“Didn’t you already say goodbye to Deno? Get new material!”

I know, I know, but not even a week after declaring my friendship over with Deno they actually killed Deno! The runtime is going away, and sorry call me pessimistic, but I highly doubt a community fork of any value will survive for long.

We will support the Deno runtime for another year with monthly releases containing bug fixes and security updates. After that year we will end our development of the Deno runtime.

Deno is joining Cloudflare - Ryan Dahl

There’s even a Fireship video on YouTube! Guess who gets a namecheck? I’m not going to risk embedding Google cookies so here’s a link: “The runtime wars are over… and Node won” (YouTube). I also found my way into the lead story of JavaScript Weekly.

It’s sad but telling that negative opinions and news around Deno has received the most attention. I have nothing new to say (until my Cloudflare exposé) but I do want to look back on my journey with Deno.

Hatorade

People who’ve only read my recent posts on Deno assume I was just a hater. Far from the case! I was all-in on Deno and wanted it to succeed. While it’s true that my disdain for what the tech industry has become leaked into my criticism, I’d say it was fair and accurate.

The Deno runtime was truly ahead of it’s time. It felt like using Node from the future (now Node today). The runtime was forgotten in favour of whatever tech start-ups do. My doubts grew by mid-2024 but I regained brief optimism with the Deno 2.0 relaunch.

I didn’t realise I’d written this many posts:

• Built with Deno (Mar 2021)
• Deno Builds on Netlify (Jul 2021)
• JSR: First Impressions (Feb 2024)
• JSR: Second Look (Mar 2024)
• The Deno Package Paradox (Aug 2024)
• JSR and Deno: Final Review (Aug 2024)
• Hey! Deno 2 looks fun! (Oct 2024)
• Deno’s Decline (6 Regions and Falling) (Apr 2025)
• JSR & Deno One Year Later - Malware?! (Jun 2025)
• Ditching Deno KV (Jun 2025)
• 404 Deno CEO not found (Mar 2026)
• Friendship ended with Deno, now Node is my best friend (Oct 2026)

You may have noticed my interest in Bun in my earlier writing. That was before I learned it was not a serious project. We don’t use vibe-coded fash-tech in my house.

Deno projects

Deno was my platform for fun side projects (and Advent of Code). I experimented with many silly ideas. A few turned into something practical that I still use today.

• Deno Stream Deck (Oct 2022)
  The one where I used Deno’s foreign function interface to manage a USB peripheral.
• SvelteKit and Deno with OAuth and Deploy (Jun 2023)
  The one where I built and maintained a Deno Deploy SvelteKit adapter.
• Get in Line, Deno! (Oct 2023)
  The one where I used Deno’s streaming APIs to efficiently seek lines.
• Git Granary (Jul 2024)
  The one where I built a git large file storage server that I still use today.
• HTTP Tunnel and Proxy in JavaScript (Oct 2024)
  The one where I piped two streams together to create a simple HTTP proxy.
• I Let The Emails In (Sept 2025)
  The one where I wrote a bare bones SMTP server with Deno.

The SMTP adventure was a disaster, but technically it worked! My private git LFS server has been rock solid. I actually found a use case for the HTTP proxy (blog post to come).

For reasons (sigh), I’m losing interest in publishing open source code and writing tutorials. My self-hosted journey has stalled because I can’t afford anything anymore. Tech sucks now. But I’m finding enjoyment in fighting for an open web (for humans). I’m having fun too blogging more non-technical topics and getting back into design.

I am no longer a JavaScript bro and that’s probably a good thing!

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

Whenever my blog hits a place with a comments section the most predictable comment I see — besides some variation of “this idiot is utterly delusional!”^† — is this one:

lol I read the domain as “D-Bus Hell”

Random commenter

I’d prefer if they focused on my actual blog content but I can’t get annoyed at people for seeing the wrong words. There’s a reason experts-exchange.com has a hyphen, and who can forget Susan’s party? I’d probably read “D-Bus Hell” myself, if I forgot my own name.

^† Why is Hacker News like that?

But for the sake of the record I would like to point you to your nearest WHOIS tool:

$ whois dbushell.com

Domain Name: DBUSHELL.COM
Creation Date: 2004-05-14T22:51:48Z

Don’t ask me what I was doing at ten minutes to midnight registering a domain name. Is there a more appropriate time? The significant point is the date: May 2004.

That was 22 years ago.

Now if I may direct your attention to the D-Bus project Wikipedia page:

Release November 2006; 19 years ago

D-Bus - Wikipedia

I rest my case.

The D-Bus project doesn’t even have it’s own domain name, for crying out loud!

So next time you see a post about D-Bus, maybe drop a comment saying: “reminds me of that dummy with a blog and a giant logo spelling out his full name!” Or something to that effect. (I’m joking, don’t do that.)

What’s in a name

To date I’ve resisted the siren call of nominative determinism so I can’t answer to whether D-Bus is actually hell or not. I considered writing a D-Bus review as a joke, but then I decided to watch paint dry. I’ve never heard Linux nerds express any strong opinions on the topic (for which they’re prone to do; see Systemd, Wayland, etc.)

I did go down the Wikipedia rabbit hole of cognitive psychology and linguistics. There’s an interesting read on Rebracketing where a word like “Hamburger” becomes “ham + burger” which was altered from the origin: “Hamburg + er”. This is a form of Folk etymology where words can change due to unfamiliarity.

Etymology

My surname could simply come from “bushel”. An imperial unit of volume still favoured by fantasy novels, before the Trollocs attack and shit gets real. “Bushel” dates back to Middle English with origins in the Old French word “boissel”.

At the risk of being part French, I’m inclined to believe an alternate theory that my name derives from “Bossall” a hamlet in North Yorkshire. But that would make me part Yorkshireman. I’m not sure which is worse.

It’s not a very common surname. If this Geneanet heat map has any credibility, the name favours the south of England. That might support the French theory? Liverpool has the highest number of Bushells though.

Bushells is also an Australian brand of tea founded by tea dealer Alfred Bushell in 1883. Alfred was born in Worcestershire, England (pronounced: Wrcstrshr).

Interestingly, Wikipedia notes:

After the Norman conquest of England; the Domesday Book noted in 1086 that in seven of the twelve hundreds covering Worcestershire, the Crown had no authority.

Worcestershire - Wikipedia

The Domesday Book always references Bossall (the Yorkshire hamlet) as Boscele or Bosciale; names that are Anglo Saxon in origin.

When I say “Bushell” over the phone my pronunciation is often mistaken for saying “Buchel”. Some sources say they’re from the same Anglo Saxon origin. These distribution maps for Bushell and Buchel cast doubt on that idea (if Forebears data is accurate). “Büchel” also has different origins if you stick an umlaut on it.

I suspect I’m dealing with multiple different names of Anglo Saxon and Norman origin. There are many spelling variations of “Bushell” and similar names in historic records (though few have survived). Most people were illiterate until recent decades so spelling variations are not surprising. It seems probable to me that whenever families adopted a spelling, a variation from the wrong lineage could’ve been written due to phonetic differences. Even if I traced my ancestry back hundreds of years, I’d likely reach a moment when a scribe wrote “Bushell” in some form and my ancestor just shrugged because he couldn’t read.

The etymology of “David” is well known despite being much older. Its roots are Hebrew meaning “beloved” and has found its way across Judaism, Christianity, and Islam.

D-Bus is “Desktop Bus” if you were too lazy to click the link.

What’s in a domain name

Domain names are a strange system. They’re temporary URIs that are leased and inevitably lost. I’ve spent half my life publishing content on dbushell.com. I started using it seriously once I had a design portfolio. If you’re curious you can see past versions at:

legacy.dbushell.com

In hindsight if I knew I was going to build a career around my website I’d have chosen something more memorable. Imagine all the common words that were still untouched in 2004? dave.co.uk wasn’t taken until 2005! I don’t actually go by “Dave” myself but like the “D-Bus” thing it’s not my choice to make.

For a brief moment I did consider moving to another domain. I would have had to maintain redirects forever. It’s not a sensible “SEO” manoeuvre either, if that matters anymore…

Now that I’m running my business from valleyfold.co.uk I’m happy I stuck with dbushell.com for my personal space.

Anyway, next time you spot the “D-Bus” comment please direct them there!

Better yet, take up this blog challenge: write about the etymology behind your name and domain name.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

Because I openly reject the driving force intent on destroying my profession, and ruffle a few feathers doing so, I often get asked privately for advice from like-minded peers. I can only offer an uninspired but sensible reply: don’t quit a paying job without a fallback. Go to the Winchester, have a nice cold pint, and wait for all of this to blow over.

I’m confident the situation will improve. Before it does, what can we focus on to accelerate past the intellectual slump, and better position ourselves once things calm down?

What’s in

For a sustainable web career, where better to look than critical skills in desperately short supply? My focus is on front-end development, but these areas of knowledge are relevant to anyone in the business of making websites.

Accessibility

Accessibility has always been a foundation of web development but it’s never been more critical for everyone to champion it. Understand why accessibility is for everyone. Learn how to talk about accessibility in respect to real needs and practical implementation.

Accessibility has unfortunately become a virtue signal for certain tech groups. (I’m told LinkedIn is rife with misinformation.) Accessibility is not a feature that can be tacked on to a website like garnish. Accessibility issues can’t be fixed with an automated process at the end. Web professionals must be able to counter this mindset by respecting accessibility in all decisions from day one.

Learn and adopt the guidelines as your baseline. Speak to and test with real people. Defer to specialists who are eager for you to understand the realities.

CSS (in stylesheets)

CSS is the most vibrant and evolving of the front-end standards. To architecture a good stylesheet takes deep understanding of the language features. Newer features like cascade layers and selectors that reduce specificity make this much easier.

CSS has always been equipped to handle well organised styles, but developers who refuse to learn and respect the language have sought to push complexity elsewhere, using simplified abstractions or “CSS-in-JS” solutions. These are inherently limiting, lead to poor performance, and don’t actually solve the problems they claim.

CSS should be hard and learning it will give you the ability to express creativity beyond cookie cutter web design. CSS skills will be highly desirable as more websites wish to stand out against the convergence of a generated aesthetic.

Communication skills

Communication is a “soft skill” in short supply (for obvious reasons). It’s a great skill if you wish to stand out as an expert, or simply be heard amongst the noise. Learn brevity and focus on important points. Don’t be afraid to ask questions.

Address concerns tactfully and early before they escalate. Don’t point fingers, but “cover your ass” — everyone on a project should be working towards the same goal, but some may be misguided in their approach. Remain positive and don’t meet negativity head-on.

If you can communicate well you’ll be highly respected in your role.

Rejecting fascism

You probably weren’t expecting this one, but here we are.

The luxury of not “getting political” has abated. Far-right political ideology is on the rise and dormant hatred is waking up in tech. The epicentre of fash-tech is Musk’s “X” with people like David Heinemeier Hansson spewing racism and abusing authority in communities to push an agenda, and Guillermo Rauch taking a selfie with a war criminal. Large tech giants like Digital Ocean are funding this power grab. Be wary of those denying this threat.

If you want to avoid being pushed away from this industry, recognise and reject fascism before it comes for you. Don’t stay silent.

What’s out

I’ve covered topics that’ll see us well for the future, but what should we forget?

React

Facebook’s experiment turned cargo cult is a legacy framework that still lingers, but there’s no reason to learn it today. React has entrenched itself as a lingua franca of code extruders. React code is generated faster than any human can possibly read it. Suffice it to say that despite stale job vacancies still demanding experience, React is not worth investing time. The days of high-paying React development are numbered.

GitHub

GitHub is now a liability. For private repositories use self-hosted git forges. I’d recommend Forgejo. One of the many Tailscale-like services is an easy way to gate remote access. Don’t make stuff public for the dead internet to attack! For CI/CD go local too, or use independent services not tied to tech giants. Take the time to learn basic git commands. A little technical and infrastructure knowledge goes a long way.

Influencers

These people are handsome, charismatic, highly personable. I’m talking about: developer relations, youtubers, start-up founders, etc. When the tech industry met us halfway, influencers were entertaining and a good chinwag at after parties. Now the game has changed and we should not allow false narratives to dominate and dictate a closed-web future. Normal people still use the web. Incredibly few can afford to pay for the novelties that influencers peddle. Their attention economy is no longer our concern.

So that’s my focus for a sustainable web career, when all this blows over.

Remember that above all else: the web is a human creation for human needs. Those needs are not going anywhere. Drop the dead weight accumulated in times of prosperity. Go back to basics and position yourself well for when professional demand returns.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

I’ve been using Node heavily this month on a SvelteKit client project. When did Node get so good‽ Deno has been my go-to runtime for so long I forgot how to Node. Now I’m back, I find all the ECMAScript^† sugar is supported and the old annoying APIs have been replaced or modernised. Most importantly, I never have to see require().

^† Doesn’t seem like that Oracle trademark dispute will see a positive end :(

Package management

The official Node docs recommend piping an internet script straight to bash (we never learn) to install NVM to manage Node & NPM. My (ancient) experience with NVM and NPM hasn’t been stellar. I heard Fast Node Manager (FNM) was better to switch Node versions. Obviously I roll bleeding-edge but I have client projects that demand stability.

I opted for PNPM too to avoid getting immediately pwned. (The “M” in NPM stands for “malware.”) Some scripts I use have hard-coded binary names^‡, so I added two aliases:

alias npm=pnpm
alias npx=pnpx

Maybe that’s a crime but so far it’s worked flawlessly.

^‡ Edit: I might be confusing the time I symlinked various binaries. The aliases do help when copying steps from install guides that assume NPM is installed.

PNPM also blocks post-install scripts. Does NPM still yolo those?

I added additional settings to pnpm-workspace.yaml to delay malware updates.

minimumReleaseAge: 1440
trustPolicy: no-downgrade

At first I tried setting the minimum release age to “one month” because it takes Microsoft at least that long to remove reported malware. This caused dependency issues where PNPM struggled to match suitable versions. I settled for “one day”; long enough to allow some other sucker to beta test the next Shai‑Hulud.

TypeScript

Node can now run TypeScript without throwing a tantrum like a baby if the stars don’t align. That said, one does not simply publish TypeScript packages to NPM.

error: [ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING]:
Stripping types is currently unsupported for files under node_modules

Why? Just strip the types bro, I know you can! Let me sign a deal with the devil!

To discourage package authors from publishing packages written in TypeScript, Node.js refuses to handle TypeScript files inside folders under a node_modules path.

Node.js v26.10.0 documentation

This restriction is philosophical rather than technical. I get it though. TypeScript is a Microsoft product. Opening that floodgate would pollute the entire ecosystem. Nobody wants more Microsoft. I’d love to see light “native types” in ECMAScript. There are type annotation proposals. I suspect I’ll be retired before those bear fruit.

No TypeScript packages mean I need to find the latest churnware slop to bundle my stuff. Tsdown did the trick, with only two additional dotfiles. Not thrilled about that (every dotfile represents a mistake). I suppose I break even after deleting deno.json etc.

Speaking of Microsoft lock-in, because they wrecked GitHub I’m self-hosting my own Forgejo instance. NPM limitations mean my packages have lost “provenance”. I had to configure the PNPM trust policy to allow my own stuff. Fun times!

Migrating my website

My final test for Node was converting my static site generator from Deno. Not many Node versions ago this would have required a major refactor. Today with Node v26.10.0 I found surprisingly little work to do.

The only required changes were to replace Deno’s file system API with node:fs — which is vastly improved from what I remember (literally ~10 years ago). Aside from that, I had to replace Deno.serve with Hono’s node adapter (a wrapper around node:http).

After this minimum-viable migration I was shocked to see 15% faster builds. My codebase still favours idiomatic Deno. I bet I’m leaving performance on the table by not using other built-in Node APIs. That’s something to explore later. The only further change I made was to replace Deno’s @std/path with node:path which is a straight import swap.

So if I were to TL;DR in the middle: Node got a glow-up, wow!

You’ve probably known this for a while. I kept using Deno out of habit and familiarity. And I haven’t exactly been enthused to write server-side JavaScript recently.

Deno’s decline

I’m burying this part because it’s flogging a dead horse. Ultimately, Deno failed when they allowed the Silicon Valley Circus to define “success”. Deno went from an innovative modern JavaScript runtime to a boring start-up with uncompelling products. Half the employees were laid off and what’s left are tweeting AI fantasies and vibe-coding Temu Cloudflare.

There is no reason to use the Deno runtime today. Deno Land Inc. stopped innovating that years ago. Node has slowly but surely caught up, even surpassing Deno in places.

What finally pushed me away was:

• Broken ZSH integration for weeks
• JSR’s aggressive “429 (Too Many Requests)”
• Bug(s) that made Deno choke on concurrent HTTP requests

Basically stuff that made it borderline unusable on top of my other criticism. JSR support were very quick to delete my account on request. I don’t like leaving dead profiles around the internet. None of my packages are visible but old versions remain installable.

It was fun early on but now it’s time to say goodbye.

brew uninstall deno

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

I’ve even designed my own book cover, scroll down to see…

An intro to the genre

“Shin honkaku” translates to “new orthodox” and pays homage to classic western authors of the early 20th century such as Poe, Queen, Van Dine, Carr, Christie, and Conan Doyle. All of whom are often referenced by the fictional detectives within shin honkaku books.

The genre began in the 1980’s. As the name implies, it’s a return to the roots of mystery fiction. There is a deliberate emphasis on “fair play” allowing the reader every chance to solve the mystery. Prior to shin honkaku, Japanese detective fiction had a seedy reputation.

Sōji Shimada writes in the foreword to The Moai Island Puzzle:

In the 1920s, when Edogawa Rampo imported the Edgar Allan Poe-Arthur Conan Doyle style of mystery novel which started in the West, and new Japanese writers gathered to solidify the form of this new genre, the scientific revolution which had given birth to the detective novel had not yet arrived in Japan. In the absence of scientific inspiration, Rampo turned to the grotesque haunted house attractions of the Edo period (1603-1868).

Eventually, Rampo’s followers started going too far, even introducing the pornographic tendencies of Edo period entertainment fiction into their novels.

Foreword to The Moai Island Puzzle (Alice Arisugawa, 2016) - Sōji Shimada

This effectively killed mainstream interest in mystery fiction, as Shimada continues:

As a consequence, Japanese mystery authors were looked at with contempt by authors of pure literature at the time, purely because of the vulgarity which offended their morals. Hence the belief that mystery fiction was just lowbrow entertainment found its way into Japan’s literary world, as well as with the readers.

It is Sōji Shimada himself who is often credited with the revival. Shimada’s debut novel The Tokyo Zodiac Murders (1981) is considered one of the best. It’s certainly my favourite! Somewhat ironically, it was shortlisted for the Edogawa Rampo Prize.

The Tokyo Zodiac Murders

This book was where I discovered the shin honkaku genre. If you follow my notes blog you’ll have read my short summary:

The story itself is terrifyingly gruesome. The mystery behind who committed the murders is a seemingly impossible series of events with a deceptively original explanation. After re-reading the details more than once I “solved” the mystery. At least, I got the gist of how things happened and arrived at the correct name(s). The exact explanation is far more elegant than I pieced together myself.

Note for Mon 31 Aug 2026 - David Bushell

Since reading Sōji Shimada’s two translated books, I’ve read Yukito Ayatsuji, Alice Arisugawa, Keigo Higashino, and Seishi Yokomizo (older honkaku, but worthwhile.)

The stories are short relative to my usual epic sci-fi/fantasy tomes. I suspect my perspective on typical novel length has been warped. If you’re a fan of puzzle games, this genre will be your cup of tea. The books often include dramatis personae and illustrations for reference. And red herrings, of course. So many red herrings!

Book design

Back when I studied design I created a series of space opera paperback covers. This project was a significant part of my graphic design bachelor’s degree.

The brief was also a “competition” (cough — exploitative spec work — cough) that could have seen my designs become a limited print run. An insider said I was shortlisted to win, but my printing techniques were not financially viable. Although in hindsight maybe they were being kind… either way, the winning designs were very nice indeed.

Inspired by my new obsession for shin honkaku, I dusted off the ol’ image editor and whipped up a design mock-up for The Tokyo Zodiac Murders.

For a quick weekend project, I’m very pleased!

I would love to tighten up this design and create a full series of shin honkaku books. I forget the rules and limitations of book design, maybe I’ve committed a fatal folly? Doesn’t matter! It’s a concept. Early in my career I went from graphic designer, to web designer, to front-end web specialist. It’s nice to go back to where it all began. Still got it!

I would welcome book suggestions in you’re familiar with shin honkaku. I fear I may exhaust the available English translations.

Copyright attributions

I used the following resources in my design:

• Cry Wolf font by Hanoded (licensed)
• Hina Mincho font by Satsuyako (Google Fonts)
• Zodiac sign icons by Chaiconator from Noun Project (CC BY 3.0)
• Shoe print by rasendria from Noun Project (CC BY 3.0)
• Perfect-bound paperback book mockup (free)

The Tokyo Zodiac Murders was written by Sōji Shimada in 1981. I read the English translation by Ross Mackenzie & Shika Mackenzie published by Pushkin Vertigo who have a great collection of designs for other crime authors.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

I’ve waited long enough! I’ve entertained one “wait six months” too many!

The TL;DR for my updated AI policy has changed:

- I do not currently use AI for professional work.
+ I do not and will not use AI.

The absolute vileness of the AI industrial complex knows no bounds.

Beyond morality — because let’s be honest few care — it’s very simple:

There is no worthwhile career in AI-anything.

Simple as that. The AI industry is designed to dehumanise and commoditise labour. Everyone who has dedicated their life to token servitude has become a dull fungible meat proxy.

The software and web development industries are leading this brain drain. I’ve observed devs go from the giddy thrills of gambling with their employer’s tokens, to the depressing realisation that they’ve been fooled by a small group of grifters and influencers.

So many developers are giving up. Many have literally left the industry unable to find meaningful employment. Many more have figuratively quiet-quit. They clock in to babysit chatbots with no incentive to care about the output beyond quantity.

I’m done pretending there is any hope for the AI industry to redeem itself.

I’m moving on to more interesting things. Barring a monumental power shift, collapse of the industrial complex, and rise in free range grass-fed “local AI” (lol) I won’t be looking back. Wake me up if anything changes!

What does that mean, practically?

In practice

First and foremost I will continue to build websites for real people. I set up shop as a limited company after a decade of freelancing to bolster my commitment.

I will observe the AI industrial complex cautiously from afar, but I won’t allow the bullshit I see to rage-bait me. There will be times I’m obliged to call out egregious insults to my profession. Otherwise, I’ll strive to ignore the echo chamber to protect my mental health.

I am distancing myself from peers I once respected who are all-in on chatbots^†. It is not my task to help them. I have no interest in anyone wilfully funding billionaires’ fantasies. There are new people to meet who respect humanity.

I feel happier about my future now. There is no longer any lingering doubt. The perpetual tech circus may be a threat to my patience and sanity but it won’t take my career.

So to immediately move on to more interesting things: my latest obsession is shin honkaku detective fiction! I’d highly recommend The Tokyo Zodiac Murders by Sōji Shimada, and The Moai Island Puzzle by Alice Arisugawa — both satisfying reads.

Read part two of today’s double feature: Shin honkaku!

^† Edit: originally I wrote “lost to chatbot psychosis” here. A poor turn of phrase given the context. It wasn’t meant literally, and I should not be using it derogatorily. I very much empathise with victims of AI. Chalk it up to frustration with the industry and trying to edit multiple thoughts down to keep this brief.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

The problem is obvious for Bluesky users. Clicking the fancy “View publication” button opens the homepage and not the actual article. This subverts the UI design pattern for ‘card’ components which is long established, evident by unhappy feedback.

I keep clicking the button myself despite knowing better.

I’ve seen Bluesky posts from Bluesky people suggesting this will change.

It was a design assumption for v1 that turned out to be … less than correct. We’re hard at work on v2.

@jimray.bsky.team

It sure is taking a while! Ideally they’d benefit by pushing a quick fix for this alone. Maybe that’s not feasible for a project like Bluesky. It’s frustrating because it gives standard.site a bad smell that’ll be hard to shake off.

The easiest way to temporarily remove the button is to remove the <link> element.

<!-- <link rel="site.standard.document" href="..."> -->

This is the document one for individual pages.

If I share my homepage I still get a button which uses the publication variation.

Unfortunately removing the metadata means my website is now not fully standard.site compliant. Although I am still publishing atproto records.

It’s possible Bluesky’s metadata extractor can be identified server-side and I could dynamically strip the element by user agent. I’m hosted on Bunny CDN so my only option would be to use a JavaScript worker. Bunny’s “edge scripting” add tens of milliseconds of latency to every page request which I’m not willing to entertain.

Let’s hope Bluesky fixes this soon because I reckon there’s something to atproto and standard.site. It may be yet another standard (obligatory link) but spicy JSON has a certain quality that holds my interest.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

At the time Apple were generous enough to provide a setting to disable this feature.

Although they hid the second part deeper, because why should saying “no” be easy?

Last week I succumbed to Apple’s harassment and upgraded macOS 15 to 27. I only skipped one major version, Apple skipped 10!

And today I discovered that Apple had removed the “no” switch.

The “AI” industry has many flaws, the word “consent” being seemingly missing from training data and company handbooks is one of them. AI bros do not take “no” for an answer. When Apple advertised their deepfake feature back in June it became obvious Apple does not “think different.”

Digging through macOS 27 settings I turned off Siri (again). Of course, multiple unkillable Siri processes remain, stealing memory and writing data. For what purpose? Who knows. Note that they removed “Apple Intelligence” from this control.

Trawling the web I discovered Apple has hidden settings under “Screen Time” restrictions. This is supposed to be for parental controls. These settings don’t disable Apple “Intelligence” but they do clean up various menus by hiding the slop tools.

All of this garbage was enabled after upgrading to macOS 27 despite me having “Apple Intelligence & Siri” turned off already. That was a rather explicit “no”, no?

The icing on this cake is the 22.28 GB brick clogging my disk space.

Apple is charging £500/TB on new MacBooks so that is what, £11 they’ve stolen from me?

But that’s a trivial cost compared to the consent problem. The AI industrial complex does not do consent. You will use it. You cannot look away, it will be stuffed down your throat and if you say “no” they’ll cut out your tongue.

The AI industry is vile. My AI policy tried to list my concerns but it’s hopelessly outdated. I can’t keep up. Here’s just three of many headlines I collected this month:

• Despite Pledges From Musk, Child Sexual Abuse Material Persists on X
• OpenAI Is Now Facing Over 50 Consumer Harm and Wrongful Death Lawsuits
• OpenAI and Microsoft Admits LLMs Are Destroying the Web and Built on Theft

The list is endless. There is no limit to the human toll to keep this bubble inflated.

Call me a radical but I’ve chosen not to kowtow to billionaires. Do you want another Epstein list? Because this is how you create another Epstein list. Fund a generation of psychopaths building on a foundation of non-consent and privacy invasion. Fantastic idea!

AI bros keep telling me “just turn it off” and when I do they remove the choice.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

I picked up the BenQ RD280UG — the UG is the new 120Hz model.

Was it worth the cost? It’s certainly not the cheapest monitor nor is it the most expensive. If it lasts the best part of a decade I’ll not worry. I didn’t compare many others but I’m guessing the BenQ is a little on the pricier side for the specs. Probably a limited edition because nobody programs anymore!

I have no referral link I just think it’s neat.

Screen

The “programming” marketing is all based on the 3:2 aspect ratio and matt panel. That means a 1920×1280 resolution, so an extra 200 pixels in height (technically 3840×2560 but my brain works in CSS pixels). I feel like I’m coding at an IMAX it’s glorious. It’s physically the exact width of my old monitor so watching 16:9 letterboxed video is no smaller.

120Hz is nice though not a game changer, I don’t think my lazy eyes care beyond 60Hz. The matt panel is amazing I see no glare or reflections. I feel like it’s giving me less eye strain. I’ll report back in a few months.

The “Programming dark theme” is a load of bollocks. The monitor has a selection of presets you can cycle through like every other monitor. You can split the screen in half and apply different profiles. I can’t see myself ever bothering to do that (on purpose).

Colour

I’m not a TV pervert so I can’t judge how accurate the colours are but it looks great to me. Looks better than my old LG. On par with my MacBook screen (this is bait).

I’ve always held the belief that designing websites on a perfect colour-accurate monitor is vanity. Few will ever see what the designer sees. Unlike print design, which has a predictable end product, web designers can’t control the final presentation. Therefore, maybe designing on a cheap, factory calibrated monitor is more closely aligned to end user experience?

To put it another way, you can tell if a web designer owns a $2000 monitor if their palette has fifty shades of the same grey and gradients that band like an 8-bit game.

The BenQ is a decent in between, if not towards the higher end.

Ports

The monitor has a reasonable variety of ports and KVM switching is possible. My old Mac Mini with Linux installed was too much hassle to use by switching cables. The only issue now is that my MacBook turns off when I switch with the lid closed. Still, it’s more convenient now to share keyboard & mouse. For KVM one machine must use a single USB-C cable, the other must use HDMI or DisplayPort and a USB-A-to-B cable. Why not simply two USB-C cables? There’s three USB-C ports and daisy-chaining is possible but not KVM.

My new setup is one USB-C cable from MacBook to monitor without a big dock in the middle. I’m glad to remove the Thunderbolt dock and its massive power brick. I still have an additional tiny 4 port USB-A splitter (900 mA) and an Ethernet to USB-C adapter that all tucks away behind the monitor.

A tidy desk makes for a tidy mind.

Other stuff

The monitor itself has an internal power brick. That means two less (for a total of zero) paper weights on my desk (unless the Mac Mini remains unused). Power bricks are a nightmare for adjustable standing desks. Good times!

The stand does its job. I can lower it to a perfect height which I couldn’t do with my old monitor. I had to buy an adjustable arm which needed space to flex behind my desk.

BenQ wants me to download their “Display Pilot 2” spyware. Not a chance! I heard “BetterDisplay Pro” was good and it does stuff but I don’t really need to do stuff. The monitor works out of the box. I don’t think I’m missing functionality.

I don’t game on this thing (Mac, lol) but as a “programming” monitor it works nicely despite the gimmick being overhyped.

TL;DR: 3:2 aspect ratio is neat. I’ll enjoy the novelty for a while.

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

I keep buying domains! When will I ever learn?

Domain prices are increasing (again) because why wouldn’t they?

Sub-domains are free! Host your side project on a sub-domain! Then if you get bored, who cares? I used to know this but somewhere along the way I lost the knowledge. My old projects like Shiro and Tales and print.css live long happy lives undisturbed by man.

I’ve been busy moving newer side projects to sub-domains or archiving them on my self-hosted Git forge. These are the ones I remember:

attic.social expires in six months. Attic is archived.

croissantrss.com expires in a year. Croissant is now on a sub-domain.

pikaday.com might needs to be renewed indefinitely to avoid squatters (it has juice). Is the strategy to stop redirecting and leave it blank for a year? Pikaday is now on a sub-domain.

jsx.lol is impossible to move without severing RSS subscriptions. I thought a legacy framework like React would have died out by now; how wrong I was!

xslt.rip is a piece of art waiting on Google to reap before it can expire.

mullenweg.wtf has a story behind it but I think interest has waned. Recent events transpired to nothing. The courtroom drama is glacial.

cottoncoder.com turned into my second notes blog but the domain still lives. Cotton Coder was to be my brand for web education. Glad I didn’t invest there — yikes that side of the industry evaporated quickly!

bankrupt.dev is expiring in 19 days, used once for a joke.

I’ve lost track of how many domains I’ve bought for a year and never used. “Buying” is the wrong terminology. “Renting” or “leasing” should be legally enforced.

I have a dozen dead domains I bought rented for possible company names before I settled on Valley Fold (valleyfold.co.uk). For brand names it’s difficult not to buy all the variations. I don’t own the .com but I did snap up the .co.uk — primary, .uk — criminal they sell that separately, .app and .dev for future use like website staging.

Want to guess how many TLDs and variations of dbushell I own (or owned) over the years? I let most go. It’s silly and expensive squatting them. FYI both myself and my ownership of dbushell.com pre-date the D-Bus project. Maybe it’s hell maybe it’s not, that’s not my beef! In hindsight though I wouldn’t have chosen dbushell.com if I knew it would become my freelance business.

It took a year of indecisiveness before Valley Fold Ltd was born. I was kicking around other names and domains but I’m happy where I settled.

I paid a three-figure transfer fee for quite.studio on a whim (ouch). I quite liked the sound of it… no one else agreed. Originally I wanted quiet.studio (note the different spelling) but more than one “Quiet” agency exists with the same idea.

Another business name candidate was “Focus Visible” inspired by Clearleft. A reference to CSS if you’re not familiar. I did like the nod towards accessibility too. The problem with this name is: do I use focusvisible or focus-visible with a hyphen? The hyphen fits the CSS property but hyphenated domains are lame. I bought both. All the big TLDs in fact. I was surprised they were available (not anymore lol).

“Focus Visible” also sounds like a team name from The Apprentice. Which is cringe.

Needless to say I have more domains waiting to expire than I’m actively using. I set up a second registrar account with notifications disabled so that I don’t have to see them! My new goal is to reach 2027 without renting a new domain. We are not in a golden age of web development and frugality is necessary to survive!

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.

They send all typed into editor input to codepen.dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it.

Apparently CodePen 2.0 sends data to their servers as you type

This post hit the front page with over 100 upvotes.

The author seems concerned as if CodePen is doing something untoward. In reality that behaviour should be fully expected. CodePen processes your code to generate a live preview. And to the relief of our browsers that’s done server-side without shipping a JavaScript bomb. CodePen has other features like live collaboration that require it too.

Technically an “autosave” feature can be done locally using browser storage but CodePen uses the server for that too. This allows users to restore unsaved changes from anywhere. You can test this by logging in cross browser, or deleting cached site data.

The author concludes:

Thus, if you ever entered some secrets in there by mistake consider them compromized even if you did not publish/save the pen

Yeah, of course. Don’t be so cavalier with sensitive data on your clipboard! This is true for all web-based editing software. Google Docs, etc. They’re effectively keyloggers by design.

User expectations

It does raise an interesting question: what is reasonable to expect users to understand? It’s easy to respond “Well duh!” to our Hacker News friend (and I did). But why did I expect CodePen to behave this way when others didn’t?

It’s a tricky question for product owners to handle. Burying details in the Terms of Service that nobody will ever read doesn’t help anyone (except lawyers).

Gamers Nexus on YouTube recently exposed LG TV spyware doing really insidious stuff. We all know smart devices phone home but LG’s tactics are another level. Probably illegal. Consumer (and human) rights are certainly a reasonable expectation!

The grey area between what’s obviously wrong and what’s reasonable to expect is murky.

I’d highly recommend the CodePen Radio podcast where the team discuss product design and development. It’s very insightful.

The license

There is one aspect of CodePen that I think is a much bigger concern for users and far less understood. This one is “hidden” in CodePen’s Terms of Service.

All public code snippets are MIT licensed:

Public Pens you build on CodePen are MIT licensed, meaning other people are free to use it for whatever they like under the terms of the MIT license. Don’t put anything on CodePen where that wouldn’t be OK.

Your License to Us

I’ve seen a lot of stuff shared on CodePen where I wonder if the author intended, or even had permission, to effectively give it away for free.

Personally I think CodePen using the MIT license this way is a brilliant idea. It allows CodePen to do what it does. Most user-generated content websites have absurdly long terms around content rights. GitHub’s user-generated content section is just shy of 1500 words.

Using the MIT license solves this problem succinctly. I’ve pasted the entire license below. You really should have it memorised by now. It’s the Lord’s prayer for developers.

Copyright [YEAR] [COPYRIGHT HOLDER]

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

The MIT License - Open Source Initiative

This is not an advertisement for CodePen Pro but you can pay to retain ownership.

From what I’ve witnessed over the years, users (and developers) simply do not understand copyright and licenses. I’m surprised CodePen doesn’t make this a little clearer. But then again, I’ve not heard of any disputes over “stolen” code, so maybe it’s another non-issue?

With CodePen 2.0 exposing the file system I’d like to see a LICENSE.txt for every pen.

Would that work? What happens if users try to change or edit the license? Does it need to be locked? I don’t know the best solution but I’d like to see the MIT license visible.

No spicy drama here I’m afraid! Just a public service announcement and unanswered questions around user expectations. CodePen is not even selling your data for model training, what a bunch of bores! On that note, I guess with LLM code washing it doesn’t matter anymore :(

Thanks for reading! Follow me on Mastodon and Bluesky. Subscribe to my Blog and Notes or Combined feeds.