Search the archive

Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.

Results

4,452 matches

BUILDING MORE WITH GPT-5.1-CODEX-MAX

OpenAI's GPT-5.1-Codex-Max is an advanced agentic coding model built on an updated reasoning foundation and designed for long-running, detailed software engineering tasks. The model can operate across multiple context windows, enabling project-scale refactors and deep debugging sessions. GPT-5.1-Codex-Max is available in Codex.

2025.11.20
links.tldrnewsletter.com8 min readTLDR Dev

FUMADOCS

FumaDocs is a documentation framework built on Next.js that uses TypeScript, MDX, and Tailwind CSS. It provides utilities, a UI, and features of Next.js App Router. FumaDocs includes built-in components and integrations, focusing on a user-friendly mobile responsive experience.

2025.11.20
fumadocs.devToolTLDR Dev

CAN AI MODELS BE JAILBROKEN TO PHISH ELDERLY VICTIMS? AN END-TO-END EVALUATION

AI can be used to scam elderly people. These journalists successfully jailbroke AI models like Meta and Gemini to generate phishing emails, which were then sent to elderly participants, resulting in 11% being phished. The journalists also investigated real-world AI scam factories in Southeast Asia and found that victims were using AI chatbots to conduct scams.

2025.11.20
simonlermen.substack.com4 min readTLDR Dev

AUTOMATED NPM SECRET ROTATION IN GITHUB ACTIONS

NPM recently announced that all long-lived tokens are being revoked and new tokens will only be valid for a maximum of 90 days, creating challenges for automated publishing workflows. While the proper solution is to upgrade to trusted publishing (OIDC), a tool called "github-update-secret" automatically rotates secrets across all repositories to buy time until each project can be properly migrated. This tool iterates through all repositories with admin access and updates any matching secret names with new values.

2025.11.20
michaelheap.com3 min readTLDR Dev

BLAME AS A SERVICE

Blame as a Service (BaaS) is a growing market where companies like McKinsey, Ticketmaster, and UMA absorb the negative backlash from unpopular decisions, allowing their clients to maintain a positive image while maximizing profits.

2025.11.20
humaninvariant.com6 min readTLDR Dev

A DEVELOPER'S GUIDE TO GROWTH METHODOLOGY

Growth methodology is a data-driven development approach used by monday.com's Growth team that differs from traditional software development by requiring engineers to think like product managers and validate ideas before perfecting them.

2025.11.20
engineering.monday.com8 min readTLDR Dev

THE PEACEFUL TRANSFER OF POWER IN OPEN SOURCE PROJECTS

Open-source projects, often led by a single individual, should learn from Mastodon's example of gracefully transferring power to avoid the pitfalls of forever founder-led projects and guarantee long-term stability.

2025.11.20
shkspr.mobi3 min readTLDR Dev

Sponsored

SERVICES INCLUDED...

PREVIEWS ONLY WORK IF THEY'RE ACTUALLY LIKE PROD. This step-by-step shows how a minimal .upsun/config.yaml, and one deploy hook clones data, files, and services ON EVERY BRANCH.

2025.11.19
upsun.comSponsorTLDR Dev

CLOUDFLARE OUTAGE ON NOVEMBER 18, 2025

Cloudflare had a large outage yesterday due to a faulty configuration file in its Bot Management system, which was triggered by a database permissions change. This larger-than-expected file overloaded the network's traffic routing software, resulting in widespread HTTP 5xx errors and impacting services like Turnstile, Workers KV, and Access. The issue was not a cyber attack. The team was able to resolve it by stopping the faulty file propagation and restoring an earlier version, bringing systems back to normal by 17:06 UTC.

2025.11.19
blog.cloudflare.com12 min readTLDR Dev

EXPERIMENT: MAKING TYPESCRIPT IMMUTABLE-BY-DEFAULT

This exploration into making TypeScript immutable by default was inspired by languages like Rust. By setting the `noLib` flag and creating a custom `lib.d.ts` file, this dev successfully made arrays and Records immutable unless explicitly declared as `MutableArray` or `MutableRecord`. This was done by defining read-only properties and omitting mutable methods in the default type definitions.

2025.11.19
evanhahn.com8 min readTLDR Dev

HIGH-PERFORMANCE SYNTAX HIGHLIGHTING WITH CSS HIGHLIGHTS API

The CSS Custom Highlight API is a performant alternative to traditional syntax highlighting methods that rely on numerous DOM elements. The API can help style arbitrary text ranges directly using CSS without modifying the DOM, resulting in faster rendering and reduced memory consumption. It's supported in modern browsers and is done by defining CSS styles using the `::highlight()` pseudo-element and registering text ranges with the browser's highlight registry.

2025.11.19
pavi2410.com7 min readTLDR Dev

PROGRAMMING PRINCIPLES FOR SELF TAUGHT FRONT-END DEVELOPERS

Front-end developers can write better code by following the "rule of three" (only refactor code after you've written the same thing three times to avoid over-engineering) and "make it work, make it right, make it fast" (prioritize getting code to function correctly before optimizing for performance). These guidelines help devs make better decisions while coding and avoid common pitfalls like premature optimization and unnecessary complexity.

2025.11.19
piccalil.li8 min readTLDR Dev

DO NOT PUT YOUR SITE BEHIND CLOUDFLARE IF YOU DON'T NEED TO

A recent Cloudflare outage took down many websites, showing the risk of relying on centralized services as single points of failure. Many smaller websites don't actually need Cloudflare's DDoS protection and are unnecessarily exposed to its potential downtime. Instead of Cloudflare, it's possible to just use a round-robin DNS setup with a backup server for true redundancy.

2025.11.19
huijzer.xyz2 min readTLDR Dev

Sponsored

KILL CREDENTIAL STUFFING FOR GOOD

Tired of credential stuffing threats? Clerk's new "Client Trust" feature [12] automatically requires a second factor on any new device—protecting users, even if their password gets leaked in a 0-day attack. No configuration, no guesswork. Stop worrying about credential leaks: get invisible, decisive security from day one!

2025.11.19
go.clerk.comSponsorTLDR Dev

A NEW ERA OF INTELLIGENCE WITH GEMINI 3

Google has launched Gemini 3, its most intelligent AI model yet. Designed to help users bring any idea to life through state-of-the-art reasoning and multimodal capabilities, Gemini 3 outperforms previous models on key AI benchmarks and introduces a "Deep Think" mode for even more complex problem-solving. It is being rolled out across Google products, including Search, the Gemini app, AI Studio, Vertex AI, and a new agentic development platform called Google Antigravity.

2025.11.19
blog.google12 min readTLDR Dev

GOOGLE ANTIGRAVITY

Google's Antigravity is a new AI-powered agentic development platform built on Gemini 3. Antigravity has both an AI-powered IDE experience ("Editor view") and an agent-first interface for orchestrating multiple agents ("Manager surface").

2025.11.19
antigravity.googleToolTLDR Dev

GUTS

Guts is a Go library that converts Golang types to TypeScript for consistent type definitions across frontend and backend applications. Unlike command-line utilities, Guts is designed for programmatic customization and easier package resolution. It uses the TypeScript compiler API to make sure generated TypeScript is semantically correct and aligned with the latest language features.

2025.11.19
github.comGitHub repositoryTLDR Dev

HOW QUAKE.EXE GOT ITS TCP/IP STACK

In 1996, Quake faced challenges adapting to the shift from MS-DOS to Windows 95 while also supporting emerging technologies like 3D acceleration and the Internet. id Software created a single executable, quake.exe, compatible with both DOS and Windows by using djgpp's DPMI client and the Windows 95 DPMI server. For TCP/IP support in DOS, Quake relied on a costly third-party TSR, but in Windows 95, it utilized Mpath's "Chunnel" technology, a complex system involving virtual device drivers and DLLs to bridge the DOS executable with the Windows TCP/IP stack.

2025.11.19
fabiensanglard.net11 min readTLDR Dev

AI ADS ARE GOING MAINSTREAM

AI-generated advertisements are becoming mainstream. Major brands like Taylor Swift, Google, and Coca-Cola have begun using AI tools to create marketing content. Swift's promotional videos were confirmed to be AI-generated using Google's video generation tools. The trend is accelerating rapidly. Surveys predict that 39% of digital video ads will use generative AI by next year. While early AI-generated ads faced some controversy, consumer backlash appears to be weakening.

2025.11.19
open.substack.com8 min readTLDR Dev

TOKENFLOOD

Tokenflood is a load testing tool for instruction-tuned LLMs that simulates arbitrary load profiles by defining prompt lengths, prefix lengths, output lengths, and request rates.

2025.11.19
github.comGitHub repositoryTLDR Dev

TOASTS

GitHub no longer uses toast notifications due to significant accessibility and usability issues.

2025.11.19
primer.style8 min readTLDR Dev

Sponsored

CONVERT

✅ Trusted by Vercel, Replit, Netlify, and Bolt

2025.11.18
name.comSponsorTLDR Dev

HOW WHEN AWS WAS DOWN, WE WERE NOT

Authress' auth solution remained operational during a recent AWS us-east-1 outage that impacted major companies. This was thanks to avoiding unreliable third-party components, implementing DNS failover with custom health checks, and using edge compute via CloudFront and Lambda@Edge. It also used incremental rollouts to reduce the impact of application failures, a web application firewall (WAF) for handling malicious requests, and prioritized customer support for issues outside of automated detection.

2025.11.18
authress.io47 min readTLDR Dev

WHERE TO USE SUB-AGENTS VERSUS AGENTS AS TOOLS

This article explains when to use sub-agents versus agents as tools when building multi-agent AI systems. The main difference is that agents as tools are self-contained, stateless specialists ideal for discrete tasks (like converting natural language to SQL), while sub-agents are delegated team members that share context and handle complex, multi-step processes requiring ongoing collaboration (like managing flight bookings with multiple user interactions). Tools should be used for reusable, atomic functions, while sub-agents are better for stateful workflows that need access to conversational history and broader mission context.

2025.11.18
cloud.google.com6 min readTLDR Dev

HOW DASH USES CONTEXT ENGINEERING FOR SMARTER AI

Dropbox evolved its Dash AI system from a traditional search tool into an "agentic AI" that can interpret, summarize, and act on information. Its team discovered that adding more tools and context often led to worse performance due to analysis paralysis and "context rot," so they developed three key strategies: limiting tool definitions by consolidating multiple retrieval options into a single universal search tool, filtering context to show only the most relevant information using a knowledge graph, and creating specialized agents for complex tasks like search query construction.

2025.11.18
dropbox.tech8 min readTLDR Dev

OOP: THE WORST THING THAT HAPPENED TO PROGRAMMING

Object-Oriented Programming (OOP) is the worst thing that happened to programming due to its inherent flaws and unnecessary complexity compared to Functional Programming (FP). Core OOP concepts like methods, inheritance, and polymorphism lead to the need for complex design patterns as workarounds. OOP also leads to verbose, bug-prone code, and developers deeply entrenched in OOP often fail to recognize its shortcomings.

2025.11.18
alexanderdanilov.dev28 min readTLDR Dev

THINGS I DON'T LIKE IN CONFIGURATION LANGUAGES

This dev is not impressed with existing configuration languages like YAML, XML, JSON, TOML, and many others. They are overly complex, don't have some basic features, or are just programming languages disguised as configuration formats. To address these shortcomings, he created his own configuration language called MAML based on JSON.

2025.11.18
medv.io11 min readTLDR Dev

Sponsored

A PRIMER ON BUILDING SUCCESSFUL AI AGENTS

Moving agents from dev to prod is challenging due to quality, governance, and security concerns. Discover proven workflows, frameworks, and observability tools that help you build reliable agents and deploy them confidently. Get the guide [10].

2025.11.18
wandb.aiSponsorTLDR Dev

CONTINUOUS CLAUDE

Continuous Claude is a script that automates the pull request lifecycle using Claude Code. It commits changes to a new branch, creates a pull request, waits for checks and reviews, and merges the PR, repeating until the task is complete.

2025.11.18
github.comGitHub repositoryTLDR Dev

PARQEYE

Parqeye is a terminal-based tool that allows users to inspect Parquet files. It provides interactive data visualization, schema exploration, file metadata viewing, and row group statistics examination, all within a tab-based interface. Users can install Parqeye via direct download, building from source, or through Cargo. It's released under the MIT License.

2025.11.18
github.comGitHub repositoryTLDR Dev

PRINCEJS

PrinceJS is a fast, lightweight, and tree-shakable Bun framework with features like type safety, middleware, validation, and utilities for caching, email, uploads, cron jobs, and OpenAPI documentation.

2025.11.18
princejs.vercel.appToolTLDR Dev

SO LONG, AND THANKS FOR ALL THE FISH: HOW TO ESCAPE THE LINUX NETWORKING STACK

Cloudflare uses soft-unicast to share IP addresses across machines, pushing the limits of the Linux networking stack. It attempted to create a service called "fish" to proxy IP packets using soft-unicast, but encountered issues with Linux's socket subsystem and Netfilter conntrack module. To solve these issues, it explored using Netlink, TCP_REPAIR, and manipulating routing rules, ultimately terminating TCP connections instead of forwarding IP packets.

2025.11.18
blog.cloudflare.com11 min readTLDR Dev

ENHANCING HDR ON INSTAGRAM FOR IOS WITH DOLBY VISION

Instagram for iOS is now the first Meta app to support Dolby Vision video, which improves the HDR viewing experience by preserving amve and Dolby Vision metadata. Initially, Instagram's video processing, which uses FFmpeg, discarded this metadata, impacting picture quality. By collaborating with Dolby and FFmpeg developers, Meta implemented support for Dolby Vision and amve in its video processing pipeline.

2025.11.18
engineering.fb.com10 min readTLDR Dev

PROJECT GEMINI

Project Gemini is a lightweight internet protocol focused on providing a simple, privacy-respecting space for interconnected text documents.

2025.11.18
geminiprotocol.netToolTLDR Dev

RUN ANCIENT UNIX

This repository provides the necessary tools and instructions to easily run various ancient UNIX versions, including those for PDP-11 and x86 architectures, on modern operating systems using simulators like SIMH and QEMU.

2025.11.18
github.comGitHub repositoryTLDR Dev

THE INTERNET IS COOL. THANK YOU, TCP

TCP is a protocol that underpins much of the Internet. It controls reliable data transmission despite underlying network instability. TCP has mechanisms for flow and congestion control, which prevent overwhelming receivers and the network itself, along with allowing it to recover from packet loss, corruption, and reordering. This article provides C code examples with a simple TCP server and a basic HTTP server, showing how applications use TCP for reliable communication.

2025.11.17
cefboud.com12 min readTLDR Dev

WHAT IF YOU DON'T NEED MCP AT ALL?

MCP servers for browser automation with agents are often inefficient and hard to extend. Instead, simple Bash scripts and code for tasks like starting a browser, navigating URLs, executing JavaScript, and taking screenshots are usually more token efficient and more customizable. By cloning tool repositories and setting up an alias, these scripts become globally available to agents like Claude, making browser interaction easier.

2025.11.17
mariozechner.at15 min readTLDR Dev

THE INNER WORKINGS OF JAVASCRIPT SOURCE MAPS

JavaScript source maps translate minified production code locations back to original source files, letting developers debug with proper variable names and formatting. This happens through VLQ (Variable Length Quantity) encoding with Base64 characters in the `mappings` field, which compresses position data by storing small relative differences between locations rather than absolute coordinates, separated by commas (for columns) and semicolons (for line breaks). Each mapping segment contains 1, 4, or 5 values that specify the generated file column, source file index, source line/column, and optionally the original identifier name, allowing tools to efficiently bridge production code and developer-friendly sources.

2025.11.17
polarsignals.com8 min readTLDR Dev