直近1週間の更新
3/24 (火)

瞳に映るスマホ画面から指の位置がわかる?タッチレス操作技術「ReflecTrace」 LINEヤフー Tech Blog (LY Corporation Tech Blog
こんにちは。LINEヤフー研究所でHuman-Computer Interaction(HCI)の分野の研究をしている池松です。皆さんはスマートフォン(以下、スマホ)でレシピを見ながら調理しているとき...
2時間前

Streaming experts Simon Willison's Weblog
<p>I wrote about Dan Woods' experiments with <strong>streaming experts</strong> <a href="https://simonwillison.net/2026/Mar/18/llm-in-a-flash/">the other day</a>, the trick where you run larger Mixture-of-Experts models on hardware that doesn't have enough RAM to fit the entire model by instead streaming the necessary expert weights from SSD for each token that you process.</p><p>Five days ago Dan was running Qwen3.5-397B-A17B in 48GB of RAM. Today <...
2時間前

Quoting Neurotica Simon Willison's Weblog
<blockquote cite="https://bsky.app/profile/schwarzgerat.bsky.social/post/3mhqu5dogos2v"><p>slop is something that takes more human effort to consume than it took to produce. When my coworker sends me raw Gemini output he’s not expressing his freedom to create, he’s disrespecting the value of my time</p></blockquote><p class="cite">&mdash; <a href="https://bsky.app/profile/schwarzgerat.bsky.social/post/3mhqu5dogos2v">Neurotica</a>, @schwarzgerat.bsky...
8時間前

TypeScript 6.0 Released: The Final JavaScript-Based Version
Socket
TypeScript 6.0 introduces new standard APIs, modern default settings, and deprecations as it prepares projects for the upcoming TypeScript 7.0 release.
8時間前

datasette-files 0.1a2 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/datasette/datasette-files/releases/tag/0.1a2">datasette-files 0.1a2</a></p> <p>The most interesting alpha of <a href="https://github.com/datasette/datasette-files">datasette-files</a> yet, a new plugin which adds the ability to upload files directly into a Datasette instance. Here are the release notes in full:</p><blockquote><ul><li>Columns are now configured u...
8時間前

社内デザインシステム「Aegis」を用いた実装精度を30%から90%以上に引き上げた Agent Skills の開発方法
LegalOn Technologies Engineering Blog
はじめに こんにちは、株式会社LegalOn Technologies ソフトウェアエンジニアのわたりょーです。デザインシステムチームに所属し、社内デザインシステム「Aegis」を開発・運用しています。 「Aegis」は、LegalOn Technologiesのプロダクト群で一貫した UI を実現するための社内デザインシステムです。UI コンポーネントライブラリ、デザイントークン、ガイドラインなどを提供し、複数プロダクトの開発効率と品質を支えています。 本記事では、AI コーディングエージェント(Claude Code / Codex など)向けに Agent Skills(以下、Skill…
8時間前

Two Circles, One Arrow, and Anchor Positioning
Frontend Masters Boost RSS Feed
Drawing an line with arrows pointing to the center of two arbitrary elements measuring and displaying the distance between them doesn't seem like it would be possible in CSS alone... but...
12時間前

Quoting David Abram Simon Willison's Weblog
<blockquote cite="https://www.davidabram.dev/musings/the-machine-didnt-take-your-craft/"><p>I have been doing this for years, and the hardest parts of the job were never about typing out code. I have always struggled most with understanding systems, debugging things that made no sense, designing architectures that wouldn't collapse under heavy load, and making decisions that would save months of pain later.</p><p>None of these problems can be solved LLMs. They can sugges...
12時間前

Introducing kubernetes.nginx.org: A Community Hub for NGINX on Kubernetes, Including a New Ingress-NGINX Migration Tool
NGINX Community Blog
Today, we’re excited to announce kubernetes.nginx.org, a new community hub for everything NGINX networking on Kubernetes, along with a brand-new Kubernetes community Ingress-NGINX Migration Tool designed to make moving from the Kubernetes community Ingress-NGINX controller to the NGINX Ingress Controller as smooth as possible. Why a Community Hub? Whether you’re running NGINX Ingress Controller, exploring […]
14時間前

New in CKEditor Drupal modules: CKEditor AI and more
CKEditor Ecosystem Blog
The latest update to the CKEditor contributed modules brings AI writing and editing directly into Drupal. Premium Features module 1.8.0 introduces CKEditor AI, adding AI Chat, AI Review, AI Translate, and AI Quick Actions inside the rich text editor. Authors can write, review, and translate content without the back and forth of third-party tools.
15時間前

Announcing TypeScript 6.0
Daniel Rosenwasser, Author at TypeScript
Today we are excited to announce the availability of TypeScript 6.0! If you are not familiar with TypeScript, it’s a language that builds on JavaScript by adding syntax for types, which enables type-checking to catch errors, and provide rich editor tooling. You can learn more about TypeScript and how to get started on the TypeScript […]The post Announcing TypeScript 6.0 appeared first on TypeScript.
15時間前

GitHub expands application security coverage with AI‑powered detections
The GitHub Blog
CodeQL and AI‑powered detections work together in GitHub Code Security to identify vulnerabilities across more languages and frameworks.The post GitHub expands application security coverage with AI‑powered detections appeared first on The GitHub Blog.
15時間前
3/23 (月)

Experimenting With Scroll-Driven corner-shape Animations
CSS-Tricks
The new CSS corner-shape() property is mathematical, so it’s easily animated. Author Daniel Schwarz pokes at animating the property for interesting UI effects.Experimenting With Scroll-Driven corner-shape Animations originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
17時間前

Inside Gen 13: how we built our most powerful server yet
The Cloudflare Blog
Cloudflare's Gen 13 servers introduce AMD EPYC™ Turin 9965 processors and a transition to 100 GbE networking to meet growing traffic demands. In this technical deep dive, we explain the engineering rationale behind each major component selection.
18時間前

Launching Cloudflare’s Gen 13 servers: trading cache for cores for 2x edge compute performance
The Cloudflare Blog
Cloudflare’s Gen 13 servers double our compute throughput by rethinking the balance between cache and cores. Moving to high-core-count AMD EPYC ™ Turin CPUs, we traded large L3 cache for raw compute density. By running our new Rust-based FL2 stack, we completely mitigated the latency penalty to unlock twice the performance.
18時間前

Sneaky Header Blocker Trick
Josh Comeau's blog
There is a lil’ UI detail on this blog. Most people don’t even notice it, but the ones who do often reach out, asking how on earth it works. It feels like it defies the rules of CSS! In this blog post, I’ll break down the surprisingly-straightforward implementation so you can start using this trick yourself.
19時間前

AAAI-2026 参加報告
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
1月に AAAI-2026(The 40th Annual AAAI Conference on A ...
20時間前

Datadog MCPが使えなくても大丈夫!agent-skills × pup でAIによるインシデント調査を実現する
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
本記事は、Datadog agent-skillsとpupをGithub Actionsで実行し、自 ...
20時間前

Beats now have notes Simon Willison's Weblog
<p>Last month I <a href="https://simonwillison.net/2026/Feb/20/beats/">added a feature I call beats</a> to this blog, pulling in some of my other content from <a href="https://simonwillison.net/elsewhere/">external sources</a> and including it on the homepage, search and various archive pages on the site.</p><p>On any given day these frequently outnumber my regular posts. They were looking a little bit thin and were lacking any form of explanation beyon...
1日前

3つの手法でToken消費量40%削減 — ADKで実践するContext Engineering LINEヤフー Tech Blog (LY Corporation Tech Blog
こんにちは、LINEヤフー株式会社の井上 秀一です。私は2024年4月に新入社員としてLINEヤフー株式会社に入社し、現在は社内向け Kubernetes as a Service である FKE チ...
1日前

Starlette 1.0 skill Simon Willison's Weblog
<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/starlette-1-skill#readme">Starlette 1.0 skill</a></p> <p>See <a href="https://simonwillison.net/2026/Mar/22/starlette/">Experimenting with Starlette 1.0 with Claude skills</a>.</p> <p>Tags: <a href="https://simonwillison.net/tags/starlette">starlette</a></p>
1日前

The Devtools PMF Compass
Evil Martians
How do you measure product-market fit for a developer tool? A PMF scoring model from Evil Martians—a product development consultancy for developer tools startups—built on data from 37 devtools companies across AI, infrastructure, and cybersecurity. Five metrics, real benchmarks, and a dual score that tells you whether to invest in product or go-to-market.
1日前

x402 vs. Stripe MPP: How to choose payment infrastructure for AI agents and MCP tools in 2026
WorkOS Blog
A practical comparison of the two protocols reshaping how agents pay for services in 2026.
1日前

Top 5 authentication solutions for secure React Router apps in 2026
WorkOS Blog
A practical comparison of modern auth providers, trade-offs, and best practices for React Router apps.
1日前

MCP's 2026 roadmap makes enterprise readiness a top priority
WorkOS Blog
The Model Context Protocol's 2026 roadmap acknowledges what enterprises deploying MCP at scale already know: the protocol has real gaps in auth, observability, gateway patterns, and configuration portability. Here's what's on the table and why it matters.
1日前

ChatGPT, Claude, and Gemini Render Markdown in the Browser. I Don't Loren Stewart
The big AI chat apps ship heavy rendering libraries to every device. Cheddy Chat renders markdown server-side and streams finished HTML, eliminating 160-440KB of client JavaScript while keeping the main thread free.
1日前

Why AI-Assisted Development Is More Exhausting Than It Should Be
Tony Alicea
Why AI-Assisted Development Is More Exhausting Than It Should BeThe promise of AI-assisted development is that it should make developers' lives easier. In some ways it does. Yet I see many developers suffering from post-LLM burnout and exhaustion.In part, it is because of the unrealistic expectations of the organizations they work for, caught up in AI hype and FOMO.However, I am seeing another issue. And it's one rooted in the psychology of human-computer interaction (HCI).Cognitive ModesWhen yo
1日前

Experimenting with Starlette 1.0 with Claude skills Simon Willison's Weblog
<p><a href="https://marcelotryle.com/blog/2026/03/22/starlette-10-is-here/">Starlette 1.0 is out</a>! This is a really big deal. I think Starlette may be the Python framework with the most usage compared to its relatively low brand recognition because Starlette is the foundation of <a href="https://fastapi.tiangolo.com/">FastAPI</a>, which has attracted a huge amount of buzz that seems to have overshadowed Starlette itself.</p><p>Kim Christie started wo...
1日前

Trivy Supply Chain Attack Expands to Compromised Docker Images
Socket
Newly published Trivy Docker images (0.69.4, 0.69.5, and 0.69.6) were found to contain infostealer IOCs and were pushed to Docker Hub without corresponding GitHub releases.
1日前

PCGamer Article Performance Audit Simon Willison's Weblog
<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/pcgamer-audit#readme">PCGamer Article Performance Audit</a></p> <p>Stuart Breckenridge pointed out that <a href="https://stuartbreckenridge.net/2026-03-19-pc-gamer-recommends-rss-readers-in-a-37mb-article/">PC Gamer Recommends RSS Readers in a 37MB Article That Just Keeps Downloading</a>, highlighting a truly horrifying example of web bloat that added up to 1...
1日前

JavaScript Sandboxing Research Simon Willison's Weblog
<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/javascript-sandboxing-research#readme">JavaScript Sandboxing Research</a></p> <p>Aaron Harper <a href="https://www.inngest.com/blog/node-worker-threads">wrote about Node.js worker threads</a>, which inspired me to run a research task to see if they might help with running JavaScript in a sandbox. Claude Code went way beyond my initial question and produced a ...
1日前

DNS Lookup Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/dns">DNS Lookup</a></p> <p>TIL that Cloudflare's 1.1.1.1 DNS service (and 1.1.1.2 and 1.1.1.3, which block malware and malware + adult content respectively) has a CORS-enabled JSON API, so I <a href="https://github.com/simonw/tools/pull/258#issue-4116864108">had Claude Code build me</a> a UI for running DNS queries against all three of those resolvers.</p> <p>Tags...
2日前

Merge State Visualizer Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/manyana">Merge State Visualizer</a></p> <p>Bram Cohen wrote about his <a href="https://bramcohen.com/p/manyana">coherent vision for the future of version control</a> using CRDTs, illustrated by <a href="https://github.com/bramcohen/manyana/blob/main/manyana.py">470 lines of Python</a>.</p><p>I fed that Python (minus comments) into Claude and asked for ...
2日前
3/22 (日)

Claude Code と Discord 連携はどのように動作しているのか?
2
azukiazusa のテックブログ2
Claude Code v2.1.80 から Research Preview 版として Claude Code channels(以下、チャンネル)が利用できるようになりました。チャンネルとは実行中の Claude Code のセッションに対して、外部からイベントを送ることができる MCP サーバーのことです。この記事では、Claude Code と Discord 連携がどのように動作しているのか、その仕組みを解説します。
2日前

All tests pass: a short story Evan Hahn (dot com)
One night, I wrote a simple tool to pick a random programming language. After shuffling a few times, I landed on Arturo. I decided to try it for fun.What’s Arturo?Best I understand, Arturo is a stack-based programming language. It’s primarily maintained by Yanis Zafirópulos. They published a vision of the language in 2020. Here’s the stated goal from that post:to make something that I myself will use as an easier do-it-all scripting language, you know… automation scripts, templating, latex gener
2日前

Little web app to pick a random programming language Evan Hahn (dot com)
I wrote a web app to choose a random programming language.It’s very simple; I hestitate to even call it an “app”! The interesting part was scraping all the languages on Rosetta Code, and even that wasn’t very interesting. But I hope you like it!I learned about a language called Arturo this way, and wrote a short story about that experience.
2日前

Flow field visualisation on my homepage leanrada.com notes
I created a new visualisation for my homepage rotation.Here’s a demo:It’s just a basic flow field simulation with particles tracing their paths along the space. I used the p5.js framework. It reacts to mouse movements!I did a few optimisations to make it smoother, but in the end I had to lower the framerate and tried to make the low frame rate look intentional. Optimisation was important especially for mobile devices.Some of the optimisations include:Using sprites / textures instead of the vecto
2日前

Profiling Hacker News users based on their comments Simon Willison's Weblog
<p>Here's a mildly dystopian prompt I've been experimenting with recently: "Profile this user", accompanied by a copy of their last 1,000 comments on Hacker News.</p><p>Obtaining those comments is easy. The <a href="https://hn.algolia.com/api">Algolia Hacker News API</a> supports listing comments sorted by date that have a specific tag, and the author of a comment is tagged there as <code>author_username</code>. Here's a JSON feed of my (<code>sim...
2日前

NGINX Ingress Controller v5.4.0: Making Migration Easier Than Ever
NGINX Community Blog
We released NGINX Ingress Controller v5.4.0 ahead of KubeCon Europe, and this one is worth the noise. This release is laser-focused on making it easier for teams running ingress-nginx to migrate to NGINX Ingress Controller, without sacrificing the features and workflows they depend on. Here’s what’s new! Configuration Resilience and Validation What’s new: Ingress and […]
2日前

Using Git with coding agents Simon Willison's Weblog
<p><em><a href="https://simonwillison.net/guides/agentic-engineering-patterns/">Agentic Engineering Patterns</a> &gt;</em></p> <p>Git is a key tool for working with coding agents. Keeping code in version control lets us record how that code changes over time and investigate and reverse any mistakes. All of the coding agents are fluent in using Git's features, both basic and advanced.</p><p>This fluency means we can be more ambitious abou...
2日前
3/21 (土)

Turbo Pascal 3.02A, deconstructed Simon Willison's Weblog
<p><strong><a href="https://tools.simonwillison.net/turbo-pascal-deconstructed">Turbo Pascal 3.02A, deconstructed</a></strong></p>In <a href="https://prog21.dadgum.com/116.html">Things That Turbo Pascal is Smaller Than</a> James Hague lists things (from 2011) that are larger in size than Borland's 1985 Turbo Pascal 3.02 executable - a 39,731 byte file that somehow included a full text editor IDE and Pascal compiler.</p><p>This inspired...
3日前

CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
Socket
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
3日前

Quoting Kimi.ai @Kimi_Moonshot Simon Willison's Weblog
<blockquote cite="https://twitter.com/Kimi_Moonshot/status/2035074972943831491"><p>Congrats to the <a href="https://x.com/cursor_ai">@cursor_ai</a> team on the launch of Composer 2!</p><p>We are proud to see Kimi-k2.5 provide the foundation. Seeing our model integrated effectively through Cursor's continued pretraining &amp; high-compute RL training is the open model ecosystem we love to support.</p><p>Note: Cursor accesses Kimi-k2.5 via <a...
3日前

HubSpot Incident Report: February 25, 2026
HubSpot Product Blog (Live)
On February 25, 2026, HubSpot experienced a service disruption affecting user access to specific types of workflows within our user interface. All backend workflow automations continued to execute normally without interruption - no automations were delayed, missed, or lost. We have completed a thorough analysis of this incident and are implementing targeted safeguards to prevent this class of failure from recurring.
4日前

Text scaling support in Chrome Canary
Frontend Masters Boost RSS Feed
Josh Tumath: Have you ever noticed that when you increase the system text size in your iOS or Android phone’s accessibility settings, the text gets bigger everywhere except on the web? On Safari and Chrome, it makes absolutely no difference. New thing: <meta name=text-scale> This isn’t page zoom, which scales everything, it’s just respects the […]
4日前
3/20 (金)

Azure Entra nested groups and Directory Sync: Limitations and workarounds
WorkOS Blog
Azure Entra ID doesn't support deep nested group expansion over SCIM, which catches a lot of teams off guard when setting up Directory Sync. This post explains exactly why that limitation exists, three practical patterns to work around it, and how the situation compares to Google Workspace.
4日前

Dropdowns Inside Scrollable Containers: Why They Break And How To Fix Them Properly
Articles on Smashing Magazine — For Web Designers And Developers
Dropdowns often work perfectly until they’re placed inside a scrollable panel, where they can get clipped, and half the menu disappears behind the container’s edge. Godstime Aburu explains why this happens and offers practical solutions to fix it.
4日前

The Index: Issue #174
Piccalilli - Everything
Just a quick note before we get into this issue. We're moving back to a once per week cadence on Fridays after this issue.We've got a lot on in the studio right now, so making time to curate two issues a week is getting tougher. I'd rather make sure the quality of one issue is top notch.The next issue will be be Friday March 27!What's My ΔE(OK) JND?A fun colour recognition game that gets really quite hard as you go through it!Glasses Cleaning SimulatorDoes exactly what it says on the tin!Links s
4日前

How to Add AI Test Selection Without Breaking CI Reliability
Semaphore
AI-based test selection promises faster CI builds by running only the tests most likely to be impacted by a code change. In large repositories with thousands of tests, this can significantly reduce build times. But there’s a trade-off. If implemented poorly, AI test selection can reduce reliability, increase escaped defects, and erode trust in CI […]The post How to Add AI Test Selection Without Breaking CI Reliability appeared first on Semaphore.
4日前

Discord から Claude Code とやり取りしてみた
azukiazusa のテックブログ2
Claude Code v2.1.80 から Research Preview 版として Claude Code channels(以下、チャンネル)が利用できるようになりました。チャンネルとは実行中の Claude Code のセッションに対して、外部からイベントを送ることができる MCP サーバーのことです。この記事では、Discord からチャンネルを通じて Claude Code とやり取りする方法を紹介します。
4日前

Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
Socket
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
4日前

SQLite Tags Benchmark: Comparing 5 Tagging Strategies Simon Willison's Weblog
<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/sqlite-tags-benchmark#readme">SQLite Tags Benchmark: Comparing 5 Tagging Strategies</a></p> <p>I had Claude Code run a micro-benchmark comparing different approaches to implementing tagging in SQLite. Traditional many-to-many tables won, but FTS5 came a close second. Full table scans with LIKE queries performed better than I expected, but full table scans with JSON array...
4日前

Fast, Good, and Cheap: Why the Old Trade-Off No Longer Applies
@dlhck — David Höck
The iron triangle of software development is dead. AI has changed the math.
4日前

Secure MCP credentials with 1Password and Runlayer
Blog on 1Password Blog
We built 1Password® Unified Access to extend identity security beyond humans to the agents and machine workloads operating across your business. In practice, that means securing not just who gets access, but how agentic systems connect to tools, services, and data.That makes the MCP gateway a critical control point. It sits between AI agents and the systems they need to reach, making it the natural place to enforce policy, visibility, and governance. But in many deployments, it also becomes the
4日前

ESLint v10.1.0 released
ESLint Blog
HighlightsAPI Support for Bulk SuppressionsESLint v10.1.0 introduces API support for the bulk suppressions feature that was previously only available in the CLI.ESLint API consumers, such as IDEs, can now pass the applySuppressions: true option to the ESLint constructor. With this option, suppressions from the suppressions file are automatically applied to results from ESLint#lintFiles() and ESLint#lintText() methods.const eslint = new ESLint({ applySuppressions: true, // optional, defaults to `
4日前

Software Developers Will Never Die
Marmelab Blog
AI agents can now rewrite an app in hours. But software value lies in judgment, trust, and specification — not code. Here's why the craft of software engineering is evolving, not dying.
4日前

Securing a FastAPI Server with WorkOS AuthKit
WorkOS Blog
Add production-ready authentication to your FastAPI server in under an hour.
4日前

Widget Skills: WorkOS-powered UIs, generated for your stack
WorkOS Blog
Use AI coding agents and WorkOS Skills to generate production-ready flows in your framework, language, and design system.
4日前

Tales from the Void: March Launch Week Recap
VoidZero
Welcome to a special edition of Tales from the Void! Last weeks VoidZero Launch Week brought changes to how you build, test, lint, and deploy JavaScript.Here's what shipped and why it matters.Oxlint: JS Plugins Alpha Oxlint's JS Plugins Alpha brings near-100% compatibility with the ESLint plugin ecosystem. Your existing ESLint plugins run inside Oxlint unmodified, alongside 650+ native Rust rules, while linting up to 100x faster than ESLint.Why it matters: For around 80% of ESLint users Oxlint
4日前

Powering the agents: Workers AI now runs large models, starting with Kimi K2.5
The Cloudflare Blog
Kimi K2.5 is now on Workers AI, helping you power agents entirely on Cloudflare’s Developer Platform. Learn how we optimized our inference stack and reduced inference costs for internal agent use cases.
4日前

Rethinking open source mentorship in the AI era
The GitHub Blog
As contribution volume grows, mentorship signals are harder to read. The 3 Cs framework helps maintainers mentor more strategically... without burning out.The post Rethinking open source mentorship in the AI era appeared first on The GitHub Blog.
5日前

ENISA Publishes Technical Advisory on Secure Use of Package Managers
Socket
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.
5日前

Thoughts on OpenAI acquiring Astral and uv/ruff/ty Simon Willison's Weblog
<p>The big news this morning: <a href="https://astral.sh/blog/openai">Astral to join OpenAI</a> (on the Astral blog) and <a href="https://openai.com/index/openai-to-acquire-astral/">OpenAI to acquire Astral</a> (the OpenAI announcement). Astral are the company behind <a href="https://simonwillison.net/tags/uv/">uv</a>, <a href="https://simonwillison.net/tags/ruff/">ruff</a>, and <a href="https://simonwillison.net/tags/ty/">ty</a>...
5日前

How Squad runs coordinated AI agents inside your repository
The GitHub Blog
An inside look at repository-native orchestration with GitHub Copilot and the design patterns behind multi-agent workflows that stay inspectable, predictable, and collaborative. The post How Squad runs coordinated AI agents inside your repository appeared first on The GitHub Blog.
5日前

Image Gallery with Popovers and AIM (Anchor-Interpolated Morph)
Frontend Masters Boost RSS Feed
An image gallery is a nice example of AIM, where the larger version of an image can "morph" out from the smaller one when opened, and back in when closed.
5日前

Modal vs. Separate Page: UX Decision Tree
Articles on Smashing Magazine — For Web Designers And Developers
How to choose between modals and pages, when to avoid modals, and how to determine the right level of interruption or navigation. Brought to you by Smart Interface Design Patterns, a **friendly video course on UX** and design patterns by Vitaly.
5日前
3/19 (木)

Why Your AI Governance Is Holding You Back, and You Don’t Even Know It
Company | The JetBrains Blog
Most enterprises claim to govern their AI use. They have policy documents, review boards, approval flows, and sandbox environments. On paper, control exists. Then agents enter real software delivery workflows. They generate code, refactor systems, open pull requests, query internal data, trigger automations, and coordinate across tools. They move from experiment to execution. At that […]
5日前

JavaScript for Everyone: Destructuring
CSS-Tricks
Mat Marquis and Andy Bell have released JavaScript for Everyone, an online course offered exclusively at Piccalilli. This post is an excerpt from the course taken specifically from a chapter all about JavaScript destructuring. JavaScript for Everyone: Destructuring originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
5日前

More Easy Light-Dark Mode Switching: light-dark() is about to support images! Bram.us
CSS light-dark() is being extended to support images.
5日前

MCP OAuth in Practice: Lessons from Building Authentication for AI Agents
Semaphore
As AI agents become a core part of modern development workflows, the need for secure, flexible authentication is quickly becoming essential. In our latest product news episode, our engineering team takes a deep dive into how we implemented OAuth for Semaphore’s MCP server—and what we learned along the way. This work is part of a […]The post MCP OAuth in Practice: Lessons from Building Authentication for AI Agents appeared first on Semaphore.
5日前

初めての新卒SWEインターンはどう始まったか。プロジェクトメンバーで振り返る
LegalOn Technologies Engineering Blog
はじめに LegalOn Technologiesでは、以前CTOの深川がブログで宣言したように、2027年卒からソフトウェアエンジニア(SWE)の新卒採用を本格的にスタートします。 今回は、その取り組みの一環として実施した、新卒SWE向け長期インターンシップについて、設計から選考、受入れまでの裏側をプロジェクトメンバーで振り返ってもらいました。 今回話を聞いたのは以下のメンバーです。 深川:執行役員・CTO 本プロジェクトの総監督。最終面接を担当。 荒崎:CXOn, Senior Engineering Manager 技術課題の作成と技術面接を担当。 森山:LegalOn, Senior …
5日前

The next layer of AI security
Blog on 1Password Blog
Identity establishes trust. The next problem is how that trust is used.In June 2025, Microsoft patched EchoLeak (CVE-2025-32711), a zero-click vulnerability in Microsoft 365 Copilot that allowed an attacker to exfiltrate sensitive enterprise data, including API keys, confidential documents, and internal conversation snippets, without human intervention.The attack was deceptively simple. An attacker sent a normal-looking email with hidden instructions embedded in it. A human would not notice them
5日前

From prompt to production: Build full-stack apps faster with Google AI Studio and Firebase
Firebase Blog
Today, we’re announcing that Firebase is now integrated with Google AI Studio, accelerating your path from prompt to production so you can turn your vibe-coded ideas into fully functional apps with robust backends. Read on to learn how this works and what this means for Firebase Studio.
5日前

Common CORS errors and how to fix them
WorkOS Blog
A practical guide for developers working with cross-origin requests. Every frustrating console message, and the headers that fix them.
5日前

Pipes MCP: Session-scoped authorization for AI agents
WorkOS Blog
Grant agents time-limited access to OAuth connections using Pipes and MCP.
5日前

12,479 Applications, Zero Ghosting: A Look at Checkly's 2025 Hiring
Checkly Blog: Monitoring Insights & Trends
In 2025, Checkly received 12,479 applications, of which we hired 24 people. Here's an honest look at our hiring funnel, speed, and data.
5日前

Autoresearching Apple's "LLM in a Flash" to run Qwen 397B locally Simon Willison's Weblog
<p><strong><a href="https://twitter.com/danveloper/status/2034353876753592372">Autoresearching Apple&#x27;s &quot;LLM in a Flash&quot; to run Qwen 397B locally</a></strong></p>Here's a fascinating piece of research by Dan Woods, who managed to get a custom version of <a href="https://huggingface.co/Qwen/Qwen3.5-397B-A17B/tree/main">Qwen3.5-397B-A17B</a> running at 5.5+ tokens/second on a 48GB MacBook Pro M3 Max despite that model takin...
5日前

datasette 1.0a26 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/datasette/releases/tag/1.0a26">datasette 1.0a26</a></p> <p>Datasette now has a mechanism for assigning semantic column types. Built-in column types include <code>url</code>, <code>email</code>, and <code>json</code>, and plugins can register additional types using the new <a href="https://docs.datasette.io/en/latest/plugin_hooks.html#plugin-register-co...
5日前

GlassWorm Sleeper Extensions Activate on Open VSX, Shift to GitHub-Hosted VSIX Malware
Socket
We identified over 20 additional malicious extensions, along with over 20 related sleeper extensions, some of which have already been weaponized.
6日前

Snowflake Cortex AI Escapes Sandbox and Executes Malware Simon Willison's Weblog
<p><strong><a href="https://www.promptarmor.com/resources/snowflake-ai-escapes-sandbox-and-executes-malware">Snowflake Cortex AI Escapes Sandbox and Executes Malware</a></strong></p>PromptArmor report on a prompt injection attack chain in Snowflake's <a href="https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-agents">Cortex Agent</a>, now fixed.</p><p>The attack started when a Cortex user asked the agent to review a GitHu...
6日前

BaseWatch
Frontend Masters Boost RSS Feed
There is so much new web technology happening all the time, it is definitely not your fault if you feel like you can’t keep up with it. Big thumbs up to the new service BaseWatch, which will let you know when web technologies you care about become widely available, and thus potentially close enough to […]
6日前
3/18 (水)

Model Routing vs Tool Routing: How to give your AI agents superpowers
WorkOS Blog
Everyone thinks AI routing means swapping models. The bigger game is tool routing — giving your agent image gen, video, voice, and search via MCP and skills.
6日前

Rich Text Editors in Regulated Industries: A Business Leader’s Guide
CKEditor Ecosystem Blog
Learn how CKEditor ensures text editor compliance across healthcare, finance, and education by meeting key industry regulations with secure features.
6日前

Introducing Custom Regions for precision data control
The Cloudflare Blog
We are expanding Regional Services with new pre-defined regions and the launch of Custom Regions. Customers can now define precise geographical boundaries for data processing, tailored to meet their compliance and performance needs.
6日前

How to Manage Permissions When AI Tools Access Private Repositories
Semaphore
AI tools are increasingly integrated into development workflows. They can review pull requests, generate code, analyze test failures, suggest CI optimizations, and even modify configuration files. To do this effectively, many AI systems require access to private repositories. That access introduces real security, compliance, and governance concerns. This article explains how to manage permissions safely […]The post How to Manage Permissions When AI Tools Access Private Repositories appeared firs
6日前

The Index: Issue #173
Piccalilli - Everything
SVG favicons that respect theme preferenceA handy approach here! It'd be useful if browsers had a queryable value for the colour of the UI too so developers could serve an appropriate favicon.Designing for people with anxietyThis is absolutely packed with great knowledge.Try not to get scammed while looking for workSorry to add more horror to our already horrifying industry at the moment, but this is important to make people aware of!European tech alternativesWe've already shared EU alternative
6日前

BI as Code で「確かな数字」を届けるために
newmo 技術ブログ
GUI ベースの BI ツールの限界、データエンジニアリングにおけるソフトウェアエンジニアリングの原則、AI 時代に求められる「確かな数字」。newmo が Lightdash で BI as Code を始めた背景にある思いを語ります。
6日前

Enter video Picture-in-Picture automatically on more sites
developer.chrome.com: Blog
Chrome automatically opens a video PiP window for sites that have not registered a media session action handler.
6日前

LINEヤフーのエンジニアの動向を知る:State of LY 2025実施レポート LINEヤフー Tech Blog (LY Corporation Tech Blog
LINEヤフーでは、2024年に引き続き、2025年も社内の開発者を対象としたアンケート「State of LY 2025」を実施しました(昨年度の実施レポート)。昨年はWebフロントエンド開発者のみ...
6日前

Bun v1.3.11
bun.com
Fixes 105 issues (addressing 307 👍). 4 MB smaller on Linux. x64 Bun.cron for OS-level cron jobs and expression parsing, Bun.sliceAnsi for ANSI/grapheme-aware string slicing, richer Bun.markdown list metadata; bun test --path-ignore-patterns; native Windows ARM64 .bin shim; dgram UDP fixed on macOS, fs.openSync numeric flags fixed on Windows (unbreaks tar@7), http2 WINDOW_UPDATE fix; bundler --bytecode/barrel/import-attribute fixes; CSS unicode-range/mask/border-radius fixes; Proxy-array crash f...
6日前

LINE iOSアプリにWebKitの新API「WebPage」を導入できず、自前で実装した件 LINEヤフー Tech Blog (LY Corporation Tech Blog
はじめにこんにちは、iOSアプリエンジニアのKiichiです。LINE iOSアプリでアプリ内ブラウザなど、Webまわりの開発を担当しています。普段はUIKitをベースに機能改善や新機能開発を進めつつ...
6日前

2026年4月の技術系イベント予定 LINEヤフー Tech Blog (LY Corporation Tech Blog
LINEヤフー株式会社では、技術に関するイベントや勉強会の主催・協賛などを行っています。最新情報は各リンク先でご確認ください。タイミングによっては、申し込み開始前や既に満席となっていることがあります。...
6日前

「言語処理学会第32回年次大会(NLP2026)」参加レポート
LegalOn Technologies Engineering Blog
はじめに こんにちは、株式会社LegalOn Technologies MLエンジニアの藤田と申します。GenAIチームに所属しており、現在は契約書レビューシステムの開発を行っています。 この記事は、2026年3月9日~3月13日に行われた「言語処理学会第32回年次大会(NLP2026)」 の参加記録となります。当社では1件の学会発表を行いました。 本記事では、その参加の様子や発表内容をご報告します。
6日前

Building the next chapter of Go-to-Market in EMEA
Blog on 1Password Blog
Hi! I'm Ollie Cheal, VP of Go-To-Market (GTM) in EMEA at 1Password.If you’re exploring your next role in GTM, I’d love to give you a look at what we’re building here and why it’s such an exciting time to join. Right now, our mission is clear, the stakes are high, and our people are all in to win. With that in mind, let me share why this moment matters and what it takes to thrive on this team.Why this moment mattersThe biggest technological shift of our lifetime is happening right now, and 1Passw
6日前

How to validate the JWT iss claim and why it matters
WorkOS Blog
Why skipping issuer validation is the most common JWT security mistake, and how to fix it.
6日前

Agent Experience: Build without leaving your terminal
WorkOS Blog
Develop with WorkOS entirely from your terminal, with agent-ready tooling built in.
6日前

GitHub Commit Status を活用した柔軟な Approve 数管理
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
目次 この記事で学べること 想定読者 はじめに GitHub の Branch Protection ...
6日前

40,000行のAPIテスト作成で学んだClaude Code Skillsの育て方
カミナシ エンジニアブログ
こんにちは、ソフトウェアエンジニアの渡邉(匠)です。「カミナシ 設備保全」の開発に携わっています。 Claude CodeのSkills(以下スキル)を使い、約2週間で40,000行超のAPIシナリオテストを書き切りました。最初のスキルは粗削りでしたが、テストを量産する中で繰り返し改善した結果、後半は「スキル実行 → レビュー → マージ」のサイクルだけで回せるようになりました。 この記事では、スキルをどう設計し、どう育てたかを中心にお伝えします。 背景 APIの動作保証にシナリオテストツール runn を使っていました。 サービス成長に伴うAPIの増加により、当初のテスト構成では運用が回らな…
6日前

Quoting Ken Jin Simon Willison's Weblog
<blockquote cite="https://fidget-spinner.github.io/posts/jit-on-track.html"><p>Great news—we’ve hit our (very modest) performance goals for the CPython JIT over a year early for macOS AArch64, and a few months early for x86_64 Linux. The 3.15 alpha JIT is about <strong>11-12%</strong> faster on macOS AArch64 than the tail calling interpreter, and <strong>5-6%</strong>faster than the standard interpreter on x86_64 Linux.</p></blockquote><p class...
6日前

GPT-5.4 mini and GPT-5.4 nano, which can describe 76,000 photos for $52 Simon Willison's Weblog
<p>OpenAI today: <a href="https://openai.com/index/introducing-gpt-5-4-mini-and-nano/">Introducing GPT‑5.4 mini and nano</a>. These models join GPT-5.4 which was released <a href="https://openai.com/index/introducing-gpt-5-4/">two weeks ago</a>.</p><p>OpenAI's self-reported benchmarks show the new 5.4-nano out-performing their previous GPT-5 mini model when run at maximum reasoning effort. The new mini is also 2x faster than the previous mini.</p>...
6日前

llm 0.29 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.29">llm 0.29</a></p> <p>Adds support for OpenAI's new models <code>gpt-5.4</code>, <code>gpt-5.4-mini</code>, and <code>gpt-5.4-nano</code>.</p>
6日前

Quoting Tim Schilling Simon Willison's Weblog
<blockquote cite="https://www.better-simple.com/django/2026/03/16/give-django-your-time-and-money/"><p>If you do not understand the ticket, if you do not understand the solution, or if you do not understand the feedback on your PR, then your use of LLM is hurting Django as a whole. [...]</p><p>For a reviewer, it’s demoralizing to communicate with a facade of a human.</p><p>This is because contributing to open source, especially Django, is a communal endeavor....
7日前

Investing in the people shaping open source and securing the future together
The GitHub Blog
See how GitHub is investing in open source security funding maintainers, partnering with Alpha-Omega, and expanding access to help reduce burden and strengthen software supply chains.The post Investing in the people shaping open source and securing the future together appeared first on The GitHub Blog.
7日前

How to preserve your AI context across devices, outages, and model providers
WorkOS Blog
Lost all your AI session data switching computers? Here's how to externalize your context into Obsidian, Linear, and git so any agent can pick it up.
7日前
3/17 (火)

Why MiniMax M2.5 is the most popular model on OpenRouter right now
WorkOS Blog
MiniMax M2.5 processes more tokens on OpenRouter than any other model. Here's why I use it as the chat frontline for my AI agent.
7日前

Toolbox App 3.4: Remote IDE Lifecycle Hooks, macOS Fullscreen Fix, UTF-8 Support, and More
Company | The JetBrains Blog
Toolbox App 3.4 brings several long-awaited fixes alongside new capabilities for plugin developers. You can now hook into the remote IDE launch lifecycle, the Toolbox window behaves correctly in full-screen mode on macOS, and Windows users with non-ASCII usernames no longer need workarounds. The jetbrainsd service introduced in 3.3 also gets a round of reliability […]
7日前

Subagents Simon Willison's Weblog
<p><em><a href="https://simonwillison.net/guides/agentic-engineering-patterns/">Agentic Engineering Patterns</a> &gt;</em></p> <p>LLMs are restricted by their <strong>context limit</strong> - how many tokens they can fit in their working memory at any given time. These values have not increased much over the past two years even as the LLMs themselves have seen dramatic improvements in their abilities - they generally top out at around 1,...
7日前

Flexbox Masonry Layout (Explained with Math)
Frontend Masters Boost RSS Feed
Flexbox has a very specific algorithm for determining how to deal with remaining (or lack of) space in a row. Let's use actual math to understand it then apply it to a masonry layout.
7日前

Anime vs. Marvel/DC: Designing Digital Products With Emotion In Flow
Articles on Smashing Magazine — For Web Designers And Developers
Design is about pacing and feelings as much as pixels and patterns. Alan Cohen explores Emotion in Flow and Emotion in Conflict, showing how anime like Dan Da Dan and superhero films like James Gunn’s Superman manage emotional shifts and translating those ideas into practical patterns for product design.
7日前









