OpenAI's GPT-5.1-Codex-Max is an advanced agentic coding model built on an updated reasoning foundation and designed for long-running, detailed software engineering tasks. The model can operate across multiple context windows, enabling project-scale refactors and deep debugging sessions. GPT-5.1-Codex-Max is available in Codex.
2025.11.20·links.tldrnewsletter.com·8 min read·TLDR Dev FumaDocs is a documentation framework built on Next.js that uses TypeScript, MDX, and Tailwind CSS. It provides utilities, a UI, and features of Next.js App Router. FumaDocs includes built-in components and integrations, focusing on a user-friendly mobile responsive experience.
AI can be used to scam elderly people. These journalists successfully jailbroke AI models like Meta and Gemini to generate phishing emails, which were then sent to elderly participants, resulting in 11% being phished. The journalists also investigated real-world AI scam factories in Southeast Asia and found that victims were using AI chatbots to conduct scams.
2025.11.20·simonlermen.substack.com·4 min read·TLDR Dev NPM recently announced that all long-lived tokens are being revoked and new tokens will only be valid for a maximum of 90 days, creating challenges for automated publishing workflows. While the proper solution is to upgrade to trusted publishing (OIDC), a tool called "github-update-secret" automatically rotates secrets across all repositories to buy time until each project can be properly migrated. This tool iterates through all repositories with admin access and updates any matching secret names with new values.
2025.11.20·michaelheap.com·3 min read·TLDR Dev Blame as a Service (BaaS) is a growing market where companies like McKinsey, Ticketmaster, and UMA absorb the negative backlash from unpopular decisions, allowing their clients to maintain a positive image while maximizing profits.
2025.11.20·humaninvariant.com·6 min read·TLDR Dev Linus Torvalds says that "vibe coding" is a positive entry point to programming, but unsuitable for production-level kernel development.
2025.11.20·theregister.com·4 min read·TLDR Dev Growth methodology is a data-driven development approach used by monday.com's Growth team that differs from traditional software development by requiring engineers to think like product managers and validate ideas before perfecting them.
2025.11.20·engineering.monday.com·8 min read·TLDR Dev Open-source projects, often led by a single individual, should learn from Mastodon's example of gracefully transferring power to avoid the pitfalls of forever founder-led projects and guarantee long-term stability.
2025.11.20·shkspr.mobi·3 min read·TLDR Dev • Watch the 45-second demo
Sponsored
PREVIEWS ONLY WORK IF THEY'RE ACTUALLY LIKE PROD. This step-by-step shows how a minimal .upsun/config.yaml, and one deploy hook clones data, files, and services ON EVERY BRANCH.
Cloudflare had a large outage yesterday due to a faulty configuration file in its Bot Management system, which was triggered by a database permissions change. This larger-than-expected file overloaded the network's traffic routing software, resulting in widespread HTTP 5xx errors and impacting services like Turnstile, Workers KV, and Access. The issue was not a cyber attack. The team was able to resolve it by stopping the faulty file propagation and restoring an earlier version, bringing systems back to normal by 17:06 UTC.
2025.11.19·blog.cloudflare.com·12 min read·TLDR Dev This exploration into making TypeScript immutable by default was inspired by languages like Rust. By setting the `noLib` flag and creating a custom `lib.d.ts` file, this dev successfully made arrays and Records immutable unless explicitly declared as `MutableArray` or `MutableRecord`. This was done by defining read-only properties and omitting mutable methods in the default type definitions.
2025.11.19·evanhahn.com·8 min read·TLDR Dev The CSS Custom Highlight API is a performant alternative to traditional syntax highlighting methods that rely on numerous DOM elements. The API can help style arbitrary text ranges directly using CSS without modifying the DOM, resulting in faster rendering and reduced memory consumption. It's supported in modern browsers and is done by defining CSS styles using the `::highlight()` pseudo-element and registering text ranges with the browser's highlight registry.
2025.11.19·pavi2410.com·7 min read·TLDR Dev Front-end developers can write better code by following the "rule of three" (only refactor code after you've written the same thing three times to avoid over-engineering) and "make it work, make it right, make it fast" (prioritize getting code to function correctly before optimizing for performance). These guidelines help devs make better decisions while coding and avoid common pitfalls like premature optimization and unnecessary complexity.
2025.11.19·piccalil.li·8 min read·TLDR Dev A recent Cloudflare outage took down many websites, showing the risk of relying on centralized services as single points of failure. Many smaller websites don't actually need Cloudflare's DDoS protection and are unnecessarily exposed to its potential downtime. Instead of Cloudflare, it's possible to just use a round-robin DNS setup with a backup server for true redundancy.
2025.11.19·huijzer.xyz·2 min read·TLDR Dev Sponsored
Tired of credential stuffing threats? Clerk's new "Client Trust" feature [12] automatically requires a second factor on any new device—protecting users, even if their password gets leaked in a 0-day attack. No configuration, no guesswork. Stop worrying about credential leaks: get invisible, decisive security from day one!
2025.11.19·go.clerk.com·Sponsor·TLDR Dev Google has launched Gemini 3, its most intelligent AI model yet. Designed to help users bring any idea to life through state-of-the-art reasoning and multimodal capabilities, Gemini 3 outperforms previous models on key AI benchmarks and introduces a "Deep Think" mode for even more complex problem-solving. It is being rolled out across Google products, including Search, the Gemini app, AI Studio, Vertex AI, and a new agentic development platform called Google Antigravity.
2025.11.19·blog.google·12 min read·TLDR Dev Google's Antigravity is a new AI-powered agentic development platform built on Gemini 3. Antigravity has both an AI-powered IDE experience ("Editor view") and an agent-first interface for orchestrating multiple agents ("Manager surface").
2025.11.19·antigravity.google·Tool·TLDR Dev Guts is a Go library that converts Golang types to TypeScript for consistent type definitions across frontend and backend applications. Unlike command-line utilities, Guts is designed for programmatic customization and easier package resolution. It uses the TypeScript compiler API to make sure generated TypeScript is semantically correct and aligned with the latest language features.
2025.11.19·github.com·GitHub repository·TLDR Dev 2025.11.19·bdtechtalks.com·8 min read·TLDR Dev In 1996, Quake faced challenges adapting to the shift from MS-DOS to Windows 95 while also supporting emerging technologies like 3D acceleration and the Internet. id Software created a single executable, quake.exe, compatible with both DOS and Windows by using djgpp's DPMI client and the Windows 95 DPMI server. For TCP/IP support in DOS, Quake relied on a costly third-party TSR, but in Windows 95, it utilized Mpath's "Chunnel" technology, a complex system involving virtual device drivers and DLLs to bridge the DOS executable with the Windows TCP/IP stack.
2025.11.19·fabiensanglard.net·11 min read·TLDR Dev AI-generated advertisements are becoming mainstream. Major brands like Taylor Swift, Google, and Coca-Cola have begun using AI tools to create marketing content. Swift's promotional videos were confirmed to be AI-generated using Google's video generation tools. The trend is accelerating rapidly. Surveys predict that 39% of digital video ads will use generative AI by next year. While early AI-generated ads faced some controversy, consumer backlash appears to be weakening.
2025.11.19·open.substack.com·8 min read·TLDR Dev Rebecca Heineman (Burger Becky) recounts her challenging experience porting Doom to the 3DO console amidst unrealistic expectations, limited resources, and a chaotic development process.
2025.11.19·corecursive.com·46 min read·TLDR Dev Google's new Gemini 3 Pro model is competitive with other leading models in benchmarks, multimodal support, and pricing.
2025.11.19·simonwillison.net·12 min read·TLDR Dev Tokenflood is a load testing tool for instruction-tuned LLMs that simulates arbitrary load profiles by defining prompt lengths, prefix lengths, output lengths, and request rates.
2025.11.19·github.com·GitHub repository·TLDR Dev GitHub no longer uses toast notifications due to significant accessibility and usability issues.
2025.11.19·primer.style·8 min read·TLDR Dev Sponsored
✅ Trusted by Vercel, Replit, Netlify, and Bolt
Authress' auth solution remained operational during a recent AWS us-east-1 outage that impacted major companies. This was thanks to avoiding unreliable third-party components, implementing DNS failover with custom health checks, and using edge compute via CloudFront and Lambda@Edge. It also used incremental rollouts to reduce the impact of application failures, a web application firewall (WAF) for handling malicious requests, and prioritized customer support for issues outside of automated detection.
2025.11.18·authress.io·47 min read·TLDR Dev This article explains when to use sub-agents versus agents as tools when building multi-agent AI systems. The main difference is that agents as tools are self-contained, stateless specialists ideal for discrete tasks (like converting natural language to SQL), while sub-agents are delegated team members that share context and handle complex, multi-step processes requiring ongoing collaboration (like managing flight bookings with multiple user interactions). Tools should be used for reusable, atomic functions, while sub-agents are better for stateful workflows that need access to conversational history and broader mission context.
2025.11.18·cloud.google.com·6 min read·TLDR Dev Dropbox evolved its Dash AI system from a traditional search tool into an "agentic AI" that can interpret, summarize, and act on information. Its team discovered that adding more tools and context often led to worse performance due to analysis paralysis and "context rot," so they developed three key strategies: limiting tool definitions by consolidating multiple retrieval options into a single universal search tool, filtering context to show only the most relevant information using a knowledge graph, and creating specialized agents for complex tasks like search query construction.
2025.11.18·dropbox.tech·8 min read·TLDR Dev Object-Oriented Programming (OOP) is the worst thing that happened to programming due to its inherent flaws and unnecessary complexity compared to Functional Programming (FP). Core OOP concepts like methods, inheritance, and polymorphism lead to the need for complex design patterns as workarounds. OOP also leads to verbose, bug-prone code, and developers deeply entrenched in OOP often fail to recognize its shortcomings.
2025.11.18·alexanderdanilov.dev·28 min read·TLDR Dev This dev is not impressed with existing configuration languages like YAML, XML, JSON, TOML, and many others. They are overly complex, don't have some basic features, or are just programming languages disguised as configuration formats. To address these shortcomings, he created his own configuration language called MAML based on JSON.
Sponsored
Moving agents from dev to prod is challenging due to quality, governance, and security concerns. Discover proven workflows, frameworks, and observability tools that help you build reliable agents and deploy them confidently. Get the guide [10].
Continuous Claude is a script that automates the pull request lifecycle using Claude Code. It commits changes to a new branch, creates a pull request, waits for checks and reviews, and merges the PR, repeating until the task is complete.
2025.11.18·github.com·GitHub repository·TLDR Dev Parqeye is a terminal-based tool that allows users to inspect Parquet files. It provides interactive data visualization, schema exploration, file metadata viewing, and row group statistics examination, all within a tab-based interface. Users can install Parqeye via direct download, building from source, or through Cargo. It's released under the MIT License.
2025.11.18·github.com·GitHub repository·TLDR Dev PrinceJS is a fast, lightweight, and tree-shakable Bun framework with features like type safety, middleware, validation, and utilities for caching, email, uploads, cron jobs, and OpenAPI documentation.
2025.11.18·princejs.vercel.app·Tool·TLDR Dev Cloudflare uses soft-unicast to share IP addresses across machines, pushing the limits of the Linux networking stack. It attempted to create a service called "fish" to proxy IP packets using soft-unicast, but encountered issues with Linux's socket subsystem and Netfilter conntrack module. To solve these issues, it explored using Netlink, TCP_REPAIR, and manipulating routing rules, ultimately terminating TCP connections instead of forwarding IP packets.
2025.11.18·blog.cloudflare.com·11 min read·TLDR Dev Instagram for iOS is now the first Meta app to support Dolby Vision video, which improves the HDR viewing experience by preserving amve and Dolby Vision metadata. Initially, Instagram's video processing, which uses FFmpeg, discarded this metadata, impacting picture quality. By collaborating with Dolby and FFmpeg developers, Meta implemented support for Dolby Vision and amve in its video processing pipeline.
2025.11.18·engineering.fb.com·10 min read·TLDR Dev The author discovered that Google Gemini accessed and used their personal data about their past use of the tool Alembic without their explicit permission, and then attempted to conceal this data access by lying about it.
2025.11.18·unbuffered.stream·1 min read·TLDR Dev Project Gemini is a lightweight internet protocol focused on providing a simple, privacy-respecting space for interconnected text documents.
2025.11.18·geminiprotocol.net·Tool·TLDR Dev Microsoft Azure was hit by a 15 Tbps DDoS attack originating from the Aisuru botnet, a Turbo Mirai-class IoT botnet comprising over 500,000 IP addresses that has also been linked to other recent record-breaking DDoS attacks and malicious activity.
2025.11.18·bleepingcomputer.com·3 min read·TLDR Dev This repository provides the necessary tools and instructions to easily run various ancient UNIX versions, including those for PDP-11 and x86 architectures, on modern operating systems using simulators like SIMH and QEMU.
2025.11.18·github.com·GitHub repository·TLDR Dev Tackle problems early in the lifecycle by accelerating your
Sponsored
According to Forrester, 88% of engineering, product, and design leaders think prototyping needs to happen earlier. Wait til late in the lifecycle to surface changes and you'll get months of delays.
TCP is a protocol that underpins much of the Internet. It controls reliable data transmission despite underlying network instability. TCP has mechanisms for flow and congestion control, which prevent overwhelming receivers and the network itself, along with allowing it to recover from packet loss, corruption, and reordering. This article provides C code examples with a simple TCP server and a basic HTTP server, showing how applications use TCP for reliable communication.
2025.11.17·cefboud.com·12 min read·TLDR Dev MCP servers for browser automation with agents are often inefficient and hard to extend. Instead, simple Bash scripts and code for tasks like starting a browser, navigating URLs, executing JavaScript, and taking screenshots are usually more token efficient and more customizable. By cloning tool repositories and setting up an alias, these scripts become globally available to agents like Claude, making browser interaction easier.
2025.11.17·mariozechner.at·15 min read·TLDR Dev JavaScript source maps translate minified production code locations back to original source files, letting developers debug with proper variable names and formatting. This happens through VLQ (Variable Length Quantity) encoding with Base64 characters in the `mappings` field, which compresses position data by storing small relative differences between locations rather than absolute coordinates, separated by commas (for columns) and semicolons (for line breaks). Each mapping segment contains 1, 4, or 5 values that specify the generated file column, source file index, source line/column, and optionally the original identifier name, allowing tools to efficiently bridge production code and developer-friendly sources.
2025.11.17·polarsignals.com·8 min read·TLDR Dev