Hacker Laws

Hacker Laws repository: collection of useful laws, principles, and patterns for developers. Includes 90–9–1 Principle, Amdahl's Law, Brooks' Law, CAP Theorem, numerous others. Laws explain software development challenges and phenomena. Repository serves as a reference; application of laws is debatable. Offers resources like eBooks, podcasts, and links to projects. More information and contributions welcomed.

https://hacker-laws.com/

Preface

TLDR: The book aims to teach Python developers architectural patterns for managing complexity in software development, emphasizing Test-Driven Development (TDD), Domain-Driven Design (DDD), and event-driven architecture. Authors Harry and Bob, experienced in building applications for an ecommerce company, use practical examples to demonstrate these concepts, focusing on maintaining clean code architecture while solving real-world business problems. The book encourages hands-on coding, structured around a single project, using various Python frameworks and aiming to offer insights applicable to both monolithic and microservices architectures.

https://www.cosmicpython.com/book/preface.html

Automated Visual Regression Testing With Playwright

Automated visual regression testing with Playwright allows for easier comparison of visual artifacts on websites. The author aims to refactor CSS for better structure and dark mode functionality while fearing bugs from large changes. Playwright's snapshot testing can facilitate this by taking screenshots to compare against a baseline, though it can be slow and sensitive to various factors. The setup involves configuring Playwright and creating a dedicated test directory, with a focus on capturing the entire page rather than just the viewport. A site map generator allows for dynamic test creation, and custom CSS can help mitigate flakiness in visual comparisons. Overall, while the process is complex, it addresses the need for reliable testing during development.

https://css-tricks.com/automated-visual-regression-testing-with-playwright/

How to Write Blog Posts That Developers Read

Summary:
To write engaging blog posts for developers, focus on clarity and brevity. Address your audience's interests quickly, using familiar language. Consider expanding your audience by simplifying technical jargon and addressing broader themes. Ensure your content is easily discoverable by evaluating its potential reach on platforms like Google, Hacker News, and relevant subreddits. Use visuals to enhance understanding and attract skimmers, breaking up text with images and headings. Adjust content based on past success to maximize reader engagement.

https://refactoringenglish.com/chapters/write-blog-posts-developers-read/

What Is Vibe Coding, Should You Be Using AI to Do It, and Does It Matter?

Vibe coding uses AI (like ChatGPT) to generate complete software code for non-programmers. Coined by Andrej Karpathy, it enables users to create apps without programming knowledge, but results can be buggy and unreliable. While some claim it may replace developers, experts assert it won't, as software engineering involves more than just writing code.

https://www.newscientist.com/article/2473993-what-is-vibe-coding-should-you-be-doing-it-and-does-it-matter/

Tunneling Corporate Firewalls for Developers

TLDR: Guide on tunneling SSH connections for developers facing corporate firewalls. Discusses methods to bypass restrictions, including using SSH over HTTPS with tools like SSLH and corkscrew. Covers techniques for dealing with dumb and smart firewalls, corporate proxies, and the importance of maintaining secure and functioning connections for development tools. Emphasizes that while tunneling can be effective, it's necessary to comply with security policies and consult IT where appropriate.

https://blog.frost.kiwi/tunneling-corporate-firewalls/

Laurence Tratt: Better Shell History Search

TLDR: Laurence Tratt discusses enhancing shell command efficiency by improving history search with tools like fzf and skim. By using Ctrl-r combined with fuzzy matching, users can quickly find previously run commands, increasing productivity. Tratt shares custom modifications to display relevant command execution times instead of meaningless identifiers, ultimately promoting smarter shell usage and significant time savings while working in Unix environments.

https://tratt.net/laurie/blog/2025/better_shell_history_search.html

Database Protocols Are Underwhelming

Database protocols are outdated and complex, handling mutable state poorly, complicating connection management and error recovery. SQL lacks explicit idempotency, making safe query retries difficult. Introducing features like idempotency keys could enhance retry safety. Prepared statements add overhead and session limitations, suggesting the need for a digest-based system for better resource management. Overall, improving database protocols could significantly enhance developer usability without altering SQL syntax.

https://byroot.github.io/performance/2025/03/21/database-protocols.html

What’s in Your Stack: The State of Tech Tools in 2025

2025 Tech Tools Survey Summary:

  • Survey of 6,500 tech professionals reveals key insights about favorite tools.
  • ChatGPT leads with 90% usage, followed by Slack (72%) and Gmail.
  • Jira remains common but unpopular; Linear is a growing alternative.
  • Figma dominates design, while Notion is climbing in project management and CRM.
  • AI tools (e.g., Cursor) emerge in coding environments.
  • Google Docs is preferred for collaboration; Miro leads in virtual whiteboarding.
  • Users prefer well-crafted, user-friendly tools over complex ones.
  • Meta Trends: Bundling power vs. well-crafted tools, and mixing multiple tools for specific needs is common.

https://www.lennysnewsletter.com/p/whats-in-your-stack-the-state-of

Whose Code Am I Running in GitHub Actions?

Malicious code was added to the tj-actions/changed-files GitHub Action, leaking secrets in public repositories. Using mutable Git tags can lead to unexpected code execution; using commit IDs ensures immutability. The author ran a shell script to check their GitHub Actions for such vulnerabilities and reviewed the trustworthiness of the actions based on their sources. The process involved using Unix text processing tools to extract and tally actions from workflow files, emphasizing security practices in leveraging third-party actions.

https://alexwlchan.net/2025/github-actions-audit/

10 Professional Developers on Vibe Coding’s True Promise and Peril

Vibe Coding Insights: Developers debate “vibe coding,” blending AI and software development. While AI speeds up coding, concerns rise over security risks and potential pitfalls for inexperienced users. Experts warn that without solid programming knowledge, users might create flawed or insecure software. Effective use requires understanding user needs and proper oversight, ensuring AI doesn't compromise software quality. Balancing creativity with caution is vital in this evolving landscape.

https://www.zdnet.com/article/10-professional-developers-on-vibe-codings-true-promise-and-peril/

Does Vibe Coding Really Work? We Built a Game With Claude—Here’s How It Turned Out

Vibe coding, a method of building software by conversing with AI, was tested by creating a simple typing game using Claude AI. The process involved iterating and refining the game's code through natural language communication, resulting in a playable game that demonstrated rapid prototyping capabilities. Key lessons learned include the importance of iteration, not rushing the development process, and recognizing that while vibe coding can yield functional software, it may lack professional polish. Overall, vibe coding shows promise for both novices and experienced developers as a creative coding tool.

https://decrypt.co/311183/we-built-game-vibe-coding-ai-claude