Co-Founder Eningeering @ResoniteApp Previously @WatchMixer, @TrackIntel AI, XR, Metaverse. My opinions are mine and about cheese. Something new at: https://xitter.cf/t.co/zqS0XXRmtK
Redmond, WA
Joined September 2014
- Tweets4.3K
- Following1.5K
- Followers1.3K
- Likes147
Pinned Tweet
Reminder, my profile banner is my literal brain. Transformed from the Hospital data, into a live explorable copy of me.
ProbablePrime retweeted
Prompt of the day:
----
Run a full application-wide security audit strictly following the methodology in github.com/cloudflare/securi…
Exhaustively trace all untrusted inputs to execution sinks, inspect all auth/access controls, dependencies, and configurations. Verify your findings. When you think you have found all vulnerabilities: You haven't. Keep investigating.
Report vulnerabilities with: (1) severity, (2) exact file/line location, (3) root cause & attack vector, and (4) concrete remediation patches.
----
Use a top reasoning model for this. Gemini Argon 4 seems very sharp here.
After using the restroom at 4am, I emerged with just the bathroom light showing me this cryptid, coming to see what I was doing.
I've watched a few episodes of this podcast, but its really strong in my recommendations right now, they always seem to show up at 3am and with clickbait like this its like moths to a flame for my mind 😅 youtube.com/watch?v=PHpsdIHp…
Undersea Oil Pipelines. Saw a clip of them using CAVE (en.wikipedia.org/wiki/Cave_a…) for visualization. Naturally thought, hmm how can that be VR.
youtube.com/watch?v=tnhigUM7… I Could not stop watching before I went to bed.
ProbablePrime retweeted
in a lot of ways, Reylo obviates the entire "ORMs vs SQL" debate
✅ zero codegen
✅ fully inferred: totally DRY
✅ maximum expressiveness: CTEs, window fns, subqueries...the full power of SQL
and with agents, it doesn't matter that SQL syntax is a monstrosity 😅
ProbablePrime retweeted
3% of “critical” software security bugs, in all of recorded history, have been found in the last month.
This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total
Do you realize how fucking insane that is?
The #Resonite wiki is down to fix #PHP2Shell but I can't update it, because the version control for mediawiki is down due to #PHP2Shell. As Ops for a number of services, today sucks.
Oh this isn't a valid HTTP url, it does respond to git now and might have at the time I posted it, but our CI did not at the time. github.com/Yellow-Dog-Man/re… All fixed now though :D
For MediaWiki Docker users, github.com/Yellow-Dog-Man/re… should be all you need to do to a Mediawiki dockerfile to get it patched. I'd verify but, Yeah :D
Readme of a project I'm evaluating, Git Blame says 2 Months Ago for this line. Made me laugh, more interested now.
ALT Snippet of a Github Readme: Small attack surface. No PHP.
Credit to: github.com/boomzero/ftle
ProbablePrime retweeted
I've been cooking on this post for a bit, but with the cyber security events of this week I had to ship it:
Long-live static credentials must die. We never want to rotate API keys again.
Turns out only 8% of cloud and SaaS vendors support secure alternative. This is our call to action to change this AND our commitment to do our part:
- We are requiring vendors on our marketplace to support OIDC
- We shipped @shadcn components to make it easier to ship OIDC configuration
- We are expanding OIDC support on our own platform
The last generation got the web from HTTP to HTTPS. It is on us to move past API keys.
vercel.com/blog/death-to-lon…
