IEEE Spectrum reports on the return to physical buttons and dials, Microsoft released GenAIScript, iFixit’s Elizabeth Chamberlain announces a big Right to Repair win, Daniela Baron reimagines technical interviews & John O’Nolan, shares some thoughts on open source governance and how to create trust within technology, communities, and media
Niklaus Wirth makes his plea for lean software, PocketBase puts your entire backend in 1 file, Vanna is a Python RAG framework for accurate text-to-SQL generation, Henrik Karlsson wants you to think more about what to focus on & Calvin Wankhede shares how he built a fully offline smart home (and you should too).
A popular open source iOS authenticator app goes rogue under new ownership, Andreas Kling steps back from SerenityOS & forks Ladybird, Vhyrro takes a thought-provoking try at a “static effect system”, Matt Bessey is over GraphQL & Marc-Andre Giroux still likes GraphQL sometimes (in the right context).
The big story right now is the recently uncovered backdoor in liblzma (aka XZ) – a relatively obscure compression library that happens to be a dependency of OpenSSH.
This incident is noteworthy for so many reasons: the exploit itself, how it was deployed, how it was found, what it says about our industry & how the community reacted. Let’s dig in!
Changelog Merch is now on sale, IronCalc sets out to democratize spreadsheets, Grant Slatton writes about algorithms we develop software by, Mark Rainey gives respect to the ultimate in debugging, Gitpod is leaving Kubernetes & Johannes Kaufmann’s html-to-markdown converts entire websites into Markdown.
HashiCorp sends OpenTofu a nasty-gram in the wake of Matt Asay’s infringement claims, Polar is like Patreon but for software creators, a Common Corpus of LLM data is released on HuggingFace & Loki is an open source tool for fact verification.
A new badge for open source projects that won’t be getting any maintenance, everything Chip Huyen learned from looking at 900 open source AI tools, CNBC writes up tech’s renewed layoff trend, Teable is a Postgres-Airtable fusion & Target announces an open source fund.
Marcus J. Ranum’s 2005 post on dumb ideas in computer security still holds up, Barry Jones argues why story points are useless, Posting is an HTTP client as a TUI, Varnish ceator Poul-Henning Kamp (phk) reflects on ten years of working on the HTTP cache & es-tookit is a major upgrade to Lodash.
Apple backs off killing web apps (but the fight continues), Luka Kladaric writes about how to ship quality software in hostile environments, Deno’s new package registry is an npm superset, Martin Fowler on the value of periodic face-to-face & Eugene Ghanizadeh wants us to get more decentralized than the Fediverse. Leave us nice words!
Puter puts an entire operating system in your web browser, the kapa.ai team write down how to structure your docs for LLMs, Daytona is an open source Codespaces alternative, Gleam v1.0 has been released & Rolldown is a JavaScript bundler written in Rust.
The Rune team announces $100k in open source grants for indie game devs, the Zed code editor is now open source, the Ollama team releases Python & JavaScript libraries, Max Bernstein tells the story of Scrapscript & Pooya Parsa writes up some notes from a tired maintainer.
Luminousmen writes about Senior Engineer Fatigue, Microsoft rethinks its AI-based Recall feature, Mike Hoye gives a big shout out to the “diff” program, Thom Holwerda covers ChromeOS’ quiet switch to Android Linux subsystems & Mihail Eric tells the inside story on how Alexa dropped the ball on being the top conversational system on Earth.
Alex Russell answers the question, “If not React, then what?” Csaba Okrona identifies four core problems that create and reinforce knowledge silos, Rob Koch’s Markwhen is like Markdown for timelines, Jeff Geerling is quite impressed by Apple’s latest iteration on the Mac mini & Sylvain Kerkour took the time to draw a comparison of Amazon’s O.G. S3 service with Cloudflare’s R2 competitor.
Alex Ellis’ new actions-batch project uses GitHub Actions as a time-sharing supercomputer, DevDocs.io combines multiple API documentations in a fast, organized, and searchable interface, Jarred Sumner announces Bun’s very own JavaScript shell, Shoelace is a forward-thinking library of web components & Martin Heinz writes an awesome guide to building an indoor air quality monitoring system with Prometheus, Grafana & a CO2 sensor.
Evan Doyle says AI makes tech debt more expensive, Hunter Ng researches the ghost job ad phenomenon, Gavin Anderegg analyzes Bluesky in light of its recent success, Martin Tournoij rants against best practices & Evan Schwartz tells us why he thinks binary vector embeddings are so cool.
Tim Fisken explains the problem with soft deletion, a simple measure of software dependency freshness is proposed, a deep-dive on sound design in software, a web app with over 80 handy developer tools built in & Luke Plant reminds us that programming mantras are proverbs, not laws.
Changelog drops full-length musical albums in collaboration with Breakmaster Cylinder, Justin Searls on why the right tools fail for the wrong reasons, The Unix Sheikh says we have too many level of abstractions, Adam at PiCockpit compares the newly-announced Raspberry Pi 5 to the competition & Jorge Medina assures us that we’re not lacking creativity, we’re just overwhelmed by content.
Daniel Hooper lists out all the good ideas in computer science, Jeff Geerling declares 2024 the year corporate open source dies, Jared Turner says all kinds of works-in-progress are waste, Daroc Alden covers the leadership crisis in the Nix community & John Hawthorn explains why Ruby may be faster than you think.
Geoffrey Litt thinks browser extensions are underrated, Adolfo OchagavĂa on being a generalist in a specialist’s world, Jack Garbus praises the Arch Wiki, Terence Eden tries to rebuild FourSquare for ActivityPub using OpenStreetMap & Sebastien Dubois teaches us how to connect ideas together.
Ship It is back! IEEE Spectrum writes about quantum computing’s reality check, Maxim Dounin announces freenginx, Nadia Asparouhova goes deep on AI & the “effective accelerationism” movement, Angie Byron helps first time open source contributors avoid common pitfalls & Miroslav Nikolov writes up his advice for high-risk refactoring.
YouTuber “Internet of Bugs” breaks down why AI “software engineer” Devin is no Upwork hero, Redka is Anton Zhiyanov’s attempt to reimplement Redis with SQLite, OpenTofu issues its response to Hashicorp’s Cease and Desist letter, Brian LeRoux introduces Enhance WASM & PumpkinOS is not your average PalmOS emulator.
Changelog Beats drops a new Dance Party album, Will McGugan’s new Toolong (tl) terminal app, Mitchell Baker is out as Mozilla CEO, Microsoft’s Jordi Adoumie announces sudo for Windows, Tatu Ylonen tells the tale of how they got SSH to be port 22 & Jack Lindamood gives an “Endorse” or “Regret” rating for ~50 different services, tools & processes he used over the 4 years he led infrastructure at a startup.
Apple announces its “new” style of AI, piku gives you “git push” deployment on your own servers, Dabo Chen rebuilds nanoGPT in a spreadsheet, Mark Seemann thinks you’ll regret using natural keys in your database design & Glyph Lefkowitz describes his grand unified theory of the AI hype cycle.
Redis’ re-licensing prompts forks like Drew DeVault’s Redict, Matthew Miller thinks we need more community built software, Paul Gross makes the case that DuckDB is the new jq, Anton Zhiyanov shares how he makes a living as a developer despite being “pretty dumb” & Baldur Bjarnason chimes in on the state of the web developer job market.
Swizec’s article on not using AI to writes tests, LlamaFs is a self-organizing file system with Llama 3, a Pew Research analysis confirmed that the internet is full of broken links, Sam Rose built a spectacular interactive study of queueing strategies & Jordan Cutler shares a real-life experience of him writing clear/readable code… and it backfiring.
Software developer jobs are trending down, the creator of dotenv creates a better dotenv, the Chrome team puts Gemini Nano AI model right inside your browser, a pollyfill.js supply chain attack hits 100k+ sites & Steph Ango asks, “What can we remove?”
Marcus Buffett writes his younger self programming advice, Swyx asks and answers whether or not DevRel is dead, the Ghost team opens up their ActivityPub server, Pongo is like MongoDB but on Postgres, Jack Kelly is funding Ladybird because he can’t fund Firefox & Hyrum’s Law.
Bahaa Zidan says your web framework doesn’t matter, DHH writes about magic machines, Dylan Huang reviews thousands of opinions on HTMX, Tim Ottinger says programming is thinking & Tim Spann says small language models (SLM) for the win.
Ben Affleck’s take on AI replacing actors, Stanford researcher (Yegor Denisov-Blanch) busts the ghost engineers, Electrobun takes a crack at Electron apps, April King opens up a cookies can of worms, John Arundel thinks many of us are making a career ending mistake & Typogram’s CodingFont.com is like Zoolander’s Walk Off but for coding fonts.
Forrest Brazeal is concerned about the open source threat from within, Vicki Boykis explains why Redis is forked, John O’Nolan and the Ghost team plan to federate over ActivityPub, Llama 3 is now available for “businesses of all sizes” & nolen writes up questions to ask when you don’t want to work.
