Red Hat Hacked! ⟡ NVIDIA Enters the PC Race ⟡ GTA 6 Goes Live ⌁ Syntax Weekly ⌁
Chapters11
A summary of this episode's topics, including MPM supply chain attacks on Red Hat, recent hardware announcements from Nvidia and Microsoft, and the GTA 6 launch as the team plans to explore the new site and tech behind it.
Tech briefs: Red Hat npm hack and supply‑chain defenses, Nvidia’s Surface Laptop Ultra with RTX Spark, GTA 6 site launch, and a wave of browser‑based emulation and scroll‑driven UI trends showcased on Syntax Weekly.
Summary
Syntax Weekly, hosted by CJ with Wes guesting solo, dives into a string of tech stories and demos. They lead with an npm supply‑chain attack targeting Red Hat and related ecosystem compromises, unpacking post‑install/script abuse and the broader risk to code bases. The crew then shifts to hardware news: Nvidia and Microsoft unveil a Surface Laptop Ultra built on an ARM platform powered by an RTX Spark chip, positioning it as a portable local‑AI and creator machine. They also hype the GTA 6 launch site and discuss its marketing tech. In the web tooling segment, they dissect a wave of browser‑level demos, including PSP emulation in the browser, Next.js and vanilla‑extract styling, Lenis for smooth scrolling, and a flashy scroll‑jacking site for Ferrari. The episode ends with tangents on puzzle‑style web demos, browser‑based chat experiments, and a tease for an Amsterdam IRL Syntax meetup in June. The hosts emphasize security best practices (PNPM defaults, minimum release age in PNPM 11) and how supply chain noise isn’t limited to JavaScript—every package manager can be targeted. Throughout, they pepper in practical tips, like disabling pre/post install scripts by default and waiting a day before upgrading dependencies to avoid driving into freshly published exploits.
Key Takeaways
- Disabling pre‑install and post‑install scripts by default in npm is a security imperative; PNPM and other tools already opt‑in or offer stricter defaults to curb supply‑chain risk.
- Atypical npm attacks include ROT‑21 obfuscated payloads and even malware that downloads alternate runtimes (e.g., Bun) to execute payloads, highlighting the need for code‑base and registry hygiene.
- PNPM 11 introduces a minimum release age option (default 1440 minutes / 24 hours) to prevent rushing to ship new versions with unvetted fixes, reducing window for exploits.
- Typo‑squatting and dependency‑confusion attacks show large enterprises’ internal registries are at risk when private packages inadvertently resolve from public npm registries instead of internal mirrors.
- The Nvidia Surface Laptop Ultra with RTX Spark on ARM marks a notable push toward portable local AI hardware, signaling a trend where creators and developers can run AI locally without constant cloud tokens.
- GTA 6’s new site demonstrates modern marketing tech in action, with rich multimedia and scroll‑driven storytelling that mirrors current web UI/UX trends.
- Browser‑based emulation (e.g., PSP in the browser) and rich Next.js/Vanilla‑Extract workflows illustrate the growing tooling maturity for high‑fidelity in‑browser experiences and performance‑centric styling approaches
Who Is This For?
Software engineers, DevOps teams, and hardware enthusiasts who want a concise read on current supply‑chain security, AI‑hardware trends, and cutting‑edge web UX patterns. Perfect for readers who want concrete actions (like enabling PNPM defaults or setting minimum release age) and real‑world examples (Red Hat npm incident, Nvidia Surface Ultra).
Notable Quotes
"“This just seems to keep happening over and over again.”"
—CJ and Wes remark on recurring npm supply‑chain attacks, setting the tone for the security discussion.
"“Disabling post and pre‑install scripts by default is a sensible default.”"
—They reference npm/PNPM security guidance and advocate for safer defaults.
"“PNPM disables post and pre‑install scripts by default. You have to explicitly opt in.”"
—Concrete security recommendation tied to PNPM’s design choice.
"“The hack was a ROT 21 encoded Caesar cipher… then two encrypted blobs inside.”"
—Explaining the obfuscation tactic used in the npm attack payload.
"“This is a sign of things to come… local AI is the future.”"
—CJ/Wes discuss Nvidia’s local‑AI hardware trend and the push toward portable AI.
Questions This Video Answers
- How can I protect my npm projects from pre/post install script attacks in 2024?
- What is dependency confusion and how do enterprises defend against it?
- What does PNPM's minimum release age feature do and how should I configure it?
- What makes the Nvidia Surface Laptop Ultra with RTX Spark different from previous AI laptops?
- How does a scroll‑driven website like GTA 6's launch page enhance user experience, and what tools were used (Next.js, vanilla‑extract)?
npmRed Hatsupply chain securitypost-install/pre-install scriptspnpmminimum release ageNPM hackOpen SearchElasticOpen Source security
Full Transcript
Welcome to Syntax. Welcome to Syntax Weekly. Um, that's I think that's the first time I did that intro for this live stream, but this is our weekly live stream. I believe this is our third one. Fourth one. Yep. Third one. And we finally got the ticker working. Um, yeah. So, at down at the bottom of the screen, you can see we're we're a we're a news show now. We've got uh all the the latest haps down there. Uh, but in today's live stream, we've got some stuff for you. We're going to be talking about some MPM supply chain attacks targeting Red Hat and a few other companies.
Um, there have been some new hardware releases or announcements of hardware from Nvidia and Microsoft. So, we're going be talking about that as well as the new GTA 6 launch. Um, and it's happening. We have a launch date. We have a site. We're going to check it out. Um, there was a funny comment earlier that uh uh G G GTA 6 on Syntax before GTA 6, you know, the meme of like G GTA 6 is taking so long to come out. No kidding. To be clear, I don't care about the video game itself at all, but I'm very excited.
The the website has some pretty cool stuff on it. A few people tagged us in the the website launch. I thought we'll take a look into the tech that was used. Yes. And uh as always, uh I am CJ joined by Wes. Scott's actually on vacation today, so he's not going to be here. It's just us two. Yeah, it's no Scott today. So, uh, buckle up for the best live stream you've ever had. Stoked to get into it. Um, let's start with the first thing, which is unfortunately another npm hack. Um, this just seems to keep happening over and over again.
Um and this is something that was released this morning which is malicious npm release detected across Red Hat cloud services scope meaning that uh Red Hat the company they have I don't know 20 or so different packages seems to be that through some uh it doesn't look like it has been detected yet how this has happened but it looks very similar to the Shyold um vulnerability that has happened three or four times over the last couple weeks which is they're able to get into the npm publish a package and then that package has a malicious post install script mean that or or I think in this case maybe even a pre-install script which is just a script that is allowed to be run as the user who's installing it and then you can from there you're able to do things like it looks like in this case it's looking for tokens um in that specific process test and then they'll take those tokens out and then I don't know I it's kind of interesting.
I haven't necessarily heard about like what has happened like since people when people do get access to these types of things, right? We hear about all these hacks, we hear about um them running, but I haven't heard of like like what are they doing with these tokens? Are they just using the compute? What do you think? Yeah, I think I mean part of it is a worm. So getting access to tokens and then um making infecting other packages. Um, I think sometimes there's like a command and control server, so they can basically decide what payloads they want to execute.
Um, yeah. And then a lot of times it's just all focused around crypto stealing. I think it's probably like if if you think like a hacker, you just you want to make some money. You want to make money. So like the the best way to do that that's somewhat untraceable is just like steal crypto from people because yeah, uh, not too much can happen after that. Um, and I think like also at these large companies, they're they're looking to get access to like code bases as well, you know, because as soon as like GitHub got hacked the other day by a malicious VS Code extension, um, which is just like like poetry that it's happening through their own supply chain.
Uh but now that they have access to assuming they have access to all of the code bases, right? They're probably pawing through that looking for more vulnerabilities, you know, just kind of continuing to go ahead and I'm sure I'm assuming they're they're sitting on quite a few of them as well, just in case they want to go to to market and sell them. Exactly. And I think that's one of the aspects of getting access to the source code because like trying to fuzz or reverse engineer an application from the outside and find a zero day is a lot harder than if you have the direct source code.
So if you can get into a company, find their get their source code. Now you can just throw claude at the source code itself and find vulnerabilities that wouldn't have would have been really hard to surface without access to that source code. Yeah, I I bet we're going to see some crazy stuff coming up from anything that was found during that that particular hack. Um, and then all these other other hacks that are targeting companies and because yeah, I think like you said, they're getting access to internal resources too, whether it's source code or internal servers.
So, they can do a lot once they have access to that stuff. Yeah. Um, every time this happens, uh, which is every 3 days, uh, you hear people being like like this is such a JavaScript problem. Um, and and then you hear a lot of the other people saying like no, this is this this can happen to literally any package management system, right? You are allowing untrusted third party code to run in a trusted environment. Um, and I I think it's it's kind of interesting because it it seems to only happen in the JavaScript ecosystem.
every now and then you hear about it in like Python or Rails world, but this is happening way too often in the npm ecosystem. And I thought this was a neat comment on hackeru to say like uh let me provide some context since a bunch of people responding say every package manager can be hit. Uh npm by design allows packages to run package supplied arbitrary code as a logged in user after an update completes. That's that's what the post install script is, right? This is an insane default. PNPM, by contrast, allows you to essentially opt in only to specific packages that need this, then tax on a ton of other security settings like minimum age, no trust, downgrade, etc.
And I think that's a really good um e explanation of this, right? Like any you shouldn't be able to run arbitrary code simply by downloading something. That's it's simply that's going back to the ridiculousness of don't download things like if you imagine in the web browser you clicked on something and you immediately got hacked you know or like put a USB stick in your computer like those those things should not happen you should there should be another step of approval uh for this type of thing definitely and this particular attack so in the step security blog post they do say this target was the pre the pre-install script So, that pre-install script got ran on someone's computer and then they were the ones to uh to get hacked.
It It's interesting to note though because you you guys did talk about the Tanstack hack um on the podcast a few weeks ago. Yeah. And that didn't use pre-install that just used a cache a poisoned cache on GitHub actions. So the that um was one other attack attack vector not necessarily to blame on like npm defaults but the majority of hacks are happening because of pre-install post install and so yes a sensible default is to disable it. I I think we talked about it last week. Um npm I think is going to make it no no longer the default and do what PNPM and Dino and bun have already done which is you basically have to opt in for each package to run those pre-install or post install scripts.
Uh yeah, but at this point it's it's a joke. Just please push a push an update right now. Just a patch and just and just dis just disable it. I I think they're hesitant to to push a patch like that because it it literally will break so many things and people will rage and npm is this like this like building block of so much of the web and they're probably like stuck with their hands behind their back being like well if we we're damned if we do and we damned if we don't because it's going to break so much stuff.
But I think at this point you just have to like rip the band-aid off and be like this is the security issue. Yes, we're going to it's going to break some like hardware that has something encoded that you know like it's going to have all these awful situations where things will break but it's better than people getting hacked. Exactly. And I mean, I think it could be a major version bump like you basically if you jump to you have to jump to the next version of npm. I don't know what version they're at right now.
And then you get that default behavior that makes that would make it a bit easier for users, but you're totally right. Like it would um disrupt the ecosystem. Oh, and there's Scott in the chat says, "Have a good live." Thanks, Scott. Hope hopefully you're enjoying your vacation out there. Um I just want to I want to in that blog post they talk about how the hack was done um or at least breaking down the code. I want to talk about that really quick because it's really funny the amount of obuscation that happens in payloads like this because they're doing everything they can to not be detected.
Um, and so this is a ROT 21 encoded Caesar cipher. So if you know anything about encryption, a Caesar cipher is like one of the simplest encryption methods. You literally just shift the alphabet. So uh they took some source code and and put it through multiple layers of transformation. So that way when you look at the code, it just looks like a a bunch of random text in arrays, but then they run those arrays through this method that does the Caesar cipher shift um and then pulls out character codes and that results in a 1.27 megabyte JavaScript file that then has two encrypted blobs inside of it.
And then uh one of the encrypted blobs downloads Bun because apparently they want to run their hack inside of Bun. Yeah, that's hilarious that they have to download fun to run the hack. You can't do it in node. I mean that that also tells me like uh this got it's the term used to be script kitty. This is an AI kitty, right? Like they they prompted and and AI decided, oh, we should probably just use Bun for this attack. They definitely use Claude for this. Yeah, if I if I was Yeah, you're totally right because like Bun is in the cloud ecosystem.
Yeah, Claude always recommends Bun. If you don't specify it always will use button. It's probably in the system prompt. That's Yeah. So two encrypted after that obuscation then you have encrypted blobs and then there's a hard-coded key that decrypts those blobs that can then run the code. And so this is also why it's a little bit tricky to find and detect attacks like this happening um on the the side of npm. So a company like step security and also whiz and sneak all these other companies we see blog posts from are basically running automated scans to see if package size increase or if packages are doing anything fishy.
And I think clearly the package size increase was the main indicator that something went wrong here because I it went from like a few hundred kilobytes to like four megabytes. So their automated scanner was like yeah something's fishy going on and then figured out all the obuscation to find the actual payload. Um, yeah. So, that is funny. I'm still laughing that it downloads fun. Like, I I'm looking at it. I don't see a reason why they would have to download like it's not like why would they download bun? It's probably, you're right, it's probably just vibe coded.
Yeah, it's vibe code. Like, the AI was like, we should use bun for this. And I mean, they probably could have reduced the payload if they would have just wrote a a malicious npm or like a script that could run in node. Oh, that is great. It's true. Like coding is largely solved, but our hacks still need two JavaScript runtimes to work. Exactly. Yeah. In related news, I got a couple of uh posts from Microsoft themselves. Um and again, just about supply chain attacks, but these ones are interesting because they're like typo squatting. Um so this was just detected a couple of days ago.
So a typo squatted npm packages used to steal cloud and CI or CD secrets. So, if you're not familiar with a typo squat, basically someone will find the name of a package that's really close, like take the word express and then change it by one or two letters based on distance on the certy keyboard or something like that and then just publish a brand new package, but then if somebody accidentally types the wrong name, they're going to get your malicious payload instead. Um, and it was detected that they were trying to mimic uh Open Search and Elastic.
So these are two different organizations with a lot of popular packages on npm and uh yeah one one attacker just went through and created a bunch of of typo squatted packages and then another one which was targeting companies. Um so this is called um dependency confusion and what happens at a large of a lot of large enterprise is they sometimes have privately hosted package packages internally where they're namespaced like at century package name or at syntax package name. And then when you install those with npm it actually reaches to an internal internally hosted npm um registry to install those.
And those packages are never published even as private packages on like the main npm. And so um but what can happen is if one of those uh organization names actually does get registered on the main npm some installers will actually install it from npm instead of installing it from your privately hosted registry. And these attackers tried to take advantage of that. So they figured out internal uh corporate name spaces and published a bunch of npm packages under those. So that way if any one of those internally hosted apps went to install packages, it would pull it from npm instead of pulling it from their uh internal private private host and it had malicious payloads in it as well.
Holy smokes. Yeah. So stay safe out there. Um I think you have some tips for how to avoid getting hacked by this stuff. Right. Right. right way. Yeah. Like the short quick and easy of it is just use PNPM. Um and your your butt will be covered in many of the use cases. Um and the reason why is because um PNPM disables post and pre-install scripts by default. You have to explicitly opt into them um if you even need them. There was a comment that says like in many cases you don't even need the post install script uh for that to run.
So that that's good. Um, also PNPM 11 has now, sorry, what is it? The minimum release age. Um, sorry, I got so many monitors open right here. I'm trying to I'm flying around to it. Um, basically a setting in PNPM called minimum release age. And what this will do is it will say like wait a certain amount of time before you actually install the latest version. And this is kind of a delicate dance because sometimes the newer version fixes the security issue but sometimes the newer version has the security issue in it. So um there is a minimum what is it now?
Minimum minimum release age um default is 1440 minutes which what is that? 24 hours. So it it waits 24 hours before installing a new version of a package. um as of 11. If you're still on 10, it's zero by default, but it at least has that option. So, I would go in there and set that to um to one day so you don't accidentally get pawn because this stuff is caught. That's the crazy thing about it is most of these are caught within 20, 30, 40 minutes of them being published. You got all these these security companies that are scanning literally everything that's published to npm.
So, if you just wait, um, then you should you should be able to not get pawned. Nice. Um, all right. What do we got next here? Um, you want to do the Nvidia one? Yeah, we're talking about some new hardware announcements. So, let me get my screen up. Here we go. So, Microsoft, Nvidia have announced an a partnership. They're releasing the new Surface Laptop Ultra, which is powered by the Nvidia RTX Spark. Uh, it's an ARMbased platform, and um, it's got a 20 core CPU, an RTX GPU, and 128 gigi gigabytes of unified memory. And, uh, this is very interesting to me.
I've actually bought some hardware recently that I'll that I'll show you, but uh basically um this laptop will be a very capable local AI machine as well as being able to play games and different things like that. Um and so we're chatting about this just because uh first of all, I like hardware, but also really the the um the target audience for this are I think like creators, probably developers. Um I guess the RTX Spark, is that what it was called? What was the Yeah, that was like the thing that was announced, right? It was the RTX Spark is this new AMD or sorry, ARM, sorry, ARM processor um from Nvidia that is supposed to rival Apple's M like M5 chips, right?
Yeah. Um, and then they're slapping this thing in the new Windows Surface Pro book, um, to hopefully rival the the MacBook Pro because like it's nothing has really come that close to it as has it? No, I mean, sort of. And I'll show you the hardware, but the thing I was thinking of um, Just24 mentioned it in in the chat. The DJI Spark was their uh, little mini desktop. Is that not D? Is it what was it called? Um, there's like this their little desktop computer. I talked about it in my AI video. Yeah. Yeah.
What was that? Um just the Spark didn't have Spark in the name. DG D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D D Dgx Spark. DGX Spark. Yeah, DGX Spark. There it is. Okay. Yeah, they This came out a few years ago. It's And you might have seen pictures of it. It's this uh really cool looking little silver box thingy. Um but they released it kind of as like a way to run local AI.
This is similar but in in a laptop form factor. But I I'm sad to admit, but um I I have I have gas. Um uh this this term comes from the uh uh the music world of gear acquisition syndrome, but I have it for tech. I'm just buying tech like crazy. So, I actually bought this uh Randy, if you want to go full screen on my cam. Um, this is the Azis ROG Flow Z13. This was released in 2025, and I bought it because it has the same chip as my uh little AI computer back there.
So, I did a a video about uh that computer back there, which has a 128 gigabytes of unified memory, and it's it's based on this this AMD chip. But, this laptop, it's actually a tablet, so it's a twoin one. So nice little uh uh uh laptop, but then the keyboard rips off. Yeah, this thing's sick. But that processor and 128 gigabytes of unified memory are are inside of this thing. So I was I was like a device like this is for someone like me because I had been playing around with local AI and I want to be able to take it with me on an airplane or take it to the coffee shop and a portable form factor is the way to go for that.
So, this is exciting. I I'm very curious on price though, like because you mentioned that they're going to be like basically trying to compete with MacBooks, but the price of RAM, the price of SSDs have gone up so much that like I expect it's probably going to launch at like $3,000 minimum. Oh, at least. At least. Yeah. I was going through the MacBook picker the other day just to say like what would one cost if I wanted to um like totally juice it out and it was I was up at like 7500 Canadian which is yeah 5 5 and a half grand us.
So, it's going to be expensive. But that's one of the reasons I found this is you I found it used for 2500 after tax. And right now, these are selling for like 3,3200. Um, so 2500 with 128 gigs of RAM. Yeah, that's seems decent. Decent. And it can run local AI just like that machine back there. I haven't tested on thermals and I just got it. Haven't done much with it, but it's got the same specs technically. So, it's kind of interesting to like see the launch video as well because a big part of of the launch videos they were showing um Hermes as like with all their agentic running and it it looked like the examples were like partially local, partially cloud AI and I I think they're realizing like people like I like right now I think there's a there's a big spot for these like Nvidia whatever to make obviously chips for data centers and whatnot, but there's a huge um market of people who are not necessarily into like gaming, but just like like you and I where like we simply just like we have a lot of stuff to run on our computers and they're we're starting to feel the pinch between uh running if you want to run local AI, if you want to run several processes at once.
For us, a lot of it is like video and and video editing that's sort of like lagging us down. you want to run that and all this AI stuff at once. So, oh, it's kind of kind of interesting to see it all slapped into a laptop. That's exactly what I want. I would love to go desktop. We talked about this, I think, at our meeting last week, is I would love to get like a super powerful desktop and then just a nice little MacBook Air that I can run around on. And I think with the AI stuff, you could you can do that pretty easily if you have a decent internet connection at home.
But if you're doing a lot of the like like real-time video stuff processing, it's not going to not going to work as well. Yeah. But I I think this is this is a sign of things to come because I think local AI is the future of AI. Like PE right now, you might think I'm crazy because like the local AI models aren't the greatest, but um soon the and it's already happening. The price of subscriptions and token costs are getting so high that a lot of people aren't going to be able to use them at all.
So once we get to a point where we have portable hardware or just hardware that people can buy themselves and afford eventually um then they can run local AI models, they don't have to be dependent on uh open AI or anthropic. Um and I I've seen some cool stuff happening with with local models too. I need to play around with it more, but I've seen some uh agent harnesses. I think one was called like forge that does something in a loop to get you better performance on agentic tasks for local AI. So the the fact that it's they're you're only paying for after you've bought the hardware, you're only paying for energy, right?
So you're just paying for electricity to run those models over and over and um even my little machine back there running 247 would maybe cost like 10 bucks a month in electricity. So, man, I I actually did the math on So, I've got Randy, you show my screen right now. There's this blog post that went up this morning, which is um a 10-year-old Zeon is all you need. And I literally have that I have a a Mac Pro that was from like a video editor during like remember like when a Red camera costs like like $50,000.
Yeah. Um, I've got like a juiced up Mac Pro just sitting here right now. And I like did the math on it. It's got 16 gigs of RAM. I could I could probably spend a couple hundred bucks like getting it up to speed. But then I did the M. If these laptops are are $3,000, I guess that's 10 years. Yeah, it it depends. But I I did the same math because I have a a local um home server that's just old enterprise desktop hardware. And so it has like 148 gigabytes of memory. It's got two Xeon processors and finally I plugged it into a little uh Ziggby powered power monitor and it's costing me about $15 a month to run.
Uh cuz the the hardware is like over 10 years old. Um yeah. So I mean that's about $180 a year. Still cheaper than Yeah. It's not nothing. It's not nothing, but it is adding on to my electricity bill. So, there is something to be said about newer hardware, lower uh lower power usage overall. Um because then it really is closer to a onetime price of like buy the hardware and then the electricity is like almost free. Yeah. Yeah. Exactly. And it also depends on how expensive electricity is. Like electricity is relatively affordable in where I live in Ontario.
So with a lot of these things, even like electric car, it's it makes a lot of sense to go that route. So I don't know. I'm curious curious to see this article here that has talked about like all you need is a like an old Zeon is he says it's giving them tokens at the speed of reading, which I thought was kind of interesting. Um, and I bet as soon as we start to get pinched with how expensive these models are, people are going to be okay with it generating at the speed of reading because a lot of the stuff will simply just be asynchronous.
You know, it's not like for the stuff where you're just like sitting there and waiting for it to finish so you can send in the next prompt. I don't know if the local will will get there in the next couple years. But for stuff that is like, "Oh, I'm just going to let this thing rip overnight." And it's fine if it's three times slower because like the longest I've ever had a process running, maybe Chad can tell me like what's the longest like back and forth prompt you had? I had I had one running for I don't know, maybe three or four hours overnight.
That was like the longest I could ever get it. You You always hear about people running them for like days, but I simply have not run into that yet. I've gotten up to like eight hours in an agent workflow. I have I I stopped messing around with all of that. But I basically had like an orchestrator agent that would pull from a list of tasks and I did planning ahead of time. So I'd have like 20 30 tasks and the orchestrator it would just run forever like pull a task, spin off a sub agent, when it's done, verify, pull a task.
So I got that one to run for like eight hours. But uh took a lot of upfront planning um and it gets to the point of like that's so much extra code. there's a lot of review that needs to happen whether it's by an agent or like I mean I wasn't reviewing the code and I don't I I it was fun it was fun experiment but I don't think that's the way forward like I think we need to be able to review things and I think it's going to take a mindset shift because like you're saying like reading at the speed of token output like it doesn't have to yeah like if it spits out a giant article like you got have to read the thing so and we should read the thing so it's yeah it's gonna it's more about human behavior and and not wanting thousands of tokens all at once and you know I don't know that's a good comment.
I use pi auto research which will run forever. That that's a good use case for for this as well. like pi auto research will say like we had Alex on the podcast and we'd ask him like how he did the performance evaluation and it'll simply be like all right uh try this one thing and run it 3,000 times and see if the like mean or median is is much faster and then like try change this thing and then I don't know you changed a hundred things now take two of those and put them together and then just run like you could that can go absolutely forever especially if your feedback loop of like firing ing up a browser, waiting for it to render, and then closing it down.
Like, that can that can really slow you down. So, that's a good use case for it. Definitely. All right, what do we got next here on the list of things? Um, this one, let's talk about this PSP one. I thought this was really interesting. So, um, as somebody who's not into video games, I am very much into hacking and emulators and all that stuff. Like I have I've got a Wii outside there with like I don't know 3,000 backups of games that I own on on like a hard drive, right? And like that it's just more fun to do that.
I when I was a kid, I had a PlayStation 2 website and I like camped out at like 3:00 a.m. all the way uh all night to to buy a PlayStation 2. And I was so excited for like the year coming up. And then as soon as I got the PlayStation 2, I didn't give a I didn't care about it cuz I don't actually like playing games. But somebody figured out how to take the PSP, like the little handheld PlayStation Portable, um, they figured out how to get that emulator running in the browser with Wom, which is absolutely wild.
Um, the website itself just looks like Claude dumped it out. Uh, so they probably just gave Claude a goal and got it running in the browser, which is unreal to see like all of this these advancements come in the last couple months. people are realizing, oh, I can just port the PSP to the web and it just works. Did you end up getting uh a ROM running around like a PS here? Um, I downloaded I sorry, I backed one up that I had sitting here. He has a physical hot copy. This is totally legal. Just uh unzipping it here.
But it's it's fascinating like so I've gotten into like um ROM emulators or emulators and using ROMs for like older machines like SNES or Sega N64. Um always because like those ROMs were very easy to find and a lot smaller. Um and I've tried to emulate PS1 before and and PSP, but at that point your ROMs start getting so big. You have to source them or rip them and uh takes a lot of work. But it'd be fascinating if if this PSP emulator can run like a half a gigabyte game in the browser. See, I I find it fascinating that the simple like people who make emulators are simply just re-implementing like like high power at the time microchips in software which is is absolutely nuts.
Yeah. Uh, hold on. Here we go. Gotta ISO open. Sorry, I brought it down. I had to I had to drag my downloads folder on the screen here. Cool. there we go. Open PSP game browser. Okay. Where's the game browser? I don't Is it in one of those folders? Yeah, I uh I pushed one of the buttons here. Dev, no I think it was for/game. Where did it go? Root. No. Temp. No. Home. Is there is a games folder? Is it the third one? Oh, I'm so dumb. Okay, here we go. Is that it? Oh, sick.
It's launching. Yeah. Yeah. So, which which Grand Theft Auto is this? Yes, it is. M Vice City doesn't seem to be loading or it might take a second because it's like what 500 meg ISO maybe. We'll we'll let the sucker load. Let's go on to the next topic here and see if it does run. But that was kind of interesting that they did that. Um, but speaking speaking of Grand Theft Auto, the new Grand Theft Auto website uh was launched the other day and it's it's pretty pretty nifty. Look at this. And I comb through it.
It's got a lot of like kind of scrolling effects. It's got like a lot of these videos that are tied to specifically to the scroll. um kind of a neat experience to to go through it. And a lot of times these like marketing websites will launch and people will be like absolutely awful. Like I I hate these scrolljacking websites and and personally I do as well, but I think this one is is fairly well done. I just don't like when they make the scrolling too different from what I'm used to. And this seems to do a pretty good job at it.
Yeah. Maybe Wes, can you can you can you close the PSP emulator cuz it's this it's very chopp Your stream is very choppy for for people. I think I think the PSP is bringing down your machine. Let's see. My CPU GPU Oh, yeah. My GPU is Yeah, I can hear the fans on my laptop, which never happens. That's hilarious. Okay. Yeah, let us know in the chat. It should be should be better now. Wes Wes's computer was over overloaded. See, this is exactly why I need that new a new Windows laptop or whatever with the juiced out thing.
All right. Is it Is it looking a little bit smoother? Do you know? it's looking good. Okay. Right on. Um, so I went through it. It's a Next.js website. Uh, it's using vanilla extract. Have you ever heard of this before? Long time ago. I haven't played with it, but I have heard of it. Uh, ba basically like a a way to do Tailwind things, but in direct CSS. Is that a way? Yeah. No, it's more of like um here, let me look it up. Vanilla vanilla extract.style. essentially you create your style objects in JavaScript, which is my absolute most hated way of writing CSS.
Um, and then what happens is it will it gives you like full TypeScript autocomp completion and whatnot, but then at this is just like an like a dev time. A lot of like the early CSS and JavaScript libraries were runtime where they would they would rerender every single time that something ran. This is a buildtime thing so that when you go to build your website, it takes these like style objects from JavaScript and it just computes it into these random class names, you know, like underscore 1 UW8 D0 and it makes one selector for property value, which is similar to how Tailwind works.
It's just like it's you don't author as tailwind but the actual value that gets kicked out the other end is similar to it. This is similar to stylex as well where um Facebook's kind of CSS and JavaScript library that they use for all their properties. It reminds me of JSS which was used by material UI before they switched to styled components. Oh yeah. Yeah. But this is cool that this is like build time. So you're writing JavaScript, you get type completion, but at the end of the day, you're only shipping CSS, which is cool. Yeah.
Yeah. You don't want you don't want to be like shipping a JavaScript library that then parses and then turns it into CSS. That's kind of unnecessary now. We needed it at the time for like dynamic websites in in JavaScript and CSS, but now that we have variables, it's kind of unnecessary. Um, this is the scrolling library. It's called Lenus. Um, this is the like go-to smooth scroll library. Um, it came out a couple years ago and it's like significantly better, more performant than a lot of the the other ones out there. So, if you're looking to build one of these scrolljacking websites, check out leanest.dev.
Lenis. Do you know if that has the built-in ability to control videos or does you know if that's something extra? Um, so like what this gives you is like you get like hooks of like like like um it's in the browser or out of the browser, right? And it'll tell you how far you are. Although you can also do that with like a resize observer as well. Um, but then like once you have that data, maybe it's even using like a like a resize observer or a what's is it a resize observer or no intersection observer?
That's the one I'm thinking of. an intersection observer in JavaScript will say, "All right, this is on the screen." Um, and then as soon as it's on the screen, it will fire off like a callback and then it will tell you how far into the scroll you are. And then you can essentially take that percentage scroll value and translate that to like a video scrubbing value. So the if you're like 50% in and it's a 60-second clip, it'll it'll bring it to 30 seconds. Um, and then the leanest will allow you to have like kind of will allow you to feather those scrolls in and out.
Um, because not everybody has like a MacBook trackpad. And even mine, I turn off most of the smooth scrolling in my my usage of a mouse. I just much prefer the notched clicking up and down. Nice. Yeah, it was cool to see cuz like um I haven't really built any sites like this, but you see how it it almost felt like they were doing 3D rendering in the browser, but it's literally just uh pre-recorded videos that are tied to the scroll. So, like as you scroll, it it's moving through the playhead of the video, which gives it that effect, which is pretty cool.
That's also how a lot of the Apple um experiences work as well. um they they sometimes use like a scroll driven animation which is a new thing in the browser but they'll just have like a 3D rendered video and they'll scrub that video back and forth because it's often way more performant or way easier to do that versus having to load the model of like a MacBook or an iPhone in um and then rotate the whole thing around. Uh all right, what do we got next up here? Um, I think you shared with me the Ferrari site.
We can bring that out. Oh, yeah. Another fun scroll scrolljacking site. Yeah, kind of a similar It's It's also an X.JS website as well. It doesn't have as much of the scrolljacking experience to it, which quite honestly I prefer. Um, but yeah, pretty neat site. I think the interesting thing about this this new Ferrari, if you haven't seen it, they released an electric car that looks like a Prius. Uh, and everybody and their mother has an opinion on it there. That that's what the thing looks like. it's a cool looking car. And we're not going to turn into like a car podcast here, but I think that the interesting bit to me was the fact that the interior of it was very it was designed by Johnny IV and they it was like a very heavy mix of like hardware tactile things um met with software which I wholeheartedly welcome because this whole like moving interfaces entirely to touch screens drives me absolutely nuts.
Like I have a Tesla and I think that the interface is is great. It's probably one of the best car interfaces out there, but I still like I just want a knob for some of the things, you know, like opening the glove box, you have to like like if you're trying to open the glove box while you're driving, you have to like press these like buttons and you have to like look over and look up and it's so obnoxious where like what happened to putting a handle on the glove box so you can just open the thing up?
Wow. I don't I don't have a Tesla. I have a newer like 2025 Toyota and uh that has physical things for the air conditioning and and everything else. But I I'm I'm of the same opinion. Like if if I had to navigate through a menu to open my glove box, I don't think I could handle that. So, uh the the mix of physical tactile buttons plus touchscreen where you need it, I I think that's that's a good balance to strike. And uh Yeah. Yeah. It's so cool. Like look at the And like the buttons make you feel like you're in like a cockpit as well, you know?
Click click click click. Absolutely love that. Put put more buttons on things. Like I guess like the UI is a little harder when the buttons you you have to line everything up perfectly, but I just need a button every now and then. Even in like the Tesla, they took the um drive selector out. So if you want to like reverse, you have to like put your finger on the touchcreen and like slide it up, which is just miserable experience. Wow. Yeah, that's horrible. So, I I can't see this super well, but on the screen, is it So, I I know there are certain touchcreens that can like protrude u to make it more tactile, but it's still a part of the touch screen.
Is that what they're doing with the buttons on the bottom of that screen? No. No. This is like like metal aluminum like switches like coming out of the screen. So, this is not like a Yeah, like a one of these screens that raises or something like that. It's actual buttons that click click click. Okay. But it looks integral. Yeah, that's actually it's super interesting to think about because like we have the the stream deck which gives you tactile buttons but you can put whatever you want on the buttons themselves. Um it'd be curious to see a UI like that like in a car cuz then because then it's still uh changeable, right?
I think that's why we go the touchcreen route is we can make put whatever buttons we want on the screen. But if you have a fixed layout of buttons, but then you can change what the buttons have on them or make them animated, then you kind of the best of both worlds. That'd be interesting to see. Yeah. Or like a like a like a knob. Where's the knobs at? Why Why are we all using buttons? Give me knobs. There's got to be a Stream Deck knob. Doesn't Stream Deck even have a a knob version? Does I don't know if I've seen one with the LCD like on the knob.
That'd be cool. I've seen one that has the knobs at the bottom as like a control. Okay. With the LCD on the knob. Yeah, that would be that would be pretty cool. Somebody build that, please. Uh, get celebrate. This is this is created by one of our uh viewers here. Craig Holidayiday says, "I built this small Mac app that celebrates whenever you make a commit to the git repo." Uh Scott and Wes mentioned on Syntax podcast recently, I thought it was silly enough to spend some time on. So every single time you push a commit, you get confetti or rockets or hearts or whatever kind of flying across the screen, which is exactly the type of beautifulness that I need in my life.
So shout out Craig. Um, I usually would not recommend installing random applications like this, but he's posted the the code on GitHub so you can compile and run it yourself. So, this kind of just runs in the background and detects them or is it a desktop app or I haven't looked at Yeah, it's okay. That's good. I I'm curious about how it actually works, but I'm assuming what it's doing is it's a native like UI layer running that that just it probably adds a like a like a a global hook on your commits and saying whenever anything runs then fire off these things.
I wonder if you could event engine. Yeah, you could build that as a like a raycast plugin or something because I've seen the raycast has confetti. If you just do command space confetti, you'll get confetti on your on your machine. I wonder if you could tie into that. Um, yeah, like that. Exactly. Probably. I bet you could. That's a great I love when people build silly stuff, so keep it coming. Nice. Yeah, I've got a couple projects to share I found over on Reddit. Uh, let me get my screen going. The first one is AOL instant message messenger in the web browser.
Um it's called web aim. Um it's built on top of Firebase for real time. It's got buddy lists, groups, away messages. Um I want to get a bunch of people in here. So I'm going to share the link, but you can you can sign in with any username and password and then that that basically signs you up. Um, but I want to see the if the online users um actually fills up once people start showing up because right now there's only one user online. I'll send it to you, Wes, if you want to try to log in.
Uh, but it's fun. It's like this little retro Windows desktop. You can see uh the list of online users. There's are there are bots that you can talk with. Oh, there we go. There's Max. Hello, Max. Who's Max? Don't Don't um I guess I have to be ready to like hide my screen in case anything weird happens. We're opening this up to the web. Oh, everybody's joining. This is getting you I can hear it in my ears. I don't think I you can hear it on stream, but every time somebody joins uh they um it there's a noise.
There's a sound of a door opening. That was happening earlier and I was like, who's opening the door? But it's that's the classic. Um, someone is uh joining or leaving the room. So, is this really Wes? Is that you, Wes? Yeah. Username. Nice. Did the Did the message pop up? Uh, well, I had messaged you first, so it was already open, but let me send you I didn't see that one. An emoji. Hold on. I gota I got to get some Zalgo text and test it in here. I have to mute the browser. This is actually getting out of out of hand.
Um, you guys can't hear it, but it uh every time somebody joins the room or like sends me a message, this is great. But uh Oh, yeah. The what what do you call that kind of text? It's called It's called Zalgo text. I actually don't understand how Zalgo text works. It's some thing to do with like text encoding and text direction, but basically if you ever have like a text input, um, the way you can test it is you can go grab some Zelgo text and then paste it in there uh to see if you you can goof it up.
And it looks like uh this is not protected against Zelo text. Nice. It's funny. I just got a instant message from DRC that says no smarter child in the buddy list. Um, did you ever message with Smarter Child or do you remember Smarter Child from AIM? Yeah. Um, so in Canada we had MSN Messenger. So almost all my friends were on MSN, but I did have a couple like random online friends that used AIM. So Smarter Child that that had nothing to do with like Bonsy Buddy, did it? No. Uh, as far as I remember, it's it was basically one of the first like do everything chat bots.
Like you could ask it for the weather, you could ask it for the news. Um, and it it was just available in your buddy list very similar to how you can just ask chat gpt for anything. Oh man, Scott Brolinsky is loading bun onto my computer. I wonder if that's really Scott. The message just popped up. I got a chat invitation. Uh oh. Oh, they created a chat. Oh yeah, they have chat rooms. Sick. Yes. Hungry hungry hippo. Nice. Yeah, honestly though, this this is what I want to see. Like first of all, Discord has basically centralized messaging and I hate it.
Like um everyone's using Discord for everything. Like we we had a solution for this. It was IRC. I think um it would be great if we could get back to that. I feel like Discord has kind of gotten like critical mass of messaging. Uh but back in the day, like I used to use Yahoo Messenger, MSN, AOL, Instant Messenger. Um, okay. We're really getting overloaded with this this text here. Um, but yeah, now everyone's centralized to Discord. I I I wish we could go back to IRC. I wish there was like a really modern s client and go back IRC sucked.
Um Oh, oh, people can do photos. This is bad. No, no, no. Okay, I gota get out of here. Um, man, I grew up on IRC and I ran like a you had to run like a bouncer so that it when you closed your computer, it would still leave you connected, which is essentially like you would run your IRC on like a VPS and then you would just like use your laptop as like a thin client. And like I wrote my first bots in IRC, but that sucked having and like there's the thing about like standard text communication protocols is they're standard and then there was no like cool features, right?
Like that's why we saw everybody go away from what was the standard chat protocol? Jabber. Jabber. Every everybody was Jabber compatible. And then slowly we saw everybody drop Jabber because like you can't do like if you want if you're Instagram and you want to add something cool to the DMs then like if the standard doesn't support it then it doesn't work which it kills my like standards lovingness but I get it. I I remember so I worked at the help desk in university and we used a Jabber compatible client. I forget what it was. There's like an X in the name or something like that.
Um, but yeah, I guess it's funny that like was it? No, I don't I don't think it was Hip Chat, but Discord has basically become the standard. It's just everybody installs Discord. Like, it's not a messaging standard. It's just everybody has it installed and everybody has an account. Um, but I don't know. I've been thinking a lot about the centralized web lately because especially with AI, everything's getting centralized. What can we do? How do we how do we start a movement and like decentralize the web again? like little sites like I don't know. I'm doing a talk at JS Nation about like a generative UI and and like kind of as part of the the research into this you're finding all these people that think like the future of the web will be inside of chat GBT or like Gemini or whatever.
And like I don't know that I want to live in that world where like the future of interacting with the open web is through one of these three companies chat window or like whatever they decide what it is like I don't think that that that's going to be good. Um, and it it will certainly happen and like we saw it with um social media as well, you know, like there's the Fedverse, but like are you on are you on the Fedverse, CJ? I'm not I mean I'm not on I'm not on really any social media, but I I never caught on to like Mastadon or or some of the other um basic decentralized social networks.
Yeah, I I want it to work so bad, but it just it's not sticky. And I like I post my stuff on threads which I have um a Fedverse integration with and I'll see I don't know 10 or so people from Fedverse interact with it but it doesn't seem to to have caught on and I don't want the same thing to happen to websites. Yeah. And Paulo mentions Blue Sky is technically decentralized. Um I think right now everything is on the same um app at app proto server but it technically can hook into other app at app proto servers.
Um I know they've been saying that for a while. We did we did many things on at Proto, right? Yeah, we did like podcasts as soon like the first wave of blue sky, we were all really excited about it and it makes sense, but like where's the other blue skies, you know? And then and then also once you get into like decentralization where anybody can do anything then it becomes a problem of like features and discoverability and then the spammers come and then you know I think at a certain point you do need uh you do need some single entity to sort of help control all this stuff but hopefully one that is not evil right yeah I got got some thinking to do because um we have we've learned a lot of lessons over the years right a lot of companies companies have launched a lot of u things have been centralized or people have figured stuff out but is there a way to do it that doesn't put all that all the power in the hands of a single corporation I don't know but that's the big question um in a similar news or like I don't know trying to get rid of brain rod or the the way the web has become this is a really fun project uh from uh transs they made Tik Tok but it's puzzles instead of reals cuz yeah I mean this is old man yells at cloud again but that's the other thing is like we've we our attention spans are low everyone's hooked on their phones all the time um I really like this so if you go to puzzle.express Express.
It's just doom scrolling but with puzzles. Um, so have you ever played this? It's called Pipes. It's like a pipe connection game. Oh, that's cool. You have to figure out a way to connect all the pipes without um overlapping colors. So, this is probably Let's see. No, like this. This is a hard one. I bet I could do this. I bet I mean I bet what's fun to think about though is like I bet Claude um could create lots of little puzzles like this. I I can't figure this one out. Dang it. I'm usually really good at this.
I got it. You got it. Do you have the same puzzle? Yeah. Ready? Show my screen for a sec cuz CJ sucks at this puzzle. Well, you got a simple one, Wes. Mine had like five five more cuz I've played it a couple times. Oh, yeah. Yeah. Yeah. Uh, but what's fun what's fun is once you've figured one out, you can just scroll and then it pops up another puzzle. So, actually this one is this uh is this 2048? Let's see. Um, how high can you get? Doesn't this do like stacking? This one isn't working.
This one's fun. You like untangle the nodes. You'll see like if you want to make it so that all of the nodes are not overlapping. Um, so you have to like rearrange. But what's cool about this is like you could just scroll for days and find new new puzzles to play. Um, I believe in the comments they said it is a progressive web app. So I think you can visit it. It'll download some puzzles and then you can even use it potentially offline. Like we're going on a long for you to like to do these things.
You think good for your brain? I think it is. I think like keeping your keeping your brain going. Um, I I get enjoyment out of little games like this, but um there's probably I'm I'm assuming I I feel like I have read some stories about um like doing puzzles or keeping your mind active prevents cognitive decline in older age. Oh, I bet. So, I don't and I don't think it can hurt either. So, and then this is um a Wordle clone. What's the word that you should always start Wordle with that like narrows things down, you know?
Oh man. Yeah, I forget. I was super into Wordle during the pandemic. That was that's like my only good memory of of COVID was doing Wordle. Randy was giving me a hint. Can you give it again, Randy? What is it? Orate. Okay, that's pretty good because that will give you a bunch of vowels if possible. That was the worst guess ever. Randy, I can't believe you've done this to me. None of those are right. Um I untangled my web. I did it. That was fun. I I I could see myself instead of scrolling Tik Tok or instead instead of scrolling YouTube shorts or Instagram, just coming across puzzles and and and working on them.
Um but I I like the idea of using AI to help come up with these puzzles. like it can come up with all sorts of uh the the pipe game and then um it looks like you just found the rearranging um yeah, basically you click on them and you need to get all of the lines to connect. Yeah. Let's see if I'm going to give this to my kids. They're going to love this. Nice. Yeah, man. Maybe we should switch to just being puzzle live streamers. Is that a thing? It is. Yeah. I mean, there's some people that do the daily Wordle the New York Times every every morning.
Oh, man. Yeah. Screw WebDev. I'm getting into puzzle streaming. That is great. There you go. Good find. Where did you find you find this on Reddit? Yeah. So, on um r/webdev, they have like a show off Saturday. But every now and then people will just post it in um as just a main thread. And so, both of these popped up on Reddit. Um, here's another puzzle I hadn't seen before, but basically like you you're at the start and you have to get the entire page to be the same color. Um, so right now we're at this top left purple one.
So if I do orange, that changes it to orange. And now if I change all of this to green, then my star will move or it won't move, but like that's connected. So I probably here I would go like orange and then green and then purple. And I'm like working in the fewest number of steps to to get everything the same color. So that one's pretty fun. Oh, is this clear the line? Is this Tetris? Huh? It's not running. It did say there was an update. Let me refresh the page. Reload. Yeah, puzzle esports incoming.
Some of these are some of these are broken, but um I don't know. I think I I would absolutely use this as like a mobile app on a a 5 hour flight just like yeah, puzzle after puzzle cuz I've downloaded some of similar games before, but then you have to switch between games like if I get tired of a puzzle, I can just go on to the next one and try to solve it. Oh, I guess this is probably uh mind sweeper. Is that what this is? Oh, collect every gem. Oh, I see. So, when you press the arrows, it takes you to the nearest rock and you don't want to Oh, the And then the bombs bounce you back.
How do I get out of here? I'm stuck. Yeah, I don't know how to do this one. Yeah, puzzle edition of CSS battles. It could be fun. Um, just like we both we all get puzzles and have to solve them quickly. Or like, who can write a bot that could solve them the fastest? I think that would be kind of cool because I saw this thing on Reddit a couple weeks ago where somebody had this like like impossible um like crossword where it was just three letters and I think it was like I think you're looking for the word cow and it was just a grid of like 10,000 letters and just there's in one in one spot is the word cow and like it's it's almost impossible for a human to find that unless you were to like go every single line and then you start going baddy, right?
Um, so I was like, I wonder if I could like write a script to do this, you know, and I I fired up Claude and um, actually I tried it in all of the different AIs to see like which one is the best at like solving this puzzle and codeex got it the fastest and best. So maybe that's a video is like give us these puzzles and then we don't solve them, but who can write uh, who can write the code to solve the thing the fastest? And we can use AI, right? Like I because I would I would I I would almost like I feel like you could you give AI tools, right?
So it can snapshot it can see what the what the puzzle is and then you give it tools like move mouse or even just like I mean at that point you probably just use like a playright MCP to directly control the browser. Well, that's that's I think that would be the fun part of the video is like if we were all given I don't know 10 puzzles and then like you start with nothing and then it's up to us to figure out what tools do we want to put into the AI? How do we want to prompt it?
What models are we going at? Like that would be really cool. put it on the list. That's a good video. Sick. Do we have anything else to chat about? Let's see. I think that's it. Yeah. Nice. Cool. I guess uh do we have a couple minutes? Maybe if anybody has anything in the chat we can we can dive into before we go. Oh, and of course we should talk about Sentry. Ry's in my ear. You can't hear like uh but this Yeah, this stream is brought to you by Sentry. Everything we do here at at uh Syntax brought to you by Sentry.
Every video, every podcast, we couldn't do what we do here without them. Uh the they're the world's best air monitoring platform. Um, essentially plug it into your app running into production and then any errors that happen will get reported back to the dashboard so you can do something about it. Um, so yeah, Sentry is great. We use it. You should give it a try. Head over to centry.io/sintax. You can get two months free on the team plan. Who is Randy? Randy is our Are you able to switch yourself? Randy has the most cracked OBS setup for this thing right now and he's just switching us all right now and telling me to stop getting off.
There's Randy. I think I can pop in. Hey, what's up? I can't hear him. Oh, he can't. Wes can't hear me, right? Something's wrong with the one of the pipes and the audio is not going into my ears. But the uh the tech to get this working is fascinating because we're basically all peer-to-peer streaming our cameras to Ry's computer and then Randy has multiple scenes that have individual like cameras from us and individual screens and then he's able to switch them and then he's sending his stream out to Streamlabs Multiream which is sending it to Twitch and YouTube.
It's a cool setup. Yeah. Yeah. Thanks for doing this, Randy. We appreciate uh your hard Yeah, this is fun. Uh Retesh says, "Maybe a little bit about the current state of next tanstack or remix." Um yeah, what's going on? So, Next kind of same thing. It's it's been for I don't know, maybe the last year or so. They've just been cranking on on React server components. Um Tanstack, I think, has officially taken like a stance against React server components. They're going all in on um their approach which is like loaders and whatnot. And then Remix 3 is just not React at all which is absolutely nuts.
Um we did I think we talked about it in one of our our live streams. Yeah, our very first live stream we talked about Remix 3 and kind of the approach they're taking. It's very composable. It's a very small um UI layer. Um sorry, a very small API layer. Um, and it's like it's it's almost like a Laravel, right? It includes absolutely everything. Database adapter. They're going all in everything from scratch. Um, and I think the hope of that is that the the AI will be able to understand the surface area and then write the entire app for you without having to understand a 100 different packages.
Yeah, it's interesting to hear you rattle through all three of these because it does feel like we're it feels like we're in the in between time. Like we're waiting for stuff to be released, we're waiting for stuff to happen. Um, I will say Tanstack has been working hard like they're they're tanstack start is RC so they're working hard to get that into stable. Um, and yeah, it's it's it's interesting to see there's a lot of push back against Nex.js. So the the server compon I think honestly the the news towards the end of the year of uh all the the the hacks against server components did not do well for people's opinions about no nex.js.
JS and so people are searching. Tanstack feels like it's the answer. Like personally when I use Tanstack like um their their docs are just so expansive. Like there's just so much you can know and it's so customizable. Um I almost wish there was something built on top of Tanstack that kind of like abstracted even like React Query or Tanstack query away. Um, but it seems like they're focusing on the primitives, getting all getting all that stuff working, and then maybe we'll see like a even like a tan stack meta framework eventually. Couple people saying I'm laggy last couple seconds.
I don't I do not know what is causing the lag. Like it's it's not a hardware thing. Um, sorry, not like a like a camera thing, right? It's it's somewhere in the between me uploading it and it being pushed out to stream, which is really frustrating. But like, yeah, you could see my CPU, GPU are kind of pegged right here. I love having these these apps open. Oh, you can't you can't see it right now, but Um, yeah, it's Microsoft Edge. It's it's running this like stuff in the browser, streaming our screens at the same time as streaming our cameras at the same time as talking real time to everybody is really taxing it.
So again, I need one of these new things. There we go. CPU is pegged Microsoft Edge. Well, I will say, so we kind of talked about this in our first live stream. If you take a look, go to the syntax or go to youtube.com/saxfm, you can see all of our past live streams. Um, but Hungry Hungry Hippo is saying, "I get confused when people talk about Remix. I thought they merged with React Router. Um, but isn't there a new remix coming out?" Um, and uh, there is. So they they did they did merge with React Router um and actually like at the time removed the remix name.
Now React Router is what Remix was and then Remix 3 is a complete rewrite from the ground up. Um that it's not even built on top of React anymore. U so if you if you want the old Remix that you were used to, you would use basically React Router I think V7, whatever the latest React router is. Yeah. Um and then Remix 3 is a brand new thing. They're they're trying to change the game. Yeah, it's the only thing Remix has in relation to the old Remix is the people who are built it and the name.
Um, otherwise this is a is a totally different beast. It's totally different. It's also in JavaScript, right? But it's not React. It is JSX, so it does have that going for it, but it doesn't even follow a lot of the It's not even like similar to React where like it also implements hooks and whatnot. It's it's a totally different beast. Stream schedule. The whole the idea is every Monday at what 100 pm Eastern, right? Uh but sometimes we move it because Mondays uh sometimes we have holidays and whatnot. Yeah. But going forward, at least for the foreseeable future, it'll be every Monday.
And I'll be on vacation next week. So next week it'll just be Scott and Wes. I will be on a flight to Amsterdam. So, okay. I don't think we'll do one next week. maybe. Yeah, maybe. Maybe. Yeah. So, we won't have a live stream next week because Oh, yeah. I forgot to do this the entire stream, but um we're going to be in Amsterdam next week and you should come see us live. Um Randy, if you can show my screen, um head over to syntax.fm. At the very top there's a banner syntax. But on June 10th, we are going to be IRL in Amsterdam.
You can come to the live show, come hang out with us. Uh we'll have free merch. So, if you're a plane flight or a train ride away from Amsterdam, we'd love to see you. And we're doing this in partnership with Git Nation. Um, so they're hosting the JS Nation conference the next day on June 11th. And then React Summit the day after that on June 12th. I'll actually be an MC at both conferences. Wes is giving a talk at GSN Nation. Scott's giving a talk at ReactSummit. He's also MCing with me at JSN Nation. So, it's a big old syntax party.
Come down to Amsterdam. We'd love to see you. Um, if you go to jsnation.com or reactsummit.com, you can use code syntax. You can get 15% off of your conference ticket. Uh, but the meetup itself is free to attend. You just need to RSVP. Uh, we already have 125 RSVPs. That's great. It's going to be a party. All right. Wow. So, yeah, the live stream next week because we're doing it in person. Beautiful. IRL, we'll see you there. A bunch of people in the chat are going to be there as well. CJ, prepare to be hugged until Are you a hugger, CJ?
I I don't seek hugs from people, but I will return those hugs if they give if they are given to me. Right on. Yeah. I don't I don't want to ever like Every now and then I'll I'll like go give people a hug, but like if someone hugs me. Yeah, absolutely. I'm into that. Yeah. Paulo is a longtime watcher of Coding Garden. For years, he's been in the in the live chat helping out. Um so it'll this will be my I think I don't think we've ever met in person, right, Paulo? So, yeah, it'll be good.
Shroud says, "Wes, we kiss here. Prepare to be kissed, West." All right. Yeah, I'm into that. Cool. All right, that's all I got, Wes. All right. Thanks everybody so much for tuning in. Uh, make sure you subscribe and leave us comments and we'll catch you not next week, but the week after. Peace.
More from Syntax
Get daily recaps from
Syntax
AI-powered summaries delivered to your inbox. Save hours every week while staying fully informed.









