the term “RAG,” which stands for Retrieval Augmented Generation. In plain English, it stands for customizing large language model reasoning with your own context and knowledge. I searched a lot of resources and AI-generated content for this fairly simple technique to be explained well. I’m still looking for […] The post RAG Demystified:…

ai

1 min read

I follow a simple flow of questions that helps me stay focused, improve consistently, and make incremental impact at workplace. I'm never running around like a headless chicken. Here are the questions I ask myself, and answer honestly, like really true to its core

17 Sept 2025

Anush DSouza 2 min read

Ever found yourself in the endless loop of tweaking a prompt, running your code, and waiting to see if you finally got the output you wanted? That slow, frustrating feedback cycle is a common headache for AI developers. What if you could speed that up and get back to what you do best? Let’s focus on building amazing applications. We're…

newsaiheroku aimanaged inference and agentsproduct features

2 min read

In the wake of the largest supply-chain attack in history, the JavaScript community could have a moment of reckoning and decide: never again. As the panic and shame subsides, after compromised developers finish re-provisioning their workstations and rotating their keys, the ecosystem might re-orient itself towards solving the fundamental flaws that allowed this to happen. After all, people have been…

1 min read

Apollo Research and OpenAI developed evaluations for hidden misalignment (“scheming”) and found behaviors consistent with scheming in controlled tests across frontier models. The team shared concrete examples and stress tests of an early method to reduce scheming.

publication

16 Sept 2025

Rob 1 min read

I use bash's history all the time, via ctrl+r and also with the up and down keys; it's wonderful. Sometimes, I want to get back to the end of my history and I recently discovered that there's a shortcut for this: meta+>. It doesn't matter where you are in your history, pressing meta+> jumps you to the end and you…

command lineshell scripting

7 min read

If your web application stores data locally in the localStorage object, you can easily set / verify the data from your Cypress end-to-end tests. For example: cypress/e2e/players.cy.js 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33…

15 Sept 2025

Gavin Perry 1 min read

The online betting landscape has evolved far beyond its origins as a digital replica of the traditional sportsbook.

Chuck Weininger 3 min read

Learn how Application Insights Code Optimizations helps .NET developers identify performance bottlenecks and get AI-powered recommendations through GitHub Copilot integration. The post Application Insights Code Optimizations for .NET Apps appeared first on .NET Blog.

.netaiazureperformanceapplication insights

brian m. carlson 3 min read

Today, we’re announcing some changes that will improve the security of accessing Git data over SSH. What’s changing? We’re adding a new post-quantum secure SSH key exchange algorithm, known alternately as sntrup761x25519-sha512 and sntrup761x25519-sha512@openssh.com, to our SSH endpoints for accessing Git data. This only affects SSH access and doesn’t impact HTTPS access at all. It also does not affect GitHub…

1 min read

Codex just got faster, more reliable, and better at real-time collaboration and tackling tasks independently anywhere you develop—whether via the terminal, IDE, web, or even your phone.

release

1 min read

New research from the largest study of ChatGPT use shows how the tool creates economic value through both personal and professional use. Adoption is broadening beyond early users, closing gaps and making AI a part of everyday life.

research

1 min read

This addendum to the GPT-5 system card shares a new model: GPT-5-Codex, a version of GPT-5 further optimized for agentic coding in Codex. GPT-5-Codex adjusts its thinking effort more dynamically based on task complexity, responding quickly to simple conversational queries or small tasks, while independently working for longer on more complex tasks.

safety

13 Sept 2025

12 Sept 2025

4 min read

At Deliveroo, we’re always refining how we scale - especially when it comes to managing compute costs in the cloud. After optimising our Amazon ECS workloads with Reserved Instances and Savings Plans, we saw an opportunity to push further using EC2 Spot Instances, which offer up to 90% savings compared to On-Demand prices. But Spot comes with challenges: Their availability…

11 Sept 2025

Darryn Campbell 1 min read

An honest, practical look at "vibe coding": building software with AI assistants like Cursor and Claude Code. You'll learn what works, what doesn’t, and how MCP servers unlock production-ready workflows. Ideal for teams exploring AI pair programming with a focus on speed, safety, and engineering judgment.

10 Sept 2025

Justyna Jurkowska 9 min read

Joanna Maciejewska I'm sure you've seen this quote from Joanna Maciejewska all over social media; I'd bet some money that there are shops already selling t-shirts and mugs with it. Despite seeing it dozens of times, I never thought about it in the context of my day-to-day as a programmer! I, like the quote's author, was more focused on AI…

ai and emerging techdevelopment

David Baliles 8 min read

Salesforce customers often leverage third-party or custom services to extend their orgs, and they do so with two common options: Connected Apps and External Services. Connected Apps let third-party vendors or custom code call Salesforce APIs using long-lived OAuth tokens, while External Services call vendor APIs through declarative configurations with vendor-managed hosting, scaling, and endpoint security. While both approaches deliver…

engineeringapplinksalesforcesecurity

Matthew Green 7 min read

I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why didn’t I think of that”) or else they impress me with the brilliance of their inventors. But there’s also another class of vulnerabilities: these are the ones that can’t possibly exist in important production software, … Continue reading Kerberoasting →

attacksmicrosoftpasswords

9 Sept 2025

Rob 2 min read

Following on from my earlier exploration of JWKS (RFC7517), I found myself needing to convert the JWKS into PEM format. This time I turned to Python with my preference of using uv with inline script metadata and created jwks-to-pem.py. The really nice thing about inline script metadata is that we can use the cryptography package to do all the hard…

command linepython

Gediminas G 1 min read

Turn your domain name into a monetizable storefront that sells and grows your brand. With the new link-in-bio website option in Hostinger Website Builder, it’s just a few clicks a… The post Turn followers into customers with a link-in-bio website appeared first on Hostinger Blog.

product updates

13 min read

In the blog post Test Tag Suggestions Using AI I described a system to pick a testing tag based on a pull request's title and body text. In this blog post, I will make it useful. Whenever a user opens a GitHub issue and labels it a "bug", an automated workflow will pick an appropriate testing tag (or several) and…

8 Sept 2025

Su Glasgo 5 min read

When Production Goes Sideways Imagine this: It’s 2 AM, your phone buzzes with an alert, and your dashboards are screaming. Production is down. Sound familiar? An automated health check has failed, and your internal dashboards are showing a spike in errors. You’ve just pushed a new release that included a critical database schema change, and […] The post Triage and…

engineeringcloud infrastructurefiropentelemetryperformance optimization

Jeff Wilson 1 min read

Devices or machines connected to your router typically have a dynamic IP address. The DHCP server assigns a dynamic IP ... Read More The post How to Configure a Static IP Address on Debian 13 appeared first on RoseHosting.

debiandebain 13how to configurestatic ip address

1 min read

Applications are now open for OpenAI’s People-First AI Fund, a $50M initiative supporting U.S. nonprofits advancing education, community innovation, and economic opportunity. Apply by October 8, 2025, for unrestricted grants that help communities shape AI for the public good.

company

Luke Stephenson 4 min read

Heartbeats: How Synthetic Traffic Keeps Us Running Let me take you on a journey of how we came to use heartbeats in our application design. It’s a happy story of love and no broken hearts along the way. What are heartbeats? What my teams have called heartbeats are a form of synthetic traffic generated by the application itself. The deployed…

observabilitymonitoringkafka

1 min read

Yes, higher compensation means you won't have as many options to choose from, but fewer does not mean none. As long as you can demonstrate measurable impact, there will always be opportunities at every compensation level.

7 Sept 2025

2 min read

Swift 6.2 makes it easier to interpolate strings with optional values. What’s The Problem? In this SwiftUI view I need to create a text string from an optional integer value: struct CounterView: View { let count: Int? var body: some View { Text("The count is \(count)") } } The compiler warns about the optional value: String interpolation produces a debug…

6 Sept 2025

1 min read

Everything we interact with today is a "distributed system". From microservices to cloud-native applications, from databases to message queues. We are constantly building systems that span multiple machines. But there comes a fundamental challenge - how do we ensure that all independent nodes agree on shared state?

5 Sept 2025

Michelle Peot 4 min read

Beginning at 06:00 UTC on Tuesday, Jun 10, 2025, Heroku customers began experiencing a platform service disruption due to an unintended system update applied to our production infrastructure by our vendor. To compound the issue, the Heroku Status site was affected by the outage. Shortcomings in site design and API latency resulted in timeouts, and the Status site appeared as…

news

4 Sept 2025

Lauren Groccia 3 min read

The AI revolution presents a critical challenge: moving from experimentation to production. This year, Heroku has evolved beyond a traditional PaaS to become an AI PaaS, a fully managed platform designed to solve this problem and accelerate the delivery of AI-powered apps. With new capabilities like AppLink, Managed Inference and Agents, and MCP on Heroku, Heroku now provides a fully…

newsaieventsheroku aiplatform updates

Gediminas G 3 min read

Artificial intelligence (AI) bots now scrape websites to train models and answer questions directly, often without sending traffic back to the original sources. Our new AI audit f… The post Your website, your rules: Track and control AI bots appeared first on Hostinger Blog.

product updates

Nathan Lehotsky 7 min read

As cyberattacks evolve to unprecedented levels of sophistication and speed, the time gap between breach detection and response has never been more critical. Traditional security approaches often operate reactively, identifying compromises only after damage has occurred. This delay grants attackers a tactical advantage, forcing security teams to focus on damage assessment and remediation rather than…

uncategorizedincident-responsesecurity

3 Sept 2025

Isobel Scott 6 min read

Every day, shoppers from Etsy's community of nearly 90M buyers visit our marketplace to search for unique, handmade, and vintage items. But with over 100 million listings, how do we help each buyer find exactly what they're looking for? Traditional search and recommendation systems often fall short of capturing the nuanced interests that make each Etsy buyer unique, from specific…

5 min read

Ask Copilot agent to write the full end-to-end test and it is likely to write nonsense. For example, let's test the "zero teams / zero players" message on my soccer web app. I can start a new test in the existing "Teams" spec file cypress/e2e/teams.cy.js 1 2 3 describe('Teams', () => { it.only('shows zero teams and zero players message', ()…