This week, we’re joined by Ron Perris, a Security Engineer at Reddit and software security enthusiast. Together, we dive into best practices and common pitfalls, covering topics from dangerous URLs to JSON injection attacks. Tune in for an educational conversation, and don’t forget to bring your notebooks!

Leave us a comment

Changelog++ members get a bonus 4 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Convex – Convex is a better type of backend — the full-stack TypeScript development platform that lets you replace your database, server functions, and glue code. Get started at convex.dev
• Appwrite – Build Fast. Scale Big. All in One Place. Appwrite is a backend platform for developing Web, Mobile, and Flutter applications. Built with the open source community and optimized for developer experience in the coding languages you love.
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.

Featuring:

• Ron Perris – Twitter, GitHub
• Amal Hussein – Twitter, GitHub
• Christopher Hiller – Twitter, GitHub, Website

Show Notes:

• 10 React Security Best Practices Cheatsheet (by Ron Perris & Liran Tal)
• ZAP - the worlds most widely used web app scanner
• Loco Moco Security Conference in Hawai’i
• Node.js Ecosystem Security Working Group
• Node.js Security Bug Reporting
• Node.js Hacker One Page
• Node.js Third Party Labs Hacker One Page (now disabled)
• Python’s Advocate Library - for making secure HTTP requests on behalf of a third party
• DOMPurify - DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG
• ESLint Security Plugin
• Content Security Policy

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - It's party time, y'all
(00:39) - Sponsor: Convex
(04:10) - Welcoming Ron Perris
(04:46) - Ron's background
(14:55) - NodeJS Security Working Group
(23:47) - Sponsor: Appwrite
(26:35) - Where to get started with security
(34:17) - String injectiony stuff
(39:42) - XSS protection
(43:40) - URL-based script injection
(50:41) - Who's responsible for security?
(52:38) - Sponsor: Changelog News
(54:19) - On security teams
(58:00) - On project security
(59:51) - Sanitize & render HTML
(1:04:45) - Secure server-side rendering
(1:05:55) - Avoid JSON injection attacks
(1:08:50) - User linter configs
(1:10:54) - Thomas Eckert's question
(1:13:57) - Why aren't people taught this?
(1:16:10) - The Loco Moco conference
(1:17:14) - Frontend vs backend security
(1:24:14) - Connecting with Ron
(1:25:45) - Next up on the pod (Join ++!)

Dominik Klotz from askui joins Daniel and Chris to discuss the automation of UI, and how AI empowers them to automate any use case on any operating system. Along the way, the trio explore various approaches and the integration of generative AI, large language models, and computer vision.

Leave us a comment

Changelog++ members save 6 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Statsig – Build faster with confidence. Startups to Fortune 500s rely on Statsig to make data-driven decisions. Ship smarter and faster with the unified platform for feature flags, experimentation, and analytics. Our listeners get free white-glove onboarding, migration support, and 5 million free events per month.
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Dominik Klotz – GitHub, LinkedIn
• Chris Benson – Twitter, GitHub, LinkedIn, Website
• Daniel Whitenack – Twitter, GitHub, Website

Show Notes:

• askui.com
• askui on GitHub
• askui on LinkedIn
• askui on Twitter/X

Something missing or broken? PRs welcome!

Timestamps:

(00:05) - Welcome to Practical AI
(00:39) - Sponsor: Statsig
(04:17) - askui
(07:54) - What does data look like?
(09:58) - Tying in classification
(11:56) - Range of uses
(15:41) - Many platforms 1 approach
(16:47) - askui's practical approach
(20:27) - Deploying
(22:16) - Daniel's bad idea?
(25:54) - Handling input & output
(27:37) - Other tests
(29:09) - Sponsor: Changelog News
(30:50) - Facing AI challenges
(35:38) - Getting started
(37:42) - Roadmap challenges
(39:36) - Future vision
(41:36) - Conclusion
(42:21) - Outro

This is a fancified excerpt of Carl M. Johnson’s unpopular opinion on the Go Time podcast. Click here to listen along while you read or watch the video on YouTube. Jump to the end for the poll results. 📊

My spicy take is that XML is better than YAML, because there are situations where XML is appropriate, but there’s no situation where YAML is appropriate.

Johnny Boursiquot: Dang. Shots fired! 🤣

Let’s talk about XML first

So, XML got a really bad reputation. The reason it got a really bad reputation is because people were using it for things that it should never have been used for. XML stands for Extensible Markup Language. And if you’re using it as an extensible markup language, it’s actually really great.

Let’s say you’re working on something and you’re like:

“I’m making a new kind of book, and I need to annotate all of the verses in the Bible, and have the chapter headings and stuff.”

It’s great for that.

It’s really good for when you have a document, and some things are italicized, and some things are in a foreign language, and subtitles, and all that stuff. It’s really good for that. It’s not good if it’s like:

“I need to configure this server and the server needs to know if this value is true or false.”

No, that’s bad. Don’t do that. That’s not a good use for XML.

But XML does have some uses for which it’s appropriate. And I think the fact that now everybody is writing React… and they’re writing it with JSX… and JSX is basically just inline XML… I think that shows that there are cases where actually XML is pretty good.

YAML on the other hand

YAML on the other hand I think is never good. There’s always something better than YAML!

We’ve finally made it to Go 1.21 and I’m very happy about this. And you know why? Because YAML repeatedly bit me in the behind on Go 1.20. Ask me why.

Johnny Boursiquot: Why?

Well, when you say in your test file:

“test this against Go 1.20”

It interprets that as Go 1.2. 😭🤣

So it was like two or three different times I had a repo where I’m like:

“These tests aren’t passing. Why are my tests not passing?! I’ve just upgraded to Go 1.20.”

And it was like:

“Oh, no. I’ve decided that this is Go 1.2”

And so YAML is always going to do that to you…

Better choices

Now, I understand why people do YAML, but there are better choices. You can use TOML. You can use CUE. You can use lots of things.

I like how Caddy does it. With Caddy, the canonical language that Caddy understands is JSON, but they have adapters.

So if you want to write YAML, you can. But it’ll just take that YAML and turn it into JSON behind the scenes. Then they also have a specific Caddy language. So you can give it the Caddy language and then it turns that into JSON behind the scenes. And you can give it an NGINX config and it’ll turn that into JSON behind the scenes. If you have the cycles and time to spare, that’s probably the best solution for most people…

But when the only way to do it is YAML, it’s like:

“No…!”

It’s just too error-prone, there’s too many things… You just have to always quote everything.

Also…

Also the YAML specification has all these features that nobody ever uses, because they’re really confusing, and hard, and you can include documents inside of other documents, with references and stuff… And it’s like

“Oh, man, I don’t want to have to understand any of this stuff.”

And then if you’re not careful, it’d be like:

“Oh yeah, the first three things I fed it to understood that, but then the third one was just like using some parser that they found on the back of a truck, and it doesn’t understand it”

and it’s like:

“Oh, man…”

YAML… never appropriate. XML is sometimes appropriate.

The polls are open 🗳️

There you have it. Carl’s reasoning for why XML is better than YAML. Do you agree or disagree? Let your opinion be heard by voting on Mastodon and X!

Or just duke it out in the comments below … we’re listening! 👇

Leave us a comment

This week we’re joined by Steve O’Grady, Principal Analyst & Co-founder at RedMonk. The topic today is the definition of open source, the constant pressure on the true definition of the term, and the seemingly small but vocal minority that aim to protect that definition. In Steve’s post Why Open Source Matters, he says “open source is at a crossroads” and there are some seeking to break the definition of open source to one that is more permissive to their desires, and they are closer than ever to achieving that goal. Today’s conversation goes deep on this subject.

Leave us a comment

Changelog++ members get a bonus 12 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Convex – Convex is a better type of backend — the full-stack TypeScript development platform that lets you replace your database, server functions, and glue code. Get started at convex.dev
• Statsig – Build faster with confidence. Startups to Fortune 500s rely on Statsig to make data-driven decisions. Ship smarter and faster with the unified platform for feature flags, experimentation, and analytics. Our listeners get free white-glove onboarding, migration support, and 5 million free events per month.
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
• Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You iterlly can’t get any faster!

Featuring:

• Stephen O'Grady – Twitter, GitHub, Website
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

• Why Open Source Matters
• You can FINALLY use JSHint for evil with Mike Pennisi
• Introducing Infrastructure Manager powered by Terraform

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - This week on The Changelog
(01:05) - Sponsor: Convex
(04:24) - Start the show!
(07:29) - Recent events for context
(09:04) - Do developers even care?
(16:39) - JSHint project as evidence
(21:22) - The advantage of being "open soure"
(26:19) - The good will aspect
(30:41) - "Truly good coffee" as an analogy
(34:37) - Sponsor: Statsig
(38:06) - The open source definition needs to change
(43:00) - Help us AWS, don't hurt us
(49:01) - Microsoft's good will
(50:48) - AI licensing
(54:46) - Are devs becoming the minority?
(56:51) - Output is copyrighted?
(58:00) - 30% of my code is AI generated
(1:00:03) - Microsoft will indemnify Copilot users
(1:03:38) - Sponsor: Changelog News
(1:05:25) - Steve on predicting the future
(1:08:34) - The OSI maintains the definition
(1:14:27) - How to NOT bait and switch
(1:17:28) - How does Redmonk maintain credibility?
(1:22:13) - Wrapping up
(1:23:56) - Outro

Andrei Taranchenko says the software industry is learning once again that complexity kills, Casey Muratori outlines a long list of Unity alternatives, Filip Szkandera builds a functioning (macro) processor for RISC-V & Matt Basta tells the tale of the time he built a web-based Excel clone inside Uber only to have it discarded a week later.

Leave us a comment

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Sentry – Learn the basics of frontend application performance monitoring with Sentry in this upcoming livestream. Sign up here.

Featuring:

• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

All links mentioned in this episode of Changelog News (and more) are in its companion newsletter.

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - Intro
(00:44) - Death by a thousand microservices
(02:25) - Game development post-Unity
(03:34) - Sponsor: Sentry
(04:26) - Pineapple ONE
(05:52) - No sacred masterpieces
(06:59) - Pagefind
(08:07) - Outro

A hoy hoy! Our old friend Nick Nisi does his best to bring up TypeScript, Vim & Tmux as many times as possible while we discuss a new batch of web browsers, justify why we like the ones we do & try to figure out what it’d take to disrupt the status quo of Big Browser.

Leave us a comment

Changelog++ members get a bonus 8 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Statsig – Build faster with confidence. Startups to Fortune 500s rely on Statsig to make data-driven decisions. Ship smarter and faster with the unified platform for feature flags, experimentation, and analytics. Our listeners get free white-glove onboarding, migration support, and 5 million free events per month.
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Nick Nisi – Twitter, GitHub, Website
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website

Show Notes:

• Digging through Nick Nisi’s tool box (JS Party #278)
• Google gets its way, bakes a user-tracking ad platform directly into Chrome | Ars Technica
• Arc from The Browser Company
• Sizzy — The browser for web developers
• Polypane, The browser for ambitious web developers
• Orion Browser
• Vivaldi Browser | Powerful, Personal and Private web browser
• The Ladybird browser project
• Horse Browser
• Web Browser Quiche on the App Store
• Nyxt browser: The hacker’s browser
• Opera browser goes free with version 5.0 launch • The Register
• Nick’s vim + tmux video
• Vim with Me playlist
• Our viral short on Instagram Reels
• Gabe Kangas on Mastodon
• Rich Harris on JS Party

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - Let's talk!
(00:38) - 2x Clark Kent glasses
(01:12) - Back to the Future II
(02:28) - "Gimme a Pepsi Free"
(03:26) - Crispin Glover follow-up
(04:17) - Start here if you just want browser talk
(04:21) - Hold on a second...
(05:02) - He's back!
(06:22) - Browser 101
(06:45) - Becoming crotchety
(07:51) - Safari is not the best browser
(08:32) - Chrome v Firefox
(09:55) - horse_js is dead
(10:18) - The TypeScript "Exodus"
(12:19) - New breed of browsers
(13:39) - All praise Safari
(17:46) - Safari's market share
(19:16) - Browser profiles
(21:47) - Firefox converters
(22:45) - Too many extentions
(23:49) - It's not what Apple wants
(25:41) - Safari incompatabilities
(28:02) - No Chrome since '16
(28:19) - Ad trackers in browsers
(30:12) - Your data & 3rd parties
(31:00) - Tight cloud integration
(33:21) - Ads on Smart TVs
(34:36) - NVIDIA SHIELD
(35:33) - DVD upscaling
(37:11) - Sponsor: Statsig
(40:55) - A FREE TV?!
(41:52) - Browser business models
(43:03) - Paywalls
(45:28) - Polypane & Sizzy
(49:16) - Confessions of Nick Nisi
(51:26) - Opera history trivia!
(53:38) - A browser for dev is a good idea
(53:58) - We own the ++?
(55:42) - Mark HackerNoon as spam
(57:30) - How Zed does it
(58:16) - Warp vs vim & tmux
(58:57) - Nick's vim + tmux vid
(1:03:29) - Viral short
(1:05:33) - More "Vim with me"!
(1:07:01) - What do we want?
(1:09:07) - Arc tabs
(1:10:57) - Orion
(1:11:19) - Vivaldi
(1:11:56) - Ladybird
(1:13:22) - Gabe Kangas on Mastodon
(1:15:54) - It takes talent
(1:16:43) - How long will browsers be relevant?
(1:18:33) - Why do we care?
(1:20:34) - Nyxt & Quiche
(1:22:04) - Power features
(1:23:43) - Should we just take it?
(1:24:07) - Momentum is a fickle thing
(1:25:00) - We don't know
(1:26:21) - The Arc club
(1:27:47) - Why Adam likes newer Macs
(1:29:31) - What is your tab layout?
(1:33:00) - Worryied about crotchety Adam
(1:33:44) - No forks of TypeScript
(1:34:02) - Speaking of the perfect tweet
(1:34:50) - Kids read everything
(1:35:26) - A Linux-like take on browser
(1:37:01) - Apple Keynote
(1:39:46) - When to upgrade your iPhone
(1:40:18) - No more lightning
(1:40:45) - Sideloading required?
(1:41:34) - Where to find Nick
(1:43:35) - Coming up next (Changelog++!)

The LAST Strange Loop conference is right around the corner!

The conference has accumulated 673 videos on its YouTube channel, which means there’s gold in them hills, but finding the gold might consume some of your precious time. Good news!

I was hanging out in the conference’s Slack when someone asked:

What are some of y’all’s favorite past Strange Loop talks? As someone who knows the conf by reputation but hasn’t been before, I’m curious what some of your favorites are!

A barrage of YouTube links followed, so I scooped them up to share here so everyone can enjoy these golden Strange Loop talks ✨

🎥 Stop Writing Dead Programs by Jack Rusher (2022)

Most new programming languages are accidentally designed to be backwards compatible with punchcards. This talk argues that it would be better to focus on building new live programming environments that can help us solve the problems of the future.

Josh says: “This is the talk that convinced me ‘if this is a topic discussed at Strange Loop, then I really need to make it there’”

🎥 Simple Made Easy by Rich Hickey (2011)

Rich Hickey, the author of Clojure and designer of Datomic, is a software developer with over 30 years of experience in various domains. Rich has worked on scheduling systems, broadcast automation, audio analysis and fingerprinting, database design, yield management, exit poll systems, and machine listening, in a variety of languages.

This keynote was given at Strange Loop 2011, and is perhaps the best known and most highly regarded of Rich’s many excellent talks, ushering in a new way to think about the problems of software design and the constant fight against complexity.

See also: Rich Hickey’s greatest hits

🎥 A Whole New World by Gary Bernhardt (2012)

This talk announces the most ambitious software project I’ve ever undertaken, then considers why its existence is so surprising (and in some cases frustrating) to people.

Conrad says: “I’m personally working on this: completely tearing down the legacy of punchcards in modern dev tooling.”

🎥 Languages for 3D Industrial Knitting by Lea Albaugh (2016)

Industrial computer-controlled knitting machines are churning out seamless three-dimensional fabric objects as you read this – think gloves, sweaters, sportswear, furnishings, architectural fabrics, and plushies. But right now the programming languages for these machines are terrible.

With a knitting machine, complex structures are formed with a very limited set of low-level machine operations. Thinking on the level of those machine operations becomes untenable pretty quickly when you start trying to make real objects. How can we ensure knittability? Can we encode constraints in an understandable way? Can we optimize production speed?

We’ll look at several ways to describe knit structures and generate machine instructions for their fabrication, including both the delightfully arcane language that ships with the machine and the language from our SIGGRAPH 2016 technical paper, “A Compiler for 3D Machine Knitting.”

🎥 African Polyphony & Polyrhythm by Chris Ford (2016)

Ethnomusicologists face a dilemma: either shoehorn African music into European notation, or create custom DSLs that can only be understood by a select band of European ethnomusicologists. Algomusicologists can solve this problem, because we have principled ways of modelling specific idioms in terms of general computation. What’s more, our models can be executed to generate actual music.

Simha Arom is a French-Israeli ethnomusicologist. In the book from which the title of this talk is borrowed, he describes the principles underlying the musical system of traditional central African polyphony and polyrhythm. Arom invented ingenious recording techniques for deconstructing and systematising musical cultures that had no previous tradition of musical theory. He tested his models by using them to recreate music and inviting central African musicians to critique the results.

This talk will argue that music-as-code is an ideal way to represent Arom’s insights. I will show the full truth in the Lévi-Strauss quote with which Arom prefaces his book: “The proof of the analysis is in the synthesis.” Programming has played its part in the homogenisation of global culture, but the universality of the lambda calculus also affords a golden opportunity for code to become a point of interchange between formerly incompatible musical systems.

Brian says: “My two favorite talks are probably African Polyphony & Polyrhythm by Chris Ford and How to Hack a Painting by Tyler Hobbs. But it’s hard to choose, there have been so many amazing ones over the years…”

🎥 How to Hack a Painting by Tyler Hobbs (2017)

In Hackers and Painters, Paul Graham famously linked coding and the visual arts. In this talk, I’ll explain how to do both at once.

Through the Processing framework, Clojure, and careful observation, it’s possible to simulate watercolor paints and other media. I will walk the audience through the observation of real watercolor paint, breaking down the mental model we can use to think about its shape, texture, and qualities. Next, we will translate that mental model into a Clojure program capable of generating watercolor effects. Special attention will be paid to probability distributions, as randomness is the key to pleasing effects.

With the basics established, we can dive into textures and the blending of multiple colors. Finally, I will demonstrate how to combine everything to create a finished generative work of art, capable of generating a stream of unique but aesthetically related images.

🎥 How to Fix AI: Solutions to ML Bias (And Why They Don’t Matter) by Joyce Xu (2019)

Bias in machine learning is a Problem. This is common knowledge for many of us now, and yet our algorithms continue to operate unfairly in the real world, perpetuating structural inequality along lines of class and color. After all, “better training data” is not so easy to get our hands on, right?

In this talk, I argue that it is time for us to begin building algorithms that are designed to be resilient to biased data. Building on a basic introduction to ML concepts, I present an in-depth, intuitive explanation of several deep learning techniques that combat underlying bias in data, and use these models to explore what “algorithmic fairness” really means in measurable terms. Finally, diving into a few case studies of real world systems, I suggest that even perfect “fairness” is not necessarily the fairy-tale ending we like to think it is. Blindly optimizing for it may still miss the real problem behind AI bias, and to come to a real solution we may just have to reframe the problem itself.

🎥 Stop Rate Limiting! Capacity Management Done Right by Jon Moore (2017)

In an era of cloud computing and microservices, it’s imperative to be able to isolate clients from one another in terms of the resources they can use–otherwise, one misconfigured or malicious client can make a service unusable for everyone else. Steve Yegge mentions quotas and throttling as key practices in his notorious “platform rant.”

If you’ve ever had one of your internal microservices launch an unintentional denial of service attack against another one, this talk is for you!

🎥 Misuser by David Schmudde (2018)

The act of discovering and displaying digital art created for 20th century computing and telecommunication environments places the character of these systems in stark relief. Most exhibitions require an archeological undertaking and an enormous effort to execute a single artifact from forty years ago.

The software I feature in this talk operated at the edge of digital systems. Artists often behaved like hackers: working off hours, pushing a system beyond its specification, and inventing new possibilities for human interaction along the way. They were some of the most eager practitioners of early computing but often found it difficult to obtain access. Their work often saw limited distribution and few updates.

These challenges exasperate the difficulty of building a retrospective of digital art. The software’s brittle nature reflects the environment within which it ran. The engineering decisions that lead to these systems were often informed as much by culture as science. “Misuer” will illustrate this connection and build a framework to examine the value of conventions and what we can learn by working outside of them.

Daniel says: “This one made me a little sad, in a good way”

🎥 Mapping Imaginary Cities by Mouse Reeve (2018)

While the map is not the territory (to quote the semantician Alfred Korzybski), the map is still usually intended to correspond to one. But what about maps of nowhere at all? What can they represent and how can they be made?

Maps are a familiar part of daily life, with a deeply familiar and complex symbolic language, and a long history. They are also hugely varied in style and aesthetic, and often are works of art unto themselves. All this makes mapping a powerful creative tool for conveying ideas about a space, how it is used, and who inhabits it. But it also presents a mapmaker with what can feel like an overwhelming array of design choices and technical hurdles to overcome in order to create a generative map.

This talk will explore maps as a way to communicate about people and place in the context of fictional cities, and dive into algorithms and techniques for procedurally generating maps by building up topography, landscape, populations, and street plans.

🎥 The Mess We’re In by Joe Armstrong (2014)

Joe Armstrong is one of the inventors of Erlang. When at the Ericsson computer science lab in 1986, he was part of the team who designed and implemented the first version of Erlang. He has written several Erlang books including Programming Erlang Software for a Concurrent World. Joe has a PhD in computer science from the Royal Institute of Technology in Stockholm, Sweden.

🎥 Vellvm - Verifying the LLVM by Steve Zdancewic (2018)

LLVM is an industrial-strength compiler that’s used for everything from day-to-day iOS development (in Swift) to pie-in-the-sky academic research projects. This makes the LLVM framework a sweet spot for bug-finding and verification technologies–any improvements to it are amplified across its many applications.

This talk asks the question: what does LLVM code mean, and, how can we ensure that LLVM-based tools (compilers, optimizers, code instrumentation passes, etc.) do what they’re supposed to – especially for safety or security critical applications? The Verified LLVM project (Vellvm) is our attempt to provide an answer.

🎥 Programming Should Eat Itself by Nada Amin (2014)

Nada Amin is a member of the Scala team at EPFL, where she studies type systems and hacks on programming languages. She has contributed to Clojure’s core.logic and Google’s Closure compiler. She’s loved helping others learn to program ever since tutoring SICP as an undergraduate lab assistant at MIT.

Michael says: “This talk still blows my mind a little (as do most talks by Nada Amin)”

🎥 The Early Days of id Software: Programming Principles by John Romero (2022)

As co-founders of id Software, John Romero and John Carmack created the code behind the company’s seminal titles. The principles they defined through experience in id’s earliest days built upon one another to produce a unique methodology and a constantly shippable codebase. In this talk, John Romero discusses id software’s early days, these programming principles and the events and games that led to their creation.

Larry says: “As someone who grew up playing those games, it was kind of mind blowing hearing how they were developed. I thought the emphasis on investing in tooling was really interesting… and he’s a great storyteller :)”

🎥 How to Think about Parallel Programming: Not! Guy L. Steele Jr (2010)

Guy L. Steele Jr. believes that it should not be the programmer’s job to think about parallelism, but languages should provide ways to transparently run tasks in parallel. This requires a new approach in building languages supporting algorithms built on independence and build-and-conquer principles rather than on linear decomposition of problems.

Steven says: “This keynote where Guy Steele dissects an old punch card program he wrote left my jaw on the floor… and still does any time I rewatch it”

🎥 Add ALL the things: abstract algebra meets analytics by Avi Bryant (2013)

A mathematician friend of mine tweeted that anyone who doesn’t understand abelian groups shouldn’t build analytics systems. I’d turn that around and say that anyone who builds analytics systems ends up understanding abelian groups, whether they know it or not. I’ll talk about how the laws of group theory provide a useful codification of the practical lessons of building efficient distributed and realtime aggregation systems, and give some examples of how that maps to useful code.

I’m sure there are many more great Strange Loop talks that didn’t shared by this particular group of attendees! Do you have a favorite that didn’t make the list? Comment below, and we hope to see you at Strange Loop 2023! 💚

Leave us a comment

Love it or hate it, TypeScript is here to stay for the foreseeable future. But, what happens when widely adopted packages go completely Type free or remove TypeScript in favor of JS with type annotations? Join us to unpack these recent events with Rich Harris, creator of Svelte, as he walks us through the nuanced decision his team made for the Svelte project, and ofc, lots of laughs along the way.

Leave us a comment

Changelog++ members get a bonus 7 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Convex – Convex is a better type of backend — the full-stack TypeScript development platform that lets you replace your database, server functions, and glue code. Get started at convex.dev
• Caisy – Caisy is the headless CMS that gives developers endless possibilities. Learn more at caisy.io
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Rich Harris – Twitter, GitHub
• Amal Hussein – Twitter, GitHub
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

• News article from May 2023 when Svelte switched from TS to JSDoc type annotations
• DHH’s blog post “Open Source Hooliganism and the TypeScript Meltdown”
• DHH’s tweet announcing Turbo’s removal of TS
• Rich’s quote tweet of DHH Turbo announcement
• JSDoc docs
• Official TS docs highlighting support for JS Doc type annotations
• ECMA proposal for Type Annotations

Alternate Episode Titles

• Type me a river
• To type or not to type
• Someone is typing in the community…
• Different types (or not) for different gripes
• The script schism
• Web Dev D Day
• Going off (Type)Script
• Losing the (Type)Script
• Not my type
• Can’t type this
• You fought in the Type Wars?

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - It's party time, y'all
(00:39) - Sponsor: Convex
(04:10) - EMERGENCY POD
(04:56) - Welcoming Rich Harris
(06:32) - Svelte's TypeScript decision
(12:18) - Team "Idiomatic JavaScript"
(18:24) - "TypeScript good, JavaScript bad"
(21:36) - Nick's dramatic foil
(23:15) - It's all situational
(23:39) - What exactly Svelte ships
(24:41) - Why the hate on JavaScript?
(32:50) - Sponsor: Caisy
(36:00) - Getting anthropological
(41:55) - Amal's psychologist hat
(45:10) - Twitter is the molotov cocktail app
(48:28) - Jay-Z not realizing he's Jay-Z
(49:37) - Rich Harris reads mean tweets
(52:45) - Some Turbo 8 nuance
(54:37) - DHH's blog post
(59:48) - Listener questions (join Slack!)
(1:00:16) - Kyle Beard says...
(1:01:46) - Daniel Buckmaster says...
(1:03:29) - Schalk Neethling says...
(1:06:06) - Rich's magic wish
(1:07:43) - Closing time
(1:08:35) - Next up on the pod (Join ++!)

This week we’re joined by Haroon Meer from Thinkst — the makers of Canary and Canary Tokens. Haroon walks us through a network getting compromised, what it takes to deploy a Canary on your network, how they maintain low false-positive numbers, their thoughts and principles on building their business (major wisdom shared!), and how a Canary helps surface network attacks in real time.

Leave us a comment

Changelog++ members get a bonus 4 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Statsig – Build faster with confidence. Startups to Fortune 500s rely on Statsig to make data-driven decisions. Ship smarter and faster with the unified platform for feature flags, experimentation, and analytics. Our listeners get free white-glove onboarding, migration support, and 5 million free events per month.
• Sentry – Watch Lazar Nikolov livestream on YouTube at youtube.com/@nikolovlazar. Use the code CHANGELOG and get the team plan FREE for three (3) months.
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com

Featuring:

• Haroon Meer – Twitter, LinkedIn, Website
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

• Thinkst Applied Research
• Thinkst Canary

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - This week on The Changelog
(01:00) - Sponsor: Statsig
(04:28) - Start the show!
(05:32) - Canary tokens
(10:03) - The footprint of a Canary
(14:23) - The Homelab lens
(16:43) - Fingerprinting a Canary
(18:45) - Masquerading as many things
(24:02) - Ratio of Canaries to real hardware?
(28:47) - Sponsor: Sentry
(32:26) - False positives
(34:11) - How are attackers getting in?
(39:10) - How do you masquerade well?
(41:45) - Bootstrapping Thinkst and Canary
(53:31) - Adding too many things
(59:35) - Just be kind
(1:03:21) - Regarding dead Canaries
(1:05:53) - How Canaries get deployed
(1:12:00) - Sponsor: Changelog News
(1:13:44) - Do you care about hardware?
(1:20:06) - Adam's attack!!
(1:25:10) - Where else can/will you go?
(1:29:04) - Thoughts on the VC model
(1:40:51) - Save it for ++
(1:41:40) - Up next!

Go’s known for it’s fantastic standard library, but there are some places where the libraries can be challenging to use. The html/template package is one of those places. So what alternatives do we have? On today’s episode we’re talking about Templ, an HTML templating language for Go that has great developer tooling. Co-hosts Kris Brandow and Jon Calhoun are joined by Adrian Hesketh, the creator of Templ, and Joe Davidson, one of the maintainers on the project.

Leave us a comment

Changelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
• Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You iterlly can’t get any faster!
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.

Featuring:

• Adrian Hesketh – Twitter, GitHub
• Joe Davidson – Twitter, GitHub
• Kris Brandow – Twitter, GitHub
• Jon Calhoun – Twitter, GitHub, Website

Show Notes:

• templ.guid
• htmx

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - It's Go Time!
(00:44) - Joe and Adrian
(02:35) - Celsius vs Fahrenheit
(04:51) - HTML templating with Go
(08:24) - How old is this?
(09:52) - Bringing this into existance
(16:40) - Generating Go code
(19:27) - The 2nd generate step
(25:31) - Serverside rendering
(36:03) - Sponsor: Changelog News
(37:42) - Back to Templ
(41:58) - LSP
(42:50) - What is Templ good for?
(49:01) - Surprisingly good docs
(52:03) - Making the docs approachable
(55:42) - Unpopular opinions!
(56:07) - Adrian's unpop
(59:23) - Joe's unpop
(1:03:04) - Jon's unpop
(1:04:00) - Outro

Bun 1.0 is out of the oven, Mojo is now available for local download, Vince Lwt asked 60+ LLMs a set of 20 questions & published the answers, Textual Web turns TUIs in to web applications & James Haydon dives deep to discover the bug that the UK air traffic control meltdown.

Leave us a comment

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Tailscale – Simple, secure networks for teams of any scale. Built on WireGuard.

Featuring:

• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

All links mentioned in this episode of Changelog News (and more) are in its companion newsletter.

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - Intro
(01:05) - Bun 1.0 is here
(02:08) - Mojo is ready for download
(02:57) - 20 questions for 60 LLMs
(04:01) - Textual Web
(05:03) - Sponsor: Tailscale
(06:00) - The UK air traffic meltdown
(07:43) - Outro

Author, journalist, travel writer & software engineer Jon Evans joins us to weigh in on the cultural history (and present-day sentiment) of AI doom. Along the way, we talk plausible Sci-Fi, ultrasound drug delivery, the maybe-evolving laws of physics & even weirder stuff.

Leave us a comment

Changelog++ members get a bonus 8 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Tailscale – Simple, secure networks for teams of any scale. Built on WireGuard.
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Jon Evans – Twitter, GitHub, LinkedIn, Website
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website

Show Notes:

• Exadelic on Amazon
• Inside GitHub’s Arctic Code Vault
• A Study: Ancient Egyptians used sound waves in building pyramids
• Extropia’s Children Redux - by Jon Evans
• The Only Way to Deal With the Threat From AI? Shut It Down | Time
• Nick Jones
• Dennis E. Taylor

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - Let's talk!
(00:38) - Uncorrected bound manuscripts
(01:58) - GitHub Arctic Code Vault
(04:50) - Never gonna have that in my bio
(05:59) - Market for predicting the future
(07:57) - The Simpsons predictions
(12:21) - Cultural history of AI doom
(15:20) - Sounds & the pyramids of Egypt
(16:07) - Ultra sound drug delivery
(19:01) - We can't build the pyramids?
(21:52) - Physics evolving?
(22:36) - Gravity was different
(23:17) - Greg Egan
(23:40) - Where do your ideas come from?
(25:47) - Sponsor: Tailscale
(30:34) - Adam's idea for Jon
(31:18) - Enter the Bobiverse
(34:02) - Fiction for software devs
(35:04) - Nick Jones
(35:22) - The Adolesence of P1
(35:59) - Eliezer Yudkowsky
(36:27) - Humanity & AI
(37:31) - The future is going to be weird
(37:41) - World of change
(38:53) - Your software lenses
(39:40) - Balancing ideas
(41:31) - AI doom scale
(42:46) - What is doom?
(44:07) - Welcoming our AI overlords
(45:41) - Symbiotic AI
(47:47) - AI religion
(49:26) - Jerod thinks AI has plateaued
(53:25) - Adam's use of ChatGPT
(57:44) - The open letter signatories
(59:54) - AI user manuals
(1:00:53) - What are they so afraid of?
(1:01:27) - Calculators for words
(1:03:08) - More of Adam's ChatGPT tips
(1:04:36) - OpenAI just wants to train
(1:04:56) - We're not doomers
(1:05:10) - The ultimate 10x-er
(1:06:20) - One of the last human written books
(1:06:54) - Having an AI editor
(1:09:15) - Not good, but okay
(1:11:27) - Humans are jagged
(1:12:30) - More books?
(1:13:00) - Adam's future book?
(1:13:42) - How many readers is success?
(1:14:53) - Author's commitment
(1:17:28) - How would you use AI?
(1:20:20) - Exadelic 2?
(1:21:00) - Audiobook?
(1:21:33) - The Exadelic hook
(1:22:03) - Bye friends!
(1:22:15) - Coming up next

Jerod & the gang discuss the news (Astro 3.0, Vercel + Astro, Python in Excel) then play eight crazy rounds of HeadLIES! Headline or headLIE? You decide…

Leave us a comment

Changelog++ members save 6 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Convex – Convex is a better type of backend — the full-stack TypeScript development platform that lets you replace your database, server functions, and glue code. Get started at convex.dev
• Caisy – Caisy is the headless CMS that gives developers endless possibilities. Learn more at caisy.io
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn
• Amal Hussein – Twitter, GitHub
• Nick Nisi – Twitter, GitHub, Website
• Christopher Hiller – Twitter, GitHub, Website

Show Notes:

• Astro 3.0
• Vercel official hosting provider of Astro
• Python in Excel

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - It's party time, y'all
(00:39) - Sponsor: Convex
(03:15) - Hello, hello
(04:02) - Things in the news
(04:20) - Astro 3.0
(13:25) - Astro + Vercel
(20:36) - What happened with Gatsby?
(22:37) - Python in Excel
(29:21) - Sponsor: Caisy
(32:27) - Time for HeadLIES!
(35:08) - Round 1: FCC on ISPs
(36:59) - Round 2: Meta on Fediverse
(40:39) - Round 3: SF on crime
(41:41) - Round 4: X on legal bills
(44:41) - Round 5: Crockford on TS
(47:07) - Round 6: Swifties on amnesia
(49:16) - Round 7: NSA on dignity
(52:20) - Round 8: Microsoft on ELA
(55:04) - And the winner is...
(55:54) - Unsolicited feedback
(58:51) - Chris gets the final word
(59:31) - Next up on the pod
(1:00:37) - (JavaScwipt Party)

V Körbes returns to talk prototyping with Natalie, Johnny & Kris. Is Go good for prototyping? What makes a language prototypable, anyway? How does space radiation fit in to all this? Tune in and ride along to find out!

Leave us a comment

Changelog++ members save 3 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Tailscale – Simple, secure networks for teams of any scale. Built on WireGuard.
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• V Körbes – Twitter, GitHub, Website
• Natalie Pistunovich – Twitter, GitHub
• Johnny Boursiquot – Twitter, GitHub, Website
• Kris Brandow – Twitter, GitHub

Show Notes:

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - It's Go Time!
(00:35) - Sponsor: Tailscale
(03:11) - V Körbes
(05:01) - Java for prototyping
(05:37) - What makes a language prototypable
(11:59) - Individual prototyping
(25:47) - The rest of the stack
(29:35) - Is Go a great prototyping tool?
(34:17) - Bad considerations
(43:34) - Prototype less fluent
(44:41) - Johnny's rebuttal
(52:33) - Space radiation
(57:07) - Unpopular opinions!
(57:25) - Kris' unpop
(59:23) - V Körbes' unpop
(1:02:30) - Johnny's unpop
(1:03:11) - Natalie's unpop
(1:03:48) - Outro

This week we’re talking about the launch of OpenTF and what it’s going to take to successfully fork HashiCorp’s Terraform. We’re joined by Josh Padnick to discuss what exactly happened, how HashiCorp’s license change changes things, who has been impacted by this change, and ultimately what they are doing about it.

Leave us a comment

Changelog++ members get a bonus 6 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Tailscale – Simple, secure networks for teams of any scale. Built on WireGuard.
• Sentry – Scheduled jobs are supposed to be predictable, but sometimes, predictable != reliable. Sentry Cron Monitoring (Beta) helps you monitor the uptime and performance of any scheduled or recurring job in Sentry. Learn more by attending this FREE webinar!
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Josh Padnick – Twitter, GitHub, LinkedIn, Website
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

• The OpenTF fork is now available!
• opentffoundation/opentf
• Kelsey Hightower on HashiCorp CEO Dave McJannet’s use of the word “malicious” on Oxide & Friends
• Terragrunt
• Terraform’s license

We were going to link to the video where HashiCorp CEO Dave McJannet’s used the word “malicious” in regards to their strategy and actions towards the open source community, but it has been taken down. This was the link to the video with a timestamp jumping to the part in question - https://www.youtube.com/watch?v=59rEiAyYEVk&t=920s

This tweet/post from Bryan Cantrill brought this to the community’s attention.

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - This week on The Changelog
(01:24) - Sponsor: Tailscale
(03:54) - Start the show!
(05:00) - HashiCorp changed Terraform's license
(06:58) - What is Terraform?
(10:58) - Why is Terraform important?
(17:19) - Is Gruntwork a HashiCorp competitor?
(19:28) - What if we just paid the license fee?
(26:42) - Sponsor: Sentry
(30:45) - Open source doing what it does best
(35:13) - OpenTF vs Terraform
(39:30) - What will it take to support this?
(42:11) - Adoption at the provider level
(46:25) - Capturing similar mindshare
(52:48) - Is there a merge potential?
(56:21) - Confidence in The Linux Foundation
(58:03) - Did HashiCorp see this coming?
(1:01:03) - What does a pledge mean?
(1:06:06) - What else is on the roadmap?
(1:08:33) - Do you have a release date?
(1:09:33) - Where can people gather?
(1:14:18) - No more rug-pulls!
(1:17:00) - Plans for KubeCon
(1:18:20) - Naming names behind OpenTF
(1:19:33) - Wrapping up
(1:20:14) - Outro

In this episode we welcome back our good friend Demetrios from the MLOps Community to discuss fine-tuning vs. retrieval augmented generation. Along the way, we also chat about OpenAI Enterprise, results from the MLOps Community LLM survey, and the orchestration and evaluation of generative AI workloads.

Leave us a comment

Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!

Sponsors:

• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
• Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You iterlly can’t get any faster!

Featuring:

• Demetrios Brinkmann – Twitter
• Chris Benson – Twitter, GitHub, LinkedIn, Website
• Daniel Whitenack – Twitter, GitHub, Website

Show Notes:

• MLOps Community
• LLM survey report
• LLMs in Production Event - Part III

Something missing or broken? PRs welcome!

Timestamps:

(00:07) - Welcome to Practical AI
(00:43) - Practical AI & Friends
(02:01) - Look into MLOps community
(04:19) - Changes in the AI community
(07:34) - Finding the norm
(08:30) - Matching models & uses
(11:21) - Stages of debugging
(13:10) - Layer orchestration
(16:26) - Practical hot takes
(21:46) - Fine-tuning is more work
(24:13) - Retrieval augmented generation
(31:23) - MLOps survey
(38:09) - The next survey
(41:50) - Enterprise hypetrain
(42:39) - OpenAI & your data
(43:19) - AI vendor lock-in?
(47:44) - Now what do we do?
(48:58) - Hype in the AI life
(56:35) - Goodbye
(57:23) - Outro

Dan North tells the tale of Tim, the worst programmer he’s worked with (who also is a heck of a programmer), Kevin Lin declares that OpenTelemetry delivers on its promise for open observability, Justin Garrison details Terraform vs GitOps vs System Initiative, Inc. writes how Apple beats burnout & Aline Lerner’s advice on how (not) to sabotage your salary negotiations before you even start.

Leave us a comment

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Warp – Warp is a modern, Rust-based terminal with AI built in so you and your team can build great software faster. Download it today

Featuring:

• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn

Show Notes:

All links mentioned in this episode of Changelog News (and more) are in its companion newsletter.

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - Intro
(00:28) - The best worst programmer
(01:46) - OpenTelemetry in 2023
(02:50) - Terraform v GitOps v System Initiative
(04:03) - Sponsor: Warp
(04:54) - How Apple beats burnout
(06:10) - How to sabotage your salary negotiations
(06:46) - Outro (Shout outs++)

Go Time panelist (and semi-professional unpopular opinion maker) Kris Brandow joins us to discuss his deep-dive on the waterfall paper, his dislike of the “tech debt” analogy, why documentation matters so much & how everything is a distributed system.

Leave us a comment

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
• Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You iterlly can’t get any faster!

Featuring:

• Kris Brandow – Twitter, GitHub
• Jerod Santo – Mastodon, Twitter, GitHub, LinkedIn
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website

Show Notes:

• “Waterfall” doesn’t mean what you think it means
• Kris’s Go Time take on the tech debt analogy

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - Let's talk
(00:38) - Moar Go time friends!
(00:58) - Our GopherCon roots
(02:17) - 2nd-gen software engineer
(07:32) - You don't learn through DNA
(10:10) - Always willing to read
(12:53) - Misconceptions of waterfalls
(17:09) - No appetite for rigor
(22:12) - Jerod justifies his nothing
(23:49) - Kris resigns from Go Time?!
(25:52) - Success hides problems
(28:12) - Startups are too slow
(30:02) - The tech debt analogy
(33:42) - Hard to quantify
(40:26) - Documentation matters
(42:24) - Tech malpractice
(51:24) - Auto-Librarian
(54:53) - Librarian tenure
(56:50) - Learning the skillset
(58:58) - The 'why' doc
(1:01:44) - The 'why not' doc
(1:05:05) - Too busy documenting
(1:08:38) - The value of worthless words
(1:11:46) - Change in the last 40 years
(1:16:45) - Announcing KrisOS?
(1:21:22) - What are distributed systems
(1:22:53) - How computers work
(1:26:59) - This is Kris's journey
(1:29:53) - A true full-stack engineer
(1:32:37) - The PCI-e rabbit hole
(1:34:43) - Malpractice is fightin' words
(1:35:25) - The spectrum
(1:35:46) - The malpractice umbrella
(1:37:39) - No time to make a shorter one
(1:38:16) - Coming up next

Mark Erikson (web dev professor/historian, OSS Maintainer & engineer at Replay) joins us to talk about the shift from CommonJS to ESM. We discuss the history of module patterns in JS and the grueling effort to push the world’s biggest developer ecosystem forward. Get ready to go to school kids, this one’s deep!

Leave us a comment

Changelog++ members get a bonus 5 minutes at the end of this episode and zero ads. Join today!

Sponsors:

• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
• Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You iterlly can’t get any faster!
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.

Featuring:

• Mark Erikson – Twitter, GitHub, Website
• Amal Hussein – Twitter, GitHub

Show Notes:

• My Experience Modernizing Packages to ESM - Mark’s epic blog post
• History and Timeline of ES Modules
• Node API Reference for ESM
• Andrew Branch’s WIP TypeScript module processing documentation
• Sindre Sorhus: Pure ESM packages
• Modern Guide to Packaging a JS Library
• Guide for shipping ESM and CJS in one Package

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - It's party time, y'all
(00:56) - Welcoming back Mark
(03:28) - A history lesson
(10:36) - UMDs were hot ...
(11:49) - History continued
(16:59) - Enter TypeScript
(21:28) - Publish as a Service
(22:51) - Common pain points
(31:30) - Sponsor: Changelog News
(32:42) - Recapping the post
(44:22) - Running multiple tests
(51:51) - We need standards
(59:07) - Parting thoughts
(1:03:03) - Closing time
(1:04:06) - Next up on the pod (Changelog++!)

This week on The Changelog Adam is joined by Zach Lloyd, Founder & CEO of Warp. We talked with Zach last year about what it takes to build the terminal of the future, and today Adam catches up with Zach to see where they are at on that mission. They talk about the business model of Warp, how they measure success, reaching product/market fit, building features developers love, integrating AI, and the pros and cons of going open source (again).

Leave us a comment

Changelog++ members save 7 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Convex – Convex is a better type of backend — the full-stack TypeScript development platform that lets you replace your database, server functions, and glue code. Get started at convex.dev
• Square – Develop on the platform that sellers trust. There is a massive opportunity for developers to support Square sellers by building apps for today’s business needs. Learn more at developer.squareup.com to dive into the docs, APIs, SDKs and to create your Square Developer account — tell them Changelog sent you.
• Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com

Featuring:

• Zach Lloyd – Twitter, GitHub
• Adam Stacoviak – Mastodon, Twitter, GitHub, LinkedIn, Website

Show Notes:

• Changelog Interviews #487: Warp wants to be the terminal of the future
• Warp.dev
• Warp.dev/pricing
• nvbn/thefuck

Something missing or broken? PRs welcome!

Timestamps:

(00:00) - This week on The Changelog
(00:57) - Sponsor: Convex
(04:13) - Start the show!
(06:20) - Can you share some numbers?
(07:20) - The last time we spoke
(08:57) - Measuring Product/Market fit
(11:03) - What feedback are you getting?
(13:53) - Who are you building this for?
(16:53) - The thesis is...?
(18:31) - Warp is like Raycast
(27:23) - Giving the power to all
(31:28) - Sponsor: Square
(33:58) - Is your mission to replace Terminal.app?
(35:45) - Warp in VS Code?
(37:09) - What terminal apps are used on Mac?
(39:32) - We still need a standalone terminal app
(41:42) - Who is your competition?
(47:25) - Should Terminal.app die?
(49:50) - What's the business model?
(53:16) - Do a Pro plan like Raycast
(57:03) - What's the state of "Teams"
(59:14) - What is Warp Drive?
(1:05:25) - Sponsor: Changelog News
(1:06:42) - Adam shares a feature request
(1:09:29) - Respect my Oh my ZSH
(1:15:04) - Give them good UI
(1:18:58) - What did it take to get to now?
(1:28:29) - Is $50 million dollars alot?
(1:29:39) - Adding AI features
(1:35:22) - What's next?
(1:38:15) - Will Warp ever be open source?
(1:47:18) - Wrapping up
(1:47:36) - Get in touch!