Thoughts on AI, the tech stack, and the indie hacker journey.
August 2, 2026 is when the European Commission's AI Office started enforcing AI Act transparency rules on chatbots, deepfakes, and AI-generated content — and the obligation is keyed to where your users sit, not where your company is incorporated.
OpenSEO founder Ben Senescu built an open-source Ahrefs and Semrush alternative and walked into his Product Hunt launch with roughly 4,000 GitHub stars already banked. The license isn't the interesting part — the sequencing is, and it's worth stealing.
TypeScript 7.0 shipped GA on July 8 with real 8-12x build speedups, and it's now the default tsc on your next npm install. Three weeks of migration reports later, the upgrade is not the drop-in swap I told you it'd be in April.
The June 2 executive order's 60-day deadline to build the staged-access machinery landed August 1 — and the honest answer is that no one outside a classified process can confirm what actually got built. Here's what's verifiable, what isn't, and what I'm changing about the June advice.
Jacob O'Bryant's July 25 post hit #1 on Hacker News with a simple claim: LLMs got useful the moment they became reliable enough to iterate against explicit pass/fail checks, and further model gains barely move the needle from here. Here's what that means for how I budget my own coding time for the next year.
On Microsoft's July 30 earnings call, Nadella confirmed GitHub Copilot is merging into one Copilot super app alongside the consumer chatbot, M365 Copilot, Cowork, and the new Autopilots agents. I run GitHub Copilot every day, so here's what's actually worth watching versus what's just noise.
On July 21, Vercel patched nine CVEs in Next.js under its new pre-announced security release program, including an SSRF in rewrites and a Turbopack middleware bypass that can skip your auth checks entirely. Here's the five-minute check and why the release cadence itself is the bigger story.
OpenAI's July 28 field report on agentic scientific computing has a genuinely wild speed number buried in it — and a scarier finding right next to it: the agents that produced the speedup couldn't reliably tell when their own output was broken.
Sophos X-Ops analyzed seven days of Windows endpoint telemetry and found AI coding agents tripping the exact detection rules built to catch credential theft and living-off-the-land attacks — not because they're compromised, but because agentic coding looks like an intrusion from the outside.