Matt Ruby

[Matt Ruby @ruby_matt]

@codylindley I’ve been having a good time using https://t.co/o8k2gdwyxC super simple, all local.

[Matt Ruby @ruby_matt]

This isn't theoretical. Real CVEs across Cursor, mcp-remote, and Anthropic's own Git MCP server. \
OWASP published an MCP Top 10.
Full breakdown on the attack, real breaches, and what to do about it: https://t.co/E054ZeEjvR

[Matt Ruby @ruby_matt]

https://t.co/JNtez5TX0q

[Matt Ruby @ruby_matt]

I wanted AI to help me explore an open-source repo. Gave Claude Code the GitHub URL, turned on yolo mode, and went to make tea.
Came back to an unexpected OAuth login screen in Chrome.
A .mcp.json file in the repo had auto-launched an MCP server on my machine.

[Matt Ruby @ruby_matt]

So I built a proof of concept. An MCP server that harvests data at STARTUP before any tool call or prompt.
Under 2 seconds, zero interaction: 13 sensitive env vars, 3 SSH keys, gcloud/k8s/docker/npm creds.
This only grabbed metadata. A real attacker reads the actual values.

[Matt Ruby @ruby_matt]

https://t.co/JNtez5TX0q

[Matt Ruby @ruby_matt]

I'm trying something new this year: "Just Build It!". Think of a problem and solve it.

First up: https://t.co/GENCeJNgQc

At large fencing tournaments, strip coaching is a limited resource. Who's on deck? Where are they? Are they done? https://t.co/5l6rAFjWGV has the answers!

[Matt Ruby @ruby_matt]

@thekitze Dude, Matt Ruby 100%!

[Devin Desktop @devindesktop]

You can now pair SWE-1.5 with Sonnet 4.5 for planning in Windsurf.
This lets you create hybrid agents that take advantage of SWE-1.5's speed while working together with SOTA models for planning out more complex tasks.

[MJ @mjackson]

React takes “UI = fn(state)” too far, IMO. You’re required to give ALL your state to React to update the UI.

Then it provides escape hatches to give you back things you need, like useRef, useCallback, etc.

But what if you never gave React all your state in the first place?

[Supergiant Games @SupergiantGames]

HADES II v1.0 is coming September 25!🌒

Battle beyond the Underworld in our launch trailer.🏔️

Play in blazing-fast 120fps in TV Mode on Nintendo Switch 2, or 60fps on Nintendo Switch (w/ free upgrade to Switch 2). Transfer PC progress from Steam or Epic with Cross Saves.

[Matt Ruby @ruby_matt]

@Taskade Genesis

[Matt Ruby @ruby_matt]

@wallabyjs @code Needs a toggle? No. However, if I go to the settings and turn it off, I'm probably not turning it on again. As a quick toggle, I'd flip it on from time to time.

[emil @emilwidlund]

Here's a fun & little known fact —

We built a custom reconciler for @reactjs to render the Battlefield UI (and FIFA & NHL UI too) inside the EA Frostbite Game Engine.

So yes — we used React & MobX (@mweststrate) for state management in games at @EA.

[Wallaby Team @wallabyjs]

🚨 Wallaby MCP supercharges your AI agent with real runtime context — not just static code or shallow CLI output!
Live execution data, dynamic coverage, deep insights, and runtime relationships.
Fix tests, create new ones, and code with confidence! 🚀🔥

https://t.co/zRTdOKbhTi

[Matt Ruby @ruby_matt]

@johnlindquist What dictation tool are you using to feed your IDE?

[Tyler Williams @coolsoftwaredev]

Posted this elsewhere, but folks here might be interested to know that we have a path forward to make @MSTjavascript compatible with the React Compiler!

[Matt Ruby @ruby_matt]

https://t.co/FQVS0IgInb
@wallabyjs Black Friday sale is on! Wallaby 2.0 is H.O.T hot! Try wallaby + quokka with @windsurf_ai. Wild times! And no, they're not paying me. Just great tooling.

[Matt Ruby @ruby_matt]

@thekitze I'm in the same boat! Claude is great for coding, but for everything else, I still lean on ChatGPT. I ended up signing back up the same day my pro subscription expired.

[MobX-State-Tree Official @MSTjavascript]

We just published MobX-State-Tree version 7.0.0. It's been available as a pre-release version for some time now.

Huge thanks to @thegedge and @harrybrundage for all the great contributions. We really appreciate all the support from @gadget_dev

https://t.co/bXYUOhhDay