Josh Billington

[Josh Billington @joshthedevguy]

https://t.co/jazmOVLtst

[Zara Zhang @zarazhangrui]

Your personal website is the new resume

[Josh Billington @joshthedevguy]

@timgl 1 point of feedback from using posthog for one of my personal projects, I like posthog and the actually really like the design of your site - but I find it hard to navigate and find what I’m looking for quickly. (tldr: I like the aesthetic, but trade offs in usability )

[Josh Billington @joshthedevguy]

@details_so I like the idea, but this scrolling modal is atrocious

[Josh Billington @joshthedevguy]

@hagler_m @ImLunaHey yeah, I have this setup with wsl for local dev

[Tony Ma @t1o6n3y]

🚨 Security vulnerabilities reported in a SINGLE day:

PHP — 2 CVEs
Node.js — 10 CVEs
NGINX — 5 CVEs
Go — 1 CVE
GitLab — 12 CVEs
eMudhra — CA certificate compromise

[Node.js @nodejs]

🔐 Node.js security updates are now available!

New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.

Review the details and update your systems to stay secure.

🔗 https://t.co/W4kfzx5lxz

#NodeJS #Security

[Josh Billington @joshthedevguy]

@Tsavsar_ @AnthropicAI Anthropic could use the help…

[Cloudflare @Cloudflare]

Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. https://t.co/lYGxHb3PHS

[Mark Hinschberger @marklaunches]

So many vulnerabilities being introduced across projects due to engineering velocity.

3 open-source repos to keep yourself in check:

1) Cloudflare security audit ~ https://t.co/gR3xkAezqT

2) NVIDIA skill inspector ~
https://t.co/v2Y6rGV3Db

3) Strix agent penetration testing ~
https://t.co/8ywqzJpMfF

[Josh Billington @joshthedevguy]

@alexgilev ive found I can get codex/claude to do okay on marketing frontend with skills, but product frontend doesn’t feel solved yet 🤷‍♂️

[Josh Billington @joshthedevguy]

@BeauchampAndrew neat! i’d give it scoped access tho and look at injecting at runtime vs. using .env

[Josh Billington @joshthedevguy]

@OmLahorey it’s definitely a problem. i started injecting secrets at runtime with 1pass environments - so there’s nothing for the agent to read

[Josh Billington @joshthedevguy]

@riabcevv @OpenAI i’ve stopped giving my agents access to my projects .env files, and started injecting them at runtime

[Josh Billington @joshthedevguy]

https://t.co/ElXDFZZDW8

[Josh Billington @joshthedevguy]

your agents can read every secret in your .env

i forked https://t.co/Gf0tblpuZG to add 1pass environment support, so secrets get injected at runtime in wsl

how to set it up 👇

[Josh Billington @joshthedevguy]

@Denche2005 engineers

[Josh Billington @joshthedevguy]

@timo_rf @t3dotcodes yawn, why not binary… should just be tokens and a prompt amiright

[Josh Billington @joshthedevguy]

@gauravvohra I don’t understand why bots don’t seem to pass off notications to a more reliable service, we have had time based reliable reminders for years, the only novelty here is how the reminder is set.

[Josh Billington @joshthedevguy]

@julianwells_ @zandertoo actually ideal

[Josh Billington @joshthedevguy]

@ThePrimeagen definitely not a gpt-4o-mini wrapper…