Patrick Steger

Developer • Skydiver • Comedian • Organizer of @TriServerless • Tweets are my own • AWS Community Builder • AWS Infinidash Professional Certified

[Patrick Steger @StegerPatrick]

If I follow you and you're going through something tough and you want to talk it out or need my help in some way, get in touch. I don't care if we're only Twitter friends or if I've known you since childhood. This goes double for men because we're taught to hold onto things. ✌️♥️

[Patrick Steger @StegerPatrick]

Hey @gobrightspeed, you're probably gonna want to edit your /public/manifest.json file in your Mass Markets Portal React app. Also look into how tokens work... Your auth flow is terrible. 🤷‍♂️

[Patrick Steger @StegerPatrick]

This is really going to help their uptime numbers...

[GitHub @github]

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

[Patrick Steger @StegerPatrick]

@gobrightspeed If I message you there, will you be able to provide me with the FSAN that is associated with my account if I give you my account number, address, telephone number, zip code, and name? Yes or no?

[Patrick Steger @StegerPatrick]

Within the span of 2 weeks, @gobrightspeed has turned me from their biggest cheerleader into their biggest hater. I don't think I can ever recommend this company again. I upgraded from 2gb to 8gb fiber and everything in their system has been completely screwed up ever since.

[Patrick Steger @StegerPatrick]

@Dogetoshi PM [showing everyone at the office his new status page works]: What do you mean? It's working just fine on my computer! Check it out http://localhost:3000

[Patrick Steger @StegerPatrick]

I'm not sure your marketing department thought this one through. This is not the flex you think it is @tweetsbyport

[Patrick Steger @StegerPatrick]

@reverentgeek @DeepgramAI Ooh I had thought about something similar at one point but never got around to knocking it out. I'm going to have to check this out.

[Patrick Steger @StegerPatrick]

Is Go 1.26.2 randomly hanging on builds for anyone else or just me?

[Patrick Steger @StegerPatrick]

Hey @netflix, you all can go ahead and archive Chaos Monkey. We have engineers with LLMs handling all chaos engineering now.

[Patrick Steger @StegerPatrick]

Who else learned about the kitty keyboard protocol today because of Claude Code's release notes?

[Patrick Steger @StegerPatrick]

Sometimes with Claude I just want to yell at it like Bill Burr. PUT THE CONTAINER IN THE POD IN THE NODE IN THE CLUSTER! ROUTE EVERYTHING PROPERLY THE FIRST TIME AND MAKE NO MISTAKES, EH?!

[Patrick Steger @StegerPatrick]

@Polymarket Who got $1M off that bet???

[Patrick Steger @StegerPatrick]

@wesbos There needs to be a way to easily inject verbs into this list via a file in the config or something.

[Patrick Steger @StegerPatrick]

@wesbos This is what I always wanted to know! 🤣🤣🤣

[Patrick Steger @StegerPatrick]

@wesbos That negative pattern makes it back up and analyze what went wrong though in my experience.

[Patrick Steger @StegerPatrick]

@ba16216 @QuinnyPig Then I can easily check where I am based on what's been completed thus far and it keeps Claude on track better. Clearing context and knocking out the next task from a fresh set of eyes can help with token usage if the tasks are independent of each other.

[Patrick Steger @StegerPatrick]

@ba16216 @QuinnyPig It's just part of my own workflow. If I have a huge idea I want to knock out (think something sprint sized. Certainly >1wk of tokens) then I'll have Claude go into plan mode then write out the output into a plan.md file. From there I'll have Claude refine it to keep it accurate.

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Patrick Steger @StegerPatrick]

@NaismithTrophy @DukeMBB @UConnMBB @JonScheyer What kind of garbage AI wrote this? Who puts the lower number first when they talk about a team winning? 🤮