Thank you Patrick Stewart for the years of exploring the final frontier and "make it so". I'm not really one for nostalgia, but these little goose bumps are telling me to watch Next Generation tonight.
However, let's recognize @elonmusk's bravery. Meddling in Europen politics and attacking the EU itself when you want regulatory privileges and frequency permissions is a bold business strategy.
More reporting suggesting that Musk does indeed have his finger on Starshield's operability. Quite a lot of power for a ketamine-addicted trillionaire in bed with hostile foreign regimes. You might even say this endangers U.S. national security. wsj.com/world/trump-called-m…
software is free yet i haven't found a single piece of software i love in a long time... until i tried @superlogical
can't believe i'm this excited for a terminal multiplexer in big 2026
Our customers, who are the best, are assisting us with our investigation- one reported to us what the threat actor was using their keys for, since revoked.
If you have any prompts from misuse of your keys, this will help us immensely.
Please email support[at]railway[dot]com
I'm interested in learning more - does what you're doing here need a CDN / Edge network, and/or more traditional "hosting" e.g. what you can get from Railway, Render, Fly, etc? cc @D2cbro@indirect
Why are people acting like it's @OpenAI/@AnthropicAI's fault that vulns are being fixed/disclosed? This is the result of decades of security debt from poor software engineering. The labs' models are not creating net-new security risk, the risk has always been there and we're finally able to uncover and fix it.
we did invent it and it's called OIDC federation
vercel and github actions do it:
- each deploy gets a short-lived signed token
- AWS/npm/other services verify it via trust policy
- you get temporary creds
no keys to paste
the problem is not enough APIs and services accept it
to me it was always bonkers insane that in order to connect service A with service B i need to ... paste an api key ???
how come as a fucking industry we didnt invent a better way to connect deployments with services
What did people think “focus on security” meant? It meant this. It meant finding all these problems (of which there are so many more) and fixing them.
The goal isn’t to have an easy day at the office. It’s to make sure people don’t die. It’s to stop truly horrible cyber attacks.