Paul E-J 🇺🇦💙💛

Security and Compliance Lead. Pokémon nerd. Gardy BDIF.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@johnternus The big question is, will you have your own ‘Good morning’ to open events with?

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@HuggingModels Any MLX support incoming/available?

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@bulletinindy Because they do background checks and found he has an outstanding arrest warrant.

You’re working with kids and potentially vulnerable people, these checks are important.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@sama Hey! Can you swing me a DM? I’ve got some deeper questions regarding OpenAI/Codex that I’d like to noodle with you

(fun Mythic Quest reference)

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@kapilansh_twt But, with the Keeper skill, it uses the Keeper CLI to provide zero-knowledge access to secrets.

Great way of keeping secure, and keeper monitors secret usage so if something does happen, we can narrow it to user activity using our security wrapper & keeper analytics

2/

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@kapilansh_twt Use a .env.example file, .env configured in .gitignore and settings files for Claude/Codex whatever model you’re using.

The best solution I found is Keeper - I’ve built a Keeper skill for Claude for our team internally which lets them store and share secrets 1/

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@Pallavi_345 On this screen, if you hit Shift + F10, it’ll bring up a command prompt window. Run this command:

start ms-ch:localonly

It should pop a window open allowing you to create a local account

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@willdepue Many security worries, I do not like this.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@cognition @cerebras Sounds awesome! Wondered what Max can do. I’m a prop subscriber and have never hit my limit. But then I’ve I’ve been scared to push it 😂

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@PremChauraisya Python, Go and Swift. I know a little typescript, but nothing spectacular.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@CodeEdison Yes, you need to know what AI is about to butcher, or when it’s about to cause a memory leak or security vulnerability that will wipe out your everything you’ve been working on.

Besides, people are being paid a lot of money to unpick vibe coded messes.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@MaxPatten @LinusTech To be fair, his takes haven’t been good for a long, long time

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@kaaaash____ No matter which editor I use, I always end up back at VS Code. It’s just so good; it’s extensible, customisable, and it’s just got everything you need to get your job done.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@kaaaash____ Keeper, shared vault, CLI (I actually built a Claude skill for Keeper to help the dev team). Zero-knowledge access to shared secrets, it’s awesome.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@brankopetric00 I mean, can’t you save tokens and do this manually?

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@zuess05 They’re gonna be the ones getting pain megabucks when some vibe-coded slop turns out to tear a production system to shreds, causes a massive data leak, or misconfigures something and loses data.

You need to know what it’s writing, and that things are being done properly.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@karthikponna19 This has been a thing for over a decade

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@planert41 In my experience, yes I feel tired all the time, but I wouldn’t have it any other way. I’ve got a 5yo, 3yo and 8mo, and whilst they’re demanding, the time we spend together is bloody great.

When they’re moody teenagers who want to lock themselves in their room, I’ll miss it.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@zuess05 Because a vendor is taking all of the risk, adhering to all of the regulatory requirements, continually monitoring for security incidents, building new features, dealing with incidents.

Getting Claude to spit out an app clone is not the same. It’s a pale imitation at best.

[Paul E-J 🇺🇦💙💛 @paul_ej_dev]

@Nataliem9999 If you’ve cooked with miracle headset, I’ll eat an ultra ball