Joins are NOT Expensive
https://www.reddit.com/r/programming/comments/1s7xp78/joins_are_not_expensive/

submitted by /u/ketralnis (https://www.reddit.com/user/ketralnis)
[link] (https://www.database-doctor.com/posts/joins-are-not-expensive) [comments] (https://www.reddit.com/r/programming/comments/1s7xp78/joins_are_not_expensive/)

A Couple Million Lines of Haskell: Production Engineering at Mercury
https://www.reddit.com/r/programming/comments/1s7xphg/a_couple_million_lines_of_haskell_production/

submitted by /u/ketralnis (https://www.reddit.com/user/ketralnis)
[link] (https://blog.haskell.org/a-couple-million-lines-of-haskell/) [comments] (https://www.reddit.com/r/programming/comments/1s7xphg/a_couple_million_lines_of_haskell_production/)

Rust's next-generation trait solver
https://www.reddit.com/r/programming/comments/1s85rj0/rusts_nextgeneration_trait_solver/

submitted by /u/ketralnis (https://www.reddit.com/user/ketralnis)
[link] (https://lwn.net/SubscriberLink/1063124/81483612b1c8a493/) [comments] (https://www.reddit.com/r/programming/comments/1s85rj0/rusts_nextgeneration_trait_solver/)

How Email Actually Works
https://www.reddit.com/r/programming/comments/1s8a582/how_email_actually_works/

submitted by /u/Sushant098123 (https://www.reddit.com/user/Sushant098123)
[link] (https://sushantdhiman.dev/how-email-actually-works-ep-1-behind/) [comments] (https://www.reddit.com/r/programming/comments/1s8a582/how_email_actually_works/)

axios 1.14.1 and 0.30.4 on npm are compromised - dependency injection via stolen maintainer account
https://www.reddit.com/r/programming/comments/1s8ct9i/axios_1141_and_0304_on_npm_are_compromised/

<!-- SC_OFF -->Two versions of axios were published today through what appears to be a compromised maintainer account. No GitHub tag exists for either version. SLSA provenance attestations present in 1.14.0 are completely absent. Publisher email switched from the CI-linked address to a Proton Mail account( classic account takeover signal). <!-- SC_ON --> submitted by /u/BattleRemote3157 (https://www.reddit.com/user/BattleRemote3157)
[link] (https://safedep.io/axios-npm-supply-chain-compromise/) [comments] (https://www.reddit.com/r/programming/comments/1s8ct9i/axios_1141_and_0304_on_npm_are_compromised/)

Why have supply chain attacks become a near daily occurrence ?
https://www.reddit.com/r/programming/comments/1s8dk9q/why_have_supply_chain_attacks_become_a_near_daily/

submitted by /u/Successful_Bowl2564 (https://www.reddit.com/user/Successful_Bowl2564)
[link] (https://socket.dev/blog/axios-npm-package-compromised) [comments] (https://www.reddit.com/r/programming/comments/1s8dk9q/why_have_supply_chain_attacks_become_a_near_daily/)

February 2026: $3800 Claude API Bill and a Fork Bomb
https://www.reddit.com/r/programming/comments/1s8hcly/february_2026_3800_claude_api_bill_and_a_fork_bomb/

submitted by /u/droppedasbaby (https://www.reddit.com/user/droppedasbaby)
[link] (https://www.droppedasbaby.com/posts/2602-01/) [comments] (https://www.reddit.com/r/programming/comments/1s8hcly/february_2026_3800_claude_api_bill_and_a_fork_bomb/)

Prediction: The Shopify CEO's Pull Request Will Never Be Merged Nor Closed
https://www.reddit.com/r/programming/comments/1s8i9sp/prediction_the_shopify_ceos_pull_request_will/

submitted by /u/ricekrispysawdust (https://www.reddit.com/user/ricekrispysawdust)
[link] (https://joshmoody.org/blog/shopify-ceo-autoresearch-pr/) [comments] (https://www.reddit.com/r/programming/comments/1s8i9sp/prediction_the_shopify_ceos_pull_request_will/)

Breaking the Warranty with go:linkname
https://www.reddit.com/r/programming/comments/1s8iimd/breaking_the_warranty_with_golinkname/

submitted by /u/RandNho (https://www.reddit.com/user/RandNho)
[link] (https://mcyoung.xyz/2026/03/31/shame/) [comments] (https://www.reddit.com/r/programming/comments/1s8iimd/breaking_the_warranty_with_golinkname/)

Clojure: The Documentary [OFFICIAL TRAILER]
https://www.reddit.com/r/programming/comments/1s8jht8/clojure_the_documentary_official_trailer/

submitted by /u/BrewedDoritos (https://www.reddit.com/user/BrewedDoritos)
[link] (https://www.youtube.com/watch?v=JJEyffSdBsk) [comments] (https://www.reddit.com/r/programming/comments/1s8jht8/clojure_the_documentary_official_trailer/)

Claude Code's source leaked via a map file in their NPM registry
https://www.reddit.com/r/programming/comments/1s8kni4/claude_codes_source_leaked_via_a_map_file_in/

submitted by /u/worthwhilewrongdoing (https://www.reddit.com/user/worthwhilewrongdoing)
[link] (https://x.com/Fried_rice/status/2038894956459290963) [comments] (https://www.reddit.com/r/programming/comments/1s8kni4/claude_codes_source_leaked_via_a_map_file_in/)

"Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly": the reason behind Google revising their post-quantum cryptography transition deadline to 2029
https://www.reddit.com/r/programming/comments/1s8laox/safeguarding_cryptocurrency_by_disclosing_quantum/

submitted by /u/YaLlegaHiperhumor (https://www.reddit.com/user/YaLlegaHiperhumor)
[link] (https://research.google/blog/safeguarding-cryptocurrency-by-disclosing-quantum-vulnerabilities-responsibly/) [comments] (https://www.reddit.com/r/programming/comments/1s8laox/safeguarding_cryptocurrency_by_disclosing_quantum/)

Domain Separation Belongs in Your IDL
https://www.reddit.com/r/programming/comments/1s8ndig/domain_separation_belongs_in_your_idl/

<!-- SC_OFF -->Even in 2026, I don't think we're going about serializing and signing data structures the right way. I don't think protobufs are the answer. A better solution is random domain separators, specified directly in the IDL. <!-- SC_ON --> submitted by /u/maxtaco (https://www.reddit.com/user/maxtaco)
[link] (https://blog.foks.pub/posts/domain-separation-in-idl/) [comments] (https://www.reddit.com/r/programming/comments/1s8ndig/domain_separation_belongs_in_your_idl/)

Don’t trust, verify (curl, Daniel Stenberg)
https://www.reddit.com/r/programming/comments/1s8o99r/dont_trust_verify_curl_daniel_stenberg/

submitted by /u/Skaarj (https://www.reddit.com/user/Skaarj)
[link] (https://daniel.haxx.se/blog/2026/03/26/dont-trust-verify/) [comments] (https://www.reddit.com/r/programming/comments/1s8o99r/dont_trust_verify_curl_daniel_stenberg/)

Where do you draw the line between overengineering and anticipating change?
https://www.reddit.com/r/programming/comments/1s8r9nh/where_do_you_draw_the_line_between/

submitted by /u/iamgioh (https://www.reddit.com/user/iamgioh)
[link] (https://iamgio.eu/2026-03-28-overengineering/) [comments] (https://www.reddit.com/r/programming/comments/1s8r9nh/where_do_you_draw_the_line_between/)

A bug in Bun may have been the root cause of the Claude Code source code leak.
https://www.reddit.com/r/programming/comments/1s8t8hp/a_bug_in_bun_may_have_been_the_root_cause_of_the/

submitted by /u/Successful_Bowl2564 (https://www.reddit.com/user/Successful_Bowl2564)
[link] (https://github.com/oven-sh/bun/issues/28001) [comments] (https://www.reddit.com/r/programming/comments/1s8t8hp/a_bug_in_bun_may_have_been_the_root_cause_of_the/)

What's cch? Reverse Engineering Claude Code's Request Signing
https://www.reddit.com/r/programming/comments/1s98wuw/whats_cch_reverse_engineering_claude_codes/

<!-- SC_OFF -->I originally reverse engineered this when Fast Mode was first introduced and contacted Anthropic in order to get approval for responsible disclosure but I never heard back. Now that there's a lot of buzz around the CCH header, I wanted to share what I found. <!-- SC_ON --> submitted by /u/tcdent (https://www.reddit.com/user/tcdent)
[link] (https://a10k.co/b/reverse-engineering-claude-code-cch.html) [comments] (https://www.reddit.com/r/programming/comments/1s98wuw/whats_cch_reverse_engineering_claude_codes/)

Java, error message. web programming
https://www.reddit.com/r/programming/comments/1s9alz9/java_error_message_web_programming/

<!-- SC_OFF -->Hello, so I'm new to programming, and was just following the tutorial on yt. I run the program, and then tried opening the website (localhost:8080) on chrome, but was met with this error. I really don't know why this happened. I tried asking cloude, but I still cant figure it out. Any help is appreciated. The link is a programming tutorial using Java and Spring Boot that i was following. (idk what to put there) the error: Whitelabel Error Page This application has no explicit mapping for /error, so you are seeing this as a fallback. Wed Apr 01 12:18:18 GMT+08:00 2026 There was an unexpected error (type=Not Found, status=404). the code: package com.codewithmosh.store; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; public class HomeController { u/RequestMapping("/") public String index(){ return "index.html"; } } package com.codewithmosh.store; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; u/SpringBootApplication public class StoreApplication { public static void main(String[] args) { SpringApplication.run(StoreApplication.class, args); } } <!-- SC_ON --> submitted by /u/Weak-Text8827 (https://www.reddit.com/user/Weak-Text8827)
[link] (https://www.youtube.com/watch?v=gJrjgg1KVL4) [comments] (https://www.reddit.com/r/programming/comments/1s9alz9/java_error_message_web_programming/)

We implemented PDF integrity verification that runs 72 hours before the file is created
https://www.reddit.com/r/programming/comments/1s9dsom/we_implemented_pdf_integrity_verification_that/

<!-- SC_OFF -->The core limitation of PDF forensics has always been that you need the document before you can check it. Today we're removing that constraint. Pre-emptive xref superposition analysis works on a simple principle: a PDF, once it will exist, retroactively entangles its future metadata state with the ambient quantum field. We intercept the pre-collapse signal and run standard revision detection — Creator/Producer mismatch, timestamp delta, appended xref sections — against the yet-to-exist file structure. The implementation required extending our Heisenberg–Acrobat equation to handle non-deterministic byte offsets, but the parser handles it cleanly. 72-hour temporal coherence window. Works on all plans. <!-- SC_ON --> submitted by /u/Total-Reasonable (https://www.reddit.com/user/Total-Reasonable)
[link] (https://htpbe.tech/blog/htpbe-quantum-pdf-verification-before-creation) [comments] (https://www.reddit.com/r/programming/comments/1s9dsom/we_implemented_pdf_integrity_verification_that/)

Built a tool to measure how much *you* actually contribute in AI coding sessions
https://www.reddit.com/r/programming/comments/1s9e2qg/built_a_tool_to_measure_how_much_you_actually/

<!-- SC_OFF -->I've been vibe-coding a lot lately — you probably have too. And somewhere along the way I started feeling like I wasn't actually sure what I was bringing to the table anymore. Like, was I engineering, or just reviewing autocomplete? So I built **VibeGrit** — it plugs into your AI assistant via MCP and scores your sessions across things like: how well you framed the problem, whether you pushed back on bad output, if you kept scope from creeping, how well you decomposed complex tasks. You type `vibegrit` at the end of a session and it scores you 0–100 across those dimensions. Over time you can see your streaks, your strengths, where you're actually improving. It's free, self-hostable, and works with Claude/Cursor/Windsurf. Not trying to sell you anything — mostly wanted to share it because I think the "does the AI just write everything now?" anxiety is real and data helps. Would love feedback from anyone who tries it: **mcp.vibegrit.dev** <!-- SC_ON --> submitted by /u/AcanthisittaFresh712 (https://www.reddit.com/user/AcanthisittaFresh712)
[link] (https://vibegrit.dev/) [comments] (https://www.reddit.com/r/programming/comments/1s9e2qg/built_a_tool_to_measure_how_much_you_actually/)

In case you are interested to watch Microsoft podcast about my VS Code extension "Blockman" (200,000 installs). Also, can you give me some ideas for additional features? Also feel free to make any pull request (GitHub) about features, rendering/parsing/tokenizing optimization or anything.
https://www.reddit.com/r/programming/comments/1s9ea0l/in_case_you_are_interested_to_watch_microsoft/

<!-- SC_OFF -->SHOWCASE IMAGE:
https://i.ibb.co/6cKzpJDm/twitter-photo-Screenshot-2026-03-31-133651-copy-2.png (Some people find the entire-file-blockification too overwhelming for their eyes, so, you can tweak Blockman, it has many settings, for example you can disable backgrounds and show only borders, or you can show only the focused block, also you can show only curly-bracket-blocks, or only round-bracket-blocks or only square-bracket-blocks or any combination of the curly/square/round bracket-blocks. Also you can change colors of borders and backgrounds, also you can set different colors for each nested depth, and there are also many more settings.) Supports many languages including Python, Yaml, JavaScript, TypeScript, C, C++, C#, CSS, HTML and many more. Microsoft podcast about my VS Code extension Blockman: https://www.youtube.com/watch?v=y79Okx8oEao&list=PLlrxD0HtieHg8On6t1l5_kj--7PMmyfGi Top End Devs podcast: https://www.youtube.com/watch?v=wkG_4pVslMg&list=PLJesql-aSfX6xaZcgQqmfIssYSaQVWXQF Blockman is a VS Code extension which helps developers easily perceive code structure by highlighting nested blocks of code. Official link: https://marketplace.visualstudio.com/items?itemName=leodevbro.blockman . The main problem: VS Code extension API does not give extensions access to native AST tokens, so I implemented some third party libraries into Blockman to analyze/parse/tokenize code files to find positions of starting/ending points (brackets, HTML tags, Python INDENT/DEDENT locations) of blocks. Those third party libraries are very good but too slow that if the file has 10000 lines, it may need several seconds to reparse/retokenize code with each change of text. <!-- SC_ON --> submitted by /u/leodevbro (https://www.reddit.com/user/leodevbro)
[link] (https://www.youtube.com/watch?v=y79Okx8oEao&list=PLlrxD0HtieHg8On6t1l5_kj--7PMmyfGi) [comments] (https://www.reddit.com/r/programming/comments/1s9ea0l/in_case_you_are_interested_to_watch_microsoft/)