Had one of those nights where all the vibe coded pieces collapse in front of you and you realize engineers are still very, very much necessary

October has been an absolute nightmare for software > Railway - customer secrets exposure > LiteLLM - malicious PyPI + Docker releases > Zeabur - infrastructure breached > OpenCode - AI API keys exposed > OVHcloud CLI - official binaries backdoored > Rank Math PRO - malware in official plugin > TeamUpdraft - customer data compromised > ConnectWise - cloud backup identities compromised > Tensorlake - npm package infected > SubQuery - backdoored npm package > GhostAction - GitHub repos with malicious workflows > PHP - critical RCE vulnerabilities > Node.js - security vulnerabilities patched > eMudhra - certificate authority keys compromised > Tailscale - eMudhra incident At this point, the biggest security risk might not be the code we write, but the code we trust...

Hi! Big Anthropic hater here. Fundamentally disagree. Anthropic is spending way more than they are getting here. It’s causing a compute crisis for them that’s destroying their reputation in record time. The cost to train the thing is probably higher than the revenue will ever be, especially considering opportunity cost. The security concerns are absolutely real here. Getting a 27-year old 0-day in OpenBSD by running a for loop is not a joke. We’re a free model iterations away from every piece of software we rely on being compromised. I respect Anthropic for eating the cost here and giving the software world a few weeks to get ahead of the inevitable crisis looming overhead.

Lakebed, Postplan, and Shoo will be down indefinitely until Railway gets their shit fixed and I can actually redeploy them with rolled keys. Incidents happen. I understand. Blocking deploys so we can roll keys without downtime is unacceptable. I'm disappointed in Railway.