Spam is usually treated as something to delete. In my new blog post, I argue why that’s a mistake - how spam can reveal valuable insights, and how moderation enslave us. vitonsky.net/blog/2026/05... #blog #post #socialmedia #social #media #spam #dating #wellbeing

Do not remove my spam

Modern internet is broken and no longer built for human beings. By 2026 the internet is filled with robots . One type of robots generates content and injects advertisements, another type in...

vitonsky.net

This week I’m releasing Transly — a CLI tool for incremental translation and localization of apps via LLM or machine translation API, such as Google Translate. Share with your localization team. Let's break the language barriers together. github.com/translate-to... #opensource #devtools #i18n

Over 100 malicious extensions in the Chrome Web Store are stealing Google OAuth2 bearer tokens by injecting backdoors and carrying out ad fraud. Researchers at Socket concluded they’re all part of a coordinated campaign, operating under a MaaS model. socket.dev/blog/108-chr... #security #malware

108 Chrome Extensions Linked to Data Exfiltration and Sessio...

Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

socket.dev

What practical use cases for #WebAssembly can you imagine? Tell about it in this thread. I use WASM to integrate software solutions across different stacks. I compile a Twofish cipher implementation from C to WASM and use it in the browser. #wasm #webassembly #askfedi #opensource #programming

It would be nice if browser automatically load the WebAssembly modules, bind the native web APIs directly (without any JS glue code), and run the module. We could write the code for web apps in any language and then compile it to a WASM. hacks.mozilla.org/2026/02/maki... #wasm #webdev #javascript

People at Anthropic say they’ve found over 500 high-severity vulnerabilities using Claude. Looks like 0-day exploits might become widely accessible soon. red.anthropic.com/2026/zero-da... #security #research #llm

Matt Smith noticed that the Iterator utils is widely available now (since ~2024). So we may keep an arrays processing look like a pipeline, but do it lazy and reach significant performance win. A trivial change is needed. Someone had to remind us all of this. allthingssmitty.com/2026/01/12/s...

New blog post where I show a nano-queries, an state of the art Query Builder for a SQL and NoSQL queries. Fun fact, the JavaScript infrastructure had no a query builder before. Only ORM solutions that makes hurt your queries performance. vitonsky.net/blog/2026/01... #opensource #sql #javascript

Nano Queries, a state of the art Query Builder

In June 2023, I found myself in an awkward situation. We used a custom database on a project, and I needed a simple query builder to create complex queries dynamically and ensure security against user...

vitonsky.net

Don't shout at your drives! I just found a video where a man shouts at an HDD array and its latency are noticeably increases because of vibrating. youtu.be/tDacjrSCeq4?... #devops #science #humor #funny

Shouting in the Datacenter

YouTube video by Bryan Cantrill

youtu.be

Can somebody explain why it so difficult to LLMs to place a commas correctly? The "villain," on my screenshot. All LLM I've tried last few years had this problem. Such problems makes me feel the LLM nowadays like a CGI in 2000s when people have called it a "photo realistic graphic". #ai #llm

I discovered tauri.app recently. Do you have any feedback on it? They define it as a framework to build cross platform apps based on web technologies like Electron does, but app will takes reasonable size like 600kb (not a 200mb unlike Electron). #opensource #programming #frontend

How do you search for a new good movies to watch among a tons of garbage released in last 20 years? Do you use an IMDB or any other service? #movies

Just released Ordinality — a framework-agnostic migration tool for Browser, Node, and Deno. We use it in production on both backend and frontend. Ordinality works with any database — IndexedDB, SQL, state files, or anything else. github.com/vitonsky/ord... #opensource #javascript

I just read email from NPM "New TOTP 2FA configurations disabled (existing TOTP still works)". It looks NPM will disable TOTP and force package authors to use WebAuthn/passkeys. Business as usual. Spot an opportunity to hype it up and cash in. #opensource #programming #javascript

Just found a fun article where author uses cluster of 3 candles as a clock source. cpldcpu.com/2025/08/13/c...

Candle Flame Oscillations as a Clock

Todays candles have been optimized for millenia not to flicker. But it turns out when we bundle three of them together, we can undo all of these optimizations and the resulting triplet will start t…

cpldcpu.com

Linguist made it to the Top 3 extensions in the Chrome Web Store. Try it: linguister.io It is the only in-browser translation solution that respects your privacy. #opensource #browser #extension #FOSS

Roasting post about Matrix - probably the most disappointing project claiming to be a "privacy-focused messenger," but actually a scam targeting naive people. xn--gckvb8fzb.com/giving-up-on... #security #privacy

Just publish NPM package `langstats` that provides stats with speakers count and countries list where language is used. Basically, that's a small dataset i maintain for our products purposes. Will be useful for those who work on internationalization, to prioritize work. github.com/translate-to...

New post on blog, with insights around why it's nice to have open source project, why you can't rely on donations, and how you can actually make money on your pet project. Good to read for open source maintainers with existential questions. #opensource #programming vitonsky.net/blog/2025/06...

Open source is a promotion tool

Big tech companies invest a lot of effort to sell us the point that every good programmer must have their own open source project. Many programmers have open source side projects, but quite few of...

vitonsky.net

The HTTP QUERY Method draft, that defines a new HTTP method, QUERY, as a safe, idempotent request method that supports body payload and may be safely cached. httpwg.org/http-extensi...

Reality is porcelain. NPM is down, and all projects who had not set NPM proxy with cache is blocked for development. CI is in stuck, deployments is delayed, etc. #programming #frontend #javascript

Every time I hear something about "AI will replace us", I always remember how CGI and 3D games is looked impressive and "photo realistic" in 2004 and how ridiculous they looks today.

Some donation forms look like the project doesn't really want to be paid. #ux #privacy

New post on blog. IP tells you where the request comes from, that’s it. It doesn’t tell you what language the user speaks. It looks like Google thinks otherwise, and many programmers are blindly repeating it for Google with no idea how do it properly. #programming #ux vitonsky.net/blog/2025/05...

Don't Guess My Language

If you’re still using IP geolocation to decide what language to show, stop screwing around. It’s a broken assumption dressed up as a feature.

vitonsky.net

Just published a blog post about how a product can talk with clients not in computer language for a better user experience. Many programmers and designers just copy/paste solutions they have seen somewhere with no thought about who their users are and why they are here vitonsky.net/blog/2025/05...

Hide zeros for users

User interfaces everywhere are a bit too generic nowadays, as they must be efficient in terms of maintenance and release time. However, that is not a reason to create a pointless and bad UX. It's enou...

vitonsky.net

Found a "Magnitude" on this week, it looks interesting. That is a Playwright where you write a declarative AI prompts in test files instead of selectors and expected states assertions. There are some problems, but that approach could replace manual QA on small projects. #programming #frontend

Clever 0-click attack against CDN to figure out user location by cache-hit status on physically closest server. Especially interesting section with companies positions about the problem. No surprises there. gist.github.com/hackermondev... #security #privacy #vulnerability #hacking

New post on blog It is a common problem in software projects to rely on individuals rather than on system approach. Everyone makes this mistake, programmers, management and C-level people. As result, they as efficient as 20% with apply 80% effort&costs. vitonsky.net/blog/2024/10... #programming

Build Systems, Not Heroes

Enterprise programming is the management of system complexity. The main goals of most enterprise projects are to minimize bugs, ensure scalability, and release as soon as possible. These goals are unr...

vitonsky.net

First step to makes stronger is admit your weakness and find workarounds Most of programmers is not ready to admit the fact that humans quite weak as physically as intellectually However i never seen builders who prefer manually move a stone blocks rather use machines #coding #programming