Tech Lead of Amazing teams 💪 Building: @UseBrandSignal 🚀
The Netherlands
Joined February 2016
- Tweets10.9K
- Following1.3K
- Followers2.1K
- Likes9.6K
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
⚠️ Python packages are vulnerable to remote code execution via the same node2shell CVE-2026-111497.
You may be affected if you are using the Brotli library. Note this is a very popular dependency (⬇️100m/month)
Other major services likely affected. We will communicate ASAP when we are able to.
Aikido detects this. Patches available.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
‼️ After PHP2Shell comes Node2Shell, a critical bug found by OpenAI's Codex Security that can let attackers run code in Node.js apps.
It was successfuly demonstrated on the official Node.js 24.22.0 image.
Node 20, 23 and 25 (all EoL) get no fix.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
🚨 BREAKING: NOW JAVA IS FACING A CRITICAL SECURITY EMERGENCY.
Oracle has issued an OUT-OF-BAND security alert for a dangerous 9.1/10 vulnerability affecting Java and GraalVM.
And the most alarming part? Hackers could exploit vulnerable applications REMOTELY, without a password or ANY user interaction.
Here's what's happening:
→ CRITICAL 9.1/10 FLAW: CVE-2026-91403 affects Java's JSSE security component.
→ NO LOGIN REQUIRED: Attackers could potentially exploit vulnerable applications remotely without authentication.
→ SENSITIVE DATA AT RISK: Successful attacks could expose, modify, or delete critical application data.
→ MULTIPLE JAVA VERSIONS AFFECTED: Oracle lists affected releases across Java 8, 11, 17, 21, 25, and 27.
→ GRAALVM ALSO AFFECTED: Oracle confirms the vulnerability impacts multiple GraalVM releases.
→ EMERGENCY PATCH ALERT: Oracle released an urgent security update rather than waiting for its next scheduled patch cycle.
The list of critical vulnerabilities just keeps growing.
If you operate Java applications or servers, CHECK YOUR SECURITY UPDATES NOW.
Readers added context they thought people might want to know
CVE-2026-91403 is a JSSE certificate trust issue with eight compromised eMudhra intermediates having weak keys, enabling potential MITM on TLS if attacker intercepts traffic—not a direct remote exploit of Java apps or servers.
oracle.com/security-alert…
openjdk.org/groups/vulnera…
bnowakowski.pl/psa-java-cve-2…
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
I highly recommend cloudflare's security audit skill: github.com/cloudflare/securi…
Run it on all your software. Run it with the free models. Use it even if you used a model to audit something - it will find much more things. Works in all agent harnesses and is model independent.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
US: Tesla Roadster. EU: tethered bottle caps.
I made that joke too. But let me be serious for a moment.
Made in Europe.
Europe built it.
Others told the story.
The Web was born at CERN.
Linux in Helsinki.
Python in Amsterdam.
ARM, the chip in your phone and your Mac, in Cambridge.
DeepMind in London.
The first commercial microprocessor was designed by an Italian, Federico Faggin.
Every leading-edge chip on Earth is printed with ASML machines from the Netherlands.
Mistral trains frontier open models in Paris.
Hugging Face: French founders, although it is headquartered in New York.
llama.cpp, the engine of local AI, started in Bulgaria.
The first mRNA vaccine came from Mainz.
Europe doesn’t lack innovation.
It lacks a megaphone. 🤷🏻♂️
Innovation without narrative becomes someone else’s success.
This isn’t Europe vs. anyone.
I love innovation wherever it happens.
I just want Europeans to feel proud and optimistic about the future again.
Did I miss something relevant here?
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
🕹️ 谷歌刚开源了 ARTEMIS，能让 AI 像人一样拿着一台真 Android 手机点来点去。
8 月中旬才建的仓库，GitHub 上已经 1.2 万 star，一千三百多个 fork，在 Google Research 的 AndroidWorld 基准上跑出 99% 以上的任务完成率，那套题覆盖 20 多个应用、100 多个多步骤任务。
写过 Android 自动化测试的都知道那种折磨：一个登录流程要写几十行定位代码，界面一改控件就全废，脚本比功能本身还难维护。ARTEMIS 的路子是你用自然语言说要测什么，它靠元素索引去点，认不出来就退回坐标和视觉定位，跨应用的流程也能一路走完。
它原生带一个 MCP 服务，Claude Code、Windsurf、Antigravity 这类工具可以直接驱动手机，顺手把 Logcat 和截图收回来。赶时间就用每步三到五秒的快速模式，想跑长时间稳定性测试就换成执行前先核对目标、卡住了再交回来的那一档。另外它第一次在设备上跑任务时会装一个读屏幕布局的辅助服务，只在手机本地运行、不往外发数据，失败了就退回 UIAutomator2。
手机测试这件事，终于不用全靠人肉手指了。
GitHub：github.com/google/artemis
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Available now in Foundry and soon through OpenRouter: commandline.microsoft.com/mi…
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Let your app choose the right model, tool, or action in near real-time with Decisions API, now available to all developers in public beta.
The Decisions API makes decisions up to 10x faster than GPT-6 Luna through the Responses API.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
We are introducing Clef and Clef-flash, open-source decision models hosted on Workers AI for high-speed classification and agentic workflows. cfl.re/3Vlqb9P #BirthdayWeek
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
NVIDIA IS GIVING 4 STRONG AI MODELS FOR FREE 🤯
no credit card required
you can use:
• DeepSeek V4.1 Flash
• GLM 5.3
• GLM 5.3 Flash
• Kimi K3
get access: build.nvidia.com
base URL: integrate.api.nvidia.com/v1
hope this helps
FREE OPEN SOURCE CRYPTO TRADING BOT 🤯
someone built Cabbage, a trading bot you can:
• backtest
• paper trade
• live trade
• check before trading with Doctor
Astra handles the reasoning
Jev makes the BUY HOLD or SELL decision
built with RSI and EMA signals, hard risk rules and SQLite state
Apache-2.0 and completely free
link: github.com/sopersone/cabbage…
not financial advice, test it before using real money
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Find out within 30 seconds whether your website is ready for AI search engines, and see how ChatGPT, Gemini, Claude and Perplexity judge your brand today.
usebrandsignal.com
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
🔥FIRST LAUNCH OF THE WEEK AT LAUNCHAF🤠
🎉🎉 BrandSignal is live on LaunchAF 🥳
- Founder , @devbyrayray
Discover if your website is ready for AI search engines in just 30 seconds. BrandSignal provides a free scan to see how major AI models like ChatGPT, Gemini, Claude, and Perplexity assess your brand.
Get actionable insights to improve your visibility and outperform competitors. The process includes a tech scan, an AI brand audit, and a detailed report with steps to enhance your presence in AI search results.
Check out brandsignal👇👇
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Jev by @typesafeai is now on OpenRouter, in beta.
Jev is a System One model. Instead of generating text, it takes your app's state plus a typed question and returns a typed decision with a probability attached. There is no JSON prompting, parsing layer, and nothing to validate against.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
many of you asked for a test drive so...
i have now added a $0 forever aka free option
try it, love it, get it
P.S.
stop paying monthly for your social media scheduler
introducing:
SocialQuack.com
stop paying monthly for your social media scheduler
unlimited channels, unlimited posts, unlimited joy
buy once, own forever
connect to Claude or ChatGPT and just ask it:
"brainstorm & schedule a month of posts about my startup [your domain name] for my ICP to help me generate more sales - one per day at around 9am, include the weekend. Schedule using Social Quack."
drag the duck, enter your keys, grow on socials
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Read the full announcement here:
tailwindcss.com/blog/tailwin…
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Android users, I have good news
Hermes Bots for Android is coming. 🤖📱
Same idea as the iPhone app
Your Hermes agents in your pocket, fast and simple
Open a Bot
Chat
Send voice notes
Jump into group chats
Keep your whole Hermes team with you anywhere
And yes, this is still my unofficial app while we wait for the official one
Looking for Android users to test 👇
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
Creator of Claude Code:
“I’m not prompting my agents anymore. I’m building "graphs" and "loops" - they’re building my agent.
in 3-6 months, we’ll all be doing graph engineering for our agentic systems.”
in 10-minute talk, Boris Cherny revealed what the future of agentic engineering will look like.
worth more than a $500 agentic AI course.
Watch it today, then read the full roadmap in the article below.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
New in Claude Code: your sessions can now message each other.
Instead of having to re-explain yourself in another session, you can now tell Claude to do it. It sends a summary (not your history or files), and the other session picks it up mid-task.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
🚨 Update: Watching this npm worm propagate in real time, we’re now tracking 2,234 affected package artifacts across 444 unique packages, and it’s still spreading.
Average detection time: 5 min and 18 seconds after publication. Our campaign page includes all packages/versions.
Dev By RayRay -👨💻 UseBrandSignal.com retweeted
That's why I say to every single person I meet
You have to book a flight to China now, please visit some of its cities, and NOT Hong Kong or even Shenzhen
No visit ACTUAL China, go to Shanghai, Hangzhou, Chongqing, Chengdu, Beijing, Xi'an
Ask Chinese people on here before you visit if you can visit their offices, they'll take you out for dinner and show their immense hospitality
You and the other 1.6 billion people of the West all have a blind spot and have to understand this country to go forward in the 21st century and the only way to do so is to actually go there and walk around there
Be brave and change your flight for Tokyo to a flight to Shanghai!
Japan is sick of you tourists anyway, while in China you'll be the only tourist in a 100km2 radius!
