sh03
@sh03.dev
🇮🇹 Software Dev. Primarily: Typescript, React, 🐘 PostgreSQL.
🤌
🤌
Reposted by sh03
Next phone will probably be an Android unless Apple gets their shit together for PWAs and allowing alternate browsers. I want web apps.
December 13, 2025 at 1:46 AM
Next phone will probably be an Android unless Apple gets their shit together for PWAs and allowing alternate browsers. I want web apps.
Reposted by sh03
We disclosed two new RSC vulnerabilities:
- Denial of Service (High): CVE-2025-55184
- Source Code Exposure (Medium): CVE-2025-55183
Patches are available now, please update immediately.
react.dev/blog/2025/12...
- Denial of Service (High): CVE-2025-55184
- Source Code Exposure (Medium): CVE-2025-55183
Patches are available now, please update immediately.
react.dev/blog/2025/12...
Denial of Service and Source Code Exposure in React Server Components – React
The library for web and native user interfaces
react.dev
December 11, 2025 at 8:51 PM
We disclosed two new RSC vulnerabilities:
- Denial of Service (High): CVE-2025-55184
- Source Code Exposure (Medium): CVE-2025-55183
Patches are available now, please update immediately.
react.dev/blog/2025/12...
- Denial of Service (High): CVE-2025-55184
- Source Code Exposure (Medium): CVE-2025-55183
Patches are available now, please update immediately.
react.dev/blog/2025/12...
Funny how everyone loves SPAs now. Before the CVE they were literally "tech Satan personified".
Love a good SPA with a regular, separate API codebase 😅
December 7, 2025 at 1:02 PM
Funny how everyone loves SPAs now. Before the CVE they were literally "tech Satan personified".
I'm not looking for a job and every time I see a job posting that ends with "competitive salary" I'm tempted to send a troll CV with lines like "competitive number of years in competitive university" and "competitive experience with language X".
December 5, 2025 at 7:51 AM
I'm not looking for a job and every time I see a job posting that ends with "competitive salary" I'm tempted to send a troll CV with lines like "competitive number of years in competitive university" and "competitive experience with language X".
Still can't believe the UI/UX community allowed floating action buttons to be popular. There should be Nuremberg trials when the reign of terror, this anti pattern has brought upon us, ends.
I bet they are the same people that are now trolling us with the liquid glass design.
I bet they are the same people that are now trolling us with the liquid glass design.
December 2, 2025 at 12:18 PM
Still can't believe the UI/UX community allowed floating action buttons to be popular. There should be Nuremberg trials when the reign of terror, this anti pattern has brought upon us, ends.
I bet they are the same people that are now trolling us with the liquid glass design.
I bet they are the same people that are now trolling us with the liquid glass design.
Remember: not every component needs an ErrorBoundary 💡
December 1, 2025 at 11:38 AM
Remember: not every component needs an ErrorBoundary 💡
Huge shoutout to `tsdown`. Easy to get started. Fast. Love the `--on-success` option (I use to run `node` when in watch mode). Just overall a great DX.
November 30, 2025 at 5:56 PM
Huge shoutout to `tsdown`. Easy to get started. Fast. Love the `--on-success` option (I use to run `node` when in watch mode). Just overall a great DX.
Reposted by sh03
Creating a universal app store for PWAs seems like an obvious win here vs. heuristics triggered installs. But think about smaller, more bespoke app stores! An app store for your intranet apps. An app store for your webring of online mutuals. An app store for kid-friendly apps. That's fun territory.
On the Edge team, we think web apps should be easier to install.
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The Web Install API is ready for testing
We're happy to announce that the Web Install API is now ready for testing on your own site, as an origin trial in Microsoft E
blogs.windows.com
November 24, 2025 at 7:26 PM
Creating a universal app store for PWAs seems like an obvious win here vs. heuristics triggered installs. But think about smaller, more bespoke app stores! An app store for your intranet apps. An app store for your webring of online mutuals. An app store for kid-friendly apps. That's fun territory.
Reposted by sh03
This is desperately needed on iOS.
On the Edge team, we think web apps should be easier to install.
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The Web Install API is ready for testing
We're happy to announce that the Web Install API is now ready for testing on your own site, as an origin trial in Microsoft E
blogs.windows.com
November 24, 2025 at 5:29 PM
This is desperately needed on iOS.
Reposted by sh03
On the Edge team, we think web apps should be easier to install.
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The Web Install API is ready for testing
We're happy to announce that the Web Install API is now ready for testing on your own site, as an origin trial in Microsoft E
blogs.windows.com
November 24, 2025 at 5:02 PM
On the Edge team, we think web apps should be easier to install.
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
The default browser install button is great, but we'd like something which you can use on your own site, how and when you want it.
That's why we're proposing the Web Install API, which you can now test!
Reposted by sh03
GPT would have been such a great technology if LLMs were just used to augment search engines. Their natural language processing ability means they can find relevant content no matter how you phrase your query. No more keyword matching, just ask a question, or describe what you’re looking for. 1/2
November 24, 2025 at 8:25 AM
GPT would have been such a great technology if LLMs were just used to augment search engines. Their natural language processing ability means they can find relevant content no matter how you phrase your query. No more keyword matching, just ask a question, or describe what you’re looking for. 1/2
Choosing Convex is the equivalent of putting all your money into 1 stock.
Diversify your tech stack and be ready to replace everything. Because you will.
That's how you keep a codebase healthy.
Diversify your tech stack and be ready to replace everything. Because you will.
That's how you keep a codebase healthy.
November 22, 2025 at 1:08 AM
Choosing Convex is the equivalent of putting all your money into 1 stock.
Diversify your tech stack and be ready to replace everything. Because you will.
That's how you keep a codebase healthy.
Diversify your tech stack and be ready to replace everything. Because you will.
That's how you keep a codebase healthy.
Sync engines that connect directly to the database feels like a stranger reaching for your private areas. Seems wrong.
Databases should only be connected to a backend you can control. That's the mind of the application. And the mind is never as simple as just CRUD operations on a database.
Databases should only be connected to a backend you can control. That's the mind of the application. And the mind is never as simple as just CRUD operations on a database.
November 21, 2025 at 5:21 PM
Sync engines that connect directly to the database feels like a stranger reaching for your private areas. Seems wrong.
Databases should only be connected to a backend you can control. That's the mind of the application. And the mind is never as simple as just CRUD operations on a database.
Databases should only be connected to a backend you can control. That's the mind of the application. And the mind is never as simple as just CRUD operations on a database.
Reposted by sh03
Reposted by sh03
I am prepared to vote for anybody who will stop this
November 15, 2025 at 6:42 PM
I am prepared to vote for anybody who will stop this
Reposted by sh03
This. If I detect AI involvement in your PR, it immediately lowers my evaluation of your competency level. It's just what happens.
And that burden is not something I'm going to bear. You've now ruined any implicit trust I had in your abilities.
And that burden is not something I'm going to bear. You've now ruined any implicit trust I had in your abilities.
so now when they say "I vibed it" there's basically no longer an implicit seal of quality backing it up. You can no longer say "oh, this is Bob, he knows what he's doing"
November 15, 2025 at 8:21 PM
This. If I detect AI involvement in your PR, it immediately lowers my evaluation of your competency level. It's just what happens.
And that burden is not something I'm going to bear. You've now ruined any implicit trust I had in your abilities.
And that burden is not something I'm going to bear. You've now ruined any implicit trust I had in your abilities.
Reposted by sh03
🚀 TanStack DB 0.5 is here with Query-Driven Sync
Your component's query IS the API call. No custom endpoints. No GraphQL resolvers. Just write your query and DB figures out exactly what to fetch.
Details 🧵👇
Your component's query IS the API call. No custom endpoints. No GraphQL resolvers. Just write your query and DB figures out exactly what to fetch.
Details 🧵👇
November 12, 2025 at 10:08 PM
🚀 TanStack DB 0.5 is here with Query-Driven Sync
Your component's query IS the API call. No custom endpoints. No GraphQL resolvers. Just write your query and DB figures out exactly what to fetch.
Details 🧵👇
Your component's query IS the API call. No custom endpoints. No GraphQL resolvers. Just write your query and DB figures out exactly what to fetch.
Details 🧵👇
Yes, humans sometimes get facts wrong and make things up but not in the thing they are experts in. Expert humans tend to have professional integrity (because it benefits them in the long term) and have the ability to say "I don't know but I can look it up" and improve. AIs just gaslight you instead.
I've been thinking about this lately in terms of "do they get facts wrong and make things up? yes, and so do humans so 🤷"
November 7, 2025 at 7:51 AM
Yes, humans sometimes get facts wrong and make things up but not in the thing they are experts in. Expert humans tend to have professional integrity (because it benefits them in the long term) and have the ability to say "I don't know but I can look it up" and improve. AIs just gaslight you instead.
Reposted by sh03
So I'm reviewing a PR from a colleague that was written for like 95% by AI, and while it might have made his job easier, it's making mine a lot harder because it's riddled with mistakes and issues that I have to now fix, and I feel like I have to thoroughly check every single line of code twice
November 4, 2025 at 10:42 AM
So I'm reviewing a PR from a colleague that was written for like 95% by AI, and while it might have made his job easier, it's making mine a lot harder because it's riddled with mistakes and issues that I have to now fix, and I feel like I have to thoroughly check every single line of code twice