Our customers, who are the best, are assisting us with our investigation- one reported to us what the threat actor was using their keys for, since revoked.
If you have any prompts from misuse of your keys, this will help us immensely.
Please email support[at]railway[dot]com
Eric Case retweeted
Why are people acting like it's @OpenAI/@AnthropicAI's fault that vulns are being fixed/disclosed? This is the result of decades of security debt from poor software engineering. The labs' models are not creating net-new security risk, the risk has always been there and we're finally able to uncover and fix it.
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
phoronix.com/news/LKML-New-T…
we did invent it and it's called OIDC federation
vercel and github actions do it:
- each deploy gets a short-lived signed token
- AWS/npm/other services verify it via trust policy
- you get temporary creds
no keys to paste
the problem is not enough APIs and services accept it
Eric Case retweeted
What did people think “focus on security” meant? It meant this. It meant finding all these problems (of which there are so many more) and fixing them.
The goal isn’t to have an easy day at the office. It’s to make sure people don’t die. It’s to stop truly horrible cyber attacks.
Eric Case retweeted
Last night Putin got excited about being called a “humanitarian” by the USA representative and arranged a deadly fire show. 25 missiles on Kyiv.
Eric Case retweeted
Everybody is building Google Wave
today, we're launching Resend Inboxes.
an inbox for people and their agents.
∙ connect the agents you already use through MCP or skills
∙ agents and humans reply from the same thread
get started with Inboxes now:
resend.com/products/inboxes
Eric Case retweeted
a thing we’re very proud of at @erscio is that we don’t do *any* long lived secrets. it’s service accounts, oidc, and dpop-bound tokens (where appropriate) all the way down
Eric Case retweeted

Tailscale@TailscaleOct 21
🇺🇸
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
Google Reader might be dead, but RSS is alive and well.
Build your own RSS hub with Tailscale. Read what you want, from any browser, without exposing it to the open web.
Build a thing. Escape the algorithms.
More on the blog:
buff.ly/WAVWiu5
Eric Case retweeted
1/15 I've been getting a lot of questions since posting about @regentcraft's first flight:
- What is this thing?
- Why is this important?
- Havent we had seaplanes for years?
This is a *Seaglider* - its a modern take on a flying boat that is new & different in many ways!
🧵👇
Eric Case retweeted
When you have a time shared DGX Spark in office
Sparkinson’s Law: Workloads expand to consume all available compute on the shared DGX Spark.
Eric Case retweeted
Crazy traffic between LA and SD with the closing of I-5 for the wildfires tonight.
I'm spending 3 hours on the road, my team spent 5!
Seagliders will fix this
Eric Case retweeted
A cool thing about getting older is you get to choose whether you're stiff because you worked out or stiff because you didn't.
Eric Case retweeted

Bill Clerico@billclericoOct 15
🇺🇸
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
Big asset manager to @sacca: "We don't do climate."
"Ok. Energy? Advanced manufacturing? Resilience?"
"Love it. Send it over."
Same fund.
My conversation with @sacca and @CaieKelley of @lowercarbon from NY Climate Week: youtu.be/vjyY8xu2JGw?si=o70h…
Eric Case retweeted
We are going to make this a regular event, but until we get into a rhythm expect our first meetup to be a couple of great lightning talks and then some informal feature demos in the hallway track.
We're hosting our first technical meetup in SF on October 26. Drinks and pizza will be served, thrilling talks will be given. Join us: luma.com/0qr6bxcw
Eric Case retweeted
very excited to see this out of A\
this is our thesis at @erscio ! But we are building a git compatibility layer: ersc.io/blog/what-comes-afte…
enterprise adoption of new source control is a big ask, so making a smooth bridge from the past to the future is a big part of our offer
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…




































