Jon

Software • Systems • Keyboards • Investing • Stoicism • Taoism

[Jon @conw_y]

Sketched: Traffic https://t.co/teQBExV03H 🚦(My little foray into @openprocessing. Done over long weekend.)

[Andy Wong @awongCM]

I couldn’t agree more with the statement. We’re now becoming more of orchestrators for code alignment as well as projecting our systems thinking to dictate code structure more and more.

[Jon @conw_y]

Blogged: We’re all full stack now
https://t.co/Me12RkCFSB

[Jon @conw_y]

Blogged: Living systems blueprint
Diagramming the systems you work with for enhanced understanding and rapid navigation.
https://t.co/6GJLH98wtl

[Jon @conw_y]

Exciting to see convenient, comfortable XR glasses hit the market! 🕶️
https://t.co/nKlzmqSeMS
Consumer applications are endless.
• Real-time language translation with subtitles
• Speech-to-text with subtitles for deaf and hard-of-hearing
• Virtual exercise and sports coaching

[Jon @conw_y]

“The war between good and evil is in reality an imposition of stupidity and simplicity over wisdom and complexity.”
– Tyson YUNKAPORTA

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Jon @conw_y]

There’s no rule that Agents, Skills, Tools or Commands must be LLM-based. Some use cases require 100% accuracy and determinism – for those cases, we can apply these patterns to regular code.

[Jon @conw_y]

I just bought @realvjy a coffee on @buymeacoffee! 🎉

Love your design work!

You can support them here — https://t.co/TrQXrdQu7g

[Jon @conw_y]

AI replacement theory – a critique
https://t.co/TwE2adO5SK

[Jon @conw_y]

Blogged: AI concepts
https://t.co/LuYe5UuGO7

[Jon @conw_y]

Happy year of the Horse! 🏮

[Jon @conw_y]

While AI coding assistants have been getting much attention (with some justification) I'm also blown away by the progress being made in front-end frameworks and tooling. Especially Vite, Tanstack, NextJS, Typescript and Vue.

[Martin Fowler @martinfowler]

NEW POST

Powerful context engineering is becoming a huge part of the developer experience of modern LLM tools. Birgitta Böckeler explains the current state of context configuration features, using Claude Code as an example.

https://t.co/U0MykYsixB

[Juan José Fuchs @JuanjoFuchs]

Spent 13 years managing engineers. Explaining what to build, reviewing PRs, pushing back on bad architecture. Turns out those exact skills are what make AI collaboration work. 🔥

[Ben Williams @biwills]

One of the best timed sells of all time

[Jon @conw_y]

Blogged: How I built my designerly CV https://t.co/0D5CLNsYIF

[Jon @conw_y]

Some Christmassy listening tips for the classically inclined...
• Requiem: “In Paradisum” • Gabriel FAURÉ
• Choir Concerto • Alfred SCHNITTKE
• Vignt Regards • Olivier MESSIAEN

[Jon @conw_y]

https://t.co/0meaLdVhoR

[Jon @conw_y]

“The better you know something, the less you remember about how hard it was to learn. The curse of knowledge is the single best explanation I know of why good people write bad prose.”
― Steven Pinker • The Sense of Style

[Jon @conw_y]

Health & fitness apps are too focussed on measurement and not focussed enough on behaviour change. https://t.co/8YQR4xriAk is a welcome step in the right direction.