Stephen Belanger
@stephenbelanger.com
✨ Node.js core contributor
🤝 Node.js diagnostics working group founder
🛠️ V8 contributor
📄 Compiler and language design nerd
❤️ Powered by kindness
👨🏻💻 Principal Software Engineer at Platformatic
🇨🇦 Living in Vancouver/Manila/Valencia
They got a few security improvements in post-acquisition, but at that time we could already see attacks ramping up and the handling of them being insufficient. Now the attacks are getting to highly critical levels and they are way behind where they need to be to deal with them.
September 18, 2025 at 4:17 AM
They got a few security improvements in post-acquisition, but at that time we could already see attacks ramping up and the handling of them being insufficient. Now the attacks are getting to highly critical levels and they are way behind where they need to be to deal with them.
Yes, the whole blackhole of wherever everything Microsoft devours ends up. 🤷
Even prior to the more recent Core AI stuff though I felt like under separate GH ownership it still wasn’t taking on security at the level that was actually needed.
Even prior to the more recent Core AI stuff though I felt like under separate GH ownership it still wasn’t taking on security at the level that was actually needed.
September 18, 2025 at 4:16 AM
Yes, the whole blackhole of wherever everything Microsoft devours ends up. 🤷
Even prior to the more recent Core AI stuff though I felt like under separate GH ownership it still wasn’t taking on security at the level that was actually needed.
Even prior to the more recent Core AI stuff though I felt like under separate GH ownership it still wasn’t taking on security at the level that was actually needed.
GitHub has dragged their feet on properly securing npm publishes. They’ve made improvements over the years, but the massive scope of npm attack surface demands high criticality to security efforts that we’re just not seeing from them. The non-response to the recent attacks is particularly troubling.
September 18, 2025 at 4:10 AM
GitHub has dragged their feet on properly securing npm publishes. They’ve made improvements over the years, but the massive scope of npm attack surface demands high criticality to security efforts that we’re just not seeing from them. The non-response to the recent attacks is particularly troubling.
It’s probably used in combination with the camera microphone to do audio cancellation. Depending on the angle of the screen, it’s going to hear a different amount from the upward-firing speakers beside the keyboard. If they know the screen angle they can tune the cancellation algorithm accordingly.
September 7, 2025 at 2:50 AM
It’s probably used in combination with the camera microphone to do audio cancellation. Depending on the angle of the screen, it’s going to hear a different amount from the upward-firing speakers beside the keyboard. If they know the screen angle they can tune the cancellation algorithm accordingly.
Probably, yes. But at least with diagnostics_channel we can say “You have two options: one is to just modify the module, and the other is practically impossible.” Given not-actually-hard and practically-impossible, I think most will accept the not-actually-hard path. 😅
February 14, 2025 at 3:11 PM
Probably, yes. But at least with diagnostics_channel we can say “You have two options: one is to just modify the module, and the other is practically impossible.” Given not-actually-hard and practically-impossible, I think most will accept the not-actually-hard path. 😅
Yep. This is why I’ve been wanting to push more on diagnostics_channel adoption. We can care a lot less about not having a way to patch arbitrary code if we can push enough of the ecosystem to just publish the data we need to diagnostics_channel.
February 14, 2025 at 2:49 PM
Yep. This is why I’ve been wanting to push more on diagnostics_channel adoption. We can care a lot less about not having a way to patch arbitrary code if we can push enough of the ecosystem to just publish the data we need to diagnostics_channel.
That sounds like something someone that hides a rat under their hat would say.
fry from futurama is shown with a very serious look on his face
ALT: fry from futurama is shown with a very serious look on his face
media.tenor.com
January 2, 2025 at 9:15 AM
That sounds like something someone that hides a rat under their hat would say.
That’s exactly the vibe I want to bring when I have kids, and why I will never go back to working from the office ever for any reason. Your family and your life are always more important than your work, ideally your work fits as a piece into that puzzle, not the other way around.
December 31, 2024 at 4:55 PM
That’s exactly the vibe I want to bring when I have kids, and why I will never go back to working from the office ever for any reason. Your family and your life are always more important than your work, ideally your work fits as a piece into that puzzle, not the other way around.
Definitely! I’m a fan of dropping ternaries entirely and just doing statement expressions. The intent is so much more clear.
December 25, 2024 at 1:30 PM
Definitely! I’m a fan of dropping ternaries entirely and just doing statement expressions. The intent is so much more clear.
Yes. Every modern language should have statement expressions. They’re so nice for developer experience! JS basically just has named functions as statement expressions, but it could do so much more.
December 25, 2024 at 1:19 PM
Yes. Every modern language should have statement expressions. They’re so nice for developer experience! JS basically just has named functions as statement expressions, but it could do so much more.
It was great getting to catch up since we sadly didn’t make it to a team gathering together at Datadog between when you joined and I left. I feel like this was a much more fun setting to catch up though. 😉
November 9, 2024 at 7:10 PM
It was great getting to catch up since we sadly didn’t make it to a team gathering together at Datadog between when you joined and I left. I feel like this was a much more fun setting to catch up though. 😉
Thanks! And safe travels to you too when you’re done with your fun in Dublin. 🙂
November 9, 2024 at 7:08 PM
Thanks! And safe travels to you too when you’re done with your fun in Dublin. 🙂
It was very nice to meet your mother this time, and to see Aaron again. Your family rocks! ❤️
November 9, 2024 at 7:07 PM
It was very nice to meet your mother this time, and to see Aaron again. Your family rocks! ❤️
Next time we really need to set up a signal group or something. Or convince Bluesky to add group DMs so we can just port that over here.
November 9, 2024 at 7:05 PM
Next time we really need to set up a signal group or something. Or convince Bluesky to add group DMs so we can just port that over here.
Why even have kids if not to embarrass them well into their adulthood? 😂
November 9, 2024 at 7:03 PM
Why even have kids if not to embarrass them well into their adulthood? 😂
Nice shots! I took a couple early this afternoon, but I’m at the airport now waiting for my flight out to Manila. ✈️
November 9, 2024 at 6:57 PM
Nice shots! I took a couple early this afternoon, but I’m at the airport now waiting for my flight out to Manila. ✈️
Fair. Berlin was definitely a party-hard culture though. I think a few that were with me at NodeConf EU and the collab summit this week can attest to that being deeply my vibe. 🙈
November 9, 2024 at 6:53 PM
Fair. Berlin was definitely a party-hard culture though. I think a few that were with me at NodeConf EU and the collab summit this week can attest to that being deeply my vibe. 🙈
You did lots of very cool work on IITM, even while drowning in management work, and even though issues remain, that’s not a unique thing. All the stuff we build is best-effort with lots of tradeoffs to deliver on the need we have at the time.
November 9, 2024 at 6:51 PM
You did lots of very cool work on IITM, even while drowning in management work, and even though issues remain, that’s not a unique thing. All the stuff we build is best-effort with lots of tradeoffs to deliver on the need we have at the time.
The summits are always an excellent reminder that we’re all doing amazing things, even if it sometimes feels like we’re only seeing it from others. I often feel like I’m hiding in a corner working on diagnostics things, but every summit I get people asking about it and thanking me for my work. 🙂
November 9, 2024 at 6:49 PM
The summits are always an excellent reminder that we’re all doing amazing things, even if it sometimes feels like we’re only seeing it from others. I often feel like I’m hiding in a corner working on diagnostics things, but every summit I get people asking about it and thanking me for my work. 🙂
That t-shirt in the last photo has a very fitting phrase for the circumstances. We’re taking enough psyche damage from the world as it is, we don’t need to be inflicting it on ourselves further by giving up hope. 🙏🏻
November 9, 2024 at 6:45 PM
That t-shirt in the last photo has a very fitting phrase for the circumstances. We’re taking enough psyche damage from the world as it is, we don’t need to be inflicting it on ourselves further by giving up hope. 🙏🏻