Theo Pak

Founder • ex-Staff Eng @frame_io @hubspot

[Taelin @VictorTaelin]

@AnthropicAI ????????????????????????????

[Theo Pak @theopak]

My code quality standard is "How would John Carmack and Fabrice Bellard write it if they had to work together?"

[John Carmack @ID_AA_Carmack]

I admire Fabrice Bellard. He is almost certainly a better overall programmer than I am.

[Jarred Sumner @jarredsumner]

@mitchellh Yes, Zig made Bun possible. Bun went from me coding in a smelly room in Oakland for a year solo to a team & among the most widely used tools in the JavaScript ecosystem, and a lot of that is thanks to Zig.

Should’ve held off merging the PR until the blog post was done.

[Theo Pak @theopak]

Great question! Stringout Desktop is core-native on Mac (Tauri, Bun, and Swift Apple CoreML). I’m not hearing users need Windows or Linux support right now, which actually surprises me, but if/when added I would go native to hardware configurations there too.

Will Diffusion Studio Pro be multi-platform too? I’m super into Tauri and Rust lately

[Theo Pak @theopak]

Stringout is not impacted by CVE-2026-44578.

[Prasenjit @Star_Knight12]

Next.js just got its worst vulnerability ever, CVSS 8.6.

→ affects versions 13.4.13+, 14.x, 15.x, and 16.0.0–16.2.4
→ attackers can access your internal services, cloud credentials, API keys, and admin panels
→ no authentication needed
→ one crafted request is all it takes
→ roughly 79,000 instances are exploitable right now
→ vercel-hosted apps are safe, self-hosted are not

upgrade to 15.5.16 or 16.2.5 immediately.

[Theo Pak @theopak]

@vanilagy I first adopted Bun as a package manager, which it’s great at, before making the switch to use it as a production runtime too. I bet lots of Bun praise comes from package management in client-side-only projects. Easy to adopt!

[Theo Pak @theopak]

https://t.co/6T9lbaDLIi is safe from the widespread package supply chain issue! I instituted a 2 week minimum release age long before this

[🇮🇹 Massimo De Luisa @massimodeluisa]

Easier way to protect yourself (if you are not infected yet) is to set a minimum release age in your package manager.

For @npmjs:
`npm config set min-release-age=2d`

For @pnpmjs:
`pnpm config set minimumReleaseAge 2880`

For @bunjavascript:
```
# In bunfig.toml
[install]
minimumReleaseAge = 172800
```

For Yarn:
`yarn config set npmMinimalAgeGate "48h"`

[Theo Pak @theopak]

10 PB (10,000 TB) of data is like 500 physical hard drives, at least. it’s physically so much weight you’d need the entire FedEx truck to ship it somewhere. it’s the equivalent of maxing out a Fios 10G fiber internet connection for ~92 days straight

[Robb Allen @ItsRobbAllen]

I worked for a company back in the 90s that had petabytes of data when most people couldn't understand the term gigabytes.

At one point the company was trying to do an off-site data storage system. The problem was that there was no bandwidth on Earth that would allow them to transmit that much data.

The only way to do it was to literally build an entire disk array that was in the petabyte range, copy it, and physically ship it to the off-site storage.

Even today if I'm not mistaken, Amazon offers something very similar where they will literally drive a semi-truck full of hard drives. They will plug into your system, download the data, and then drive it back to the cloud because it's faster to do it that way than to rely on the internet.

[Theo Pak @theopak]

@David_Rudnick Because the best manufacturing closed down when the market went out of style. Technically we still have the technology (knowledge) but the cost to physically setup “the technology,” hire and train workers, etc is too high. Interesting video tho: https://t.co/eu0f6R4sOc

[Theo Pak @theopak]

@vanilagy Built-ins aren't even consistent! Eg, look at the mixed casing in `XMLHttpRequest` and the typo in the http `Referer` header. I'd say that compatibility (using exact names for exact matches) and project conventions override strict consistency

[Theo Pak @theopak]

@viralpickaxe i love the header image! was it procedurally generated with the text? (js?)

i instantly thought “dang @byteofbits already started a new dithering aesthetic” (before remembering who he is and mentally connecting your posts lol)

anyway! happy user here, i appreciate this write up

[Theo Pak @theopak]

i mean, i love Products & Services™ but i don’t want my literal senses intermediated by commercial interests 24/7

[Theo Pak @theopak]

i stopped wearing AirPods everywhere a few months ago, and i’m surprised how much more aware i feel outside. same reason i ended my coffee bean subscription and went back to walking to the shop monthly. i feel like (almost) everyone i know lost this presence 6 years ago

[Theo Pak @theopak]

aaaahhHHHH claude nooo lol

[Theo Pak @theopak]

@colmtuite @base_ui Tree primitives would be incredible!

[Theo Pak @theopak]

Opus 4.5 has basically solved frontend development, but somehow it’s still better in Claude Code than in Cursor?

[Theo Pak @theopak]

@MentionLux @ky__zo @cursor_ai new ways to override ⌘E drive me crazy. sublime/textmate bindings are burned into memory!!

[Theo Pak @theopak]

the real pro move is to not arrive during rush hour whenever possible (lol)

otherwise, having done this many times with the current construction, for ARRIVALS in T5 take a yellow cab. it saves a long walk to the airtrain connecting to the subway and app pickup area. tho with traffic not much faster than the A train tbh

[Theo Pak @theopak]

@LorenCharnley @rsms @raphaelschaad sounds cool, got any screenshots?

[Theo Pak @theopak]

and it’s contextual

real example: when we redid Frame․io Account Settings the designers first had to sell the idea to internal stakeholders, so they worked purely in figma. but they ended up changing the design while shipping to respond to beta user feedback and make the product faster, responsive, and more reliable

the first design phase was more to market the human concepts (empathy, fit, flow). designers had no need to touch the STEM stuff theirselves (metrics, cost projections, apis)

but in the second design phase, to actually ship a solution we literally just paired for a week as one designer, one engineer, one pm, and coded a better design in real time. i’d say that this project’s success came from branch previews (real code) designed through realtime conversations. we went deep on how to actually build the thing, on time on budget. to me this defines ideal Product Design

AI tools make this way more accessible and maybe even dodges burnout-causing elitism. i predict that the way we hire/compensate/collaborate will continue to shift away from skill columns (humanities vs stem) and towards end-to-end rows (Marketing vs Product needs)

[Theo Pak @theopak]

this! every good PRODUCT Designer i’ve worked with is a semi-engineer with design instinct. being good at it is measured by durable user value

but MARKETING Designers only need to influence, not ship

i feel like the discourse confuses Marketing (influence) vs Making (product)

[Steve Ruiz @steveruizok]

If you're a designer then you should be racing to get as close to the product as possible so that you can experience your design decisions as you make them and have the agency to iterate on those decisions yourself. Even the best design tools won't get you there.