Before you npm install, do you really need the whole package or just one feature?
Check what your framework already offers. If it's something small, try building it with AI. You might need less code than you think.
I shared a few thoughts here: medium.com/javascript-in-pla…
Is Anthropic more open than OpenAI now?
New Anthropic research: progress on provable inference for large language models.
Here, we introduce FlashProve. Building on established cryptographic techniques, FlashProve allows developers to verify whether a given response came from a given AI model. It’s substantially more efficient than prior open-source methods for doing so.
These proofs have a range of applications. They can, for instance, make it harder for attackers to hijack a chat, or enable safety evaluators to verify that the model they’re testing is the same one being served to customers.
For our full write-up, see here: anthropic.com/research/prova…
Further progress in provable inference will likely be an important part of improving trust in AI deployment. To that end, we're open-sourcing FlashProve’s code, here: github.com/anthropics/FlashP…
We’re grateful to our collaborators: Alessandro Chiesa, @GiacomoFenzi, @gwberg95, @miranda__christ, Rahul Dalal (rdalal.github.io) and Ben Mayer (@transmissions11).
Justice Ekemezie retweeted
Flock PHP 1.0 is here! 🥳
The free and open source local development environment for Laravel and PHP, native on macOS, Windows and Linux.
No paid tier, every feature included. Out of beta and ready for your projects.
flockphp.com
Building your first AI feature? Consider learning these five things first:
• Model APIs
• Embeddings and retrieval
• Evals
• Audio/video pipelines
• Local vs. hosted models
Pick a small project and learn as you build.
medium.com/@ttebify/what-web…
I built a free skill that separates agent, human and calendar time.
medium.com/@ttebify/ai-time-…
Four habits that keep me inside Claude’s $20 weekly limit:
- Argue the plan before any code
- Sonnet by default
- /clear between unrelated tasks
- Cheap Haiku subagents for research
Rules file, prompts and settings: medium.com/@ttebify/how-i-do…
Justice Ekemezie retweeted
A few random notes from claude coding quite a bit last few weeks.
Coding workflow. Given the latest lift in LLM coding capability, like many others I rapidly went from about 80% manual+autocomplete coding and 20% agents in November to 80% agent coding and 20% edits+touchups in December. i.e. I really am mostly programming in English now, a bit sheepishly telling the LLM what code to write... in words. It hurts the ego a bit but the power to operate over software in large "code actions" is just too net useful, especially once you adapt to it, configure it, learn to use it, and wrap your head around what it can and cannot do. This is easily the biggest change to my basic coding workflow in ~2 decades of programming and it happened over the course of a few weeks. I'd expect something similar to be happening to well into double digit percent of engineers out there, while the awareness of it in the general population feels well into low single digit percent.
IDEs/agent swarms/fallability. Both the "no need for IDE anymore" hype and the "agent swarm" hype is imo too much for right now. The models definitely still make mistakes and if you have any code you actually care about I would watch them like a hawk, in a nice large IDE on the side. The mistakes have changed a lot - they are not simple syntax errors anymore, they are subtle conceptual errors that a slightly sloppy, hasty junior dev might do. The most common category is that the models make wrong assumptions on your behalf and just run along with them without checking. They also don't manage their confusion, they don't seek clarifications, they don't surface inconsistencies, they don't present tradeoffs, they don't push back when they should, and they are still a little too sycophantic. Things get better in plan mode, but there is some need for a lightweight inline plan mode. They also really like to overcomplicate code and APIs, they bloat abstractions, they don't clean up dead code after themselves, etc. They will implement an inefficient, bloated, brittle construction over 1000 lines of code and it's up to you to be like "umm couldn't you just do this instead?" and they will be like "of course!" and immediately cut it down to 100 lines. They still sometimes change/remove comments and code they don't like or don't sufficiently understand as side effects, even if it is orthogonal to the task at hand. All of this happens despite a few simple attempts to fix it via instructions in CLAUDE . md. Despite all these issues, it is still a net huge improvement and it's very difficult to imagine going back to manual coding. TLDR everyone has their developing flow, my current is a small few CC sessions on the left in ghostty windows/tabs and an IDE on the right for viewing the code + manual edits.
Tenacity. It's so interesting to watch an agent relentlessly work at something. They never get tired, they never get demoralized, they just keep going and trying things where a person would have given up long ago to fight another day. It's a "feel the AGI" moment to watch it struggle with something for a long time just to come out victorious 30 minutes later. You realize that stamina is a core bottleneck to work and that with LLMs in hand it has been dramatically increased.
Speedups. It's not clear how to measure the "speedup" of LLM assistance. Certainly I feel net way faster at what I was going to do, but the main effect is that I do a lot more than I was going to do because 1) I can code up all kinds of things that just wouldn't have been worth coding before and 2) I can approach code that I couldn't work on before because of knowledge/skill issue. So certainly it's speedup, but it's possibly a lot more an expansion.
Leverage. LLMs are exceptionally good at looping until they meet specific goals and this is where most of the "feel the AGI" magic is to be found. Don't tell it what to do, give it success criteria and watch it go. Get it to write tests first and then pass them. Put it in the loop with a browser MCP. Write the naive algorithm that is very likely correct first, then ask it to optimize it while preserving correctness. Change your approach from imperative to declarative to get the agents looping longer and gain leverage.
Fun. I didn't anticipate that with agents programming feels *more* fun because a lot of the fill in the blanks drudgery is removed and what remains is the creative part. I also feel less blocked/stuck (which is not fun) and I experience a lot more courage because there's almost always a way to work hand in hand with it to make some positive progress. I have seen the opposite sentiment from other people too; LLM coding will split up engineers based on those who primarily liked coding and those who primarily liked building.
Atrophy. I've already noticed that I am slowly starting to atrophy my ability to write code manually. Generation (writing code) and discrimination (reading code) are different capabilities in the brain. Largely due to all the little mostly syntactic details involved in programming, you can review code just fine even if you struggle to write it.
Slopacolypse. I am bracing for 2026 as the year of the slopacolypse across all of github, substack, arxiv, X/instagram, and generally all digital media. We're also going to see a lot more AI hype productivity theater (is that even possible?), on the side of actual, real improvements.
Questions. A few of the questions on my mind:
- What happens to the "10X engineer" - the ratio of productivity between the mean and the max engineer? It's quite possible that this grows *a lot*.
- Armed with LLMs, do generalists increasingly outperform specialists? LLMs are a lot better at fill in the blanks (the micro) than grand strategy (the macro).
- What does LLM coding feel like in the future? Is it like playing StarCraft? Playing Factorio? Playing music?
- How much of society is bottlenecked by digital knowledge work?
TLDR Where does this leave us? LLM agent capabilities (Claude & Codex especially) have crossed some kind of threshold of coherence around December 2025 and caused a phase shift in software engineering and closely related. The intelligence part suddenly feels quite a bit ahead of all the rest of it - integrations (tools, knowledge), the necessity for new organizational workflows, processes, diffusion more generally. 2026 is going to be a high energy year as the industry metabolizes the new capability.
PHP2Shell: fixed in 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35. For 8.1 and older there's no release, but PHP published source backports for 7.4, 8.0 and 8.1.
On 8.5 without a patch: fatal_error_backtraces=0.
Platform fixes and my Dokploy patch: medium.com/@ttebify/php2shel…
GitLab: 12 years of releases with a CVSS 10 bug sitting in them.
PHP: back to 5.4, more than a decade. Found with AI's help.
Feels like AI is about to ask every codebase the same question: were you secure, or just never looked at closely?
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
Justice Ekemezie retweeted
it’s 2026. build like you’re already going to get hacked, because sooner or later you probably will
collect less. only keep the customer data you actually need. anything you never store can’t leak
encrypt everything you keep. not just passwords and card numbers: names, emails, addresses, photos, uploads, all of it. if someone gets into your database or storage, they should find nothing they can read
delete what you don’t need anymore. old accounts, expired orders, stuff from years ago that nobody uses. set it up so it gets deleted automatically, not “someday"
don’t store tokens or api keys unless you really really really really have to. if you do, encrypt them hardcore or put them in a secrets manager. and either way, keep your encryption keys separate from the data they protect
basically: the less data you keep, the less you have to worry about when you get hacked
Justice Ekemezie retweeted
wild 48 hours. still processing it tbh
so many marketing takeaways from this @jetbrains x nunonation event. will write them up properly on monday
we went viral (hacker news, x, etc) using a format most marketing teams wouldn't touch, precisely because it's so uncomfortable: raw, unfiltered, no script, just us
people don't fall in love with a brand. they fall in love with the humans behind it
thank you to everyone who shared, posted, dm'd, roasted us, all of it. means a lot
huge thanks to @brendt_gd, @matthieunapoli and @vanamerongen for being exceptionally awesome
Justice Ekemezie retweeted
I'm genuinely pumped about this talk.
We've been running Timefusion in prod for a year with some customers. But this summer we went all in; every single customer moved to Timefusion. As you can imagine, everything went to shit. lol. But we fixed it all, and now we're faster and cheaper than ever.
We even pushed those cost savings to our customers. Now it's $1 per 10 million metric events. For context, 3 years ago, Monoscope was $1 per 100k events. We've come a long, long way. Sometimes, its ok to just write your own database.
We’re excited to announce Anthony Alaribe (@tonialaribe), co-founder of @monoscope_tech, as a speaker at SysConf 2026!
His talk is titled “Timefusion: Retrospective on running a custom timeseries database in production.”
Anthony’s talk at #SysConf25 focused on the motivation for building Timefusion, a time series database built in Rust.
This year, his talk examines the reality of powering an observability platform using Timefusion over the last year, including painful incidents, what has gone well and the techniques the @monoscope_tech team has implemented to stay fast at scale.
Justice Ekemezie retweeted
Back in 2018, open source changed my life.
It gave me opportunities, a community, and a chance to build something that people around the world could use.
But there was a problem: it wasn't sustainable for me to do open source full-time.
And I still wish I could.
I know I'm not the only one.
Across Africa, there are developers and maintainers building libraries, frameworks, tools, and infrastructure that deserve more recognition and financial support.
So I built something for us.
Introducing flossafrica.com.
A platform making it easier for open-source creators and maintainers in Africa to get discovered, receive sponsorships, and sustain the work they do.
You get visibility.
Your projects get a place to be discovered.
And patrons can support your work without jumping through hoops.
Powered by @bachs_hq Connect, maintainers receive 100% of the money patrons sponsor, accessible same day for Naira sponsorships.
No complicated funding process. Just people supporting the software that makes the internet, businesses, and our communities work.
I believe Africa needs both:
→ Builders creating profitable products. Find them on pairlore.com.
→ Builders creating the open-source foundations and critical software that others depend on.
Both deserve a place in Africa's technology story.
@flossafrica is for the second group.
If you're an African open-source maintainer, I'd love to see what you're building, go add your projects and setup your account to receive funds.
And if you believe open source deserves better support on the continent, go fund a maintainer on FLOSSAfrica or at the very least, help me spread the word.
Open source changed my life. I want to help make it sustainable for the next generation of African builders.




















