Patrick Brunner

CEO @blackcom

[Patrick Brunner @PatrickBrunner]

@clvssifid @blackcom Please try saving the Passkey to your Apple account instead of your password manager.

[Patrick Brunner @PatrickBrunner]

💯

[Guillermo Rauch @rauchg]

PSA: creating wonderful products still requires extraordinary amounts of human focus, effort, motivation, and love. And an attention span.

[black.com @blackcom]

Minimalism isn’t just how https://t.co/b6JrsYrBYo looks.
We build that way too.

Opening your inbox (code / total):
https://t.co/b6JrsYrBYo: 0.2 MB / 1 MB
Tuta: 4.7 MB / 4.7 MB
Proton: 15.2 MB / 16.8 MB
Gmail: 15.5 MB / ~18.5 MB

@gmail @ProtonMail @TutaPrivacy

[black.com @blackcom]

Estimated AI-generated code vs. human review across our stack at https://t.co/b6JrsYrBYo (6 full-time senior SWEs).

The more critical the code, the less we rely on AI generation

[black.com @blackcom]

We just got @blackcom from the X Handle Marketplace!

Great that this is possible. @X has come a long way since the 2022 takeover.

[Patrick Brunner @PatrickBrunner]

@difurl @blackcom @ThePHPF The decision has been made. Make sure to secure all addresses that you might need in the future.

[Patrick Brunner @PatrickBrunner]

We just donated $12,000 to The PHP Foundation.

Finding bugs with AI became cheap, verifying & fixing them didn't.

PHP has given us so much over the years and we believe in it's future.

@blackcom 🤝 @ThePHPF

[Patrick Brunner @PatrickBrunner]

@mrIsaiahoo 🆗

[black.com @blackcom]

Two critical vulnerabilities in PHP were published today, both allowing remote code execution without a login.

PHP released the fix at 14:00 UTC. https://t.co/gnZucgeKyj was fully patched 10 minutes later.

Our logs show no signs of exploitation on https://t.co/gnZucgeKyj systems.

What happened, and how we responded:

[Patrick Brunner @PatrickBrunner]

We rewrote https://t.co/GOAYo97L1W in pure PHP (no frameworks) on top of MySQL shards. All managed by phpMyAdmin.

[black.com @blackcom]

Two critical vulnerabilities in PHP were published today, both allowing remote code execution without a login.

PHP released the fix at 14:00 UTC. https://t.co/gnZucgeKyj was fully patched 10 minutes later.

Our logs show no signs of exploitation on https://t.co/gnZucgeKyj systems.

What happened, and how we responded:

[Patrick Brunner @PatrickBrunner]

@dannymoerkerke This has been the story for nearly a decade now. There is a small team at Google that continues working and vouching for it, but PWAs have no chance of mainstream adoption.

This is my personal prediction, not the way I want it to be.

[black.com @blackcom]

Our users often remind us that size does matter.

Our app is 14.1 MB.

Every feature we ship has to justify the space it takes on your phone. Bloated apps are not part of our philosophy.

With v2, we aim to cut that by another 30%.

[Patrick Brunner @PatrickBrunner]

@humadi2001 @blackcom @supabase We'll introduce a free tier with v2.

[Patrick Brunner @PatrickBrunner]

@humadi2001 @blackcom Probably it will get even smaller.

[black.com @blackcom]

We changed our typeface. ✍🏼

Cera is out. Haffer is in, on our website, web app and everything we design.

We wanted something sharper & bolder, with more character, that reads better. Haffer is a grotesque: more technical, more precise.

[Patrick Brunner @PatrickBrunner]

Supply-chain attacks through external dependencies are one of the biggest risks in modern software development.

At https://t.co/2wfHXNYAx6 we're moving away from automatic dependency updates in favor of pinned versions.

This may delay bug fixes and security patches, but the risk of blindly trusting every new release is too big.

[Patrick Brunner @PatrickBrunner]

crazy times call for crazy measures

[black.com @blackcom]

https://t.co/oBQpmMKjpR

[Patrick Brunner @PatrickBrunner]

insane

[International Cyber Digest @IntCyberDigest]

❗️ Attackers could use iCloud to send email as any icloud[.]com address, including [email protected], while still passing SPF, DKIM and DMARC, the email authentication checks built to stop spoofing.

Researchers found and reported two parsing flaws in Apple's mail servers. An early fix by Apple only blocked the word "admin" and the full patch took 18 months.

Apple paid them $15,000.

[black.com @blackcom]

https://t.co/gJoa4e3SS6