Matt Kane
@mk.gg
Frameworks at Cloudflare 🧡 Astro core team 🚀 Previously Netlify, Gatsby. Made Unpic. @ascorbic in most other places
Pinned
Matt Kane
Matt Kane's site that looks like it was built in 1991
mk.gg
I've joined the retro homepage team. My new site is going for the HyperCard on Mac System 6 vibe.
Reading the replies to this and praying to the lord that I never have to work on a project where the users are as entitled as Bluesky users.
v1.112 is live!
We’re launching Find Friends, a contact import feature that helps you find people you know on Bluesky.
Try it! In the mobile app, go to Settings → Find friends from contacts.
Read how we took a more secure approach to this than other platforms: bsky.social/about/blog/1...
We’re launching Find Friends, a contact import feature that helps you find people you know on Bluesky.
Try it! In the mobile app, go to Settings → Find friends from contacts.
Read how we took a more secure approach to this than other platforms: bsky.social/about/blog/1...
December 17, 2025 at 7:15 AM
Reading the replies to this and praying to the lord that I never have to work on a project where the users are as entitled as Bluesky users.
It's nearly two weeks til new year! Don't be that sucker editing all your footers at midnight.
Set it automatically with the power of ✨AI✨
Set it automatically with the power of ✨AI✨
December 16, 2025 at 10:10 PM
It's nearly two weeks til new year! Don't be that sucker editing all your footers at midnight.
Set it automatically with the power of ✨AI✨
Set it automatically with the power of ✨AI✨
rip piss filter. ur with the angles now
The new ChatGPT Images is here
The new ChatGPT Images is powered by our flagship image generation model, delivering more precise edits, consistent details, and image generation up to 4× faster. The upgraded model is rolling out to ...
openai.com
December 16, 2025 at 8:34 PM
rip piss filter. ur with the angles now
Finally undoing one of the most ridiculous self-inflicted injuries of Brexit
December 16, 2025 at 6:54 PM
Finally undoing one of the most ridiculous self-inflicted injuries of Brexit
Big improvement to frameworks on Cloudflare! You can now deploy most frameworks from the CLI with zero config. No adding adapters. No editing configs. No wrangler.toml! It's all done automatically. Experimental now, with 10 frameworks supported today.
developers.cloudflare.com/changelog/20...
developers.cloudflare.com/changelog/20...
December 16, 2025 at 3:50 PM
Big improvement to frameworks on Cloudflare! You can now deploy most frameworks from the CLI with zero config. No adding adapters. No editing configs. No wrangler.toml! It's all done automatically. Experimental now, with 10 frameworks supported today.
developers.cloudflare.com/changelog/20...
developers.cloudflare.com/changelog/20...
Reposted by Matt Kane
made a thing rsc-playground.pages.dev
RSC Playground
rsc-playground.pages.dev
December 14, 2025 at 1:19 PM
made a thing rsc-playground.pages.dev
I can't remember the last time a Safari release caused so much buzz in the web dev community. Half my feed seems to be excited posts about it. It's a good one!
Safari 26.2 is here with 65 features + 165 bug fixes — including field-sizing, Navigation API, Largest Contentful Paint, command & commandfor, CHIPS opt-in partitioned cookies, scrollend event, random(), WebGPU in WebXR, scrollbar-color, hidden=until-found and much more! webkit.org/blog/17640/w...
WebKit Features for Safari 26.2
Safari 26.2 is a big release.
webkit.org
December 13, 2025 at 8:17 AM
I can't remember the last time a Safari release caused so much buzz in the web dev community. Half my feed seems to be excited posts about it. It's a good one!
ECMA has just published the first edition of ECMA-429: the Minimum Common Web API, defining a baseline set of platform APIs for browser and JavaScript server runtimes. An important milestone. Well done to @jasnell.me and WinterTC for getting this across the line.
ECMA-429 - Ecma International
This Standard defines the 2025 snapshot of the Minimum common web API, a curated subset of APIs defined by web platform standards from W3C and WHATWG, which is intended to define a minimum set of capa...
ecma-international.org
December 12, 2025 at 3:04 PM
ECMA has just published the first edition of ECMA-429: the Minimum Common Web API, defining a baseline set of platform APIs for browser and JavaScript server runtimes. An important milestone. Well done to @jasnell.me and WinterTC for getting this across the line.
Annual reminder that Time Person of the Year isn't supposed to be the best person of the year, it's the person who influenced the events of the year "for better or worse". By that criterion, 2001 was the worst decision, and 1938 was correct.
December 12, 2025 at 8:45 AM
Annual reminder that Time Person of the Year isn't supposed to be the best person of the year, it's the person who influenced the events of the year "for better or worse". By that criterion, 2001 was the worst decision, and 1938 was correct.
A chance to hire an Astro core maintainer! Yan would be an incredible hire for anyone who needs an Astro expert, or someone with experience leading a very active OSS community. He'll also track down every tiny error in grammar or punctuation in your docs. Those misused commas don't stand a chance.
👋 I'm looking for a full-time software/DX engineer role.
With 3 years of experience as an open-source maintainer, I am a great fit if your team needs an expert in Astro/Starlight, tooling, documentation, accessibility, i18n, and empowering OSS communities.
RTs appreciated! ♻️
With 3 years of experience as an open-source maintainer, I am a great fit if your team needs an expert in Astro/Starlight, tooling, documentation, accessibility, i18n, and empowering OSS communities.
RTs appreciated! ♻️
December 12, 2025 at 6:41 AM
A chance to hire an Astro core maintainer! Yan would be an incredible hire for anyone who needs an Astro expert, or someone with experience leading a very active OSS community. He'll also track down every tiny error in grammar or punctuation in your docs. Those misused commas don't stand a chance.
The @cloudflare.social threat intelligence team have published this great blog with a really detailed breakdown on the exploitation activity against React and Next.js. Some massive numbers of attempts, as well as confident attribution of the attacks as mostly coming from Chinese state actors.
React2Shell and related RSC vulnerabilities threat brief- early exploitation activity and threat actor techniques
Early activity indicates that threat actors quickly integrated this vulnerability into their scanning and reconnaissance routines and targeted critical infrastructure including nuclear fuel, uranium a...
blog.cloudflare.com
December 11, 2025 at 9:51 PM
The @cloudflare.social threat intelligence team have published this great blog with a really detailed breakdown on the exploitation activity against React and Next.js. Some massive numbers of attempts, as well as confident attribution of the attacks as mostly coming from Chinese state actors.
You know the drill: upgrade right now. These aren't as serious as last week's RCE, but they're still bad. Platforms are blocking these, but once again you shouldn't rely on it.
Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.
December 11, 2025 at 9:47 PM
You know the drill: upgrade right now. These aren't as serious as last week's RCE, but they're still bad. Platforms are blocking these, but once again you shouldn't rely on it.
My clever wife has written a book that's being published in the UK by Faber in April. As one of the few people who has already read it, I can say in a totally unbiased way that it's really good and interesting. Wolves and hares and will-o'-the-wisps!
Pre-order it from your local bookshop! #booksky
Pre-order it from your local bookshop! #booksky
When was Britain last truly wild? And what, if anything, remains?
We're thrilled to publishing Wilderlands by @eloi.se next April, an unexpectedly human history of wild Britain. Available to pre-order now 🦌
linktr.ee/wilderlandsb...
We're thrilled to publishing Wilderlands by @eloi.se next April, an unexpectedly human history of wild Britain. Available to pre-order now 🦌
linktr.ee/wilderlandsb...
December 9, 2025 at 4:04 PM
My clever wife has written a book that's being published in the UK by Faber in April. As one of the few people who has already read it, I can say in a totally unbiased way that it's really good and interesting. Wolves and hares and will-o'-the-wisps!
Pre-order it from your local bookshop! #booksky
Pre-order it from your local bookshop! #booksky
This is great! Built with Astro too 🚀
🎉 And we're live! 🎉
We just launched CSS Wrapped 2025: our annual recap of all things CSS & web UI that landed in Chrome over the course of the year. 🚀
This is a big one! We highlighted 22 new features to help you build better on the web.
Check out: chrome.dev/css-wrapped-2025
We just launched CSS Wrapped 2025: our annual recap of all things CSS & web UI that landed in Chrome over the course of the year. 🚀
This is a big one! We highlighted 22 new features to help you build better on the web.
Check out: chrome.dev/css-wrapped-2025
CSS Wrapped 2025
Sculpt dynamic interfaces, stretch your imagination, and play with these 22 powerful new CSS features that landed in Chrome this year.
chrome.dev
December 8, 2025 at 10:17 PM
This is great! Built with Astro too 🚀
Why yes, I did spend £50 to go to the cinema yesterday to watch a movie that's going to be on Netflix on Thursday. I have no regrets.
December 8, 2025 at 8:04 PM
Why yes, I did spend £50 to go to the cinema yesterday to watch a movie that's going to be on Netflix on Thursday. I have no regrets.
If you are running a vulnerable Next.js or RSC app behind Cloudflare or other WAF, but your origin is still accessible directly from the internet then you are not protected! Attackers are iterating IP addresses so you will probably be found. Upgrade right now!
December 8, 2025 at 9:42 AM
If you are running a vulnerable Next.js or RSC app behind Cloudflare or other WAF, but your origin is still accessible directly from the internet then you are not protected! Attackers are iterating IP addresses so you will probably be found. Upgrade right now!
The original React2shell PoC is now public. This is as bad as it gets – full RCE. You must upgrade now. There are mitigations in place in CDNs including Cloudflare, Netlify, Vercel and AWS (and sites on Workers aren't vulnerable to this sort of attack), but there are variants in the wild now.
GitHub - lachlan2k/React2Shell-CVE-2025-55182-original-poc: Original Proof-of-Concept's for React2Shell CVE-2025-55182
Original Proof-of-Concept's for React2Shell CVE-2025-55182 - lachlan2k/React2Shell-CVE-2025-55182-original-poc
github.com
December 5, 2025 at 11:13 AM
The original React2shell PoC is now public. This is as bad as it gets – full RCE. You must upgrade now. There are mitigations in place in CDNs including Cloudflare, Netlify, Vercel and AWS (and sites on Workers aren't vulnerable to this sort of attack), but there are variants in the wild now.
Cloudflare was down for half an hour this morning, and it was caused by work we were doing to try to mitigate the React CVE. (Seriously, people: upgrade Next.js/React Router etc right now)
Dane Knecht 🦭 on X: "We are aware of the issue impacting the availability of Cloudflare’s network. It was not an attack; root cause was disabling some logging to help mitigate this week’s React CVE. Will share full details in a blog post today. Sites should be back online now, but I understand the" / X
We are aware of the issue impacting the availability of Cloudflare’s network. It was not an attack; root cause was disabling some logging to help mitigate this week’s React CVE. Will share full details in a blog post today. Sites should be back online now, but I understand the
x.com
December 5, 2025 at 10:36 AM
Cloudflare was down for half an hour this morning, and it was caused by work we were doing to try to mitigate the React CVE. (Seriously, people: upgrade Next.js/React Router etc right now)
Instead of using low-paid gig economy workers, they're replacing humans with robots.
November 29, 2025 at 2:28 PM
Instead of using low-paid gig economy workers, they're replacing humans with robots.
November 27, 2025 at 6:45 PM
Loved BASIC and HyperCard as a kid but didn't know coding could be a job. Trained and worked as a pastry chef. Got 1st gen iMac and discovered web dev and PHP. Quit the chef job and founded a startup at the peak of the dotcom bubble.
November 23, 2025 at 8:44 AM
Loved BASIC and HyperCard as a kid but didn't know coding could be a job. Trained and worked as a pastry chef. Got 1st gen iMac and discovered web dev and PHP. Quit the chef job and founded a startup at the peak of the dotcom bubble.
Whoa. This would be incredible for frameworks like Astro. Enough to make me reconsider my dream of removing streaming support.
Out-of-order HTML patching, another proposal from TPAC, lets HTML be presented non-linearly, and a single file can update multiple parts of the page.
Would this feature be useful to you?
Would this feature be useful to you?
November 19, 2025 at 6:09 PM
Whoa. This would be incredible for frameworks like Astro. Enough to make me reconsider my dream of removing streaming support.
Reposted by Matt Kane
cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents
November 18, 2025 at 1:59 PM
cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents
This is a great post mortem, and as someone who only joined Cloudflare last month it's a hell of a lot more understandable than our internal incident channel
On November 18 Cloudflare experienced a service outage. Here's a detailed breakdown of what happened. https://cfl.re/43Bw8AI
Cloudflare outage on November 18, 2025
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
blog.cloudflare.com
November 19, 2025 at 8:54 AM
This is a great post mortem, and as someone who only joined Cloudflare last month it's a hell of a lot more understandable than our internal incident channel