Troy

24 - he / him - nixos

[Troy @troymoder]

@immike_wing @rah__zee

[Troy @troymoder]

@narpylive shadows under the trees perforated night skies

[Troy @troymoder]

the more i look at this syntax the more i hate it

[Chris Tate @ctatedev]

New: row syntax for zerolang

20% fewer tokens

[Troy @troymoder]

hmmmmmmm

[Troy @troymoder]

1 more downtime please

[Troy @troymoder]

1 more downtime please

[Troy @troymoder]

@mycoliza is it bad when u just want to test a few deps like via "nix shell -p"

[Troy @troymoder]

"We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI."

the ai bubble is so funny to me, vercel gets compromised and the ceo praises the hackers for their sophisticated use of AI.

[Guillermo Rauch @rauchg]

Here's my update to the broader community about the ongoing incident investigation. I want to give you the rundown of the situation directly.

A Vercel employee got compromised via the breach of an AI platform customer called https://t.co/7PY6gGtzgI that he was using. The details are being fully investigated.

Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.

Vercel stores all customer environment variables fully encrypted at rest. We have numerous defense-in-depth mechanisms to protect core systems and customer data. We do have a capability however to designate environment variables as “non-sensitive”. Unfortunately, the attacker got further access through their enumeration.

We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel.

At the moment, we believe the number of customers with security impact to be quite limited. We’ve reached out with utmost priority to the ones we have concerns about. All of our focus right now is on investigation, communication to customers, enhancement of security measures, and sanitization of our environments. We’ve deployed extensive protection measures and monitoring. We’ve analyzed our supply chain, ensuring Next.js, Turbopack, and our many open source projects remain safe for our community.

The recommendation for all Vercel customers is to follow the Security Bulletin closely (https://t.co/BLVnic9fJC). My advice to everyone is to follow the best practices of security response: secret rotation, monitoring access to your Vercel environments and linked services, and ensuring the proper use of the sensitive env variables feature.

In response to this, and to aid in the improvement of all of our customers’ security postures, we’ve already rolled out new capabilities in the dashboard, including an overview page of environment variables, and a better user interface for sensitive env var creation and management. As always, I’m totally open to your feedback.

We’re working with elite cybersecurity firms, industry peers, and law enforcement. We’ve reached out to Context to assist in understanding the full scale of the incident, in an effort to protect other organizations and the broader internet. I also want to thank the Google Mandiant team for their active engagement and assistance.

It’s my mission to turn this attack into the most formidable security response imaginable. It’s always been a top priority for me. Vercel employs some of the most dedicated security researchers and security-minded engineers in the world. I commit to keeping you updated and rolling out extensive improvements and defenses so you, our customers and community, can have the peace of mind that Vercel always has your back.

[narpy @narpylive]

its really heartbreaking to see people spread the same lies about me especially since i've debunked all of this over 2 years ago.

[Troy @troymoder]

@lucya_dev matrix, htop, ls and larp

[Troy @troymoder]

@bepsucks @FlopsyPipsqueak https://t.co/e9saLBOj2c narpy made a video covering everything you just mentioned and owning up to the parts he’s at fault with. He made this video 2 years ago covering events that happened 8-10 years ago (when he was 14/16)…

[Troy @troymoder]

@notnullptr pensive emoji, I am kinda disappointed with the current cloud offerings and have a gpu so I would rather be self sufficient :3

[Troy @troymoder]

@notnullptr do u have a repo where u have ur current llm setup, i see u tweet abt it a lot and im curious if u have any decent results.

[neural oscillator of uncertain significance @mycoliza]

Here’s what I’d do if I was in charge of GitHub, in order:

1. Have more than one 9 of uptime
2. Have more than two 9s of uptime
3. Have more than three 9s of uptime (this one’s hard)
4. Have more than four 9s of uptime
5. Have more than five 9s of uptime

[Troy @troymoder]

only 17 candles on that cake

[localCatboy omo @nyanyaomo]

eating cake and then eating his cake x3

[Troy @troymoder]

the concept of calling Cloudflare or Vercel startups

[Nader Khalil🍊 @NaderLikeLadder]

Startup beef has progressed from writing passive aggressive blog posts to fully rebuilding a competitors project in a week

[Troy @troymoder]

@HeyItsTeaz The guy deleted the thread because he turned out to just be lying

[Troy @troymoder]

@chudblings @forestdonk_ you people are insane wym it’s not enough evidence then proceed to say yeah but we can spread the rumours if u want???

[Troy @troymoder]

@forestdonk_ @reticentfile @orologio91 I’m confused, you’re the one making the call out tweet because u saw some random persons story on ig and didn’t even talk to them to find out if it’s real?

[Troy @troymoder]

I decided to check back on this after some time. coin went to zero. its almost if it was a scam and everyone just hated on me for calling it what it was because the guy was dying.

[Troy @troymoder]

I have never seen a bigger scam than this. This is fucking crazy. Who the fuck does a raising money for cancer by my memecoin $CANCER what the actual fuck is wrong with these people. PUMP DOT FUN??? Every day we stray further from god