Daniel Lockyer (@DanielLockyer) | teapawt

Pinned Tweet

@DanielLockyer17 Aug 2025

I've found (and locally fixed) an annoying performance bug on @X web! TLDR: go to a post with a lot of replies, and scroll up and down - notice it's laggy? There's a component that calculates the scroll parent, and then removes the scroll listener when unmounting. But it seems we don't even have a scroll listener most of the time, so we can avoid the heavy _getScrollParent function by wrapping it in a conditional This removes seconds of forced reflow and lag for me Would love to get it fixed! 🙏🏻 @X @engineering @elonmusk @nikitabier

115

3,149

801,064

@DanielLockyer52m

You all know what we're going to see in the news soon

BREAKING: Barclays cutting 5,000 jobs in AI-led efficiency drive trib.al/PslgiEk

Barclays cutting 5,000 jobs in AI-led efficiency drive

Barclays has revealed it is cutting 5,000 jobs - 5% of its workforce - as part of efforts to save costs and drive efficiency through investment in artificial intelligence (AI).

2

19

1,862

@DanielLockyer3h

verifying my private keys today

14

58

1,798

@DanielLockyer4h

and another

@DanielLockyer4h

shipping security patches and perf improvements

10

1,907

@DanielLockyer4h

shipping security patches and perf improvements

33

3,387

@DanielLockyer5h

Happy Thursday!!!

An urgent notice from the Railway team blog.railway.com/p/security-…

Security Disclosure: Wednesday October 21st | Railway Blog

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention

blog.railway.com

2

24

5,203

@DanielLockyer14h

I imagine it's extremely fun to be in offensive cybersecurity right now

17

1,312

23,401

@DanielLockyer14h

What?? 😂

rmoriz@rmoriz19h

PHP docker image built failed because the maintainer locked the comments and the CI has a step posting status to github comments.

3

188

12,894

@DanielLockyer14h

ah yes, of course there's another one today

3

69

4,061

@DanielLockyer14h

docs.gitlab.com/releases/pat…

1

951

@DanielLockyer15h

no please, it's time to rest

Nicolas Krassas

Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )

Readers added context they thought people might want to know

The PHP 8.5.12 release fixes the two specific CVEs (via state/bailout changes) detailed in official advisories; referenced "surviving paths" (e.g. var_destroy UAF) are separate pre-existing unserialize issues unrelated to this patch. php.net/archive/2026.p… github.com/php/php-src/se… github.com/php/php-src/se… github.com/dinosn/php-8.5…

10

163

8,464

@DanielLockyer18h

wow what a great day

1

13

16,307

@DanielLockyer19h

Jack, what the fuck

This would be a pretty funny time for GitHub to have another outage.

21

2,802

55,502

@DanielLockyer19h

bro NO, this is NOT the time

5

368

7,108

@DanielLockyer19h

1

140

4,350

@DanielLockyer19h

They're published!!

@DanielLockyer19h

3 hours later and still no published Docker images for Node.js 🫠

1

60

6,756

@DanielLockyer19h

waiting for patches packages to distribute to mirrors etc

@DanielLockyer20h

The PHP patches are out Go and update!

10

138

8,954

@DanielLockyer19h

3 hours later and still no published Docker images for Node.js 🫠

@DanielLockyer22h

And it's out! nodejs.org/en/blog/release/v…

3

33

10,509

@DanielLockyer19h

incoming

Marc Köhlbrugge

@marckohlbrugge23h

if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?

60

6,427

@DanielLockyer20h

just imagine how good tomorrow is going to feel - no vulns - everything patched - happy vibes

8

74

3,852