Related posts
Russ Cox
Blog
Our Software Dependency Problem
strangers dependency download
The the words it uses that this site has seen
least often elsewhere. Posts are matched on those words alone —
nothing here is a summary of this one.
Sources
All Writing GitHub x.com Korrents Blog Bluesky Recommends Site
Top people
Simon Willison
Nick Janetakis
Pieter Levels
Casey Muratori
Aswath Damodaran
swyx
Ryan Singer
Kieran Healy
Bruce Schneier
Armin Ronacher
Kenneth Reitz
Barry Ritholtz
Showing Profile →
Show everything
Hiding Show them again
Show them again
Further back ↓
Hiding Show them again
20 September
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
18 September
Sociologist at Duke University writing on markets, exchange and moral order, and on plain-text and data-visualisation tools for social science.
17 September
Dutch bootstrapper who builds and runs their internet startups alone — Nomads.com, Remote OK, Hoodmaps, Photo AI and Interior AI — and has written about it at levels.io since 2013. Posts as @levelsio.
✈️ https://t.co/1z6UN2d0nh now supports imports from Flighty Flighty app → Settings → scroll to Manage → Account Data → Export Your Flights → Download the CSV → Open https://t.co/hVSVlYtnsg and import it there All your trips will show up on your profile imemdiately! Quoting @levelsio Since I added this ranking I seem to have activated lots of people and they're all uploading their travel history to https://t.co/HGCLKS5BD6 with the MCP endpoint at /mcp Here is @stevelacey's AI scouring his old emails for flight tickets and bookings to find his itinerary and add that to his profi… Related
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
From one piece
Be alert: targeted attacks on prominent Rustaceans
2 beliefs · simonwillison.net
open source
Their words
Any piece of software that depends on open source (which is almost every piece of software) has a network of human beings who are potential attack vectors - everyone with publishing rights to any of the packages in the dependency network for that software.
Show the whole quote
simonwillison.net
Their words
I guess our best defense right now is dependency cooldowns - giving new package releases a few days before upgrading to them, in the hope that supply chain attacks like this will be spotted by someone else.
Show the whole quote
simonwillison.net
16 September
Security technologist and author of books including Applied Cryptography and Data and Goliath; writes the Schneier on Security blog and the monthly Crypto-Gram newsletter.
15 September
Creator of Flask and Jinja. Writes about software at lucumr.pocoo.org.
Programmer, photographer and musician, best known for the Python Requests HTTP library and other Python tooling.
Co-founder, chairman and chief investment officer of Ritholtz Wealth Management. Hosts the Masters in Business podcast for Bloomberg and wrote How NOT to Invest.
14 September
Engineer at Vercel Labs as of 2026. Ships a steady stream of small developer tools — agent-browser, portless, json-render, native-sdk, the v0 SDK — and lists every one of them at ctate.dev.
emulate v0.11.2 is out Updates across six emulators: GitHub, Google, Resend, AWS S3, Slack, Microsoft GitHub → Raw Contents and README responses → Seed org members and admins → Checks handle branch and tag names with slashes → Org installation writes authenticate as the App bot Google → Calendar v3 discovery endpoint → RS256-signed ID tokens and JWKS for OIDC verification Resend → Idempotency keys for individual and batch sends, so retries don't create duplicate emails or webhooks AWS S3 → Preserve binary payloads on upload, copy, and download Slack → Truncate messages at 40,000 characters, w… Google Related
Programmer, teacher and speaker; long-time Microsoft developer-community figure, host of the Hanselminutes podcast and author of the hanselman.com blog.
8 September
Developer, author and YouTuber covering Raspberry Pi, homelab hardware and Ansible automation. Author of Ansible for DevOps.
5 September
Writer and programmer; co-founder of the software studio Postlight and author of the Bloomberg Businessweek essay What Is Code?
Bluesky provides a mobile web view that runs great on my four-year-old phone and never pushes me to download an app. That is special and appreciated and I hope it continues. Related
31 August
Dutch bootstrapper who builds and runs their internet startups alone — Nomads.com, Remote OK, Hoodmaps, Photo AI and Interior AI — and has written about it at levels.io since 2013. Posts as @levelsio.
Their words
I keep rejected by Claude for the most benign things now Like it wouldn't download and install a 1990s game from archive(dot)org because of copyright
Show the whole quote
x.com
26 August
American software engineer; worked on code-server at Coder and teaches TypeScript and open-source contribution. Publishes at joeprevite.com.
today is the day you stop doomscrolling stay with me - this will take 5mins 1. open the AppStore 2. download "ScreenZen" (free) 3. configure limits (e.g. 4 15-min sessions) 4. start with 1 social media app 5. a few days later, add another 6. repeat until you've added all apps too busy right now? add a calendar event with this tweet and do it this weekend trust me, you'll thank me next month Related
Programmer; makes Handmade Hero and teaches Performance-Aware Programming, and argues loudly about how software got slow.
From one piece
Why performant code matters (but gets widely ignored), with Casey Muratori
2 beliefs, in the piece's order there
Their words
the performance of your software is generally determined by the longest serial dependency chain because it's something that cannot be parallelized.
Show the whole quote
youtube.com
Their words
If every uh software engineer knew to watch out for false serial dependency chains, things where they were creating series of dependent operations that could not be optimized away or other sorts of architectural problems like that that cannot be easily fixed, then the world would look more like just wait and optimize the hotspot, right?
Show the whole quote
youtube.com
19 August
Software engineer and founder of Block Party; previously an engineer at Pinterest and Quora, and a co-founder of the non-profit Project Include and the tech diversity data project Where are the Numbers?
i’ve been using claude for all things home-related and it’s amazing. (just dump all files in and let claude index, summarize, and organize.) even better than being a repository of all receipts, it helps me maintain a spreadsheet that i can download and send to accountants, draft emails for correspondence with service providers, and proactively flag issues that i wouldn’t have realized otherwise. Quoting @money_cruncher Open a new gmail as soon as you buy a house (123house@gmailcom) Then save/forward every single receipt, invoice, quote etc to this email for all your home improvements: - replacing an entire roof - new flooring - new hvac system - building a new deck - etc These improvements raise your cost basis,… Anthropic Related
Writer and podcaster; co-author of Abundance with Ezra Klein, a staff writer at The Atlantic from 2008 to 2025, and host of the Plain English podcast.
12 August
Data scientist and machine-learning researcher; chief scientist at bitly, founder of Fast Forward Labs and Hidden Door.
Has anyone curated a static download of the good bits of Wikipedia/YouTube/etc. for being able to learn or explore new things offline? We could call it "The Good Place". Related
10 August
Statistician and Chief Scientist at Posit (RStudio). Author of the ggplot2, dplyr and tidyverse R packages and of books on R programming and data science.
Founded PSPDFKit in 2011 and ran it for a decade. Came back from a break to work on AI agents — the OpenClaw project, and OpenAI, joined in February 2026. Writes at steipete.me.
Sequoia Professor of Computer Science at Stanford, co-director of the Stanford Institute for Human-Centered AI, and co-founder and CEO of World Labs.
Their words
that child who learns about what you say kitty cat would not have the chance to download the internet of images of cat. They likely have seen three cats, 10 cats at most, but yet they're able to identify that tail as a cattail instead of a fox tail through a different kind of learning pathway.
Show the whole quote
youtube.com
28 July
American budget-travel writer who publishes as Nomadic Matt. Author of How to Travel the World on $50 a Day; runs nomadicmatt.com, a long-running site of destination guides, packing advice and gear recommendations.
15 July
Professor of finance at NYU's Stern School of Business, known for his work on valuation. He publishes his data, spreadsheets and classes free at Damodaran Online and writes the Musings on Markets blog.
My annual country risk update, which includes everything I know and have learned about country risk in my corporate finance analysis and valuation is now available to download: papers.ssrn.com
Related
29 June
Web infrastructure engineer and standards editor; chaired the IETF HTTP working group and co-authored core HTTP and Atom specifications.
4 June
American author of The Obstacle Is the Way, Ego Is the Enemy and Stillness Is the Key. Writes the Reading List book-recommendation email (started 2008) and owns The Painted Porch bookstore in Bastrop, Texas. Hosts The Daily Stoic podcast.
This Is Something You Have To Get Good At I’ll tell you, very few people become writers because they want to stand up in front of a room full of strangers and talk. Often, in fact, it’s the opposite. What draws most people to writing in the first place is that…
Related
Software engineer and writer; worked on Mapbox and built Placemark and Simple Statistics, and blogs at macwright.com.
Their words
The governed have something the governors need: labor, tax revenue, military service, consumer spending. This dependency is the source of democratic leverage.
Show the whole quote
Recently macwright.com
2 June
Founder and former CEO of Zynga, the social-games company behind FarmVille, Zynga Poker and Words with Friends; says he founded ten companies in all, and wrote Life at the Speed of Play.
Their words
They vote with their clicks. You lose at least half your users every click. Every time you say click here, half people don't click. And you lose 80% when you say download this. At least that's probably 90 or more. 90% or more in the app store.
Show the whole quote
youtube.com
10 May
Writer and artist, author of Steal Like an Artist; publishes a weekly newsletter and an annual list of the books he read.
A zine for Mother’s Day Download: Related
24 April
Freelance web developer and instructor. Author of the Dive Into Docker course; writes tutorials on Docker, deployment and development environments at nickjanetakis.com.
31 March
Founding member of OpenAI and former director of AI at Tesla; creator of nanoGPT and the term "vibe coding".
New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads. Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned. It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I thin… stepsecurity.io
Quoting @feross 🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downl… Related
16 March
Professor of finance at NYU's Stern School of Business, known for his work on valuation. He publishes his data, spreadsheets and classes free at Damodaran Online and writes the Musings on Markets blog.
The equity risk premium (ERP) is an essential ingredient in hurdle rates in corporate finance, discount rates in valuation and expected returns in financial planning. In 2009, I pulled together everything I know about the ERP, in a paper that I have updated every year since. My 2026 update is now available to download and it is written for practitioners. papers.ssrn.com
Related
11 February
Founder of OpenStreetMap, the collaborative map of the world; later worked on mapping at Microsoft and Telenav.
I love how on @googledrive you tell it to download some files and then if you change wifi network it 1) throws away all the progress and 2) you need to tell it to download again.... Thus faithfully re-creating the 1995 browser download experience. Related
20 January
FreeBSD developer and former FreeBSD Security Officer; founder of the Tarsnap online backup service and author of the scrypt key derivation function.
Indian software engineer and co-founder of Skcript; builds web apps and writes at varunraj.in.
9 December 2025
Researcher and science writer. Co-founder and editor at Works in Progress magazine, formerly a researcher at Our World in Data, and author of the Scientific Discovery newsletter on science, global health and medical innovation.
Their words
I download the data and write up code in R , using ggplot2 to create a graph
Show the whole quote
scientificdiscovery.dev
7 August 2025
Founder of what became Bloomberg New Energy Finance; writes and speaks on clean energy, hydrogen and the economics of the transition, and hosts the Cleaning Up podcast.
6 August 2025
swyx Recommends 6 Aug 2025
Writer and developer. He runs the Latent Space newsletter and podcast about AI engineering, and writes essays on software and careers at swyx.io.
Their words
the super messaging app. https://www.beeper.com/download (i know founder)
Show the whole quote
swyx.io
12 February 2025
Development economist; writes Global Developments, on growth, history and the numbers behind them.
7 February 2025
Distributed-systems safety researcher; runs the Jepsen consistency-testing project and wrote the Riemann monitoring system.
25 January 2025
Writer and developer. He runs the Latent Space newsletter and podcast about AI engineering, and writes essays on software and careers at swyx.io.
7 September 2024
Author of Shape Up; formerly head of strategy at Basecamp, where he worked on product design for seventeen years; now runs Felt Presence.
5 July 2023
Author of Shape Up; formerly head of strategy at Basecamp, where he worked on product design for seventeen years; now runs Felt Presence.
2 February 2023
Cryptography engineer; maintains Go's cryptography libraries as a full-time open-source maintainer, funded directly by companies that use them.
Their words
This is how I frame it: if the effort required to replace or fork a dependency should it go unmaintained is measured in engineer-months, that’s a critical dependency and retaining its maintainers probably makes good business sense.
Show the whole quote
words.filippo.io
17 May 2022
Working on @ampcode. Writing registerspill.thorstenball.com. Once authored interpreterbook.com and compilerbook.com.
16 November 2021
Free software developer; maintainer of sway, wlroots, aerc and scdoc, and founder of the SourceHut (sr.ht) software forge.
14 March 2019
Writer and researcher on how people organise online; wrote Working in Public, on the maintenance of open-source software, and Antimemetics.
Nothing matches. Show everything
A korrent is a belief a person has stated in their own words: one
sentence stating the claim, backed by a quote and a source, kept at
korrents.com .
Under a name here, the quoted block is what they actually said.
The korrent beneath it is the claim those words support, in
korrents' wording — tap it to see the record, its source, and who
else holds it.
Nobody here wrote their own korrents. They are compiled from public
statements, and a person can change their mind, which is recorded too.
Got it
About the English under a post
Some people here publish in a language other than English. Where they
do, this site shows a machine translation beneath the post, in
this typeface — the site's own, not theirs.
The post itself is never changed, moved or hidden: what is set in the
serif above is exactly what the person published, and it is what to
quote them on. A translation can be wrong in ways that matter,
especially about tone.
Only the post's own words are translated. A quoted post, a linked
article and a belief on korrents.com
are left in their original language.
Got it