@rauchg
Account based inUnited States
About this account
- Account based in
- United States
- Connected via
- United States App Store
Account-level information from X, not a live location or the device used for a specific post.
Vercel has proactively rolled out Firewall-level mitigations for today's Node.js RCE vulnerability, in advance of the official patch release.
All traffic for all deployments is automatically protected. We're actively monitoring and rolling out managed runtime upgrades.
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26.
Vercel WAF rules are live for every project and block known exploit patterns.
vercel.com/kb/bulletin/node-…
DeepSeek v4.1 Flash (1017) is now included in ▲ Token Pass.
Fast, mind-bogglingly cheap, and served with ZDR (zero-data retention).
It's a phenomenal model to run subagents that execute plans conceived by larger and more expensive models. You can port TypeScript to Rust 10 times and not run out of credits 😂
DeepSeek V4.1 Flash 1017 is now included in Vercel Token Pass.
• New weights from DeepSeek
• 1M context window
• No config change
Get $80 of tokens for $30/mo ↓vercel.com/changelog/deepsee…
It was inspiring to watch the behind-the-scenes¹ of the industry coming together, weeks in advance, to protect the world's infrastructure and mitigate php2shell.
We deployed Vercel WAF mitigations that have already successfully prevented attempts on PHP origins. Assume more vulnerabilities are on the way. Flex the patch → redeploy muscle.
¹ A Slack channel. Thank you @SlackHQ!
php2shell Security Advisory: two critical RCE flaws in the PHP engine affect PHP 5.4+. Public exploits are out.
Vercel WAF rules were shipped before disclosure and have been blocking known exploit patterns. Patch PHP to 8.2.35, 8.3.36, 8.4.27, or 8.5.12. vercel.com/kb/bulletin/php2s…
If you work on education, homeschool your kids, want to learn something new… check this out.
You can use AI to create the coolest and most engaging explainers in the world. Grab a coding agent, ask it for an explainer, deploy it, share the link.
So many ideas can be derived from this. Imagine a platform of vetted visualizations by experts in each field. Games or quizzes where you repair or reassemble the systems. A prompt input to extend them…
And follow @DilumSanjaya!
Hardware looks scary until you break it down into small steps. So I built an app that takes you through Arduino one circuit at a time.
Made with Opus 5.5
learn-arduino-red.vercel.app
Pi is one of the coolest projects in the AI world today. I'm on their team. Giving developers and companies choice of model, control over the runtime, data, skills, plugins… Excited to have great support on @vercel:
vercel.com/blog/making-every…
Much like we did with @aisdk, we're bringing a truly open-source, runtime-agnostic solution to harness durability.
We're extending the durability infra that powers @eve and Workflows to all harnesses, like Pi and OpenCode. Local, Vercel, or DIY.
Fun fact: even Claude Code and Codex can be made durable (and observable!) this way. The catch: they're not (currently) designed for embedding, which makes them less efficient, less portable, and brings an extra sandbox requirement compared to Pi or Fx.
Introducing 𝚍𝚞𝚛𝚊𝚋𝚕𝚎-𝚑𝚊𝚛𝚗𝚎𝚜𝚜. Run Pi, OpenCode, Codex, Claude Code, eve, fx, or your own harness durably on Vercel.
With 𝚍𝚞𝚛𝚊𝚋𝚕𝚎-𝚑𝚊𝚛𝚗𝚎𝚜𝚜, agents automatically resume work after failures and run for hours, days, or months. vercel.com/blog/making-every…
AI will be able to compute the perfect delta of what you understand and don't, helping you progressively learn any idea and unravel any mystery.
If you so desire, you'll reach the maximum of your capability and intelligence. The ultimate education. For free.
1,000 tokens per second btw
Mercury 3 from @_inception_ai is live on AI Gateway at a 50% discount.
A high-throughput diffusion model with a 1M-token context window and support for tool calling and structured outputs.
𝚒𝚗𝚌𝚎𝚙𝚝𝚒𝚘𝚗/𝚖𝚎𝚛𝚌𝚞𝚛𝚢-𝟹
vercel.com/changelog/mercury…
We open sourced a *really fast* HTML artifact builder. It's powered by libfx, making the agent durable.
Building the low-level plumbing for v0 to survive server crashes, flaky LLMs, function limits was a huge pain.
Now it's easy, free, and OSS: fx0.vercel.dev.
PS: I built this floating container in a few minutes… it's delightful, and it's just HTML!
We built a 'mini v0' on libfx to showcase its speed and durability:
• Design or prototype anything in seconds
• 200+ models from Vercel AI Gateway
• Outputs are pure HTML artifacts
• Fork it & make it your own
Try it free ↓ fx0.vercel.dev
More free AI
MiniMax M3.1 Flash from @MiniMax_AI is live on AI Gateway for free. It is better at agentic tasks, coding, and cybersecurity.
𝚖𝚒𝚗𝚒𝚖𝚊𝚡/𝚖𝚒𝚗𝚒𝚖𝚊𝚡-𝚖𝟹.𝟷-𝚏𝚕𝚊𝚜𝚑
Free through Oct 22 when served by MiniMax. vercel.com/changelog/minimax…
Rebuilt the Roadster demo in a playable, highly accurate simulation that retains a lot of the IRL details:
tesla-ramp.vercel.app
Every once in a while, some unsuspecting country's domain economy goes vertical 😂
.𝚌𝚘 → Colombia
.𝚒𝚘 → I/O → Island Ocean
.𝚖𝚍 → Markdown → Moldova
.𝚛𝚜 → Rust → Serbia
.𝚊𝚒 → AI → Anguilla
.𝚜𝚒 → SI → Slovenia
This is so cool.
One unified view of all your agent sessions.
Across personal & coding agents, apps, API keys.
Vercel AI Gateway helps you run your business better. You own the model choice, your data (ZDR), and crucially the *meta*data to understand RoI.
See every agent session in AI Gateway logs.
Sessions group requests by conversation, with cost, cache hit rate, and the agent that ran it. Session affinity keeps each one on the provider holding its prompt cache.
vercel.com/changelog/ai-gate…
“What matters is the end product, whether it's a game or an engine”. Well said!
When I was writing Unreal Engine 1, my time was divided as follows:
- Around 30% went to seriously deep coding on hard problems: assembly language texture mappers, C++ BSP trees, data persistence, object oriented systems design, and networking.
- Around 70% was just typing and refactoring large bodies of code needed for a complete engine feature set. This was not hard, and while I was doing it my mind was mostly on the deeper coding topics, thinking and planning for what's next. It didn't feel much different from vibe coding today, except that it was just me typing code on an IBM Model M keyboard rather than prompting it and reviewing the results.
So, it has always seemed perfectly logical that we would rely on AI for that 70%, once the AI could do it with a similar quality standard as we could, which has never been perfection. It came as no surprise that, after a few years of AI model evolution, it was able to take the reigns on that 70% and free up programmers' time for more valuable tasks.
What's more of a surprise is the emergence of AI as a sort of insta-Carmack able to solve hard technical problems quite cleverly and often cleanly, and that it's able to reason about and work in complex 3D scenes both by operating the tools and by directly understanding the raw data files.
I abandoned assembly language in 1998 when out-of-order CPUs made much simpler C/C++ code faster, and never I missed it. If prompting through architectural documents, concept art, and design plans can transcend typing code and tweaking vertices, that will enable developers to spend their time on higher-level, higher value technical and creative tasks.
What matters is the end product, whether it's a game or an engine. Anything developers can do to try out more ideas and make better software and games faster is a win for everyone.
Guillermo Rauch retweeted
I benchmarked scriptc.dev against bun --aot
scriptc is 1.6x faster than bun --aot
Should you trust this benchmark? Nope. You should never trust benchmarks, but especially not this one, because it is the one that scriptc was optimized against and it does not benchmark *your* app nor does it benchmark any *real* app. Of course, you all already understand that this is true for all benchmarks you've seen here and are consequently very calm and rational about it.
big draft pr
github.com/oven-sh/bun/pull/…
