Next.js Security Update: December 11, 2025
Another week, another Next.js security problem.
Well, okay, two new security problems...
Hire Helsinki to be your new hometown
I keep getting this pop up as an advert on Reddit. If I could be tempted somewhere other than Scotland, it would be here, so it's weird that I keep getting it.
Not that I could ever move somewhere like Helsinki. I can't speak anythign other than English, and I suck at learning another language (over a year into trying to learn some Dutch, at this point, and getting nowhere).
Still, it's nice to dream...
Pony Tutorial
I doubt I'll ever have a need for it, but there's something about Pony that looks interesting. I think I might have to dabble at some point...
Digital ID - Hansard - UK Parliament
The UK Parliament debated the plan to introduce a digital ID. I have mixed feelings about this falling mostly on the no side; shades of the old No2ID campaign all over again.
The f*** off contact page - Nic Chan
A nice little rant about how many company websites have a contact page (or a lack of contact page) that is designed to discourage you from contacting them. Nothing says "we want your money now fuck off" like a "here's our knowledge base" link...
Transparent Leadership Beats Servant Leadership | Hacker News
One of those rare threads on HN where the comment threads are the better read than the article (and I don't think the article is a bad read). I've long been collecting articles related to leadership in tech, and this has some interesting opinions to consider.
Why I Ignore The Spotlight as a Staff Engineer
Thoughts on, in effect, getting on with the job and not chasing the spotlight.
macOS WM Directory
I never really think of macOS as an OS that has swappable window managers -- and I think that's correct for the most part -- but there are some neat ways of better managing windows. Here's a handy list to explore.
Critical Security Vulnerability in React Server Components – React
React doing React things...
Section 75 Consumer Credit Act
Saving this as I might need to finally make use of it...
.Net devs argue with Copilot in a PR...
Folk on the .Net team having an argument with Copilot is the most funny thing to me at the moment.
Paged Out!
I miss good geeky programming magazines. This looks like just the thing. Also it's free online, has RSS, has PDFs, etc; and you can buy a printed copy if you wish. Nice!
GDPR Enforcement Tracker - list of GDPR fines
It's often you get told or hear that nobody ever gets fined under the GDPR. Here's a site that shows that really isn't the case at all.
Air Loom - 3D Flight Tracker
Pretty neat visualisation of aircraft flight paths, all in 3D. Little bit bare but also fun; I can imagine it getting more comprehensive over time.
AI will write your next compiler!
The blog post that explains the background of the horrific Ocaml AI-written PR. Honestly... this feels like some post hoc rationalisation cope rather than a coming clean of an honest attempt to test something out.
I'm not convinced at all.
Stopslopware
Pretty funny, but also on the nose, website relating to the issue of slopware. We're seeing more and more of it at the end of 2025.
GitLab discovers widespread npm supply chain attack
Yet another week; yet another supply chain attack...
DWARF support for macOS and Linux by joelreymont · Pull Request #14369 · ocaml/ocaml
This has to be a classic example of what I think of as a toxic AI-spawned PR.
“The Fall Of Icarus”: Astrophotographer Snaps Skydiver Falling In Front Of The Sun In Spectacular Photo
This is some fantastic dedication to getting a specific shot.
Unflipgame
Neat little game that reminds me of an even more clever take on what 5x5 seeks to do.
Cloudflare outage on November 18, 2025
Cloudflare's explanation of what was behind the great outage of 2025.
From the shortcuts community on Reddit: Google Keep to Apple Reminders
I'm in a household that is split between Apple and Google. I think this might become useful.
AI World Clocks
Pretty funny site that gives an indication at how good various LLMs are at understanding a request to write some code.
A Commentary on the Sixth Edition Unix Operating System
I've owned a copy of Lions' for a long time; perhaps 25 years at the time of writing. I'm pretty sure it was one of the firts books I ordered from this wee book-selling website called Amazon, back in 1999.
Here's an online version.
Body Battery for Apple Watch : r/AppleWatch
The reddit post where I first discovered BodyState. For a year or so this remained a really useful and focused app that did what I needed. As of November 2025 it's been sold to a company who are starting to ruin it already.
Such a shame.
Learn Dutch phrases, vocabulary and grammar – Understanding Dutch
Useful-looking site with resources for learning Dutch.
Cloudflare Pages
I use GitHub pages a lot. They work. But I also feel that all-eggs-in-one-basket isn't a great idea. I should look at playhing with Cloudflare Pages at some point.
I’m autistic and don’t speak. Here’s what I want you to know
Interesting insight into being on the spectrum and being non-verbal.
Conflicts at Work
I'm not sure I quite agree with all the content here, but I do like the overall breakdown. Having worked with some very disagreeable people, and having worked with people in a leadership position who could not handle any form of disagreemnt (I should blog my startup experience one day...), this does hit a few points I recognise.
Why “Everyone Dies” Gets AGI All Wrong
"Everyone Dies" is on my to-read list. From what I've seen it sounds pretty alarmist, but also that feels like that's the point. This article seems pretty negative on it (not that I've read the article at the time of saving this) so I'm keeping a link to this to read at some point in the future, once I've read the book.