An active class of npm supply chain attacks is targeting AI coding assistant configs. I saw the first one in TLDR, audited my own machine, and three weeks later the next one shipped doing the exact thing I'd just been looking for. Here's what to check today.
I watched an AI coding agent read my .env file. Told it not to. Watched it do it again. Then I pointed the two newest flagship models at a clean codebase to see if the newer ones were smarter about it.
Hidden layers, invisible spans, and subpixel math. What it actually takes to make words feel right when words are all you have.
What happens when a self-taught developer puts everything he knows into a game about the people he loves most.
On the tradition of developers hiding things in their work, from Sierra game easter eggs to building my own secrets.
When your game promises that choices matter, you have to actually test them. All of them. Here's how I'm trying not to lose my mind.
A love letter to curiosity, hacker movies, and the kid who wasn't cool enough to fit in.
I wasted years not understanding money. So I built the tool I wish I'd had when it mattered — and learned finance through code instead of theory.
Before browsers had tabs and UX was a science, the internet was a frontier where nerds were royalty and every AOL Keyword was a portal to somewhere new.
Before StackOverflow, before YouTube — just a worn keyboard, a 9600 baud modem, and a kid who refused to quit.
