Nicolas Grilly

Writing a long "passkeys are a trap" piece without seriously dealing with phishing is a bold choice. Phishing resistance is the main reason passkeys exist. (I say this with my own doubts about attestation and the extra complexity.) nonfunctional.substack.com/p/passkeys-a...

Workers & DO offer a fantastic programming model, but were locked to Cloudflare. Deno joining CF is a sad day for Deno.js, but it's great news for workerd/celld: Ryan & Kenton seem determined to turn it into an open, universal standard, just like Node.js did for server JS.

Some devs are excited about having their coding agents write raw C or assembly, throwing type systems out with the bathwater. Meanwhile, mathematicians are doing the exact opposite by pairing AI with theorem provers like Lean, and getting the best of both worlds.

Want to use an AI assistant, but IT or legal says no? www.grilly.com/posts/when-i...

it's starting to feel like we're living in an alternate timeline with "For All Mankind" vibes, where the USA is gatekeeping frontier AI while China is championing open source

Brendan Eich vibe coded JavaScript in 10 days, no AI.

I resisted for a while, but I finally upgraded my Mac to Tahoe (version 26.4). The rumors are true: The adaptation of Liquid Glass to macOS is really ugly, lacking polish, and sometimes even hard to read. First time I've seen Apple fail this badly at UI and UX.

Kagi Translate now supports LinkedIn Speak as an output language.

We could finally write programs for the browser in any language that compiles to WebAssembly. And even mix and match multiple languages. It would be amazing. hacks.mozilla.org/2026/02/maki...

I like the similarity between Richard Rumelt’s strategy kernel and John Boyd’s OODA loop: > Diagnosis/Challenge = Observe & Orient > Guiding policy/Crux = Decide > Coherent actions = Act

Here's a list of all the places Trump is building concentration camps to brutalize non-white men, women, and kids—including many in the US legally and some who are citizens. Most will be sent to die in places they've never been to or to be tortured by Trump pals. # = Prisoners.

Split diffs are now the default in Zed. Simple feature, complex implementation. Cole wrote about what it took to get alignment right on every keystroke: zed.dev/blog/split-d...

Prompt injections for agents are the equivalent of social engineering for humans.

in a world shifting toward agentic coding, where humans essentially review code rather than write it, do we still need dynamically typed languages?

No, DeepMind has not solved the protein folding problem. #Alphafold predictions are valuable hypotheses and accelerate but do not replace experimental structure determination.

Just saw this on HN: "Nerd: A language for LLMs, not humans". Interesting take, because I think precisely the opposite. Coding agents let us produce a lot of code, code that we need to review. We need languages optimized for code generation by AI, and code review by humans.

"Software development is thinking made tangible." www.caimito.net/en/blog/2025...

Thank you @mullvad.bsky.social for fighting #ChatControl everywhere, even in the subway, to make the general public aware of this threat to our democracies. 🇪🇺👀

All the talks about AI replacing all jobs seem premature. AI will not cause mass unemployment without a breakthrough on AGI. What makes us believe that unlocking the secrets of intelligence is easier than unlocking the secrets of Alzheimer’s or cancer? www.grilly.com/posts/ai-hin...

Two good posts on dynamic SQL queries in sqlc and @golang: brandur.org/fragments/sq... dizzy.zone/2024/07/03/S...

My son, learning Lua in Roblox Studio, doesn’t call functions. He told me he summons them! 🪄

Interesting paper showing that stackful coroutines (used for example in Go and Erlang) are not intrinsically slower than stackless coroutines (used for example in Rust, Python and JavaScript): photonlibos.github.io/blog/stackfu...

Why the Zig programming language matters, when to use it, and why correctness is a system design problem, not a language problem. Interesting thoughts from @joran.tigerbeetle.com. tigerbeetle.com/blog/2025-10... #ziglang

Best explanation I've ever read on why nil interface ≠ nil value in #golang news.ycombinator.com/item?id=4567...

It's scary and sad seeing the USA, one of the beacons of modern democracies, slip toward an authoritarian regime. But it's not too late to stop this and get back on track. Authoritarianism has never solved anything. www.theguardian.com/us-news/2025...

Introducing Mac or Chrome OS into a Windows-only IT environment is an excellent test of its maturity. A well-maintained and documented environment using modern standards and security will make the transition straightforward. Otherwise, the cracks will show.

Go would be the dominant backend language if it had null safety, sum types, and pattern matching. This is a missed opportunity.

v1.108 is rolling out today 🚚 Now live, at long last: Bookmarks, aka Saved Posts. For all those posts you'll definitely plan to come back to! Update the app and give it a try. The button is right down there 👇

This is a generational talent at work

Wondering how @oxide.computer racks can be so clean compared to Dropbox new racks. Dropbox: dropbox.tech/infrastructu... Oxide Computer: newsletter.pragmaticengineer.com/p/oxide

A former FBI agent on the widespread use of masks by ICE: “Masking has always been associated with police states. I think the masking symbolizes the drift of law enforcement away from democratic controls.” www.theguardian.com/...

Trump is basically the Ice King in Adventure Time.

The team responsible for a single microservice at a Big Tech company is often as large as, or even larger than, the entire engineering team of a startup. Same for the size of the codebase. This is why it often doesn't make sense for a startup to introduce microservices. nexo.sh/posts/micros...

"Why LinkedIn is so cringe" 🎯🤣 www.youtube.com/watch?v=YRvB...

This seems like a good time to remind folks of what Hannah Arendt once wrote:

“I could not believe that the national-security leadership of the U.S. would communicate on Signal about imminent war plans. I also could not believe that the national security adviser to the president would be so reckless as to include the editor in chief of The Atlantic in such discussions.”