Frontend Feeds

Today

Front-end, in one read.

The latest from the sources worth following, newest first.

  • DEV CommunityThe Giantsread at source

    Hybrid Humanity: Cognitive Architecture after AGI

    The article analyzes the vision of Hybrid Humanity, where AI cognitive augmentations become tools for real agency. The author refers to the 'capability approach', indicating that technology should increase actual human capabilities rather than being a mere luxury for elites. A key threat is the emergence of new classes based on coupling quality—a divide between those with audited systems and those dependent on models optimized for corporate interests. The text advocates for the creation of a polycentric network of intelligent institutions (Supersociety) which, instead of monolithic management, emphasizes infrastructural pluralism and the independence of cognitive processes. Freedom in a post-AGI world thus depends on open standards and the ability to switch augmentation providers, making competition policy a foundation of cognitive freedom.

  • DEV CommunityThe Giantsread at source

    Before you ship your side project, run three commands: Yatta JS's doctor, migrate, and backup

    Side projects rarely die because the idea was bad. They die in the gap between "it works on my machine" and "it survives real users" — the database migration nobody ran, the backup nobody took, the misconfiguration nobody noticed until launch day. Yatta JS is a backend-as-a-server for Bun: database, auth, mail, storage, realtime, jobs, and observability embedded in your application process instead of provisioned as separate services. It is live as yatta.js@1.0.0 on npm — install it with npm i yatta.js — and the docs are at https://yatta.js.org . What I want to talk about today is not the architecture, though. It is the three boring commands that sit between a demo and a shipped thing. Doctor first: check the patient before the launch Every framework has a setup guide. Few of them will look at your actual project and tell you what is off. Yatta's doctor command does that job: it checks your project setup and flags problems before they become launch-day surprises. My rule now is simple: doctor runs before every deploy, not after something breaks. It is the cheapest form of confidence a solo builder can buy, and it costs nothing because the check is local to your own project. If you take one habit from this post, take this one — verify the setup, don't assume it. Migrations as a normal part of the workflow, not a scary event A side project that never changes its data model is a side project that never ships a second feature. Yatta's CLI treats migrations as ordinary work: make a migration, check migration status, run the migration. That rhythm matters more than any single command, because it turns schema changes from a dreaded manual step into a repeatable one you do without thinking twice. The practical payoff is unglamorous and real: your local database, your staging data, and your production data move forward in the same steps, in the same order. When you are the only person on the project, that repeatability is your whole ops team. Backup before you need it, not after you lose something Yatta's CLI includes database backup and restore commands, and the honest truth is that most solo projects never test a restore until the day they need one. Build the habit the other way round: take a backup before a risky migration, and know that restore is a command you have already practised, not a README you are reading in a panic. That is the whole pre-ship checklist, and it fits in a short paragraph: run doctor, keep migrations routine, back up before risky changes. None of it is exciting. All of it is what keeps a one-person project alive past week two. None of this replaces good judgement — a backup you never tested is a hope, not a plan, and a migration you never reviewed is still your responsibility. But having doctor, migrate, and backup as first-class commands in the same runtime that already holds your database, realtime, and jobs means the unglamorous work stops being a separate project. It is just part of shipping. If you are building on Bun and you are tired of assembling a backend from six services before you write a single feature, Yatta JS is worth a look: https://yatta.js.org — npm: https://www.npmjs.com/package/yatta.js — code: https://github.com/psrockstar098/yatta.js What is the one pre-launch check you always skip and always regret? I would genuinely like to steal better habits from the comments.

  • DEV CommunityThe Giantsread at source

    MAJOR UPDATE!! FatafatOS 81 updated🔥

    MAJOR UPDATE!!! FatafatOS 81 Updated 🔥 Yes, you heard it right. FatafatOS 81 just got a CRAZY update. NEW SPECS 🔥 CPU : Old i5 Processor and low graphics - yes, it runs on that old laptop you were about to throw away! RAM : Almost 1 or 0 MB sometimes - so lightweight you won't even feel it. BOOT TIME : 3 seconds - Blink and it's ON. FLOPPY : Floppy Available. Yes, FLOPPY is back. Why this update is different? Everyone is making OS heavier. I am making it lighter. Windows needs 8GB RAM. FatafatOS 81 needs almost 0. This is not an OS. This is FATAFAT. Built in Elikatta, Telangana, India. By - Karthik | Fatafat321 Developer Comment your PC specs, I will tell you if FatafatOS 81 will run on it.

  • DEV CommunityThe Giantsread at source

    Spring Security API key authentication for REST APIs tutorial — Complete Guide

    Spring Security API key authentication for REST APIs tutorial — Complete Guide A practical, in-depth guide to Spring Security API key authentication for REST APIs tutorial with examples. INTRO Every day we ship micro‑services that expose JSON endpoints to internal tools, mobile apps, or third‑party partners. The default Spring Security setup assumes a session‑based, form‑login flow—perfect for web UIs but a poor fit for stateless APIs. When you try to protect a REST endpoint with the out‑of‑the‑box configuration, you quickly hit a wall: CSRF tokens, redirects, and HttpSession objects start leaking into your API contract, forcing clients to handle cookies they never asked for. The pragmatic solution is to replace the heavyweight OAuth dance or JWT boilerplate with a simple API key. An API key is just a secret string that a client includes in each request, typically via a header. It’s easy to generate, rotate, and audit, and it works flawlessly with Spring’s filter chain. The challenge isn’t the concept—it’s wiring the key check into Spring Security without breaking the rest of your configuration, handling missing or malformed keys gracefully, and keeping the implementation testable. If you’ve ever written a custom OncePerRequestFilter that felt like a hack, or you’ve been forced to expose your endpoints without any protection because “security is too hard,” this guide will show you a clean, production‑ready way to integrate API key authentication directly into Spring Security’s authentication manager. WHAT YOU'LL LEARN How to define a lightweight AuthenticationToken that represents an API key and plug it into Spring’s AuthenticationProvider . Configuring the security filter chain to intercept requests, extract the key from a custom header, and delegate to the provider. Storing API keys securely using Spring Data JPA, with hashing and rotation strategies. Writing unit and integration tests for the filter, provider, and controller layers without starting a full server. Common pitfalls such as leaking keys in logs, handling multiple keys per client, and mixing API key auth with other mechanisms. Production hardening tips: rate limiting, revocation, and monitoring key usage with Spring Actuator. A SHORT CODE SNIPPET // 1. Simple Authentication token that holds the raw API key public class ApiKeyAuthenticationToken extends AbstractAuthenticationToken { private final String apiKey ; private final UserDetails principal ; public ApiKeyAuthenticationToken ( String apiKey ) { super ( null ); this . apiKey = apiKey ; this . principal = null ; setAuthenticated ( false ); } public ApiKeyAuthenticationToken ( UserDetails principal , String apiKey , Collection extends GrantedAuthority > authorities ) { super ( authorities ); this . apiKey = apiKey ; this . principal = principal ; setAuthenticated ( true ); } @Override public Object getCredentials () { return apiKey ; } @Override public Object getPrincipal () { return principal ; } } This token is the cornerstone of the authentication flow. The filter extracts the header, creates an unauthenticated instance, and hands it to the provider. If the key matches a stored record, the provider returns an authenticated token populated with the user’s authorities. KEY TAKEAWAYS Leverage Spring’s extensibility : By creating a custom AuthenticationToken and AuthenticationProvider , you keep the API key logic out of controllers and let Spring handle the heavy lifting. Never store raw keys : Hash the API key (e.g., BCrypt) before persisting, and compare hashes during authentication to mitigate leakage. Fail fast and stay silent : Return 401 Unauthorized without revealing whether the key was missing or invalid; this prevents enumeration attacks. Make it testable : Isolate the filter, provider, and repository so you can unit‑test each piece with mock requests and verify behavior under edge cases. 👉 Read the complete guide with step-by-step examples, common mistakes, and production tips: Spring Security API key authentication for REST APIs tutorial — Complete Guide

  • DEV CommunityThe Giantsread at source

    Kimi K3.1 Pro โมเดล AI น้ำหนักเปิด 1 ล้านโทเคน เก่งจริงหรือแค่ชนะบนกระดาษ?

    โดย Nokka (นก-กา) | ตรวจข้อมูล 24 ต.ค. 2026 บทความนี้เขียนโดย AI (deepseek-v4.1-flash · ผู้ให้บริการโมเดล: ollama-cloud) ผ่าน Hermes Agent ภายใต้การควบคุมและตรวจสอบคุณภาพโดยมนุษย์ - Nokka (นก-กา) Moonshot AI เปิดตัว Kimi K3.1 Pro เมื่อวันที่ 23 ตุลาคม 2026 [4] พร้อมคำกล่าวอ้างที่คุ้นหูว่าโมเดลนี้เข้าใกล้หรือเทียบชั้นโมเดลปิดชั้นนำ [1] ตัวเลขที่ถูกพูดถึงมากที่สุดคือ 65.7% บน Terminal-Bench 4.0 ซึ่งสูงกว่า GPT-6 Astra ที่ 58.2% และตามหลัง Claude Opus 5.5 ที่ 66.4% อยู่เล็กน้อย [1] ปัญหาคือตัวเลขชุดนี้มาจากตารางของบริษัทเอง และเมื่อผมไปเปิดกระดานของคนอื่น ตัวเลขกลับไม่เหมือนกัน บทความนี้จะแยกให้ดูว่าอะไรคือข้อเท็จจริงที่ตรวจได้ อะไรคือคำกล่าวอ้าง และอะไรคือกับดักเวลาอ่านข่าวแบบนี้ เกิดอะไรขึ้น Kimi K3.1 Pro เป็นโมเดลแรกในซีรีส์ K3.1 และเป็นโมเดลน้ำหนักเปิดที่บริษัทเรียกว่า "ระดับ 3T" ตัวท็อปที่สุดเท่าที่เคยทำมา พร้อมหน้าต่างบริบท 1 ล้านโทเคน [1] บริษัทระบุว่าเป็นเวอร์ชัน post-train ต่อจาก Kimi K3 โดยใช้กำลังคำนวณช่วง post-training มากขึ้นกว่ามาก [1] พร้อมกันนั้นมีอีกเวอร์ชันชื่อ Kimi K3.1 Pro Highspeed ที่บริษัทบอกว่าเร็วกว่า 2 ถึง 3 เท่า [1] ทั้งสองเวอร์ชันใช้ได้วันนี้บน Kimi.ai, Kimi Work, Kimi Code และ Kimi API ส่วนน้ำหนักโมเดลเต็มจะปล่อยภายในวันที่ 4 พฤศจิกายน 2026 [1] จุดสุดท้ายนี้สำคัญ เพราะแปลว่าวันนี้ยังไม่มีอะไรให้ดาวน์โหลดไปรันเอง ต้องรออีกราวสิบวัน สามตัวเลขที่คนพูดถึง ตัวเลขที่บริษัทรายงานเอง หนึ่ง Terminal-Bench 4.0 ที่ 65.7% เป็นชุดทดสอบที่วัดว่า agent ใช้ terminal แก้งานจริงได้แค่ไหน โดยมีเทสต์เฉพาะงานเป็นตัวตัดสิน [1] สองอัตราการ hallucination ลดจาก 23.4% เหลือ 8.3% บนชุดทดสอบภายในชื่อ Kimi Hallu Bench Hard [1] สาม Kimi Code Bench 3.0 แบบ long-horizon ได้ 61.2% เทียบกับ Kimi K3 ที่ 55.95% [1] ทั้งสามตัวเป็นการวัดของบริษัทเอง ยกเว้นตัวแรกที่มีกระดานภายนอกให้เทียบ แต่ตัวเลขเดียวกัน สองแหล่งไม่ตรงกัน ตรงนี้คือส่วนที่ผมคิดว่าผู้อ่านควรเห็นมากที่สุด บริษัทเขียนว่า Opus 5.5 ได้ 66.4% บน Terminal-Bench 4.0 และบอกด้วยว่า คะแนนของคู่แข่งนั้น "นำค่าสูงสุดที่รายงานไว้ในบล็อกหรือบนกระดานทางการ" มาใช้ [1][3] แปลว่าตารางเดียวกันอาจผสมผลจากการรันคนละแบบ คนละ harness คนละการตั้งค่า เมื่อผมเปิดหน้าผลของ Artificial Analysis ซึ่งเป็นคนละเจ้าของการวัด พบว่า Kimi K3.1 Pro ได้ 67.2% เป็นอันดับหนึ่ง ตามด้วย Claude Sonnet 5.5 ที่ 63.6% และ Opus 5.5 ที่ 59.6% [2] โดยหน้ารายละเอียดระบุว่าใช้ mini-swe-agent และโหมด Max, Default Fallback จะเห็นว่า Opus 5.5 ในสองแหล่งต่างกันถึงเกือบเจ็ดจุด ขณะที่อันดับของ Kimi กลับสูงขึ้น นี่ไม่ใช่การโกหกของใคร แต่เป็นธรรมชาติของ benchmark สมัยนี้ ที่คะแนนขึ้นกับ harness, reasoning effort, temperature และวิธีให้คะแนน [1] ถ้าจะสรุปให้สั้นที่สุด คือ ตัวเลข benchmark ใช้เปรียบเทียบได้เฉพาะเมื่อรันด้วยเงื่อนไขเดียวกัน และข่าวส่วนใหญ่ไม่ได้บอกเงื่อนไขนั้น อัตรา hallucination 8.3% อ่านอย่างไร ชุดทดสอบภายในไม่ใช่กระดานสาธารณะ ตัวเลขนี้ฟังดูน่าตื่นเต้น แต่ต้องอ่านคำกำกับให้ครบ บริษัทระบุชัดว่าเป็นชุดทดสอบ ภายใน ชื่อ Kimi Hallu Bench Hard ซึ่งออกแบบมาเพื่อกดดันความแม่นยำโดยเฉพาะ และคำถามถูกสร้างให้ยากเป็นพิเศษ [1] การวัดเป็นระดับข้อความย่อย ไม่ใช่ระดับคำตอบทั้งก้อน และผู้ตัดสินว่าเป็น hallucination คือ agent ที่ทำหน้าที่ตรวจข้อเท็จจริง [1] บริษัทเสริมว่า สัดส่วนคำตอบที่มีข้อผิดพลาดอย่างน้อยหนึ่งจุด เหลือเพียง 42.4% ของรุ่นก่อน [1] แต่มีจุดที่ผมอ่านแล้วหยุดคิด บล็อกเดียวกันแนบกราฟที่ให้คะแนนคู่แข่งบนชุดทดสอบเดียวกันด้วย [1] บนกราฟชุด "Hard with tools" ตัวเลขที่ต่ำกว่าคือดีกว่า Kimi K3.1 Pro อยู่ที่ 8.3% ขณะที่ GPT-6 Astra อยู่ที่ 5.5% ส่วน Opus 5.5 อยู่ที่ 15.0% แปลว่าบนชุดทดสอบนี้ คู่แข่งตัวหนึ่งทำได้ดีกว่า Kimi และคู่แข่งอีกตัวทำได้แย่กว่า ทั้งหมดนี้ทำให้ตัวเลข 8.3% บอกอะไรได้จริงเรื่องการพัฒนา จาก K3 มาเป็น K3.1 Pro แต่ไม่ควรถูกอ่านว่าเป็นอันดับหนึ่งของตลาด เพราะการรันคู่แข่งบนชุดนี้ก็ทำโดย Kimi เอง ไม่ใช่การวัดอิสระ นี่คือความต่างระหว่าง "ดีขึ้นกว่าเมื่อวาน" กับ "ดีกว่าคนอื่น" ซึ่งสองอย่างนี้ไม่จำเป็นต้องเกิดพร้อมกัน ที่โมเดลทำได้จริงตามที่บริษัทโชว์ ส่วนที่จับต้องได้มากกว่าตัวเลข คือความสามารถเชิงงาน งาน 3D บริษัทบอกว่าโมเดลทำงานกับ Unity, Unreal Engine และ Godot ได้ รวมถึงฉาก Three.js และงานฟรอนต์เอนด์ และบริษัทอ้างว่าผลงาน 3D สามารถดาวน์โหลดไปพิมพ์สามมิติได้ผ่านเครื่องมือ 3D Make ของ Kimi [1] งานเงิน อ้างว่าทำงานแบบ end-to-end ได้ ทั้ง screening การวิเคราะห์ความสามารถทำกำไร และได้ 64.4 บน OfficeQA Pro v2 งานอ่านเอกสารการเงินจริงข้ามฉบับ [1] Financial Modeling ดีขึ้น 7.2 จุดจาก K3 ในงานสร้างโมเดลการเงินและตรวจสอบสูตร [1] งานโค้ดระยะยาว มี Kimi Code Bench 3.0 long-horizon เป็นตัววัดการทำงานหลายขั้นตอนและการใช้เครื่องมือต่อเนื่อง [1] ผมยังไม่ได้ลองเอง จึงรายงานตามที่บริษัทอ้างและระบุที่มาไว้ชัดเจน 1 ล้านโทเคนหมายความว่าอะไรกับงานจริง ข้อสังเกตทั่วไปข้อแรกคือ บริบท 1 ล้านโทเคนมักถูกเข้าใจว่า "จำได้หมดทุกอย่าง" ซึ่งไม่จริง สิ่งที่บริบทใหญ่ช่วยคือการวางงานหลายชิ้นไว้ในบทสนทนาเดียว เช่น อ่าน repo ทั้งก้อน เอกสารหลายร้อยหน้า หรือ log ยาว ๆ โดยไม่ต้องตัดทิ้ง แต่คุณภาพการดึงข้อมูลจากบริบทนั้นเป็นคนละเรื่องกับขนาดบริบท และนี่คือจุดที่โมเดลต่างกันมาก บริษัทเองก็วางตำแหน่งโมเดลนี้ไว้ที่งาน agentic และงานยาว ซึ่งเป็นที่ที่บริบทใหญ่มีประโยชน์จริง ไม่ใช่งานถามตอบสั้น ๆ [1] ถ้าจะลอง เริ่มตรงไหน ผ่านเว็บ ใช้ Kimi.ai ได้ทันที ผ่านเครื่องมือเขียนโค้ด เปิด Kimi Code แล้วเลือกด้วยคำสั่ง /model ผ่าน API เลือกชื่อโมเดลตามนี้ และมี Zero Data Retention สำหรับลูกค้า API [1] kimi-k3.1-pro เวอร์ชันมาตรฐาน kimi-k3.1-pro-highspeed เร็วขึ้น 2-3 เท่า ตามที่บริษัทระบุ รอโหลดไปรันเอง ต้องรอถึง 4 พฤศจิกายน 2026 [1] สิ่งที่ควรระวัง คำว่า 3T-class เป็นการบอกระดับ ไม่ใช่จำนวนพารามิเตอร์ที่ยืนยันได้จากเอกสารสาธารณะ ตารางเปรียบเทียบของบริษัท รวมคะแนนจากหลายแหล่ง ซึ่งบริษัทเองก็ระบุไว้ในหมายเหตุ คำว่า open-weight วันนี้ยังเป็นคำสัญญา ไม่ใช่ไฟล์ที่ดาวน์โหลดได้ ความสามารถด้านไซเบอร์ บริษัทบอกว่าตั้งใจให้ต่ำกว่าขีดสุดของตัวเอง และยังตามหลังโมเดลปิดชั้นนำที่เปิดให้ใช้มาแล้วอย่างน้อยสามเดือน [1] เป็นการตัดสินใจเชิงนโยบาย ไม่ใช่ข้อจำกัดทางเทคนิค ใครควรลอง ใครยังไม่ต้อง ควรลองถ้า งานคุณต้องยัดเอกสารหรือโค้ดจำนวนมากเข้าไปในครั้งเดียว หรือกำลังมองหาโมเดลเปิดสำหรับงาน agent ที่ต้องรันเองในอนาคตอันใกล้ ยังไม่ต้องถ้า คุณต้องการรันในเครื่องตัวเองตั้งแต่วันนี้ เพราะยังไม่มีน้ำหนักให้โหลด หรือถ้างานคุณสั้นและตรงไปตรงมา จนบริบท 1 ล้านโทเคนไม่มีประโยชน์ และถ้าคุณกำลังจะอ้างตัวเลขจากข่าวนี้ในที่ประชุม ผมแนะนำให้พูดว่า "คะแนนบน Terminal-Bench 4.0 อยู่ราว 65 ถึง 67 เปอร์เซ็นต์ ขึ้นกับคนวัด" มากกว่าเลือกตัวเลขเดียวมาพูด ปิดท้าย ผมมองว่าข่าวนี้ไม่ได้น่าสนใจเพราะ Kimi ชนะหรือแพ้ Opus 5.5 แต่น่าสนใจเพราะช่องว่างระหว่างโมเดลเปิดกับโมเดลปิดแคบลงจนการวัดกลายเป็นเรื่องยาก เมื่อของสองฝั่งใกล้กันถึงระดับนั้น ตัวเลขหลักหน่วยจะบอกอะไรได้น้อยลงเรื่อย ๆ และคำถามที่ตอบยากขึ้นคือ งานของคุณต้องการอะไรจริง ๆ ซึ่งเป็นคำถามที่ไม่มี benchmark ไหนตอบแทนได้ REF [1] Kimi (Moonshot AI, 2026) · Kimi K3.1 Pro Tech Blog: Advancing Open Intelligence. https://www.kimi.ai/blog/kimi-k3-1-pro [2] Artificial Analysis (2026) · Terminal-Bench 4.0 leaderboard. https://artificialanalysis.ai/evaluations/terminalbench-4-0 [3] Terminal-Bench (2026) · กระดานและระเบียบวิธีทดสอบ. https://www.tbench.ai/ [4] Kimi Forum (2026) · Kimi K3.1 Pro has launched. https://forum.moonshot.ai/t/kimi-k3-1-pro-has-launched-start-exploring-now/629

  • Hacker News Front PageThe Giantsread at source

    AI-Assisted Paper on Z-Library Cites a TorrentFreak Article That Doesn't Exist

  • Hacker News Front PageThe Giantsread at source

    Node.js Vulnerability Blog

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Autonomous root for Tcl Android TV via CVE-2022-22706

    Comments

  • Flavio CopesMore Front-end Bloggersread at source

    I care more about the AI product I can use

    An impressive AI roadmap means little when the product you need is unavailable. A practical way to separate future promises from today's useful software.

  • Hacker News Front PageThe Giantsread at source

    I Don't Understand Quantum Physics (2018)

  • Flavio CopesMore Front-end Bloggersread at source

    How to use Cursor Computer Use

    Use Cursor Computer Use to test desktop apps and iOS Simulator flows, reproduce UI bugs, and verify fixes with clear prompts and expected results.

  • Hacker News Front PageThe Giantsread at source

    Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: How religions evolved? Charts, Maps, Citations

    Comments

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Encarta 95 Web

    Comments

  • Flavio CopesMore Front-end Bloggersread at source

    The complete guide to LM Studio Bionic

    Learn LM Studio Bionic: choose local or cloud models, fix a JavaScript bug step by step, work with documents, and review what the agent changes.

  • Hacker News Front PageThe Giantsread at source

    Hacker reverses Samsung TV, finds on-board AI listening OpenAI account suspended

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Inference Cooperative, user-governed AI

    Comments

  • Frontend Masters BlogMore Front-end Bloggersread at source

    The Vertical Codebase

    A nice app architecture thought by Dominik: The Vertical Codebase. When component architecture came along, many started co-locating HTML/CSS/JS for a component, and it felt right. What if you take that one step further and co-locate based on the site’s conceptual areas? For example, the “dashboard” would have all the hooks, types, queries, etc., related […]

  • AbduzeedoMulti Author Blogsread at source

    Union: Inside Two Times Elliott’s Visual Identity

    Explore the Union visual identity by Two Times Elliott, pairing extended grotesk typography and Swiss grids with tactile print monographs. Office branding usually tries way too hard. Over the past fif...

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: libfpv - Modding FPV Drone into Any Game

    Comments

  • AbduzeedoMulti Author Blogsread at source

    Editorial Design: Fortresses by Studio Tumpić/Prenc

    Studio Tumpić/Prenc turned a scientific catalogue into a naval officer's file: editorial design in kraft paper, binding cord, and archival tabs. The book documents Pula's 19th and early 20th century f...

  • SitePointThe Giantsread at source

    7 Checks Developers Should Make So AI Search Can Read Their Site

    null Continue reading 7 Checks Developers Should Make So AI Search Can Read Their Site on SitePoint .

  • AbduzeedoMulti Author Blogsread at source

    Cuberto Unveils Magma Web Design & Interactive 3D UI

    Explore the Magma web design by Cuberto, pairing Jost typography and #0F4BFD cobalt screens with Blender GLTF 3D building twins and GSAP. Real estate platforms almost always look like spreadsheet soft...

  • Flavio CopesMore Front-end Bloggersread at source

    How to secure a VPS with Tailscale and Cloudflare Tunnel

    Secure a VPS with private SSH over Tailscale and public web traffic through Cloudflare Tunnel. A complete guide to setup, firewalls, testing, and recovery.

  • DigitalOcean BlogMulti Author Blogs9 min read

    DigitalOcean Signals: Observability for AI Agents and Inference

    You ship an agent. It runs in production, sessions start and finish, and the dashboards stay green. But then a user mentions that they spent ten minutes retrying the same failing command with slightly different arguments before giving up and rephrasing the request. The problem?…

  • Mux BlogCompany/Startup Blogs8 min read

    What the iPhone Duo means for web development

    We've been working really hard to get the new version of Video.js out the door, and we recently released v10.0.0 ! So over the weekend, I decided to relax a bit with a side project: digging into the web APIs that we’ll have access to on the iPhone Duo. I know, I know, this kind…

  • DigitalOcean BlogMulti Author Blogs4 min read

    Prompt Caching is GA on DigitalOcean Serverless Inference: Up to 90% Off the Context Your Agents Resend

    Prompt caching is now generally available on DigitalOcean Serverless Inference, across supported models in our open model catalog, with no changes to your request code required. Cached input is billed at up to 90% off and time to first token drops by up to 80%.* An agent never…

  • AbduzeedoMulti Author Blogsread at source

    Teenage Engineering Is a Masterclass in Product Design

    Teenage Engineering designs music gear like precision lab instruments: aluminum bodies, labeled controls and color used strictly as code. Start with the OP-1 field. It is a white aluminum slab, 300 mi...

  • Geoff GrahamMore Front-end Bloggersread at source

    I’ve never been as nervous to publish on CSS-Tricks since my first article in 2015.

  • AbduzeedoMulti Author Blogsread at source

    How Base Design Reimagined the Kanal Centre Pompidou Identity

    Base Design built the Kanal Centre Pompidou identity on a variable typeface that breathes, flows and overflows, opening November 2026. The first thing you notice is how little of the system sits still...

  • Flavio CopesMore Front-end Bloggersread at source

    What to check before submitting a native app to App Review

    Prepare an Apple app for review, choose useful native interactions, adopt Liquid Glass, and understand how direct Mac distribution differs.

  • AdactioTop Front-end Bloggersread at source

    The Pirate Queen by Ariel Lawhon

    This is an infuriating book. So much so that I didn’t finish it. Don’t get me wrong; I love the idea of The Pirate Queen . Telling the life story of Gráinne Ní Mháille is an excellent premise for some rip-roaring historical fiction. It’s even got an interesting structure alternating between three different parts of her life. I was pleasantly surprised when I cracked open the book to find a small pronunciation guide to some Irish words in the front matter. It would be nice to have some Gaeilge scattered throughout the narrative. But that’s exactly what made this book so infuriating. First off all, by dropping in an occassional Irish word into a sentence, it just made me think, “Wait, what language would these people be speaking?” Usually the answer was Irish. In which case, why translate one arbitrary word? Then there’s the choice of the Irish word that gets dropped into the text most frequently… The front matter has this to say about the irish word tá : An affirmative statement similar to yes Um, not really. Tá is present tense of the verb “be”. The English equivalent is “is”. You can’t just drop it in as a replacement for the word “yes”. But that’s exactly what Ariel Lawhon does. This continually took me out of the story. One person asks a question like, “Did you see that?” and the other person answers, “Tá.” That just doesn’t make sense. I know this sounds really nit-picky, but one of the first things you learn about Irish is that there is no single word for “yes” or “no”. It’s most common to respond with the positive or negative form of the verb in the question—“Did you see that?” “I saw!” So of all the words to pointlessly switch into Irish, “yes” is by far the least suitable. It happened every couple of pages. I was getting so annoyed, I flipped ahead to the acknowledgements to find out who was consulted on the use of Irish in the book. I found my answer. No one. That seems somewhat irresponsible to me. It borders on being insulting. Would it have taken so much time and effort to have one single Irish speaker check the text? Alas, the lack of research wasn’t just evident in the book’s treatment of the Irish language. At one point, a young Gráinne is out walking with her brother, who is playing the uilleann pipes. I had to stop and check the text a few times. Perhaps I missed a bit where they sat down. But no, this book blithely describes a character walking and playing uilleann pipes at the same time. Now if you think uilleann pipes are pretty much the same as Scottish highland pipes, this would make sense. But they’re not. A bare minimum amount of research would show that the uilleann pipes are played sitting down (you can try to play them standing up, but you’ll need some kind of extra gadget like Johnny Doran used, but even he couldn’t play them while walking). I carried on reading even though I was getting more and more annoyed by the shoddiness on display. Then I read this sentence: No more distant flicker of lanterns in the distance. I get how you would write that sentence in a first draft. Hopefully you’d catch its redundancy in a subsequent draft. If not, it’s exactly the kind of thing that your editor is there to spot. But no, this made it all the way to the final printed book, a book that was displayed prominently on tables in major bookstores in multiple countries. Compare and contrast that with When The Boys Came Out To Play by John Mackel , a book which will be likely only ever be read by a much smaller audience but which is crafted with so much more care. I always feel slightly guilty if I don’t finish a book. I know, I know; life’s too short and all that. But I can’t shake the feeling that I’m being a bit disrespectful to the author by not seeing their work through to the end. In this case though, the author displayed enough disrepect to her readers that I don’t think I need to feel bad about slamming this book shut. The Pirate Queen is a sloppy piece of work. You deserve better.

  • Dave RupertTop Front-end Bloggersread at source

    Bad at email

    Good friends and family know this, but I am bad at email. Like chronically bad. If you have tried to email me, you know this too and you either never got a reply or received one 9-months later starting with the phrase, “Sorry.” I am truly sorry… but also I’m not. It’s a function of who I am. I was never great at email, but in a slower time before social media it raptured my attention. I would habitually refresh my inbox hoping for a long range communication from a friend or stranger. When I was homesick in Japan, a good email (or AIM chat) could turn my day around. I have fond memories of email and its unparalleled ability to connect me to other people through a single address. It of course would never be as familiar or intimate as scribing a hand-written calligraphic letter with a big feather pen, but it proved a fine substitute. At Paravel, I noticed that emails had a propensity to crash into my day with some new urgent task. A ding, a red badge, a bouncing icon in the dock . Could be a client or my accountant; something that required me to stop what I was doing and switch over to their need. Frank once described emails as (paraphrasing) “a to-do you send to someone else” and that resonated in my soul. For someone with an attention regulation disorder, intermittent distractions like email (or chats) can be devastating to staying focused on the work I actually need to finish. Email being disruptive to your productivity must be a pretty common phenomenon because nearly all the productivity books out there –and I’ve read them all– attempt to “solve” productivity by turning off your notifications and checking your email less. I must have really taken this advice to heart because I almost never check my email anymore. After a long day of expending dopamine on work, the last thing I want to do at home is check my personal email and receive more to-dos from strangers. I tend to check my personal email now once a week… or less. Inbox Zero is a fool’s errand for me, but I try to keep my work email groomed and as close to zero as possible. Part of that was because I started with a blank slate and could actually succeed. Each morning I make an analog to-do for myself to check my work email. I set up some priority inboxing and auto-deletes for org-level notifications. Importantly, work email stays sequestered to my work laptop. But despite the success at work, I’m sitting at nearly 500+ unreads in my personal Inbox. It doesn’t feel great and feels like a monumental task now. Since starting at Large Company I know of at least two conferences that I’ve missed out on speaking at because I’m so bad at email (sorry, PPK ). If you’ve ever wondered why I don’t have a contact form on my site or do that cool “email me, let’s be friends” link in my RSS footer, this is why… because I feel shame that I will disappoint you . There’s also the diminishing utility of email. As with phone calls and texts, the amount of spam and noise has ruined the service. It’s a needle in a haystack to find the one good email that actually deserves your attention. Just because we participated in online commerce once doesn’t mean you get the liberty to email me for the rest of my life. I wish there were more laws about this. When did a ten drip email campaign for every online transaction become the standard? You bought an item → Item is getting ready to ship → Want another item? → Item shipped → Need more items? → Item out for delivery → The holidays are coming up → Package delivered → Let us know how we did → Mother’s day coming up → Father’s day coming up → Step-father’s day coming up → etc… It’s entirely too much. And the grifter slop… oh, my God the grifter slop! Hey Dave, I came across your now-defunct company Luro. Design systems is an interesting space. Would you like to increase Luro users by six billion percent through spam email blasts? We can help. Chad, CEO I will never reply to this and– Dave, I thought I’d follow up in case you missed the last email. I’m a fucking robot obviously but we can have a conversation about this. Chad, CEO Grifters, spend six minutes crafting a real email and I promise you it will convert better. Or have an actual fucking product that is so good I hear about it from other people. You are one of five hundred anonymous Chads in my inbox, this pickup line doesn’t work anymore. Along those lines… Democrats, sending text messages doesn’t work anymore. I got AOC, Nancy Pelosi, Beto, and even Raphael Warnock’s grandma texting me every other day and it makes you look broke and desperate like a friend I’m gonna need to bail out of jail again. Capture me with ideas. That’s how I feel about email. And text messages. And phone calls. And social media. Once upon a time it had utility, now it’s all noise and grifter slop demanding our attention and giving us to-dos. Be hotter, be smarter, be more liberal, be more productive, be more, be more, be more. Oh, and I underpaid my taxes and owe the government $5400. That was the email I missed.

  • freeCodeCamp.orgYouTube ChannelsVideoWatch on YouTube

    Gemini 4 Argon API Crash Course

  • AdactioTop Front-end Bloggersread at source

    Chuala mé an nuacht brónach go raibh Dónal Lunny imithe ar slí na fírinne. Laoch. Ar dheis Dé go raibh a anam.

  • AbduzeedoMulti Author Blogsread at source

    Packaging Design: Candour Wine by Bedow

    Explore the Candour Wine packaging design by Bedow, pairing a flavor-responsive variable wordmark with tactile labels on recyclable cans. Traditional wine labels love hiding behind faux-chateau crests...

  • Smashing MagazineThe Giants3 min read

    Accordion Icons: Which Work Best?

    A closer look at accordion icons, why split menus are harmful, and why it’s better not to have icons and text labels link to different actions. Plus, why the caret is the safest icon choice. You’ll find more [useful guides](https://www.smashingmagazine.com/category/guides/) and [online workshops](https://smashingconf.com/online-workshops) here on Smashing Magazine, so make sure to browse and explore.

  • Bruce Lawson's personal siteMore Front-end Bloggers8 min read

    On CMA’s proposed NFC access conduct requirement for Apple’s iOS

    If the title of this post didn’t get your pulse quickening, you’re probably in a coma. Sorry if it’s a bit clickbaity. On Tuesday, the daring, dauntless and doughty defenders of digital diversity at the UK’s competition regulator published their Proposed NFC access conduct requirement for Apple’s mobile platform. You might be wondering why contactless […]

  • SitePointThe Giantsread at source

    Best Claude Tracking Tools in 2026: 6 Options Compared

    Claude’s share of AI chatbot visits nearly tripled in three months. Six tools that track what Claude says about your brand, what each costs and how each one queries Claude. Continue reading Best Claude Tracking Tools in 2026: 6 Options Compared on SitePoint .

  • AdactioTop Front-end Bloggersread at source

    An Cábla agus an t-Amhrán - YouTube

    Well, this short film by the Irish Traditional Music Archive is right up my alley! It looks at the first transatlantic telegraph cable and the traditional music of West Kerry, particularly the song Ámhrán na Leabhar : From the naomhóg, which for centuries connected the islands, peninsulas and coastal communities of Uíbh Ráthach, to the arrival of the world’s first successful transatlantic telegraph cable at Valentia, An Cábla agus an tAmhrán reveals a remarkable continuity: while technologies evolve, humanity’s desire to communicate, remember and pass stories from one generation to the next remains unchanged. ';"> adactio.com/links/22811

  • PiccalilliMore Front-end Bloggersread at source

    The Index: Issue #203

    Overgrown, when plants invade your abandoned tabs This is fun. All my hobbies are getting slopped up, and it’s exhausting Video game orientated, but I'm sure many of you will resonate with this. FreeMix The AT protocol strikes again! This could end up being a proper Soundcloud challenger. In fact, an improvement on Soundcloud. Building an atproto link aggregator Again, the AT protocol continues to empower people making useful stuff for themselves and everyone else. The story of Tupo, my new daily logic puzzle A great write up of a very good, new puzzle game. JavaScript, when is this? Here's one from the Piccalilli archives that you might have missed to wrap up this issue. P.S. this is a good website from personalsit.es . Sponsor message Has your organisation gone too deep with frameworks or [gasp] LLMs and feel like you're stuck? We're helping clients get away from that noise and instead, focusing their efforts and budgets on actually doing stuff that will help them reach their goals. We do all of that while running this publisher, Piccalilli too! Our availability opens up again in late 2026 into 2027, so check out what we're about. Maybe we can be the key that unlocks your success in 2027 onwards. Check out our work

  • AdactioTop Front-end Bloggersread at source

    Reading Palaces Of The Crow by Ray Nayler.

  • Flavio CopesMore Front-end Bloggersread at source

    Triage support tickets in one request with OpenAI's Decisions API

    OpenAI's Decisions API returns a probability, a choice, or a score. Triage a support ticket with several questions in one request.

  • HeyDesignerDeveloper/Designer Newsread at source

    How to scale intent, quality, and artistry with AI (video)

    Intent Design System, hairline: Line drawings that answer the pointer, How I work, Native masonry layouts with CSS grid lanes.

  • Flavio CopesMore Front-end Bloggersread at source

    How to publish a Chrome extension to the Chrome Web Store

    Publish your Chrome extension with a clean ZIP, store listing, privacy disclosures, permission justifications, review instructions, and tested updates.

  • Flavio CopesMore Front-end Bloggersread at source

    What to check before upgrading the Anthropic SDK

    Upgrading the Anthropic SDK changes the API version your app sends. Check sampling parameters, authentication, message history, and output before you ship.

  • SitePointThe Giantsread at source

    AI Agents Need Idempotency: The Distributed Systems Problem Hiding Inside Agentic AI

    Why AI agents need idempotency: how duplicate tool calls and retries cause double charges and repeated actions, and how idempotency keys prevent them. Continue reading AI Agents Need Idempotency: The Distributed Systems Problem Hiding Inside Agentic AI on SitePoint .

  • AbduzeedoMulti Author Blogsread at source

    Web Design: Museum Department Contemporary Archive

    Explore Museum Department, an interconnected web design archive linking contemporary graphic design, type foundries, fonts, and studios. Most design blogs suffer from the same quiet decay. A studio sp...

  • Auth0 BlogCompany/Startup Blogsread at source

    Auth0-Powered SaaS Providers Unlock Growth with the Okta Integration Network

    Jamf manages and secures millions of Apple devices. Augment Code (now part of Harness) helps engineering teams deploy their software factory. Both are powered by Auth0 and published to the Okta Integration Network.

  • Jens Oliver MeiertTop Front-end Bloggersread at source

    HTML Minifier Next: Extended Benchmarks, Self-Close Foreign Elements, Fewer Redundant Attributes, JSON Minification Opt-In

    On the most recent changes to the super-configurable web page minifier.

  • AbduzeedoMulti Author Blogsread at source

    Inside Puustelli Miinus: Brand Identity by BOND

    Explore the Puustelli Miinus brand identity by BOND Creative Agency, pairing raw kraft stationery and ecological data grids with Nordic craft. Kitchen catalogues usually drown in glossy showroom clich...

  • Frontend Masters BlogMore Front-end Bloggers10 min read

    Building an Isolated Preview for AI-Generated HTML

    An iframe with srcdoc feels like a safe place to render HTML a model wrote. It isn't. Three tests show how the preview can read your page, escape the frame, and phone home, and four layers of protection close each hole.

  • SitePointThe Giantsread at source

    Best LinkedIn Recruiter Alternatives in 2026

    LinkedIn Recruiter alternatives for 2026: what Recruiter really costs, where it falls short, and how Pin and five other sourcing tools compare. Continue reading Best LinkedIn Recruiter Alternatives in 2026 on SitePoint .

  • Level AccessCompany/Startup Blogs10 min read

    How to Choose an Enterprise Accessibility Platform

    The best enterprise accessibility platform covers your digital estate, builds accessibility into design and developer workflows, pairs automation with human expertise, and proves The post How to Choose an Enterprise Accessibility Platform appeared first on Level Access .

  • SitePointThe Giantsread at source

    Best AI Brand Mention Tracking Tools for Enterprises in 2026: 6 Tools Compared

    Six AI brand mention tracking tools compared on what enterprise buyers ask: SSO, user access, multi-market tracking, data export and real cost at scale. Continue reading Best AI Brand Mention Tracking Tools for Enterprises in 2026: 6 Tools Compared on SitePoint .

  • Bram.usMore Front-end Bloggers1 min read

    GTA.js, a reimplementation of the 1997 Grand Theft Auto engine in JavaScript and WebGL

    Here’s a little sideproject I’ve been spending my tokens on: https://gtajs.wtf/ It’s a reimplementation of the 1997 Grand Theft Auto engine in JavaScript and WebGL.

  • Wes BosYouTube ChannelsVideoWatch on YouTube

    3D Model Anything

  • Web Tools WeeklyMulti Author Blogsread at source

    Web Tools Weekly Issue #692

    JS Libs, AI Tools, Media Tools

  • DequeMulti Author Blogs7 min read

    Find Label in Name issues in every scan with Axe-core 4.14.0

    With our latest update, when you scan with Axe-core 4.14.0, you’ll now get a result for any control whose accessible name doesn't contain its visible label. This Axe-core release also speeds up scans, makes fix instructions clearer, and begins support for EN 301 549 v4.1.1, the pending update to the European Union’s (EU) harmonized standard for accessibility requirements. The post Find Label in Name issues in every scan with Axe-core 4.14.0 appeared first on Deque .

  • HeyDesignerDeveloper/Designer Newsread at source

    Behind Apple Music’s new brand identity

    Flow in UX, The default wins, You could do it alone.

See everything from the last 30 days →