Code

Tunneling Corporate Firewalls for Developers

TLDR: Guide on tunneling SSH connections for developers facing corporate firewalls. Discusses methods to bypass restrictions, including using SSH over HTTPS with tools like SSLH and corkscrew. Covers techniques for dealing with dumb and smart firewalls, corporate proxies, and the importance of maintaining secure and functioning connections for development tools. Emphasizes that while tunneling can be effective, it's necessary to comply with security policies and consult IT where appropriate.

https://blog.frost.kiwi/tunneling-corporate-firewalls/

Laurence Tratt: Better Shell History Search

TLDR: Laurence Tratt discusses enhancing shell command efficiency by improving history search with tools like fzf and skim. By using Ctrl-r combined with fuzzy matching, users can quickly find previously run commands, increasing productivity. Tratt shares custom modifications to display relevant command execution times instead of meaningless identifiers, ultimately promoting smarter shell usage and significant time savings while working in Unix environments.

https://tratt.net/laurie/blog/2025/better_shell_history_search.html

Database Protocols Are Underwhelming

Database protocols are outdated and complex, handling mutable state poorly, complicating connection management and error recovery. SQL lacks explicit idempotency, making safe query retries difficult. Introducing features like idempotency keys could enhance retry safety. Prepared statements add overhead and session limitations, suggesting the need for a digest-based system for better resource management. Overall, improving database protocols could significantly enhance developer usability without altering SQL syntax.

https://byroot.github.io/performance/2025/03/21/database-protocols.html

What’s in Your Stack: The State of Tech Tools in 2025

2025 Tech Tools Survey Summary:

  • Survey of 6,500 tech professionals reveals key insights about favorite tools.
  • ChatGPT leads with 90% usage, followed by Slack (72%) and Gmail.
  • Jira remains common but unpopular; Linear is a growing alternative.
  • Figma dominates design, while Notion is climbing in project management and CRM.
  • AI tools (e.g., Cursor) emerge in coding environments.
  • Google Docs is preferred for collaboration; Miro leads in virtual whiteboarding.
  • Users prefer well-crafted, user-friendly tools over complex ones.
  • Meta Trends: Bundling power vs. well-crafted tools, and mixing multiple tools for specific needs is common.

https://www.lennysnewsletter.com/p/whats-in-your-stack-the-state-of

Whose Code Am I Running in GitHub Actions?

Malicious code was added to the tj-actions/changed-files GitHub Action, leaking secrets in public repositories. Using mutable Git tags can lead to unexpected code execution; using commit IDs ensures immutability. The author ran a shell script to check their GitHub Actions for such vulnerabilities and reviewed the trustworthiness of the actions based on their sources. The process involved using Unix text processing tools to extract and tally actions from workflow files, emphasizing security practices in leveraging third-party actions.

https://alexwlchan.net/2025/github-actions-audit/

10 Professional Developers on Vibe Coding’s True Promise and Peril

,

Vibe Coding Insights: Developers debate “vibe coding,” blending AI and software development. While AI speeds up coding, concerns rise over security risks and potential pitfalls for inexperienced users. Experts warn that without solid programming knowledge, users might create flawed or insecure software. Effective use requires understanding user needs and proper oversight, ensuring AI doesn't compromise software quality. Balancing creativity with caution is vital in this evolving landscape.

https://www.zdnet.com/article/10-professional-developers-on-vibe-codings-true-promise-and-peril/

Does Vibe Coding Really Work? We Built a Game With Claude—Here’s How It Turned Out

,

Vibe coding, a method of building software by conversing with AI, was tested by creating a simple typing game using Claude AI. The process involved iterating and refining the game's code through natural language communication, resulting in a playable game that demonstrated rapid prototyping capabilities. Key lessons learned include the importance of iteration, not rushing the development process, and recognizing that while vibe coding can yield functional software, it may lack professional polish. Overall, vibe coding shows promise for both novices and experienced developers as a creative coding tool.

https://decrypt.co/311183/we-built-game-vibe-coding-ai-claude

The Software Engineering Identity Crisis

Software engineers face an identity crisis as AI tools shift their role from builders to overseers, raising questions about their essence and purpose. While coding has defined many as creators, AI's rise is challenging this by automating tasks traditionally tied to engineering, leading to a focus on management-like skills such as clear communication and systems thinking. This transition evokes fear of losing the joys of coding and craftsmanship, as many engineers express concern over code quality and job security. To navigate this, engineers might consider embracing a balance between hands-on coding and orchestrating AI systems, reclaiming their identity through adaptability and a return to comprehensive problem-solving that transcends mere coding. Ultimately, the challenge lies in evolving with AI without losing the core values of engineering.

https://annievella.com/posts/the-software-engineering-identity-crisis/

Sync Engines Are the Future

Sync engines merge database and server roles, simplifying data synchronization in web applications. They address long-standing issues with data consistency and reliability that traditional tools can't manage effectively. By enabling frontend databases, they allow developers to focus on business logic rather than complex syncing. Although SQL is the standard, alternatives exist, and sync engines represent a significant technological evolution, streamlining the development stack for modern applications.

https://www.instantdb.com/essays/sync_future

List of Terminal Tools (A-Z)

A-Z list of terminal tools for various tasks, including monitoring, API clients, browsers, text editors, downloaders, and more. Tools like act3, adguardian-term, and aerc offer functionalities from GitHub monitoring to email management. Features cover utilities for encryption, task management, file viewing, and more, continuously updated for user convenience.

https://terminaltrove.com/list/

Make Bookmarklets

Make Bookmarklets: Tool for creating JavaScript bookmarklets with features like IIFE wrapping, linting, and mobile compatibility. Offers UI examples and FAQs about bookmarklet functionality, creation, safety, and version control via GitHub gists. Emphasizes user data protection and minimal analytics without personal data storage.

https://make-bookmarklets.com/

Mastering the Poisson Distribution: Intuition and Foundations

,

Extreme TLDR:
Explore the Poisson distribution for modeling count data in cases like online marketplaces, sports, and queuing. Understand its formula, assumptions, and when to use it, while considering limitations like overdispersion. Extensions include time-varying and mixed Poisson distributions to address real-life deviations. Aim for simplicity or Bayesian models for inference.

https://towardsdatascience.com/mastering-the-poisson-distribution-intuition-and-foundations/

Scroll to Top