Sohan Maheshwar humorously discusses challenges with JWT usage for authorization, focusing on payload issues and revocation challenges. The 'new enemy problem' in authorization is described, emphasizing scalability challenges with scopes. Microservice architectures pose challenges for JWT usage, with macaroons suggested for improved access control. Modern authorization methods like relationship-based access control and policy engines are recommended to address broken access control risks in web apps.

What happens when HTML steps inside the canvas? In this hands-on live coding session, we’ll explore the new HTML-in-Canvas API and the creative possibilities it unlocks. We’ll build from scratch, covering core concepts like pixel manipulation, simple effects, and basic shaders. The focus is on pr...

Agentic development feels like magic to some teams and overhyped to others. Harnesses like Claude Code or Codex have been built around the local loop, the way things have always been done: a single developer changing code before opening a PR. Inside real organizations, agents hit walls: re...

As React shifts from "Black Box" NPM packages to "Copy-Paste" components, we face a new crisis: How do we distribute complex state and security logic without locking down the UI?This talk breaks down the architecture of a multi-distribution system. We’ll explore using TanStack Query as a h...

Teams often start agent adoption by adding tools: MCP servers, API wrappers, chat interfaces in developer portals. But once coding agents move from local help into real delivery workflows, they usually fail earlier than the tool call. They read stale ownership, conflicting runbooks, missing...

Exploring AI engineering and agent-assisted development through Claude's Code on GitHub. Analysis of Cloud Code commits, repository scale, and language distribution. The impact of agents on coding in various languages like Python, TypeScript, Rust, Dart, and Zig, facilitating easier coding in traditionally more complex languages. The significance of stars on repositories in Cloud Code projects and the observation of growth patterns post-Christmas season. The impact of Christmas on exponential growth in commits per day, the current doubling time trend, and a focused analysis on the top 100 popular repositories in Cloud Code projects. Highlighting key differences in commits between AI and non-AI repositories, focusing on feature contributions, bug fixes, and UI changes. Exploring diverse use cases of Cloud Code, highlighting how Clickhouse utilizes extensive Cloud Code for optimization, CI testing, and infrastructure, fostering engineers' focus on more impactful tasks like feature development and bug fixes, along with the emerging trend of Cloud Skill repositories. The growing trend of active projects utilizing AI contributions, specifically Cloud Code's significant impact on real, critical software projects beyond AI-focused repositories. Exploring models and coding agents that self-identify like Cloud Code, particularly the aggressive nature of Cloud in generating code, as observed with GitHub Copilot and other models like Mistral. Projects adopting AI development observe an increase in GitHub issues due to code production, leading to functional issues. The popularity growth of Clickhouse may be linked to active use of Claude to accelerate development, not directly boosting popularity. Metrics tracking revealed exponential growth in the use of short codes, focusing on valuable contributions to critical code with continued usage.

Our telemetry dashboard was green — a bug-fixer skill firing hundreds of times a week, a test-coverage agent running on every diff, manual-tester agents driving browser test cases across products, security reviews kicking off across teams, daily active users climbing. And I still couldn't a...