β’ I make sites faster and cloud/LLM bills lower π β’ 2:43 marathoner (π 2:39) β’ Performance is my thing
Amsterdam
Joined December 2010
- Tweets11.5K
- Following194
- Followers73.4K
- Likes17.9K
Pinned Tweet
I've found (and locally fixed) an annoying performance bug on @X web!
TLDR: go to a post with a lot of replies, and scroll up and down - notice it's laggy?
There's a component that calculates the scroll parent, and then removes the scroll listener when unmounting. But it seems we don't even have a scroll listener most of the time, so we can avoid the heavy _getScrollParent function by wrapping it in a conditional
This removes seconds of forced reflow and lag for me
Would love to get it fixed! ππ» @X @engineering @elonmusk @nikitabier
The security release is out!
A lot of fixes π€―
nodejs.org/en/blog/vulnerabiβ¦
Found 6 bugs in GitHub CLI with my own version of this, it works well!
None of them ended up particularly being security vulns but mostly crashes/OOMs
All reported upstream. I was hoping they'd attach `help-wanted` so I can file PRs but alas, not the case
Hetzner just dropped a new networking feature π
I'm working on cleaning up my MCP setup and I'm surprised how bad the UX of OAuth still is
Slack is by far the worst, just had a hell of a time configuring multiple accounts
9
30
5,690
Grok 4.8 rolling out to Grok Bot users later this week π€
We have dumped JAX/SGLang and rewritten the entire RL and inference stack from scratch in C/C++, which took some extra time.
Training (aka pre-training) is done. Lot of cleanup was needed on the SFT data to get that mostly right. Now, 4.8 is in RL and the evals are starting to climb. We will do a soft rollout to Bot users later this week and see how it goes.
Grok 4.8 will bear no resemblance to 4.7 (thankfully). It is not yet incredible, but, this time, the foundations are built right, so I expect it to evolve to be something special.
Just set this up, very nice addition!
@bot can now connect to private MCP servers on your tailnet without exposing them to the public internet.
Powered by Tailscale OAuth apps, now GA, so you can build secure agent integrations, too.
Read more here: buff.ly/U1J9By1
Hope everyone is enjoying their weekend! π€
π¨ CRITICAL - Unauthenticated RCE in React Server Components (GHSA-xqc2-xf4c-x3h3)
A critical vulnerability in React Server Components packages (react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel) allows unauthenticated remote attackers to execute arbitrary code via crafted RSC Flight payload responses transporting multiple typed arrays and attacker-controlled values.
π Affected: Versions 19.0.0β19.0.8, 19.1.0β19.1.9, 19.2.0β19.2.8, 19.3.0 | Upgrade immediately to 19.0.9, 19.1.10, 19.2.9, or 19.3.1 (or Next.js 16.4.1 / 15.5.28)
github.com/react/react/securβ¦
> 1,000 tokens per second
bro what
DeepSeek V4.1 Flash 1017 Ultrafast is now available on AI Gateway. It generates over 1,000 tokens per second.
Use ππππππππ/ππππππππ-ππΊ.π·-πππππ-π·πΆπ·π½-πππππππππ for coding, reasoning, and agents.
Daniel Lockyer retweeted
Hey @DanielLockyer I fixed another thing
(the average is purposefully kept at a floor of ~500ms)
A bunch of positive knock-on effects too from getting redis out of this lambda.
