11y/o just told me that a septic tank is just a fancy chamber pot and I am speechless

yo mamdani come fix my integration tests

70 percent of the internet was vulnerable yesterday to very bad security flaws inside a coding language. Turns out, *one volunteer* is mostly responsible for maintaining that code & helping push updates. Yesterday Ondřej Surý saved the internet. So I called him up www.theatlantic.com/technology/2...

The Man Who Saved the Internet...

OpenAI ambulance chasing the PHP vulnerabilities and pretending they found and disclosed them (they did not) is disgusting. It’s a media play and it’s really gross, and says a lot about OpenAI.

press 4 to pay respects

https://www.bseindia.com/xml-data/corpfiling/AttachLive/82503e00-335c-49dc-b022-f4633a08b642.pdf

“You cannot buy the revolution. You cannot make the revolution. You can only be the revolution. It is in your spirit, or it is nowhere.”

Ursula K. Le Guin, author

We're sad to hear Arc is sunsetting later this year. Their team put forth a lot of effort in prioritizing browser security, and their innovations influenced some of our own features, including Sidebar, Split View, and the upcoming Mini Window.

For those of you who are currently Arc users, what features do you want to see in your next browser?

K, I’m calling this launched https://kwon.nyc/guestbook/ Ready to receive transmissions!

why do people call LLM training on public website data “AI Copyright Infringement” when “six finger discount” is right there

Well that’s a bad one

https://infosec.exchange/@badthingsdaily/117481254170403513

super relieved that wordpress doesn’t use php

I know folks get real mad when I say this but in times of widespread security crisis, static sites sure are nice

Certificate trust bundles contain several hundred trusted certs that all can sign any cert for any name they want.

Your system contains at least four different of these bundles used by different libraries and languages, while other frameworks hardcode their own.

Outside of the browsers, absolutely nobody checks CRLs, OCSP (stapled or not), or CT logs.

Selectively distrusting intermediates (as Go did) doesn't scale and is not practical for most deployments.

So yeah, happy Tuesday.

#emudhra

My first open source release: Tiny Tells!

Six small status characters in one <tiny-tell> tag.

They're animated like little cartoon characters, so a state change is a reaction, not an icon swap or a spinner.

MIT licensed, 14 KB, no dependencies. https://tinytells.dev

#WebComponents #WebDev #CSS #OpenSource #a11y

Congrats @Mastodon and @imanijoy ✊ 5.0 UX makes it's first appearance - https://blog.joinmastodon.org/2026/10/5.0-a-closer-look/

for the very first time, mastodon's stock interface is starting to look like it was properly designed.

https://blog.joinmastodon.org/2026/10/5.0-a-closer-look/

Every long-lived website ends up with cobwebs. 🕸️

Things that used to do something, but no longer do. Like httpequiv for IE8-10, your fb:pages id or the Windows 8 tile tags. None of them do anything anymore.

But which ones can you safely get rid of? The next version of Polypane will tell you!

Today marks the 10 year anniversary of launching CJ Type.

I’m grateful I can make a living doing what I love. I truly appreciate all the help I’ve received to make this possible, from everyone at Cooper Type to Font Bureau/WT/TN, and the larger type design community that has been so generous sharing their knowledge and expertise over the years.

It was amazing sharing some work from these 10 years in Tokyo earlier this month, and I look forward to sharing more in NYC at the end of the month 🖤