Jonas

Makes & breaks stuff.

💬 collect actionable feedback:

[Jonas @JonasDoesThings]

@polar_sh You can't point out Romania on a map?

[Jonas @JonasDoesThings]

@SmitnerStudio @mitsuhiko Crazy Fact: Vienna has more drinking fountains than all of Germany 😬 (1800 in Vienna, vs. ~1500 in Germany)

[Jonas @JonasDoesThings]

@PixelGamingCo @619ssvignesh @district_india @bookmyshow I don't think it has a bad effect like this, many Opera houses and theatres (the non-movie kind) have been offering this for ages. There are also 3rd party websites like AViewFromMySeat with user-uploaded photos. Imo it's a win-win

[Jonas @JonasDoesThings]

@zeeg Great addition! I vibecoded my own HTML-reporter for that, but would love to have a good UI already built-in

[Jonas @JonasDoesThings]

@StorgaardMikkel @karchn12 @edzitron There are some small initiatives for sharing coding-session traces freely which can be used for training/finetuning open models - but I agree that currently this is way too little data, maybe someday in the future with a big centralized initiative

[Jonas @JonasDoesThings]

@michellechen the wiim UX is 100x better than sonos imo

[Jonas @JonasDoesThings]

@tobimori just make error states impossible

[Jonas @JonasDoesThings]

@badlogicgames @opencode right decision, thx

[Jonas @JonasDoesThings]

@shadcn clsx code: https://t.co/ZQM94n5m2A

[Jonas @JonasDoesThings]

with all the npm supply chain attacks, is it a good idea that @shadcn ui still auto-installs such a trivial package as clsx (~40 LoC) by default?

[Florian Brand @xeophon]

The vibes in China's AI labs

My blog about my recent trip to China is up, link in replies.

[Vanilagy @vanilagy]

YOOOO! Mediabunny's API is in GPT 5.5's weights!! That's awesome

[Jonas @JonasDoesThings]

@MarceloRet41877 @peer_rich Probably this: https://t.co/qVYUKphKBL

[Peer Richelsen @peer_rich]

OAuth scams are becoming more and more popular

this time a malicious @nylas OAuth client is being used to attack one of our employees (who immediately understood its a scam and has reported it)

the playbook is simple:

1. obtain a Google OAuth client
2. pretend to send a .docx
3. immediately open the Google OAuth splash screen
4. Attacker gains full access to Email, Calendar and more

officially it falls under phishing, however attackers no longer make fake login forms but instead show official google log in screens

most people fall for it because they check the website, see google.⁠com AND nylas.⁠com (which is also legit) and think its safe.

signing into google to view a document is also very common

[Jonas @JonasDoesThings]

@zeeg More concrete documentation/guidance on best-practices for setting-up capturing & tracing in applications without collecting too much noise would be cool

[Jonas @JonasDoesThings]

@tobimori @theo Desktop is easier to work with (& understand?) if you work on multiple projects & sessions in parallel. switching around in the UI is just nicer imo - at least with OpenCode

[Jonas @JonasDoesThings]

@vercel notion (comments) adapter would be cool

[Jonas @JonasDoesThings]

@nickbakeddesign Congrats, I never saw anyone using port 3333 before

[Bruno @use_bruno]

Bruno v3.2.0 is out.

Highlights:

- OpenAPI Sync
- Send requests without creating a Collection
- New scripting APIs
- Better OAuth2 support
- gRPC Unix sockets + named pipes
- Big reliability pass across imports, GraphQL, codegen, proxies, SSL, and CLI

Big UX improvements and increased reliability. Check out the full changelog 👉 https://t.co/tVskD2XAWu

[Jonas @JonasDoesThings]

@use_bruno OpenAPI Syncing is great! Sending requests without saving/collection is lovely too, I can finally delete all of my forgotten "tmp_xx" requests. thx

[Jonas @JonasDoesThings]

@vanilagy either way: pls don't burn yourself out by stressing over all gh issues, work in a way that is sustainable for you ❤️