Michael Coyne

Central Park views

Five minutes after reporting a bun bug. Both cool and disturbing :D

My colleague Aaron Parsley just won a Pulitzer for this story, written days after he survived the July 4 floods that killed his nephew. It's one of the most gutwrenching and memorable things you'll ever read. Please do.

I wrote a new blog post about my personal workflow with agentic development michaeljcoyne.me/posts/2026-0...

CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one day after Theori researchers disclosed it and shared a proof-of-concept (PoC) exploit.

A coworker recently introduced me to pi-hole.net and I have been running it as my primary DNS resolver on my local network for about a month. Over 17% of all DNS requests are blocked and relate to advertising or tracking, which is ridiculous. Even my Roku is getting blocked 🤣

I've been using vim, tmux, and SSH as my core development tools for nearly two decades, and they continue to adapt seamlessly to modern AI and agentic development workflows. michaeljcoyne.me/posts/2026-0...

OpenCode was having issues with formatting YAML files for me in my Rails projects, so I figured out how to configure a custom LSP to fix the issue. michaeljcoyne.me/posts/2026-0...

All the posts on my website are now published in Markdown. michaeljcoyne.me/posts/2026-0...

What time to be alive. I'm able to work on a side project via my phone using Termux, SSH, a Linux server, and OpenCode.

Only true OGs recognize

In 1988, two men sit in a room. One of them is cryptographer Bob Morris, the father of Robert Morris, who had just released the first Internet worm. "We were both aware a line had been crossed and the world we inhabited had changed." (John Mccumber, Assessing&Managing Security Risk in IT Systems)

Finally ditched capistrano for a new Rails side project and Kamal is pretty great to use. I don't even need docker locally, how nice!

"AI wrote a hit piece." Video: youtu.be/RP-zs6J6ySw

Super Bowl MVP Jason Myers.

This is the year of the AI Super Bowl

Announcing the winners of the 2026 Gem Fellowship! gem.coop/updates/2026...

A simple CLI tool for rebasing stacked Git branches in the correct order. Built mostly with opencode and Claude in a few minutes, this will save me some manual git toil when working on multiple branches at once for a given product/epic. github.com/mjc-gh/trunk/

The Linux Kernel is just a program: serversfor.dev/linux-inside...

Just in time for v4.0!

The new React vulnerability is pretty scary. www.huntress.com/blog/peerbli...

Like others we are seeing attacks attempting to exploit React CVE-2025-55182 at scale, incl. botnet related activity. How successful have these attacks been? You can get a view here, where we track compromised host with Next.js attacking our sensors: dashboard.shadowserver.org/statistics/h...

🤯

That was the greatest baseball game I’ve ever seen.

Yikes 😬

Coding outside on vacation: :set background=light

After 7.5 years, we finally updated the functionality overview in the @cilium.io README 😅 A lot has changed in that time, but the overall vision of the project is still very consistent. We just have a more articulate way to say it now 😀 github.com/cilium/ciliu...

#LGM

The singularity is awesome

If you haven't used it yet, there is truly no better way to write resilient background jobs in Rails. github.com/fractaledmi...

If you use "AI agents" (LLMs calling tools in a loop) you need to be aware of the Lethal Trifecta Combine access to private data, exposure to untrusted content and the ability to externally communicate and an attacker can trick the system into stealing your data simonwillison.net/2025/Jun/16/...

Here’s the thing: Mets games are fun to watch because the team is good, but they’re also fun to watch because they look good and are fun to listen to. It’s incredible overall entertainment in a way that other baseball teams just aren’t doing.

Midtown Greenway views

Gary Cohen: "By BlueChew. Chew it and do it." Keith Hernandez: "What did you mean by that?" Gary Cohen: "I just read the copy here. I try to give it a good read. Try and give the advertiser everything that they paid for, Keith. And then it's somebody else's problem." #MLB

benjaminaster.com/css-minecraft/ by @benjaminaster.bsky.social is incredible! Editable Minecraft-style world, entirely CSS and HTML, not a single line of JS My notes on how it works here. It uses radio boxes for state, paused animations for controlling the viewport simonwillison.net/2025/May/26/...

Spring has sprung!

eBPF is so awesome

This is a new image from #JWST. The bright points with spikes are stars in the Milky Way. Everything else is a galaxy. Everything. Else. Is. A. Galaxy.

If you read @byroot.bsky.social 's "What's the deal with Ractors?", and were bummed at how poorly they handled JSON parsing, then @jhawthorn.com has brightened your day! Frozen interned strings are now stored in a lock-free hash, making the Ractor example 2x faster than the single-threaded example!

Huntress has observed in-the-wild exploitation of CVE-2025-30406, a critical vulnerability in the Gladinet CentreStack enterprise file-sharing platform.

They're called public records for a reason. Starting today, WIRED will *stop paywalling* articles that are primarily based on public records obtained through the Freedom of Information Act, becoming the first publication to partner with @freedom.press to offer this for our new coverage.

I had a front row seat to watch 18F get started a dozen years ago by some of the smartest and most dedicated public servants I’ve ever met. Their work saved countless lives, and yes, hundreds of millions, probably billions, of dollars. But just as significantly: it made government more responsive.

It’s time

greatest city in da world babyyyy

The real issue here is embedded in the "AGI" stuff, that continues to hang over the space. Having watched this in the AV space, here's the deal: if you can't define the value of your technological product in quantifiable terms, you can't charge a premium for it and it becomes a race to the bottom.

My favorite fact about the NYC subway is that there are way more daily riders (about 4 million) than the number of people who fly in the US out of all airports every day (~2.5 million). The scale is hard to get a grasp on.