Bailey Pumfleet

Co-founder of

[Bailey Pumfleet @pumfleet]

Tomorrow night, we're hosting https://t.co/m3l8snm5N9

A cafe listening room for friends of Cal to escape the tech week panels, pitches, and badges.

Drinks, bites, and a room that takes their mission seriously, and selves unseriously.

Come solo, come with friends, leave with new ones.

Limited capacity, RSVP at https://t.co/m3l8snm5N9

[Bailey Pumfleet @pumfleet]

Apply here: https://t.co/YZWNFQV3SA

[Bailey Pumfleet @pumfleet]

Nobody is hiring.

At least that's what we're told every week.

Somebody should probably tell our hiring team.

We're hiring across GTM, Engineering, Foundation, Growth, and Design:

- Social Growth Lead
- Brand/Visual Designer
- Copywriter
- EA to Head of GTM
- Videographer
- IC3 Security Engineer
- IC4 Scale Engineer
- IC4 Senior Full-Stack Engineer

[Bailey Pumfleet @pumfleet]

A lot of people don’t realize you can actually charge for your time directly through
@calcom

[Bailey Pumfleet @pumfleet]

How the CEO role is being redefined by Jack Dorsey. What are your thoughts?

[Bailey Pumfleet @pumfleet]

At the bottom of the Opus 4.8 announcement, Anthropic teased that it will drop Mythos to the public "in the coming weeks"

Buckle up, everyone

[Bailey Pumfleet @pumfleet]

these new Google logos look terrible

[Bailey Pumfleet @pumfleet]

@rywiggs @mercury Congrats guys! We've loved being a Mercury customer since the start of https://t.co/7Fr2WH4G7N

[Bailey Pumfleet @pumfleet]

@OmarMcAdam I didn’t even know North America had Nando’s until Vancouver, so of course we had to go

[Bailey Pumfleet @pumfleet]

Web Summit Vancouver, thanks for having us.

[Bailey Pumfleet @pumfleet]

If Mythos can develop an exploit for Apple’s multi-billion dollar Memory Integrity hardware in 6 days, take a guess at how safe your codebase is

[Chubby♨️ @kimmonismus]

Three researchers used Anthropic's Mythos to build a working macOS kernel exploit that bypasses Apple's M5 Memory Integrity Enforcement, a security system Apple spent five years and billions of dollars building.

Bug found April 25. Working exploit May 1. Walked into Apple Park to deliver the report in person.

MIE was the flagship security feature of the M5 and A19, designed to kill the entire memory corruption bug class. According to Apple's own research, it disrupted every known public exploit chain against modern iOS.

Calif didn't break MIE. They walked around it. Data-only attack, no pointer manipulation, standard syscalls from an unprivileged user to root.

The 55-page technical report drops after Apple patches.
This is the story of the year in cybersecurity.

[Bailey Pumfleet @pumfleet]

Billy, this is the reply guy. He gets 150x the engagement of a like. His defect is he has no thoughts of his own and his wife is leaving him.

[Elon Musk @elonmusk]

The latest 𝕏 algorithm has been published to GitHub
https://t.co/ZCOm51uxmh

[Bailey Pumfleet @pumfleet]

updating dependencies is becoming a full time job now

[Modat @modat_magnify]

CVE-2026-44578 
⚠️ Next.js – WebSocket Upgrade SSRF (CVSS 8.6) 

A server-side request forgery vulnerability in Next.js allows unauthenticated attackers to force self-hosted instances to make internal HTTP requests via the WebSocket upgrade handler. 
By sending a crafted absolute-form HTTP request with Upgrade: websocket headers, attackers can access internal services, cloud metadata endpoints, admin panels, and internal APIs reachable from the Next.js server on port 80. Successful exploitation may expose cloud credentials, API keys, secrets, and configuration data. 

Affected: Next.js 13.4.13+, 14.x, 15.x <15.5.16, 16.0.0–16.2.4 

Mitigation: Upgrade immediately to 15.5.16 or 16.2.5.  

Modat Magnify Query: 
technology="Next.js" 

The platform: 
https://t.co/qJfEh7giE9 

#threatintel #vulnerability #CVE202644578 #Nextjs #SSRF #WebSocket #CloudSecurity #infosec #Critical #ModatMagnify

[Bailey Pumfleet @pumfleet]

AI needs the same kind of structured market rules that govern Wall Street.

Otherwise, the imbalance becomes too dangerous to ignore.

[Bailey Pumfleet @pumfleet]

It's the new 'more lines of code = more output', but for AI. Six Claude sessions aren't really shipping anything more than one.

[Can Vardar @icanvardar]

if you don’t hold your macbook like this you’re not agentmaxxing enough

[Bailey Pumfleet @pumfleet]

@hiiinternet @calcom @peer_rich you should email [email protected]

[Bailey Pumfleet @pumfleet]

Lidl GitHub might be my favorite thing on the internet this week.

[tobias @tobiastornros]

Lidl has a cloud offering now and their parent company is building an €11B AI data center. At this point, I fully expect them to replace github while they're at it

[Bailey Pumfleet @pumfleet]

My marketing team asked me to write a shitpost about bananas.

Never in a million years did I see myself doing that, but it did NUMBERS on LinkedIn

They ate that shit up

[Bailey Pumfleet @pumfleet]

Saw a photo of a Korean banana pack today and it changed the way I thought about product.

Seven bananas, each at different stages of ripeness. One ready to eat, one ready Wednesday, and one still green that it needs a few days.

This is better product thinking than 90% of the roadmaps I've reviewed this year.

We obsess over the yellow banana. The ICP. The user in the demo video who clicks the right buttons in the right order while smiling at a MacBook. We A/B test their button color into the ground.

We ignore the green banana: the user who showed up 30 seconds ago, has no idea what the product does, and is one confusing modal away from closing the tab forever.

And we ignore the spotted banana: the long-time power user who has outgrown the happy path and is now duct-taping workarounds together in a Notion doc titled "things [your product] can't do."

This Korean grocer designed for all seven bananas. You're designing for one and wondering why retention is flat.

Your user journey is a bunch, not a banana.

[Bailey Pumfleet @pumfleet]

@jacobmparis you taking angel checks?