The journal
Working notes from the workshop.
Posts on AI, software craft, and the things we learn while shipping. Twice a month, sometimes weekly.
Categories
Tags
Showing 12 of 669 articles
Cybersecurity·The Accenture Breach Wasn't About Source Code. It Was About What Was Sitting Next to It.
A hacker claimed to steal 35GB from Accenture in July 2026, including source code, RSA and SSH keys, and Azure access tokens. The source code isn't the risk. The credentials filed next to it are. Here's the audit worth running on your own repos this week.
CybersecuritySecurityDevOpsInfrastructure
Web Development·Astro 7.0: The Rust Compiler, Vite 8, and What Actually Breaks
Astro 7.0 shipped a full Rust rewrite of its compiler, a jump to Vite 8, and a default markdown parser switch, plus a short list of breaking changes. Here's what changed, what got removed, and a practical checklist for upgrading a real project.
AstroWeb DevelopmentJavaScriptDeveloper Tools
Web Development·Bun 1.3's Built-In SQL and Redis Clients: When to Drop pg and ioredis
Bun 1.3 ships Bun.sql, a unified client for Postgres, MySQL, MariaDB, and SQLite, plus a native Redis client Bun claims is 7.9x faster than ioredis. Here's the real API, working code, and when it's actually worth dropping your existing driver.
BackendJavaScriptTypeScriptDeveloper Tools- Business·
Andela Alternative in 2026: How to Hire Vetted Developers
Looking for an Andela alternative? An honest look at where Andela fits, where it does not, and how to hire vetted developers when you need one or two of them fast.
HiringRecruitingDevelopersRemote - Business·
Arc.dev Alternative in 2026: Hiring Vetted Remote Devs
Looking for an Arc.dev alternative to hire vetted remote developers? An honest look at what Arc.dev does well, where it leaves work on your plate, and how the options compare.
HiringRecruitingDevelopersRemote - Business·
Gun.io Alternative in 2026: Vetted Developers, Rethought
Gun.io is a strong pick for senior US-timezone freelancers, but it is not the only way to hire vetted developers. An honest look at the best Gun.io alternative options and how to choose.
HiringRecruitingDevelopersFreelance - Business·
Lemon.io Alternative in 2026: Hiring Vetted Developers
Looking for a Lemon.io alternative to hire vetted developers? An honest read on where Lemon.io fits, where it does not, and how to choose the right option for the role you are filling.
HiringRecruitingDevelopersFreelance - Business·
Upwork Alternative for Developers in 2026: An Honest Guide
Upwork is the biggest freelance marketplace, but the vetting is on you. An honest look at Upwork alternatives for developers and how to pick the right one.
HiringRecruitingDevelopersFreelance 
Career·How to Hire a Platform Engineer in 2026 (Not a Rebranded DevOps Engineer)
Platform engineering has its own hiring cluster now, distinct from DevOps, SRE, and cloud architecture. Here's how to define the role correctly, screen candidates for product thinking over ticket-taking, and avoid paying platform-engineer money for ops-with-a-new-title.
HiringPlatform EngineeringDevOpsInfrastructure
Cybersecurity·Jscrambler's Own npm Package Was Backdoored With a Rust Infostealer
On July 11, 2026, attackers used a stolen publishing credential to push five malicious versions of the jscrambler npm package, each carrying a 7.8MB cross-platform infostealer. Here's what it stole and how to check if you're affected.
SecurityCybersecuritynpmSupply Chain
Industry News·Microsoft's $2.5B Frontier Company Is a Bet That AI Pilots Need Bodies, Not Just Better Models
Microsoft launched Frontier Company on July 2, 2026: $2.5 billion and 6,000 engineers embedded in clients to get AI projects into production. AWS, Anthropic, and OpenAI launched similar units this year. Here's what it means for teams buying, building, or selling AI work.
AI IntegrationBusinessEnterprise AIIndustry News
AI Integration·Mistral's Next Model Is 'Fat But Sparse.' The Model Isn't the Interesting Part.
Mistral's CEO confirmed a new open-weight MoE model entering partner early access in July 2026. No specs are public yet, but the real story is what's sold around it: Studio and Forge, a sovereign AI infrastructure play for enterprises wary of depending on a US cloud.
AI IntegrationAIOpen SourceLLM
