🇺🇦 Ingvar Stepanyan
@rreverser.com
Sr. Principal Engineer at Cloudflare by day, WebAssembly consultant by night.
You might also know me from my work on OSS tools and libraries (JS / Wasm / Rust) or Wasm DevRel at Google Chrome
📝 https://rreverser.com/
📷 https://instagram.com/rreverser
You might also know me from my work on OSS tools and libraries (JS / Wasm / Rust) or Wasm DevRel at Google Chrome
📝 https://rreverser.com/
📷 https://instagram.com/rreverser
Pinned
🇺🇦 Ingvar Stepanyan
@rreverser.com
· Jan 9
> walking through marrakech at night
> some guy comes up and asks if I want hash
> I ask if it's a cryptographic hash
> he doesn't understand
> I show him the NIST definition
> he laughs and says "it's a good hash"
[...]
> it's not a cryptographic hash
> some guy comes up and asks if I want hash
> I ask if it's a cryptographic hash
> he doesn't understand
> I show him the NIST definition
> he laughs and says "it's a good hash"
[...]
> it's not a cryptographic hash
New toy has arrived 😍 Finally got a cooled deep sky astronomy camera at a ridiculously good discount.
December 3, 2025 at 11:49 PM
New toy has arrived 😍 Finally got a cooled deep sky astronomy camera at a ridiculously good discount.
Best I've seen on the Bun acquisition by Anthropic 😂
![user@macbook-pro:~/my-app$ bun i bun install v1.1.27 (801a2345) Resolving dependencies...
Keep using Bun?
You've reached your plan's install limit. You can wait until it resets at Dic 02, 1:00 AM GMT+1, or continue now:
Pay per package
Get extra usage to finish what you're working on.
Upgrade to a higher plan
Get higher limits and do more with Bun.
[x]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:pkzt5mk76dc3fnd7w7l7veyr/bafkreiam6da7t4gsgayb3umk4w4kumr3vbolhanagqhdg4bb4djufivjbi@jpeg)
December 3, 2025 at 4:54 PM
Best I've seen on the Bun acquisition by Anthropic 😂
Reposted by 🇺🇦 Ingvar Stepanyan
A perfect CVSS 10 🧑🏻🍳💋
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
Critical Security Vulnerability in React Server Components – React
The library for web and native user interfaces
react.dev
December 3, 2025 at 4:23 PM
A perfect CVSS 10 🧑🏻🍳💋
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components
The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0:
react-server-dom-webpack
react-server-dom-parcel
react-server-dom-turbopack
Upgrade immediately!
Sometimes I look at the code suggested by Copilot and think of the developer who originally wrote it.
Who are you? What happened in your life? Where are you now?
Who are you? What happened in your life? Where are you now?
December 3, 2025 at 1:02 PM
Sometimes I look at the code suggested by Copilot and think of the developer who originally wrote it.
Who are you? What happened in your life? Where are you now?
Who are you? What happened in your life? Where are you now?
Reposted by 🇺🇦 Ingvar Stepanyan
GitHub should add a 2025 recap, with things like:
"Angriest commit message"
"How often you added a separate commit just to fix linting"
"Number of curse words added to the codebase"
"What file caused the most bug reports"
"Number of abandoned side projects"
"Angriest commit message"
"How often you added a separate commit just to fix linting"
"Number of curse words added to the codebase"
"What file caused the most bug reports"
"Number of abandoned side projects"
December 2, 2025 at 8:38 PM
GitHub should add a 2025 recap, with things like:
"Angriest commit message"
"How often you added a separate commit just to fix linting"
"Number of curse words added to the codebase"
"What file caused the most bug reports"
"Number of abandoned side projects"
"Angriest commit message"
"How often you added a separate commit just to fix linting"
"Number of curse words added to the codebase"
"What file caused the most bug reports"
"Number of abandoned side projects"
Someone compiled the whole ImageMagick to Wasm and exposed APIs as a JS library. github.com/dlemstra/mag...
Sure, it's 14.5MB Wasm to load in your page, but OTOH you get _everything_ you could possibly want to do with images 😅
Sure, it's 14.5MB Wasm to load in your page, but OTOH you get _everything_ you could possibly want to do with images 😅
GitHub - dlemstra/magick-wasm: The WASM library for ImageMagick
The WASM library for ImageMagick. Contribute to dlemstra/magick-wasm development by creating an account on GitHub.
github.com
December 2, 2025 at 8:35 PM
Someone compiled the whole ImageMagick to Wasm and exposed APIs as a JS library. github.com/dlemstra/mag...
Sure, it's 14.5MB Wasm to load in your page, but OTOH you get _everything_ you could possibly want to do with images 😅
Sure, it's 14.5MB Wasm to load in your page, but OTOH you get _everything_ you could possibly want to do with images 😅
TIL. For all the concerns about fingerprinting, I'm surprised it's this easy to get such a precise GPU vendor string.
In WebGPU they locked this info down behind chrome://flags but it still exists in legacy APIs and it's somehow fine?
In WebGPU they locked this info down behind chrome://flags but it still exists in legacy APIs and it's somehow fine?
![gl = document.createElement('canvas').getContext('webgl')
WebGLRenderingContext {canvas: canvas, drawingBufferWidth: 300, drawingBufferHeight: 150, drawingBufferColorSpace: 'srgb', unpackColorSpace: 'srgb', …}
debug = gl.getExtension('WEBGL_debug_renderer_info')
WebGLDebugRendererInfo {}[[Prototype]]: WebGLDebugRendererInfoUNMASKED_RENDERER_WEBGL: 37446UNMASKED_VENDOR_WEBGL: 37445Symbol(Symbol.toStringTag): "WebGLDebugRendererInfo"[[Prototype]]: Object
gl.getParameter(debug.UNMASKED_RENDERER_WEBGL)
'ANGLE (NVIDIA, NVIDIA RTX 500 Ada Generation Laptop GPU (0x000028BA) Direct3D11 vs_5_0 ps_5_0, D3D11)'](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:pkzt5mk76dc3fnd7w7l7veyr/bafkreidsqh4h4fyjotsnbxweummcxl6qu4k4u2lmek4tjq3x5uynotor6q@jpeg)
December 2, 2025 at 12:29 AM
TIL. For all the concerns about fingerprinting, I'm surprised it's this easy to get such a precise GPU vendor string.
In WebGPU they locked this info down behind chrome://flags but it still exists in legacy APIs and it's somehow fine?
In WebGPU they locked this info down behind chrome://flags but it still exists in legacy APIs and it's somehow fine?
Holy shit, looks like in the right combination* WebNN inference on GPU is over 5x faster than WebGPU 🤯
Still looking for the catch, in all my previous experiments it was *slower* WebGPU, and still happens if any conditions below are not met.
This is all hightly unstable but exciting!
Still looking for the catch, in all my previous experiments it was *slower* WebGPU, and still happens if any conditions below are not met.
This is all hightly unstable but exciting!
December 1, 2025 at 5:09 PM
Holy shit, looks like in the right combination* WebNN inference on GPU is over 5x faster than WebGPU 🤯
Still looking for the catch, in all my previous experiments it was *slower* WebGPU, and still happens if any conditions below are not met.
This is all hightly unstable but exciting!
Still looking for the catch, in all my previous experiments it was *slower* WebGPU, and still happens if any conditions below are not met.
This is all hightly unstable but exciting!
God I miss Ukraine these days.
Just realised this is the longest I have been away, beating the lockdown years.
Just realised this is the longest I have been away, beating the lockdown years.
November 29, 2025 at 2:44 PM
God I miss Ukraine these days.
Just realised this is the longest I have been away, beating the lockdown years.
Just realised this is the longest I have been away, beating the lockdown years.
Reposted by 🇺🇦 Ingvar Stepanyan
Handing back student work that’s been written by ChatGPT with a 0 followed by the comment “This essay will never stand in authentic wonder before the Beauty of God’s creation.”
Pope Leo XIV told students not to use artificial intelligence for homework, saying that AI ‘won’t stand in authentic wonder before the beauty of God’s creation.’
Even God Is Worried About ChatGPT
Pope Leo XIV told students not to use artificial intelligence for homework, saying that AI ‘won’t stand in authentic wonder before the beauty of God’s creation.’
www.vulture.com
November 26, 2025 at 3:35 PM
Handing back student work that’s been written by ChatGPT with a 0 followed by the comment “This essay will never stand in authentic wonder before the Beauty of God’s creation.”
> TL;DR: we’ve been rifling through platforms that developers use to quickly format their input - like JSONFormatter and CodeBeautify. And yes, you are correct - it went exactly as badly as you might expect.
Oh no.
Oh no.
this is INSANE labs.watchtowr.com/stop-putting...
Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)
Welcome to watchTowr vs the Internet, part 68.
That feeling you’re experiencing? Dread. You should be used to it by now.
As is fast becoming an unofficial and, apparently, frowned upon tradition - w...
labs.watchtowr.com
November 26, 2025 at 3:46 PM
> TL;DR: we’ve been rifling through platforms that developers use to quickly format their input - like JSONFormatter and CodeBeautify. And yes, you are correct - it went exactly as badly as you might expect.
Oh no.
Oh no.
Got the bill for my surgery last week.
I'll have to pay £30 out of pocket for the take-home meds they gave me after.
Universal healthcare is devastating, I know 😭
I'll have to pay £30 out of pocket for the take-home meds they gave me after.
Universal healthcare is devastating, I know 😭
November 25, 2025 at 8:15 PM
Got the bill for my surgery last week.
I'll have to pay £30 out of pocket for the take-home meds they gave me after.
Universal healthcare is devastating, I know 😭
I'll have to pay £30 out of pocket for the take-home meds they gave me after.
Universal healthcare is devastating, I know 😭
Reposted by 🇺🇦 Ingvar Stepanyan
This is not a plan for peace. It is a plan for Russian victory and Ukrainian capitulation, argues Christian Caryl.
Don’t Call This a ‘Peace Plan’
If the U.S.-Russia plan for Ukraine goes forward, Donald Trump will be remembered as the Neville Chamberlain of the 21st century.
foreignpolicy.com
November 25, 2025 at 2:30 PM
This is not a plan for peace. It is a plan for Russian victory and Ukrainian capitulation, argues Christian Caryl.
Reposted by 🇺🇦 Ingvar Stepanyan
Reposted by 🇺🇦 Ingvar Stepanyan
Ukraine is rejecting Trump’s plan right now at the UN Security Council.
⬇️
⬇️
November 20, 2025 at 11:56 PM
Ukraine is rejecting Trump’s plan right now at the UN Security Council.
⬇️
⬇️
I'm starting to get why people get addicted to morphine. One day after the surgery and I already miss it.
November 19, 2025 at 11:22 PM
I'm starting to get why people get addicted to morphine. One day after the surgery and I already miss it.
Reposted by 🇺🇦 Ingvar Stepanyan
“rust isn’t safe because it panics” shut da fuck up rust is safe BECAUSE it panics. instead of, you know. not doing that.
November 19, 2025 at 5:10 PM
“rust isn’t safe because it panics” shut da fuck up rust is safe BECAUSE it panics. instead of, you know. not doing that.
This is satire, right?
I laughed at loud. These people are so pathetic; our enemies are numbskulls. They will kill us all and still not know hs physics.
COWEN: The stupidest question possible: Why don’t we just make more GPUs?
ALTMAN: Because we need to make more electrons.
conversationswithtyler.com/episodes/sam...
COWEN: The stupidest question possible: Why don’t we just make more GPUs?
ALTMAN: Because we need to make more electrons.
conversationswithtyler.com/episodes/sam...
November 19, 2025 at 2:40 PM
This is satire, right?
Reposted by 🇺🇦 Ingvar Stepanyan
Last night Russia sent about five hundred drones and missiles to kill Ukrainians. Most were intercepted but those that got through hit a post office, a store, a power plant, and multiple residences. 19 people were killed in Ternopil. (1/2)
November 19, 2025 at 12:36 PM
Last night Russia sent about five hundred drones and missiles to kill Ukrainians. Most were intercepted but those that got through hit a post office, a store, a power plant, and multiple residences. 19 people were killed in Ternopil. (1/2)
Doctor: You need to try and stay mobile.
Me: Sure thing. [gets in bed with my mobile]
Me: Sure thing. [gets in bed with my mobile]
November 18, 2025 at 3:07 PM
Doctor: You need to try and stay mobile.
Me: Sure thing. [gets in bed with my mobile]
Me: Sure thing. [gets in bed with my mobile]
One or two times could have been a coincidence, but somehow managed to set up my tripod within 3 degrees of Polaris purely "by feel", without actually seeing it.
I guess all those nights setting up in the field count for something.
I guess all those nights setting up in the field count for something.
November 17, 2025 at 9:49 PM
One or two times could have been a coincidence, but somehow managed to set up my tripod within 3 degrees of Polaris purely "by feel", without actually seeing it.
I guess all those nights setting up in the field count for something.
I guess all those nights setting up in the field count for something.
Reposted by 🇺🇦 Ingvar Stepanyan
Reposted by 🇺🇦 Ingvar Stepanyan
This blog post from the Android team is a great counterargument to the common trope "but shipping in Rust is much slower". security.googleblog.com/2025/11/rust...
November 13, 2025 at 10:56 PM
This blog post from the Android team is a great counterargument to the common trope "but shipping in Rust is much slower". security.googleblog.com/2025/11/rust...
Lol what is Visual Studio doing?
November 12, 2025 at 11:23 PM
Lol what is Visual Studio doing?