Mike @ HTML All The Things 🇨🇦

🎙️ Weekly Web Development Podcast 🔗 of Eng @cyfrin

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

It’s been an amazing 3 years at @cyfrin.

No, this is not a goodbye post.

I’ve just been reflecting a bit after our latest launch. Over the last 3 years, I’ve had the chance to work on Updraft, Solodit, CodeHawks, and now Cygent, which makes this one especially exciting.

Cygent is a very cool product to be part of. It’s an AI security engineer built to help teams find vulnerabilities, write fixes, and open PRs, all while working alongside developers instead of just dumping another report on them.

More than anything, I’m proud of the team behind it. I get to work with a top-notch engineering group that cares deeply about quality, speed, and building useful things the right way.

Very proud of what we’ve built so far, and very excited for year 4 at Cyfrin.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

dependency free will be the new top tier lib standard by 2027.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

Token maxxing feels like a fad.

Spinning up 20 agents to brute-force a problem isn’t efficiency. It’s just expensive guessing.

The real AI skill is going to be knowing the right process:
what context to give, what to ask, what to ignore, and when to stop.
As AI gets more powerful and more expensive, the winners won’t be the people burning the most tokens.

They’ll be the people getting the best results with the least waste.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@jasondoesstuff This is real goals.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@kvncnls same

I'm loving cursor lately. Just want a mobile app.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

Watching Opus 4.8 trace logs and reason out issues is pretty much black magic.

If I showed this to myself 4 years ago I'd have probably shit my pants.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

1M token context is useless with the current models.

Should be removed until the labs can figure out how to properly prevent context rot.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@XavierRiveraX Yeah this is huge, those attacks are super common. Tons of CVE's lead to cookie stealing.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

oh holy shit.

how is this the first time I'm hearing about this!?!

cookies tied to devices makes so much sense.

[Xavier Rivera @XavierRiveraX]

Google Chrome is rolling out device-bound session credentials to all users. Session cookies get cryptographically tied to your device, so stolen cookies can't be replayed from a different machine. Attackers who exfiltrate your cookie database get nothing usable.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@catalinmpit I'm doing a ton with Cursor lately and it's been solid.

Auto mode and Composer 2.5 both being good enough for 80% of tasks. Might be more but I still rely on 5.5 or 4.7/4.8 for some heavier analysis and architecture type things.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

Here we go, lets see if it's better then gpt 5.5 (my current daily driver)

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@FrancescoCiull4 same, I keep trying to download the latest version of claude code.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@akoskm this happens with claude code for me all the time too.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@__alexlazar__ Will do, lost Internet at home for most of the day so will be a bit delayed trying this out fully

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

Going to try the fast plan/spec, implement, figure out what goes wrong and reimplement with the knowledge gained.

Want to see if this loop produces better results then staying in plan mode for too long.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@catalinmpit so hard to balance this.

Full time work and family is no joke in terms of time.

I need to do this too though.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@kvncnls oh shit it's been approved!?!?

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@thdxr big if true

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

All 8 AI techbros gonna be tuning it right away.

The general public hates AI, who tf is gonna listen to this crap?

[Polymarket @Polymarket]

NEW: Amazon’s Alexa+ can now generate AI “podcasts” hosted by two robot co-hosts.

[Mike @ HTML All The Things 🇨🇦 @htmleverything]

@kenwheeler I think these tech CEO's are so disconnected from reality they actually thought people would embrace this shit with open arms.

The SF bubble be crazy.