I wrote up a new post about what AI software finding might mean for the backdoor debate. blog.cryptographyengineering.com/2026/08/14/e...
Everything is about to “go dark”
I’m coming down from spending a few days at Usenix Security, right here in my hometown of Baltimore. This means that my days have been taken up with two kinds of conversation: first, explaini…
blog.cryptographyengineering.com
Now in blog post form: Cloudflare tried to phish me. textslashplain.com/2026/08/04/s...
Security is Hard, Y’all
It started innocently enough. I saw a tweet about a new product offering from one of my favorite companies, Cloudflare. Neat! I clicked through to the site and there it is: And huzzah!, my preferre…
textslashplain.com
@damian.social Would welcome suggestions for things to visit/see around South Netherlands (Rotterdam, Delft, The Hague, Leiden). Family trip. Messages are open (IINM). Thanks!
“Did you miss us? Join us for some summery Seattle walkies with our dad who’s back from busyness trips!” 🧵
More on fetch error details... www.jasnell.me/posts/fetch-...
Fetch Needs Error Codes
HTTP/2 and HTTP/3 have rich, typed error signaling that the Fetch API completely discards. The TC39 error code proposal could fix that.
jasnell.me
James Snell@jasnell.me · last mo.Fetch is not enough... a blog post on server-side HTTP API standardization www.jasnell.me/posts/fetch-...
got frustrated recently at work about people writing using AI instead of using their brains! here's my take on it: sophiebits.com/2026/06/25/t...
There are no lossless transformations of natural-language text
sophiebits.com
When to reach for a well-known URI — and the traps that catch most protocol designers. https://mnot.net/blog/2026/well_known_uris
I've been telling people for 25 years that Jane Street is not interested in formal methods. No more! And we're actively hiring to form a new formal methods team! blog.janestreet.com/formal-metho...
Formal methods and the future of programming
I’ve been telling people for the last 25 years that Jane Street as an organization was just not interested in formal methods.
blog.janestreet.com
I've spent months rethinking and rebuilding my programming languages course from scratch for the agentic coding era. I wrote myself a memo explaining what I'm doing. I figure others might be interested in the redesign, so here goes! Feedback welcome of course. docs.google.com/document/d/e...
RFC: Programming Languages Course Reboot, 2026
docs.google.com
At @springio.net keynote, Rossen shares how Spring embraces Virtual Threads, Structured Concurency, and what is coming in Spring Framework 7.1+ to support streaming on Spring MVC stack (RestClient server-sent events for example), as well as related performance improvements. #java #springio26
Since some asked: five months of Absurd in production. Durable execution on plain Postgres with tiny SDKs. The design held up fine, partitioning is still hard and some closing thoughts on the future of Open Source. lucumr.pocoo.org/2026/4/4/abs...
Absurd In Production
Five months of durable execution with just Postgres.
lucumr.pocoo.org
🚨 Active supply chain attack on axios@1.14.1. The latest version pulls in plain-crypto-js@4.2.1 -- a brand-new package that didn't exist before today. We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...
Supply Chain Attack on Axios Pulls Malicious Dependency from...
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...
socket.dev
![4-panel comic. (1) [Glowing black dot surrounded by clouds.] DOT: I think I did a good job with this universe. Pressure waves dance through gas clouds. They clump together and then pressure pushes them apart. (2) [Some of the clouds are clumping together.] DOT: Oh weird, that big clump of clouds is staying together. Their gravity is overcoming the pressure and more gas is falling in. (3) [More clouds are sucked in.] DOT: It’s not stopping! The heat is rising but the collapse is only accelerating! I messed up. I messed up *bad*. (4) [The clump has become a shining star.] DOT: NOOOOOOOO!!! My beautiful clouds! Ruined! It’s all ruined!](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:cz73r7iyiqn26upot4jtjdhk/bafkreiae4qcq3k4rea6dmb4vcttgnajgfurbpa34isuyr6sclzdq3gijci)
I wrote a new post on anonymous credentials and how to build them. All of this is in service on a longer future post on how these will fit into age verification systems. blog.cryptographyengineering.com/2026/03/02/a...
Anonymous credentials: an illustrated primer
This post has been on my back burner for well over a year. It’s been sitting here unwritten, not because the topic is unimportant — in fact, with every single month that goes by, I become mor…
blog.cryptographyengineering.com
Major milestone! Curity Identity Server 11.0 is out 🚀 → Ephemeral Clients - OAuth for AI agents without registration → Managed Database Schemas for simpler upgrades → SCIM Groups and Entity Management → Rebuilt UI Kit Learn more: bit.ly/4cnSOJJ
The cost of turning written business logic into code has dropped to zero. At best, near-zero. The cost of integrating services and libraries, the plumbing of the code world, has dropped to zero. At best, near-zero. What does that mean for the future? New blog post: brooker.co.za/blog/2026/02...
You Are Here - Marc's Blog
brooker.co.za
After four months of edits and multiple mental breakdowns, I am delighted to announce the release of *Logic for Programmers* v0.13! All content is in, all that's left is copyediting (and technical editing and layout and proofreading and) logicforprogrammers.com
Logic for Programmers
The mathematics that will help you in your everyday programming.
logicforprogrammers.com
Tomorrow: Tune into this live session for a practical look at what's needed to build APIs that AI agents can safely use. 🕚 Jan 21 | 11:00 AM EST 🎟️ Still time to register: https://nordicapis.com/events/api-standards-for-ai-agents/
As of today, all ACM publications and related artifacts in the ACM Digital Library are open access. 🎉 @acm.org www.acm.org/publications...
Open Access Publication & ACM
Open Access Publication & ACM
acm.org
Christmas Day tradition: "Roupa Velha" (literally "Old Clothes"). Shredded cod fish, potatoes, and cabbage, from Christmas Eve. With lots of olive oil and garlic, of course.
this fall I worked with the core Git folks on writing an official data model for Git and it just got merged! I learned a few new things from writing it. github.com/git/git/blob...
git/Documentation/gitdatamodel.adoc at master · git/git
Git Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documen...
github.com
The wait is over. Rewatch 50+ industry-leading talks on this year's most important API topics. 🎉 Mic drop. 🎤 Watch here: bit.ly/3KoOcaI #PlatformSummit #PlatformSummit2025