We’ve started a series called #YouShouldKnowJS at @JSTSGuild and have tried to document everything from our first session in an article!
Check it out 🔗 https://t.co/ITkUhztrL6
And stay tuned for more sessions ahead. 📚✨
#YDKJS#JSTSGuild@taashuu_
Huge thanks to everyone who joined our YDKJS: Up and Going session today! 🙌
@taashuu_ and I had a blast covering programming basics, types, scope, and more.
Your questions and insights made it even better! 🚀 Stay tuned for more sessions. @JSTSGuild
It is concerning how enggs are losing their grip on their systems. Not just on the low-level code, but on the end-to-end flow of their systems as well.
I think there are two reasons for this:
1. Everything is in a hurry now. We are constantly optimizing for faster delivery, so there is less time to understand how things actually work.
2. We are moving towards higher-order abstractions. What could have been 5 well-documented steps explaining how things work is now abstracted away into poorly maintained skill files.
Btw, abstractions do not eliminate complexity. They just move it somewhere else.
So when a rare and complex issue shows up, it takes relatively longer to understand, diagnose, and fix the problem.
The happy path got faster. Yay! But failure path got longer. And that is a tradeoff we are not talking about enough.
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
🧵1/13 Common Frustration
"My resume is not getting shortlisted"
"I am applying, but not getting calls back"
This is disappointing and disheartening. But let’s understand why this happens and how you can stand out from the crowd:
Another weekend, another power session at @JSTSGuild with @joygupta_ 💪🏻
We revised past topics, tackled interview questions, and have now covered almost 3 parts of YDKJS in just 6 sessions!
Missed it? No worries—more coming soon!
I think 57 times before posting these personal things.
I would love to make my socials private and do comedy or random things.
BUT, I realize that the person I will be helping in the next 2 years, may not even know I exist yet.
Broadcasting these stories (which are just a minuscule subset by the way), helps this stay in your minds. Maybe you can use the help, OR you know someone who can use it (and you don’t have the time and/or skills to help them). Bring them to me, let them know we exist at @RealDevSquad. We don’t charge a dime. We ask you to stay committed to your own goals. We won’t let you fail, but you’ve got to stay accountable and serious about the promises you make to yourself first.
The more I say it, the more it sounds like I am promoting for some ulterior motives. Some guy on internet, probably trying to scam or rip off unsuspecting individuals. But you may be there friend, sibling, neighbor, community hero, whatever. Your good word in for @RealDevSquad, me, and others goes a LOOOONG way than you may realize. It’s the difference between taking the first step or not. The difference in sparking the gunpowder firework for their upcoming bright future. And your initial introduction and constant push will make their story happy! Let’s become a country, heck why just a country, a world of happy successful people, who live happy lives!
Thank you for your contributions and the love. Cheers !
Hey Twitter Dev community! 👋
In our current @RealDevSquad , Discord slash commands run bot commands and interact with our backend via 2 pair of RSA key(public & private each) for 2-way communication.
Tradeoffs
1️⃣ Same keys: No backend changes needed since it will authorize with the same public keys, regardless of the request source.
2️⃣ Different keys: Backend needs to be updated to accept requests from both services.
Hey Twitter Dev community! 👋
In our current @RealDevSquad , Discord slash commands run bot commands and interact with our backend via 2 pair of RSA key(public & private each) for 2-way communication.
Gradually we are at session 6 and completed 43% of YDKJS.
Join us at @JSTSGuild for tomorrow's session at 8pm IST. Let's be consistent together 😁💪🏻
@joygupta_
🚀 Wrapped up 4th insightful session on YDKS at @JSTSGuild ! with @joygupta_
Huge thanks to everyone who joined and engaged! If you missed it, don’t worry—we’ve got more coming. Stay tuned for the next one!
Let’s keep learning and growing together. ✌🏻