Horatio Thomas

Founder | Ex Tinder

[Horatio Thomas @horatioecthomas]

@tdinh_me During a gold rush, sell shovels

[Horatio Thomas @horatioecthomas]

@mitchellh @levelsio Can second this. My Tumi gear lasts forever. One time I had a problem with a wheel on my luggage I bought from them and I was able to bring it in store and they were able to replace it for free on the spot.

[Horatio Thomas @horatioecthomas]

Kotlin adoption on the backend at Google is growing rapidly including being used in Google Search #kotlinconf

[Horatio Thomas @horatioecthomas]

Kotlin is releasing a Kotlin Documentation Model that can be used by agents to easily read Kotlin documentation

[Horatio Thomas @horatioecthomas]

@mitchellh If you decide to visit the AI casino, it can be compelling to sit at the slot machines all day. So much so, that most are probably better off never entering. With a deep understanding and the right temperament one may consistently generate an income at the poker tables.

[Horatio Thomas @horatioecthomas]

@deedydas Over time the entrepreneurial path will become more viable and the employed one less so

[Horatio Thomas @horatioecthomas]

@unclebobmartin Perhaps I meant vendor agnostic, but they pretty much go hand in hand. I'm using Cursor for now primarily because it supports multiple model vendors and they offer more flexible pricing. The tools it offers are not too bad either.

[Horatio Thomas @horatioecthomas]

@philthistweet Next.js lets you use React like PHP except you still get react.

[Horatio Thomas @horatioecthomas]

@unclebobmartin Isn't there a risk of losing track of substance if you focus too much on structure?

[Horatio Thomas @horatioecthomas]

@mehulmpt At least it will be easy to revert

[Horatio Thomas @horatioecthomas]

@stats_feed Mainland Chinese also use hhhhh

[Horatio Thomas @horatioecthomas]

@jogicodes @bryan_johnson สู้สู้

[Horatio Thomas @horatioecthomas]

@unclebobmartin You should really check out this post from the creator of the pi coding agent: https://t.co/ndD2dda3pl

[Horatio Thomas @horatioecthomas]

After moving my OpenClaw to use GPT instead of Claude I’ve been quite disappointed with it. I’ve decided to shut my OpenClaw down and am considering working on my own agent harnesses to be more mindful of my token consumption.

[Horatio Thomas @horatioecthomas]

With the pace of security incidences recently, I’m beginning to have to rotate my credentials every two weeks

[Guillermo Rauch @rauchg]

Here's my update to the broader community about the ongoing incident investigation. I want to give you the rundown of the situation directly.

A Vercel employee got compromised via the breach of an AI platform customer called https://t.co/7PY6gGtzgI that he was using. The details are being fully investigated.

Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.

Vercel stores all customer environment variables fully encrypted at rest. We have numerous defense-in-depth mechanisms to protect core systems and customer data. We do have a capability however to designate environment variables as “non-sensitive”. Unfortunately, the attacker got further access through their enumeration.

We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel.

At the moment, we believe the number of customers with security impact to be quite limited. We’ve reached out with utmost priority to the ones we have concerns about. All of our focus right now is on investigation, communication to customers, enhancement of security measures, and sanitization of our environments. We’ve deployed extensive protection measures and monitoring. We’ve analyzed our supply chain, ensuring Next.js, Turbopack, and our many open source projects remain safe for our community.

The recommendation for all Vercel customers is to follow the Security Bulletin closely (https://t.co/BLVnic9fJC). My advice to everyone is to follow the best practices of security response: secret rotation, monitoring access to your Vercel environments and linked services, and ensuring the proper use of the sensitive env variables feature.

In response to this, and to aid in the improvement of all of our customers’ security postures, we’ve already rolled out new capabilities in the dashboard, including an overview page of environment variables, and a better user interface for sensitive env var creation and management. As always, I’m totally open to your feedback.

We’re working with elite cybersecurity firms, industry peers, and law enforcement. We’ve reached out to Context to assist in understanding the full scale of the incident, in an effort to protect other organizations and the broader internet. I also want to thank the Google Mandiant team for their active engagement and assistance.

It’s my mission to turn this attack into the most formidable security response imaginable. It’s always been a top priority for me. Vercel employs some of the most dedicated security researchers and security-minded engineers in the world. I commit to keeping you updated and rolling out extensive improvements and defenses so you, our customers and community, can have the peace of mind that Vercel always has your back.

[Horatio Thomas @horatioecthomas]

@witch_audio I got a MacBook Air because the Apple Store was sold out of Mac minis even in Bangkok. The plan was to test the migration on the air and if all went well replace my Mac minis even openclaw setup with Claude cowork and return the laptop anyway.

[Horatio Thomas @horatioecthomas]

Migrated my OpenClaw to use my gpt subscription since antrhopic banned using a Claude sub for it. Bought a Mac to try replacing OpenClaw with Claude cowork but will be returning it tomorrow

[Horatio Thomas @horatioecthomas]

@themoe Plenty of other places for a sterile lifestyle