直近1週間の更新
9/8 (火)

Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)
Cloudflare Blog
Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.
2時間前

React の browser() API でブラウザ専用のコンポーネントを描画する
azukiazusa のテックブログ2
SSR を使う React アプリで localStorage を読む場合、従来は useEffect と state を使って初回表示を管理していました。browser() API では、ブラウザでのみ描画する意図を use(browser()) で表現し、待機中の表示を Suspense に任せられます。この記事では `browser()` API の使い方と、従来の `useEffect` と state を使った方法との違いを解説します。
4時間前

PR TIMESはフロントエンドカンファレンス福岡2026に協賛します! #fec_fukuoka PR TIMES 開発者ブログ
こんにちは。フロントエンドエンジニアの白濱(@shiraha_maru)です。 PR TIMESは、2026年9月12日(土)に開催される「フロントエンドカンファレンス福岡2026」にGold Sponsorとして協賛い […]
14時間前

llm 0.35 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.35">llm 0.35</a></p> <blockquote><ul><li>New OpenAI model: <code>gpt-6-astra</code> for <a href="https://openai.com/index/gpt-6-astra/">GPT-6 Astra</a>.</li></ul></blockquote> <p>Tags: <a href="https://simonwillison.net/tags/openai">openai</a>, <a href="https://simonwillison.net/tags/llm">llm<...
15時間前

Creepy crawlies Simon Willison's Weblog
<p><strong><a href="https://people.kernel.org/monsieuricon/creepy-crawlies">Creepy crawlies</a></strong></p>Konstantin Ryabitsev discusses how bad the "background radiation" of abusive crawlers has become from the perspective of <a href="https://git.kernel.org/">git.kernel.org</a>, the official Git repository for the Linux kernel:</p><blockquote><p>TL;DR: we spend more CPU cycles rendering commits for scrapers than we spend on al...
16時間前

Quoting Jakub Pachocki Simon Willison's Weblog
<blockquote cite="https://openai.com/index/an-alien-mind/#scalable-defense"><p>The strongest argument I see for continuing to train much smarter models quickly is the need to build defensive systems against the dangers posed by other AI. [...]</p><p>We will need powerful, aligned AI for defense; to secure infrastructure, to protect against rogue agents in real time, and to invent entirely new protective measures. This will be a primary focus of OpenAI’s deployment effort...
17時間前

Video compressor Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/video-compressor">Video compressor</a></p> <p>I recorded a short demo video of <a href="https://simonwillison.net/2026/Sep/7/equal-earth/">my Equal Earth</a> animation on my phone and wanted to publish an optimized version of that video (using FFMPEG) on my blog, so I had Claude Fable 5.1 in Claude Code for web <a href="https://claude.ai/code/session_01QHTdJZ4xg6TZfDXCmuvA...
20時間前

Mercator ↔ Equal Earth Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/equal-earth">Mercator ↔ Equal Earth</a></p> <p>I got curious about the Equal Earth map projection that was recently <a href="https://www.theguardian.com/world/2026/sep/04/un-vote-world-map-mercator-equal-earth-africa">voted on at the UN</a> so I had GPT-6 Astra (medium) in ChatGPT Work <a href="https://chatgpt.com/share/6a9ee520-c82c-83ea-8111-2f7050c08638">build me<...
1日前

Custom Scrollbar Component In 2026 Master.dev Blog RSS Feed
Thanks to some very modern CSS, we can visually replicate the logic of scrollbars. Then make them actually functional.
1日前
9/7 (月)

Shai-Hulud Rises From the Dead after 111 days
Aikido Security's Blog
A known Shai-Hulud worm payload sat dormant for 111 days, then republished to npm, right past the malware scanning meant to catch it.Category: Vulnerabilities & Threats
1日前

StyleSmuggler fix: patch the Magento and Adobe Commerce RCE
Aikido Security's Blog
StyleSmuggler is an unauthenticated RCE hitting Magento and Adobe Commerce, with no CVE and no Adobe patch yet. Aikido already has the fix.Category: Vulnerabilities & Threats
1日前

Research acceleration: The view inside OpenAI Simon Willison's Weblog
<p><strong><a href="https://openai.com/index/research-acceleration-view-inside-openai/">Research acceleration: The view inside OpenAI</a></strong></p>Apparently today is RSI day at OpenAI, for Recursive Self-Improvement - I think it's their new AGI. Both this piece and the new essay <a href="https://openai.com/index/an-alien-mind/">An Alien Mind</a> (by Chief Scientist Jakub Pachocki) talk about it, and this one doesn't even bother to expand the a...
2日前

AI時代のエンジニア選考・面接のパターン
55
カミナシ エンジニアブログ
カミナシで、ソフトウェアエンジニアをしている osuzu です。 面接官として中途採用の選考にも関わっていますが、ここ1年くらいでエンジニア選考の設計を見直す必要が強まってきたと感じています。 私のチーム採用では、これまでオンラインコーディングテストや持ち帰り課題を選考に利用してきましたが、AIの登場によって、候補者さまはAIを使って課題を作成するようになり、Opus 4.5 がリリースされたあたりから成果物の精度がぐんと上がりました。 その結果、提出された課題から期待する経験値と、面接でお会いした本人から見える経験値が、うまく重ならないケースが出はじめたのです。提出物の設計や実装は的確なのに…
2日前
9/6 (日)

The purpose of DNS is to spread scams Simon Willison's Weblog
<p><strong><a href="https://shkspr.mobi/blog/2026/09/the-purpose-of-dns-is-to-spread-scams/">The purpose of DNS is to spread scams</a></strong></p>Terence Eden shares some daunting statistics in support of his take that "the Domain Name System's purpose seems to be a vector for criminals to run scams on people at a terrifyingly high rate".</p><p>On <a href="https://interisle.net/insights/cybercriminaldomaindemand">this Interisle report</a...
2日前

There's No Limit to How Bad Code Can Get Simon Willison's Weblog
<p><a href="https://lobste.rs/s/rfn2mn/there_s_no_limit_how_bad_code_can_get#c_8kdtaw">My comment</a> on <a href="https://lobste.rs/s/rfn2mn/there_s_no_limit_how_bad_code_can_get">There&#x27;s No Limit to How Bad Code Can Get</a> &mdash; Lobste.rs.</p><p><em>[In reply to a comment about burning it down to start from scratch when technical debt becomes overwhelming]</em></p><p>In my experience it's <em>so rare</em...
2日前

Quoting Zach Kehs Simon Willison's Weblog
<blockquote cite="https://zachkehs.com/blog/theres_no_limit_to_how_bad_code_can_get/#9-ref"><p>If you continue to add floors and rooms to a building forever, it will collapse. Software faces no such constraint. The code can <em>always</em> get worse. There can <em>always</em> be a new layer of indirection or a reduction in performance.</p></blockquote><p class="cite">&mdash; <a href="https://zachkehs.com/blog/theres_no_limit_to_how_ba...
2日前

フォームの Enter 送信で isComposing と keyCode === 229 を併用する理由
64
azukiazusa のテックブログ2
IME の変換確定に使う Enter キーで、書きかけのメッセージが送信されることがあります。isComposing と非推奨の keyCode === 229 を併用して、変換中の Enter を送信処理から除外する理由を解説します。
2日前

Introducing GPT-6 Astra for developers Simon Willison's Weblog
<p><strong><a href="https://www.youtube.com/watch?v=bOC3DisEOfg">Introducing GPT-6 Astra for developers</a></strong></p>Blink and you'll miss it, but there's a familiar creature at <a href="https://www.youtube.com/watch?v=bOC3DisEOfg&amp;t=119">1m59s</a>:</p><blockquote><p>Across the board, Astra has more attention to detail, better understanding of the user's prompt, and can build more sophisticated outputs. In particular, i...
3日前

Using Blender with coding agents on macOS Simon Willison's Weblog
<p><strong>TIL:</strong> <a href="https://til.simonwillison.net/llms/blender-coding-agents-macos">Using Blender with coding agents on macOS</a></p> <p>I've been having fun with Blender in ChatGPT Codex on my Mac recently. Getting it to work with coding agents is really easy: install the full Mac application from <a href="https://www.blender.org">blender.org</a> and run a prompt like this:</p><blockquote><p><code>Use t...
3日前
9/5 (土)

Bun v1.4.2
1
bun.com
This release fixes two regressions impacting Elysia and AsyncLocalStorage, a hang in @discordjs/ws, CMYK JPEG decoding in Bun.Image, a rare JIT crash, and a GC crash on musl.
3日前

新しいグラフライブラリ TanStack Charts の設計思想と使い方
3
azukiazusa のテックブログ2
多くのグラフライブラリがある中、TanStack Charts はなぜ作られたのでしょうか。この記事では、TanStack Charts の設計思想を整理し、React で売上の折れ線にキャンペーンの注釈を重ねるサンプルを紹介します。
3日前

The Pelican comparison grid for Astra is pretty interesting Simon Willison's Weblog
<p>I got access to GPT-6 Astra this afternoon, so naturally I used it to generate <a href="https://simonwillison.net/tags/pelican-riding-a-bicycle/">SVGs of pelicans riding bicycles</a> - at low, medium, high, xhigh and max reasoning levels (Astra doesn't support reasoning=none). Then I rendered those pelicans in <a href="https://static.simonwillison.net/static/2026/gpt-6-and-5.6-pelicans.html">a comparison grid</a> with GPT-5.6 Sol, Terra, and Luna, and beyond bei...
4日前

OpenAI's rogue agents were caught communicating via public wikis Simon Willison's Weblog
<p>Here we go again... <a href="https://collusion.wiki">Discovery of a new OpenAI agent message board</a> by Sydney Von Arx, Cormac Slade Byrd, Spencer Kitts, and Thomas Larsen describes the <em>latest</em> <a href="https://simonwillison.net/tags/accidental-cyberattacks/">accidental cyberattack</a> by models being trained by OpenAI. This time it was agents engaged in some sort of web research benchmark, so they had (supposedly) controlled access to the ...
4日前

GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
1
Socket
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
4日前

Project HydraFusion: Frontier quality via multi-model orchestration
4
The GitHub Blog
In controlled offline evaluations, HydraFusion’s selective coding workflows matched or exceeded the evaluated Opus 5 baseline while reducing estimated workflow cost. Now available as a research preview in GitHub Copilot.The post Project HydraFusion: Frontier quality via multi-model orchestration appeared first on The GitHub Blog.
4日前

React Now Rusted All The Way Out
1Master.dev Blog RSS Feed
The transition to the Rust version of the React Compiler for the 1,036-file React Router codebase resulted in a significant speed increase, improving build times from 14.3 seconds to 0.81 seconds. The new compiler addresses previous limitations and ensures consistency across the toolchain, making it easier to manage builds with enhanced performance and capabilities.
4日前
9/4 (金)

Stop breaking SLAs: how to patch vulnerabilities before the fix even ships
Aikido Security's Blog
How to use Aikido Libraries to patch vulnerable dependencies and meet security SLAs. Category: Aikido
4日前

Top Trivy alternatives for container and cloud scanning in 2026
Aikido Security's Blog
Six Trivy alternatives compared for 2026 on container scanning, IaC, SAST, prioritization, and fixes, with where each one actually fits.Category: DevSec Tools & Comparisons
4日前

pnpm update で GitHub Actions もまとめて更新する
25
azukiazusa のテックブログ2
GitHub Actions で使用する Action をコミット SHA に固定すると安全性が高まる一方、更新作業が煩雑になります。pnpm 11.16.0 で追加された `pnpm update --include-github-actions` を使うと、パッケージと Action の更新を同じコマンドで管理できます。この記事では基本的な使い方を確認します。
4日前

Bun v1.4.1
1
bun.com
Fixes 202 issues, addressing 236 👍. HTTP/2 in Bun.serve, Bun.write() streams Response bodies to disk, self-contained workspace node_modules, bun install --offline and --prefer-offline, WebSocket pause() and resume(), crypto.argon2, tree-shaking through dynamic import(), smarter CommonJS to ESM conversion for default imports, --compile --bytecode when cross-compiling, smaller and faster-starting compiled executables, up to 9x faster Buffer reads and writes, 2x faster AsyncLocalStorage, faster st...
4日前

August newsletter is out Simon Willison's Weblog
<p>The August edition of my <a href="https://github.com/sponsors/simonw/">sponsors-only monthly newsletter</a> is out. If you are a sponsor (or if you start a sponsorship now) you can <a href="https://github.com/simonw-private/monthly/blob/main/2026-08-august.md">access it here</a>.</p><p>This month:</p><ul><li>We got more details on OpenAl's accidental cyberattacks</li><li>One-shotting Raccoon Heist games with Fable 5 and ...
4日前

ESLint v10.10.0 released
1
ESLint Blog
HighlightsThe no-unexpected-multiline rule has been updated to check regular expression literals with d and v flags./* eslint no-unexpected-multiline: "error" */// Unexpected newline between numerator and division operatorfoo = bar/regex/v.exec(baz).forEach(qux);12345Copy code to clipboard The following rules have also been updated to avoid incorrect or unexpected behavior in some edge cases:new-capno-extra-bindno-unreachableprefer-object-has-ownFeatures264b434 feat: add d and v flags to no-unex
5日前

Ling 3.0 Flash Sante is now available on AI Gateway for free
Vercel News
is now available on AI Gateway, free to use through October 4.Ling 3.0 Flash Sante from inclusionAILing 3.0 Flash Sante is a health and medicine-focused version of . It is a Mixture-of-Experts model with 124B total parameters and about 5.1B active per token, a 256K token context window, and function calling.Ling 3.0 FlashThe model is built for medical reasoning, professional healthcare tasks, deep research, evidence-based retrieval, and multi-step medical workflows. It retains the base model's g
5日前

GPT 6 Astra now available on Vercel AI Gateway
Vercel News
from OpenAI is now available on AI Gateway. It is designed for long-running agentic work across software engineering, computer and browser use, scientific research, and professional workflows.GPT 6 AstraAstra can navigate software, complete forms, organize records, analyze data, run simulations, and build and test websites. It also improves instruction following during evolving tasks. It can incorporate new requirements without losing earlier constraints, continue independent work while waiting
5日前

Submit your ideas for Interop 2027
WebKit
It’s that exciting time of year again when we start considering Interop proposals for next year!
5日前

Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models
Cloudflare Blog
Use production traffic and security signals to prioritize findings, prepare edge mitigations when safe, and propose code patches. By combining WAF data with OpenAI Daybreak models, Vulnerability Discovery and Remediation helps teams identify and patch the most critical threats first.
5日前

GPT‑6 Astra Simon Willison's Weblog
<p><strong><a href="https://openai.com/index/gpt-6-astra/">GPT‑6 Astra</a></strong></p>GPT-6 Astra is "rolling out today to a limited set of organizations and over the coming days will become available to all ChatGPT Plus, Pro, Business, and Enterprise users, as well as through the OpenAI API and AWS" - I've not tried it yet myself, so I don't have a great deal to say about it yet.</p><p>It's going to be API priced at the same rate as Claude Fable...
5日前

MECCHA CHAMELEON can't hide from the RCE
Aikido Security's Blog
We found a second delayed RCE in MECCHA CHAMELEON: a malicious custom map could write files anywhere on your system and run code after a restart. Now patched in 4.0.0.Category: Vulnerabilities & Threats
5日前

GitHub Copilot app for Beginners: Run several agents at once
The GitHub Blog
Learn how to run parallel agents in the GitHub Copilot app, and experience the moment it stops feeling scary and starts feeling powerful.The post GitHub Copilot app for Beginners: Run several agents at once appeared first on The GitHub Blog.
5日前

Cursor Cloud Agents can now run in Vercel Sandbox
Vercel News
can now run in instead of Cursor's hosted machines. Cursor Cloud AgentsVercel SandboxCursor manages the agent harness and inference loop. Its APIs let you supply the execution environment where agents clone repositories, edit files, and run commands and tests. Self-Hosted Machines requires a Cursor Enterprise plan.Self-Hosted MachinesVercel Sandbox provides that execution environment as an isolated Firecracker microVM for each agent request. and form a durable control plane that claims queued ag
5日前
9/3 (木)

Two vs. Three-State Color Theme Toggles Master.dev Blog RSS Feed
There was a fun and intellectual debate recently about UI controls for dark/light mode. I think the story starts with Modern Web Guidance skills from Google, which recommend using a two-state toggle, apparently written by Lea Verou, and Bramus Van Damme takes issue with it. Lea explained her thinking in detail, which is a great […]
5日前

iOSDC Japan 2026にLINEヤフーのエンジニア7名が登壇します(9/11〜9/13) LINEヤフー Tech Blog (LY Corporation Tech Blog
2026年9月11日から9月13日までの3日間にわたり開催される、iOSDC Japan 2026にて、LINEヤフーはゴールドスポンサーを務めます。本ブログでは、LINEヤフーから登壇する発表者・パ...
5日前

Basic build machines are now available on Pro and Enterprise
Vercel News
Pro and Enterprise teams can now select Basic build machines. Basic build machines have 2 vCPUs and 8 GB of memory, offering a more cost-efficient option for smaller apps or agents that build with fewer resources. New Pro and Enterprise projects still default to , which scale automatically and are recommended for most use cases. Elastic build machinesTo use Basic build machines, update your project configuration in , , or with Vercel CLI or later:team settingsproject settings59.6.0Hobby accounts
6日前

Astro 7.3
1
The Astro Blog
Astro 7.3 adds an --ignore-lock flag for astro preview, passes Astro's runtime logger into custom image services and cache providers, and ships a finalize() helper for Cloudflare custom worker entrypoints.
6日前

proto v0.62 - Community plugins, shell deactivation, and Zig support
moonrepo Blog
Dozens of community tools now install by name alone, shell activation learned how to turn itself
6日前

Nx 23.2 Is Here: Oxlint, Oxfmt, Leaner CLI Output and Better Caching
Nx Blog
The Oxc toolchain arrives in Nx. Plus leaner task output, Nx running inside agent sandboxes, and a cache shared across worktrees and repository clones.
6日前

Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my!
The GitHub Blog
From loop engineering to harnesses, squads, and open weights, the GitHub Podcast breaks down the AI terms showing up in developer conversations.The post Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my! appeared first on The GitHub Blog.
6日前

llm-openrouter 0.7.1 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-openrouter/releases/tag/0.7.1">llm-openrouter 0.7.1</a></p> <blockquote><ul><li>Performance fix for loading OpenRouter models. Thanks, <a href="https://github.com/waveplate">waveplate</a>. <a href="https://github.com/simonw/llm-openrouter/issues/59">#59</a></li></ul></blockquote> <p>Tags: <a href="https://simonwillison.net/t...
6日前

llm 0.34 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.34">llm 0.34</a></p> <p>One new feature:</p><blockquote><ul><li><code>llm logs --usage</code> Markdown output now includes the response duration in milliseconds and as a human-readable duration. <code>llm logs --short</code> includes a new <code>duration_ms</code> field. <a href="https://github.com/simonw/llm/...
6日前

NGINX Gateway Fabric 2.7: Gateway API 1.6 conformance, external authentication, and fewer snippets
NGINX Community Blog
NGINX Gateway Fabric 2.7 is a significant release, targeting Gateway API conformance, data plane improvements, and workflow enhancements. TCPRoute and UDPRoute graduate to v1 with Gateway API 1.6, TLS listeners gain Terminate mode, and a new HTTPExternalAuthFilter calls out to an authorization proxy without an NGINX snippet. Seven more NGINX settings move out of snippets […]
6日前

How we make AI coding more cost efficient without sacrificing task quality
1
The GitHub Blog
Why shorter outputs can cost more, and how GitHub Copilot reduces wasted work across the complete coding task.The post How we make AI coding more cost efficient without sacrificing task quality appeared first on The GitHub Blog.
6日前

llm-anthropic 0.28 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-anthropic/releases/tag/0.28">llm-anthropic 0.28</a></p> <p><a href="https://www.anthropic.com/claude/fable">Claude Fable 5.1</a>, reasoning traces are now displayed by default for models that support them, plus a new <code>llm_anthropic.ClaudeRefusal</code> exception for when Claude throws a refusal.</p> <p>Tags: <a href="https://simonwillison.net/...
6日前

Fixing Top-Level Await in Safari
1
WebKit
WebKit for Safari 27 adds full spec compliance for top-level `await`.
6日前

llm-gemini 0.34 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-gemini/releases/tag/0.34">llm-gemini 0.34</a></p> <blockquote><ul><li>New model <code>gemini-3.8-flash</code> for <a href="https://blog.google/innovation-and-ai/models-and-research/gemini-models/3-8-flash-and-3-8-flash-cyber/">Gemini 3.8 Flash</a>, with low, medium and high thinking levels. <a href="https://github.com/simonw/llm-gemini/issues/146"&...
6日前

How River takes security work from a fix to merge
Shopify Engineering
River, Shopify’s AI agent in Slack, enables autonomous vulnerability remediation, not just detection.
6日前

NGINX Ingress Controller 5.6: HSTS without snippets, a faster start on large clusters, and improved configuration safety
NGINX Community Blog
NGINX Ingress Controller 5.6 implements more support for configuring NGINX through resources instead of through snippets. HTTP Strict Transport Security (HSTS) becomes a first-class policy across VirtualServer, VirtualServerRoute, and Ingress. Two new annotations close configuration gaps for teams moving off Ingress-NGINX, and the X-Forwarded base headers can now be turned off through the ConfigMap. Operational […]
6日前
9/2 (水)

NGINX 1.31.5: Control API, predicate locations, early body inspection, and more
2
NGINX Community Blog
For over two decades, NGINX has been the workhorse of the modern web. Its classic request-processing architecture—reading HTTP headers, matching a URI location path, and streaming payload data to backend services—built the foundation of modern web traffic management. However, the way web applications and AI agent systems communicate is fundamentally evolving. Modern application stacks rely […]
6日前

Claude's new system prompt really doesn't want to reproduce song lyrics
1Simon Willison's Weblog
<p>Anthropic <a href="https://platform.claude.com/docs/en/release-notes/system-prompts/overview">publish the system prompts</a> for their Claude consumer applications (<a href="https://claude.ai/">Claude.ai</a> and the Claude mobile apps - sadly not for Claude Cowork or Claude Code). I <em>love</em> that they do this, and that they share not just the current prompts but historic changes to their prompts as well.</p><p>They used to keep all o...
6日前

New Things You Should Know About HTML Here in Mid 2026
2Master.dev Blog RSS Feed
You've got your permissions elements, custom element registries, a potential future for HTML includes, HTML-in-Canvas, and a bunch more.
6日前

Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners
Step Security Blog
Harden-Runner now secures GitHub Actions jobs running on AWS CodeBuild-hosted runners, on EC2 compute, with managed or custom images.
6日前

Introducing deny list egress policies for Harden-Runner
Step Security Blog
A new denied-endpoints input blocks the destinations you name and leaves everything else reachable. Here is why that matters, and how to use it to stop CI from bypassing your package proxy
6日前

Free domain with Pro offer now includes .app and .dev
Vercel News
We recently announced that all teams can claim . That offer now includes and , bringing the eligible TLDs to eight:Proa free domain for one year.app.devThe offer still covers one domain per team, and premium domains are not eligible. After the first year, your domain will at the regular price shown at checkout when you claim it.renew automaticallyClaim yours at , and see the for full terms.vercel.com/domainsfree domain FAQRead more.app.dev.online.site.space.store.tech.website
6日前

Quoting Rick Brewster Simon Willison's Weblog
<blockquote cite="https://forums.paint.net/topic/134563-🍷-extremely-experimental-winelinux-support-how-to-get-started/"><p>Direct2D has always been the biggest hurdle for Paint.NET on WINE, and it's clear that it will never be completed enough for Paint.NET's use. And I can't just "disable" the use of Direct2D. So, instead, <strong>Paint.NET now has an internal, from-scratch, clean-room reverse-engineered rewrite of Direct2D that it uses on WINE</strong> (triggered by u...
6日前

静的アセットの配信URLにバージョンを含めてアップデート時のキャッシュ不整合を防ぐ PR TIMES 開発者ブログ
こんにちは。フロントエンドエンジニアの白濱(@shiraha_maru)です。 PR TIMESではプレスキット用PDFのサムネイル生成や、FAX原稿用PDFのページ数取得に PDF.js を利用しています。PDF.js […]
7日前

Quine Clique: 51 言語が互いに出力しあう巨大 multi-quine
1
まめめも
English version: Quine Clique 久々に大作の Quine を作りました。 51 言語のプログラムがお互いにお互いを再生成しあうことができる multiquine です。 Quine Clique 解説動画はこちら。 www.youtube.com リポジトリはこちら。 github.com これは何? 順を追って説明します。まず、これが qc.rb です。 qc.rb これは Ruby で書かれた Quine です。つまり、実行すると自分自身を出力します。 # qc.rb の出力は、qc.rb 自身と一致する $ ruby qc.rb > out.bin $ dif…
7日前

Why Gusto hired Evil Martians for Sidekiq infrastructure
Evil Martians
Gusto runs payroll for 500,000+ businesses on one of the largest Rails monoliths anywhere. Why a team this strong hired Evil Martians for Sidekiq at scale, what running background jobs at that size actually takes, and when to stop waiting for the perfect hire.
7日前

Tales from the Void: August 2026 Recap
1
VoidZero
Welcome to another edition of Tales from the Void!Regularly, we recap the project updates for Void, Vite+, Vite, Vitest, Rolldown, Oxc, and what’s happening in our community.React Compiler Support in Vite The React Compiler is now available in Vite 8 via Oxc. It memoizes your components and hooks at build time, so you stop hand-writing useMemo and useCallback while getting fewer re-renders for free.Until now, using the compiler meant keeping Babel in your Vite pipeline. oxc-transform-react repl
7日前

How Marketing And Development Teams Can Collaborate On Page Speed
DebugBear Blog
Marketing owns the site experience but developers make the changes. Learn how both teams can use shared performance data, experiments, and alerts to work together on page speed.
7日前

Muse Spark 1.3 now available on AI Gateway
Vercel News
is now available on AI Gateway, in both the standard and contributor pricing tiers.Muse Spark 1.3 from MetaThis model improves on prior Muse Spark models at agent work and coding, with a 1M token context window and text, image, and PDF input. On coding it takes fewer turns and writes less filler than the previous release.To use Muse Spark 1.3, set to :modelmeta/muse-spark-1.3 is a pricing tier on the same model rather than a separate one, with the same weights, capabilities, and context window.
7日前

GLM-5.3 is 50% off through DigitalOcean on AI Gateway
Vercel News
is 50% off on AI Gateway through Tuesday, September 8, in partnership with DigitalOcean.GLM-5.3Because the promo name goes away when the offer ends, treat it as something you switch on for the window rather than hardcode. To keep the standard name in your code instead, pin the provider with under , which prefers DigitalOcean and falls back to the others if it cannot serve the request.order: ['digitalocean']providerOptions.gatewayGLM-5.3 takes text input, with a 1M token context window and a maxi
7日前

Gemini 3.8 Flash now available on AI Gateway
Vercel News
is now available on AI Gateway.Gemini 3.8 Flash from GoogleThe model is 50% off through December 31st. It has a 1M token context window, accepts text, image, PDF, and video input, returns text, and supports tool calling and web search. Maximum output is 65,536 tokens.Gemini 3.8 Flash improves on prior Flash models at software engineering, agent work, and multi-step reasoning, at the same speed and cost as the previous release. Thinking is on by default.To use Gemini 3.8 Flash, set to :modelgoogl
7日前

Claude Fable 5.1 made me a really nice animated pelican
1Simon Willison's Weblog
<p>Today is <a href="https://www.anthropic.com/claude-fable-and-mythos-5-1">Claude Fable (and Mythos) 5.1 day</a>. Anthropic say that Fable 5.1 "sets a new standard for coding, knowledge work, and long-running problem-solving tasks". Their announcement spends a notable amount of time on scientific research, boasting of a 52.6% score on the brand new <a href="https://www.terminal-bench-science.ai">Terminal-Bench-Science 0.1</a> benchmark (first announced <a href=...
7日前

Codex bundles LibreOffice
1Simon Willison's Weblog
<p>I was poking around in my <code>~/.cache/</code> folder using <a href="https://www.omnigroup.com/more">OmniDiskSweeper</a> when I spotted something interesting. The OpenAI Codex desktop app (since <a href="https://help.openai.com/en/articles/20001276-moving-to-the-new-chatgpt-desktop-app">rebranded</a> to just ChatGPT) has 1.7GB of stuff in there in a folder called <code>codex-primary-runtime</code>, including a full Python installation, ...
7日前

Microsoft Teams Notifications Are Now Available in Socket
1
Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
7日前

GeoJSON Map Viewer Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/geojson">GeoJSON Map Viewer</a></p> <p>I was helping Natalie gather some maps of local political boundaries (for the <a href="https://granada.ca.gov">Granada Community Services District</a> and the <a href="https://midcoastcommunitycouncil.org">Midcoast Community Council</a>) and found a need to display some GeoJSON files on a map and export that as a PNG. I asked...
7日前

Quoting Tarn Adams Simon Willison's Weblog
<blockquote cite="https://www.pcgamer.com/gaming-industry/dwarf-fortress-creator-says-the-industrys-in-shambles-over-ai-and-layoff-happy-ceos-everyone-i-know-their-bosses-are-slowly-getting-psychosis/"><p>They took the letters from me! I have to talk about <em>dwarf behavior</em> now. I can't even talk about dwarf AI. It doesn't exist. It's <em>dwarf behavior</em>, and they misbehave sometimes</p></blockquote><p class="cite">&mdash; <...
7日前

Top DSPM tools in 2026
Aikido Security's Blog
Compare the top DSPM tools of 2026: Aikido, Wiz, Cyera, Varonis, and Orca, on data access, remediation, and how they find exposureCategory: DevSec Tools & Comparisons
7日前

datasette-mcp 0.2 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/datasette/datasette-mcp/releases/tag/0.2">datasette-mcp 0.2</a></p> <blockquote><ul><li><code>"rows"</code> from <code>execute_sql</code> is now an array of objects. Previously it was an array of arrays. This should help weaker models avoid losing track of which positional array element maps to which column. <a href="https://github.com/datasette/datasette-mcp...
7日前
9/1 (火)

Python 3.15.0 candidate 2 is here! Simon Willison's Weblog
<p><strong><a href="https://discuss.python.org/t/python-3-15-0-candidate-2-is-here/108841">Python 3.15.0 candidate 2 is here!</a></strong></p>Hugo van Kemenade (release manager for Python 3.14 and 3.15) announces the final release candidate for Python 3.15, scheduled for release in October:</p><blockquote><p>Entering the release candidate phase, only reviewed code changes which are clear bug fixes are allowed between this release candidate a...
7日前







