Tuomas Artman

5.2K posts

Tuomas Artman banner
Tuomas Artman

Tuomas Artman

@artman

Co-founder @linear, previously senior staff engineer @Uber

Helsinki, Finland Katılım Mart 2007
1.1K Takip Edilen18.2K Takipçiler
Sabitlenmiş Tweet
Tuomas Artman
Tuomas Artman@artman·
When we started work on @linear, we felt real-time sync was a core functionality we had to invest in from the get-go. It turns out sync was important, but not for the reasons we thought. Read on.
Tuomas Artman tweet media
English
27
85
1.1K
0
Tuomas Artman
Tuomas Artman@artman·
I think they weren't aggressive enough. We fixed an issue that's potentially the root cause for this. When the device comes out of sleep and your client is outdated, we issue a refresh when the browser tells us that we're online. Turn out that for a short period of time, macOS is still establishing networking even though navigator thinks it's online. We now gate the refresh by trying to make an actual HTTP request against our servers, which hopefully fixes this problem for you.
English
1
0
1
241
Mike Julian
Mike Julian@mikejulian·
Major pet peeve: apps that deploy on their root domain instead of app.domain.tld or whatever. Makes it so annoying to look at the homepage. lookin at you @linear and @cursor_ai
English
25
0
162
177K
Rico
Rico@ricoberan·
Did you guys know the @linear icon was first made in sketch?
Rico tweet media
English
14
4
350
17.4K
Tuomas Artman
Tuomas Artman@artman·
@cjc Ah, I see how we're playing this now 🤣
English
0
0
5
494
Cristina Cordova
Cristina Cordova@cjc·
After three incredible years, I’m moving on from Linear… to year four. See you Monday.
English
33
1
648
46.3K
Tuomas Artman
Tuomas Artman@artman·
@vanilagy @pablo_bonilla_ @raycast You shouldn't have to hover over things in order to understand whether they are clickable or not. Desktop apps don't do a finger pointer because convention tells you what is clickable without having to hover.
English
1
0
21
844
Vanilagy
Vanilagy@vanilagy·
@pablo_bonilla_ @raycast Makes zero sense. Signaling what's clickable and what isn't is important. I've never heard a good argument for this that isn't "desktop apps don't do this". I'm sure desktop apps don't do it primarily due to developer laziness.
English
5
1
182
9.4K
Tuomas Artman
Tuomas Artman@artman·
@pdotcv Uuh, want one. Is there I place I can order this printed and framed?
English
1
0
1
723
Paul Macgregor
Paul Macgregor@pdotcv·
Couple more... Advanced filters 13 FEB 2026
Paul Macgregor tweet media
English
4
2
63
4.1K
Storm
Storm@AndersonAndrue·
@artman @linear fuck desktop apps, cursor:pointer is super helpful
English
1
0
104
4.7K
Tuomas Artman
Tuomas Artman@artman·
@thomaspaulmann @linear Adding the setting was one of the big mistakes we made 🤣 The feedback was just so strong that we got scared.
English
5
0
29
4.6K
Thomas Paul Mann
Thomas Paul Mann@thomaspaulmann·
@artman @linear I still remember the day when you had to add a setting for it. Always felt weird to me but I guess if folks use it in a browser, than that's more common.
Thomas Paul Mann tweet media
English
2
0
37
6.2K
Tuomas Artman retweetledi
Cristina Cordova
Cristina Cordova@cjc·
In October, Cars24 was preparing for an IPO and renewed their multi-year Jira contract. A few weeks later, they treated the entire thing as a sunk cost and walked away. Since switching to Linear, they’ve seen a shift in the physics of their project timelines. Things that used to take months now take weeks; weeks turn into days. The companies that accelerate first pull ahead. More on their story here: linear.app/customers/cars…
Cristina Cordova tweet media
English
1
1
24
3.1K
Cheng Yang
Cheng Yang@yangcheng·
@artman Please linear release , build something more secure
English
1
0
0
419
Tuomas Artman
Tuomas Artman@artman·
Your bi-monthly reminder that your one npm install away from getting pwned without the proper precautions.
TANSTACK@tan_stack

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.

English
25
17
508
85.6K
Tuomas Artman
Tuomas Artman@artman·
@yaseralkayale At a minimum. Trivial to implement and reasonably good at keeping you clear from these kinds of attacks.
English
0
0
1
285