misker

infra @ s2 (yc 25)

[misker @misker76288684]

Nice, love the addition of oidc support!

[Trigger.dev @triggerdotdev]

We just added trusted publishing so that you can deploy from GitHub Actions without a Trigger API key https://t.co/UReXhOd4q0

[misker @misker76288684]

@0xLupin Amazing writeup and amazing vulnerability chain

[misker @misker76288684]

@AniC_dev too many times listing war, you can build software nicely too

[Bryan Onel @BryanOnel86]

SOC 2 is a scam. Everyone knows it, so let's just say it like it is.

We sell SOC 2 at Oneleet, and we’re saying it anyway.

We can do better, and getting it right matters more than ever.

[hatchet @hatchet_dev]

we built durable streams on postgres.

through our analysis, we explore how heraclitus (greek philosopher) was wrong about two things:

1. durable streams
2. that bathing in cow dung and lying in the sun was an appropriate remedy for fluid retention

https://t.co/KW6zPHOa1U

[Chaitanya @chaaai]

You know a team is going to win BIG when they speed run every issue we report in one weekend.

Yall should check out @s2_streamstore a top-tier team building a top-tier streaming product.

[misker @misker76288684]

Every morning looking at new security releses; feels like living in a loop of "Previously on 24..."

[misker @misker76288684]

@muvaff maybe this worked before, when attackers spent actual time exploring what's behind a breached system, giving defenders some time to stop them. with ai agents doing that instantly now, best keep everything away from them. and then add zero trust on top.

[misker @misker76288684]

@pcstyle53 @theo looks like a job interview link people would click on 😅

[misker @misker76288684]

@m19o__ oh amazing 🙌🙌

[misker @misker76288684]

@edsim private by default, love the sound of it. this won't help ipv6 adoption

[misker @misker76288684]

@samuellhuber hah, funny since openai builds with bazel, so anthropic went with nix

[misker @misker76288684]

@akhilreni_hs One could argue that Deepseek is a frontier model. Thanks for the writeup!

[misker @misker76288684]

@copyconstruct Availability incidents have been replaced by security incidents.

[misker @misker76288684]

@shikhrr It's annoying for us, for a better experience try to talk to them like @huskirl does in his videos

[misker @misker76288684]

@ayushtweetshere Loved working with @oneleet (you know, as much as one loves doing audits). They made the whole process make sense.

[misker @misker76288684]

@rmelogli I think trufflehog can help with this. Found the same thing in my claudes.

[misker @misker76288684]

Time to put this skill to good use!

[Cloudflare Developers @CloudflareDev]

With the recent wave of vulnerability disclosures, it’s a good time to take a closer look at your own code.

Turn your coding agent into a team of security auditors with the open-source skill that seeded Cloudflare’s vulnerability discovery harness.

The 6 phase approach:
1. Map the codebase
2. Hunt for vulnerabilities
3. Challenge each candidate
4. Record the findings
5. Verify the findings
6. Report what’s confirmed, rejected, or still needs validation

Start your hunt here:
https://t.co/kL5PvcoAYY

[shikhar @shikhrr]

in the future, your agent will just generate unikernels