Eric Case

Working on something new. Formerly @fastly & @domainr, @google @blogger & @rdio (RIP). Cyclist and @bungie loyalist. @case.bike (Bluesky)

[Eric Case @Case]

Essential reading:

https://t.co/TaB3jLcqGB

https://t.co/mewhQrcYZU

[Angelo 🇵🇷 @ngeloxyz]

Our customers, who are the best, are assisting us with our investigation- one reported to us what the threat actor was using their keys for, since revoked.

If you have any prompts from misuse of your keys, this will help us immensely.

Please email support[at]railway[dot]com

[Eric Case @Case]

@vimtor @D2cbro @indirect Fwiw, static IPs tend to cost a bit of $, e.g. $1-2/month (Fly, for example)

[Eric Case @Case]

@vimtor @D2cbro @indirect 👍

[Jon Oberheide @jonoberheide]

Why are people acting like it's @OpenAI/@AnthropicAI's fault that vulns are being fixed/disclosed? This is the result of decades of security debt from poor software engineering. The labs' models are not creating net-new security risk, the risk has always been there and we're finally able to uncover and fix it.

[Eric Case @Case]

RIP PicoCSS, you're awesome.

https://t.co/B2tKH6xaPm

[Austin Spires @austinspires]

So evil it wouldn't seem realistic in a movie

[Eric Case @Case]

Current status @exedev

> ssh https://t.co/PwI8C0PXbB remediate-emudhra-compromise

[Frank @jedisct1]

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
https://t.co/odVNft1CAT

[Andrew Qu @andrewqu]

we did invent it and it's called OIDC federation

vercel and github actions do it:

- each deploy gets a short-lived signed token
- AWS/npm/other services verify it via trust policy
- you get temporary creds

no keys to paste

the problem is not enough APIs and services accept it

[Zack Korman @ZackKorman]

What did people think “focus on security” meant? It meant this. It meant finding all these problems (of which there are so many more) and fixing them.

The goal isn’t to have an easy day at the office. It’s to make sure people don’t die. It’s to stop truly horrible cyber attacks.

[Olena Tregub @OTregub]

Last night Putin got excited about being called a “humanitarian” by the USA representative and arranged a deadly fire show. 25 missiles on Kyiv.

[Arian van Putten @ProgrammerDude]

Everybody is building Google Wave

[David Barsky @endsofthreads]

a thing we’re very proud of at @erscio is that we don’t do *any* long lived secrets. it’s service accounts, oidc, and dpop-bound tokens (where appropriate) all the way down

[Pete Koomen @koomen]

These are about as useful as crosswalk and close elevator buttons

[Eric Case @Case]

@JustJake Godspeed, #HugOps!

[Tailscale @Tailscale]

Google Reader might be dead, but RSS is alive and well.

Build your own RSS hub with Tailscale. Read what you want, from any browser, without exposing it to the open web.

Build a thing. Escape the algorithms.

More on the blog:

https://t.co/Y9BsQFbuy3

[Eric Case @Case]

@tpae How much Ram in the MacBook? 😅

[Eric Case @Case]

@saeed_vz 🔥

[Eric Case @Case]

@saeed_vz It’s fine until the battery starts bulging