0:00

what up nerds I'm Jared

0:02

and this is change

0:04

log news for the

0:07

week of Monday

0:09

April 14th 2025

0:11

security researchers have

0:13

discovered a way

0:15

that hackers might

0:17

weaponize get up co-pilot

0:20

and cursor to insert

0:22

malicious code that might

0:24

bypass typical code reviews,

0:26

calling it virtually invisible

0:28

to developers and security

0:30

teams. So your most

0:33

trusted coding assistant could

0:35

also be an unwitting

0:37

accomplice to some particularly

0:39

gnarly attacks. Is it

0:41

time to update the

0:44

old adage? Keep your

0:46

friends close and your enemies

0:48

closer, but your AI is closest.

0:50

Okay, let's get into the news.

0:52

Google's new protocol has AI agents

0:54

talking. If our agentic future is

0:56

to someday arrive, we're gonna need

0:59

a way for my agent to

1:01

call your agent so we can

1:03

do lunch. Google thinks they've developed

1:05

a good way of achieving that

1:07

with their A to A protocol.

1:09

It's quote a collaborative way to

1:12

help agents across different ecosystems communicate

1:14

with each other. Google is driving

1:16

this open protocol initiative for the

1:18

industry because we believe this

1:20

protocol will be critical to

1:22

support multi-agent communication by giving

1:24

your agents a common language

1:27

irrespective of the framework or

1:29

vendor they are built on. They

1:31

have more than 50 technology partners

1:33

agreeing to work together to

1:35

further develop this protocol, and

1:38

they see it as complementary

1:40

to MCP, not in competition

1:42

with it. According to Google,

1:44

MCP provides helpful tools and

1:46

context to agents, while A2A

1:49

empowers developers to build agents

1:51

capable of connecting with any

1:53

other agent. That being said,

1:55

anthropic who developed MCP is

1:57

not listed as a technology.

2:00

and I can't help but think

2:02

there will be quite a bit

2:05

of overlap between the two protocols

2:07

as things progress. Data Star, the

2:10

hyper media framework. If alpine.j.s and

2:12

HMX had a love child, Data

2:14

Star might be it. Quote, include

2:17

Data Star with a single 14.5

2:19

kilowatt file and start adding reactivity

2:21

to your front end immediately. Write

2:24

your back end in the language

2:26

of your choice. official SDKs are

2:28

available to get you up and

2:31

running even faster or you can

2:33

send server sent events directly from

2:35

your back-end. End quote. The back-end

2:38

SDKs must implement Data Star's SSE

2:40

protocol which looks simple enough. This

2:42

is an impressive effort at first

2:45

brush. The one thing I can't

2:47

find is evidence of Data Star

2:50

being used in production anywhere. Maybe

2:52

I missed it. The team has

2:54

confidence in the framework though saying

2:57

quote. We are so confident that

2:59

DataStar can be used as a

3:01

JavaScript framework replacement that we challenge

3:04

anyone to find a use case

3:06

for a web app that DataStar

3:08

cannot be used to build. The

3:11

best programmers I know. Mathias Enler

3:13

takes a crack at answering a

3:15

similar question to the one that

3:18

I posed to Justin Searles on

3:20

a recent friends. Quote, I have

3:22

met a lot of developers in

3:25

my life. Lately, I asked myself,

3:27

what does it take to be

3:30

one of the best? What do

3:32

they all have in common? End

3:34

quote. Here's a sampling of Matthias's

3:37

list of things great devs do,

3:39

cherry-picked for the ones I agree

3:41

with most. One, read the reference.

3:44

Two, breakdown problems. Three, never stop

3:46

learning. Four, have patience. Five, keep

3:48

it simple. Mathias' patience section most

3:51

closely aligns with the one thing

3:53

that Justin and I both agreed

3:55

is compulsory to becoming a great

3:58

developer. Perseverance. It's now time. for

4:00

sponsored news. Retools Q1, 2025 release.

4:02

The latest release from Retool includes

4:05

over 100 improvements. Here are five

4:07

standard features that directly address frequent

4:09

requests from customers deploying retool. One,

4:12

multi-page apps are now the default

4:14

building experience, giving you a better

4:17

foundation for complex applications. Multi-page apps

4:19

are apps that consolidate several separate

4:21

apps into a single, more maintainable

4:24

application. defaulting to this architecture delivers

4:26

27% faster load times on average.

4:28

Two, confirming production readiness gets easier

4:31

thanks to enterprise deployment controls that

4:33

enable structured governance, collaboration, and testing

4:35

for secure, reliable app releases. Three,

4:38

multi-instance releases is now in private

4:40

beta. A simple manifest file designates

4:42

consistent app version releases across multiple

4:45

environments, enabling structured promotion from dev

4:47

to production. 4. Usage Analytics has

4:49

been enhanced. A redesign dashboard provides

4:52

tab-based views and granular insights into

4:54

user engagement across your entire deployment.

4:57

And 5. Workflows are the next

4:59

big thing. They let you create

5:01

multi-step functions with execution control and

5:04

AI logic that can connect to

5:06

dozens of databases, third-party services, and

5:08

APIs, and ship it all in

5:11

a single click. Check out the

5:13

detailed release notes to learn more,

5:15

links in the newsletter, and thank

5:18

you to Retool for sponsoring. Change

5:20

Log News. Linus Torvolds built Git

5:22

in 10 days. As if it

5:25

weren't already impressive. Today I learned

5:27

the initial version of Git was

5:29

hammered out in a mere 10

5:32

days back in April 2005. It's

5:34

also interesting to note that Linux's

5:37

success wasn't enough to rid Linus

5:39

of his imposter syndrome. Quote, while

5:41

he's proud of having created Linux,

5:44

what makes him happy about Git

5:46

is not that it's taken over

5:48

the world. It's that we all

5:51

have... self-doubt, right? We all think,

5:53

are we actually any good? And

5:55

one of the self-doubts I had

5:58

with Linux was it was just

6:00

a re-implementation of UNIX, right? Can

6:02

I give you something that isn't

6:05

just a better version of something

6:07

else? Git proved to me that

6:09

I can. Having two projects that

6:12

made a big splash means that

6:14

I'm not a one-trick pony. This

6:17

article by Stephen von Nichols is

6:19

a great little peek into the

6:21

history of Git to celebrate its

6:24

20-year anniversary. My only gripe is

6:26

that the section called Why Has

6:28

Git been so successful doesn't even

6:31

mention the impact that get hub

6:33

had on gets adoption. Before get

6:35

hub, it wasn't clear if Mercurial

6:38

or Git would be the community's

6:40

DVCS of choice. After get hub,

6:42

well, we're living in it. A

6:45

simple CLI to help remember commands.

6:47

Zev is a Python-based CLI tool

6:49

that helps you remember or discover

6:52

terminal commands using natural language. For

6:54

example, you might type out, show

6:57

all files in this directory with

6:59

human readable sizes. And Zev will

7:01

present you with three options. Option

7:04

1, LS, dash, L-H. Option 2,

7:06

DU, dash, SH, star. And option

7:08

3, find, dot. You can also

7:11

point it at Alama though, so

7:13

that's nice. That's the news. Left

7:15

curly brace, right curly brace. Plus,

7:18

easy for you to say. You

7:20

can then select the one you

7:22

want to use and copy it

7:25

to your clipboard for pasting. How

7:27

does it achieve this magic? With

7:29

the open AI API, what you

7:32

expect? You can also point it

7:34

at Alama though, so that's nice.

7:36

That's the news for now, but

7:39

also scan the companion newsletter. Such

7:41

as A2N scripts, shareable, sinkable, shell

7:44

snippets. A gallery of awesome 404

7:46

page designs. And get blame, but

7:48

for file trees. Get in on

7:51

the newsletter at change log.com/news. Last

7:53

week on the pod we talked

7:55

with to fond you

7:58

in all about Restate

8:00

the era of

8:02

durable execution functions, and

8:05

sat down with Richard Moot

8:07

Moot from the Square to discuss how

8:09

we helped them produce an

8:11

awesome show and the recent

8:13

hype around the recent hype around MCP

8:16

to those if you haven't

8:18

yet and stay tuned for

8:20

this week's upcoming for this On

8:22

Wednesday shows. Anthony Eden, it's founder

8:24

of Eden founder of DN and on

8:26

Friday, on Friday Nick Nesey, of the unofficial typescript

8:28

fan club. Have a great week,

8:30

like, subscribe, and leave us

8:32

a a star review if you

8:34

dig the show, dig talk

8:36

to you and I'll soon. to you again

8:38

real soon.