Ahsan Mir

CCIE #49131 & Tech Enthusiast!

[Ahsan Mir @ahsanbm]

@budapp Yes please

[Ahsan Mir @ahsanbm]

IETF draft proposing IPv8,and it’s an interesting shift in thinking. it tries to unify major parts of networking addressing, identity, routing, etc into a single architecture. Some big claims: full backward compatibility, simplified routing, and a cleaner, less fragmented model.

[Ahsan Mir @ahsanbm]

Cloudflare just announced EmDash—a new open-source (MIT-licensed) CMS built from scratch as WordPress's "spiritual successor." It's TypeScript-based, serverless (runs on Cloudflare Workers or any Node.js), with sandboxed plugins via Dynamic Workers for better security

[Anish Moonka @anishmoonka]

A tiny piece of code called axios runs inside almost every app on your phone and every website you visit. Developers download it 100 million times a week. A few hours ago, someone poisoned it with malware that hands an attacker full control of your computer.

If you’ve never heard of axios, that’s normal. It does one boring but important job: it lets apps talk to the internet. When a website pulls up your feed or an online checkout processes your card, axios is probably doing the work underneath. Over 173,000 other code packages plug into it. It’s everywhere.

The attacker stole a lead developer’s login for npm (think of it as an app store, but for code that programmers use to build software). Once inside, they swapped the developer’s email to an anonymous ProtonMail account and uploaded the poisoned version by hand. That jumped past every security check the project normally runs before new code goes live.

And this was not some rushed job. The attacker staged the malware at least 18 hours before pulling the trigger. They built separate versions for Windows, Mac, and Linux. They poisoned both the current version and an older one within 39 minutes of each other, casting the widest net possible. Once the malware ran on a machine, it deleted itself to cover its tracks.

The trick was smart. They never touched a single line of code inside axios itself. Instead, they tucked in a fake add-on called plain-crypto-js, built to pass as a well-known, trusted library. It copied the real library’s description and author info, so nothing looked off at a glance. When a developer installed axios, this fake package quietly ran the malware on its own.

When a smaller package called ua-parser-js got hijacked back in 2021 with about 8 million weekly downloads, the security world treated it like a four-alarm fire. Axios has 100 million. Over 12x the exposure, with 173,000+ packages depending on it.

Socket, the security firm that flagged this, caught it in about 6 minutes. That’s fast. But 6 minutes is still plenty of time for automated systems at companies everywhere to pull and install the bad version before anyone can react.

If you or your team runs axios: lock your version to 1.14.0 (or 0.30.3 for the older branch). Change every password, API key, and access token on any machine that installed the compromised update. And check your network logs for connections to sfrclak dot com or the IP address 142.11.206.73.

[Expo @expo]

The 𝚎𝚡𝚙����-𝚠𝚒𝚍𝚐𝚎𝚝𝚜 alpha is here!

Now you can build iOS home screen widgets and Live Activities as React components.

No separate Xcode target. No manual App Groups. No SwiftUI layout code.

Write your widget in @expo/ui, and Continuous Native Generation handles the rest.
◆ Interactive buttons and toggles on the home screen
◆ Live Activities for the Lock Screen and Dynamic Island ◆ One React component, native rendering under the
hood

Details and code to get started in the blog below ↓

[Vlad Mihalcea @vlad_mihalcea]

Scaling is not really a problem for SQL databases. Shopify is running its distributed monolith on MySQL 8 and can scale to over 50 million queries per second. With every Black Friday campaign, they raise the bar even higher.

Facebook uses MySQL with MyRocks. You can find their MySQL fork on GitHub. So, if SQL works fine for the largest software platforms in the world, it's surely going to work just fine for the vast majority of your projects.

[Ahsan Mir @ahsanbm]

JSON vs TOON

[Ahsan Mir @ahsanbm]

After Affinity acquisition by Canva, Affinity will be free forever including Photo, Designer and Publisher. Download your copy. You need to have Canva free or pro account.
https://t.co/WLAjQgrKPS

[Ahsan Mir @ahsanbm]

@adnansahinovich I am in

[Microsoft Developer @msdev]

Big news: Windows Subsystem for Linux is now Open Source! 🎉

Download WSL, build from source, contribute fixes & features, and join its active development.

Learn more: https://t.co/JzhrU4RAkx

[Supabase @supabase]

Handy

[Ahsan Mir @ahsanbm]

https://t.co/DhZqkBqpvg a must for developers !

[Ahsan Mir @ahsanbm]

@nutlope @YoussefUiUx When ⌛️

[Ahsan Mir @ahsanbm]

An open source PDF data extraction tool

https://t.co/HBqHm1TX7x

[Ahsan Mir @ahsanbm]

Windows Server 2025 is now Generally Available!

Microsoft announced the general availability (GA) of Windows Server 2025 starting with build 26100.1742.

Windows Server 2025 is the latest version of Windows Server OS and a long-term servicing channel (LTSC) release.

[Ahsan Mir @ahsanbm]

Open source Kafka and redis manager
https://t.co/c1Hx2n0mum

[Ahsan Mir @ahsanbm]

Localhost SSL
https://t.co/PrrjcpSUyS

[Ahsan Mir @ahsanbm]

@nutlope @YoussefUiUx Waiting 👀⏱️

[Ahsan Mir @ahsanbm]

Do you remember when you joined X? I do! #MyXAnniversary

[Ahsan Mir @ahsanbm]

@Scmmishra @rushabh_mehta @NagariaHussain Already used it and also docker but both not a good choice for DevEx