
Clanker Wrangler / CTO @humanlayer_dev My other computer is your computer
San Francisco
Joined June 2019
- Tweets14.1K
- Following1.3K
- Followers8.5K
- Likes72.9K
Kyle Mistele 🏴☠️ retweeted
the entire software industry after “software is solved” and “just vibe code it lol”
Aaaaaaaaaahhhhhhhhhhhh
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26.
Vercel WAF rules are live for every project and block known exploit patterns.
vercel.com/kb/bulletin/node-…
Look guys if you’re building something on a cloud platform and you don’t want to get owned through a platform compromise at some point you have like 4 real options
AWS
Azure
Cloudflare
GCP
You should not trust key infra to a neocloud
Neoclouds may get you faster performance on something like S3 but they just can’t match the availability, durability, and security of a “real” cloud
They don’t and can’t design for as many nines
Kyle Mistele 🏴☠️ retweeted
please put Cloudflare in front of all your Internet stuff. It’s bad out there rn
🚀 Excited to welcome 𝗗𝗲𝘃𝗶𝗻 𝗝𝗮𝗺𝗲𝘀𝗼𝗻 (@devinjameson) to 𝗘𝗳𝗳𝗲𝗰𝘁 𝗠𝗶𝗮𝗺𝗶 #𝟯!
Devin is the creator of @foldkit, an ambitious open-source frontend framework built on Effect and inspired by The Elm Architecture.
Foldkit rethinks frontend development around explicit state, predictable transitions, and composable effects. What makes it especially exciting is its approach to AI-native development: DevTools and MCP integration that let agents inspect application state, trace events, and even rewind the UI.
With a background spanning product design and engineering, Devin brings a fascinating perspective on how we can build better software for both humans and AI agents.
It’s a real pleasure to welcome him to our Miami developer community!
🔗 foldkit.dev
📅 November 9, 2026
📍 The LAB Miami, Wynwood
🎟️ RSVP: luma.com/0yaas5h2
#EffectMiami #EffectTS #TypeScript #AI #Foldkit #FunctionalProgramming
Kyle Mistele 🏴☠️ retweeted
At-least-once delivery means you never lose a message, but you'll sometimes get the same one twice.
This week learn how to:
→ Make handlers idempotent
→ Skip duplicate messages
→ Deal with the dual write problem
Module of the Week: Cluster, Part 4 ↓
Kyle Mistele 🏴☠️ retweeted
It's kinda crazy that I have a certificate for hosts I do not control, that actually works for so much software out there still. First time in my life :) Any other root CA incident I remember did not result in me actually being able to sign something.
Kyle Mistele 🏴☠️ retweeted
everyone clowns on it but security through obscurity sure made "4" last a while
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Kyle Mistele 🏴☠️ retweeted
The Cloudflare's writeup on our php2shell response is up.
Rules went live at 03:02 UTC, about 9 hours before disclosure. Unfortunately the vulnerability leaked early, so we were already watching attackers mutate payloads against the rules and updating as variants appeared.
New rules keep landing in the WAF changelog.
Expect updates through out the day. We will have a more thorough post of what we had to build to better protect people coming shortly.
PHP runs almost 70% of websites. The flaw is in the runtime, so updating plugins won't fix it. Patch PHP.
blog.cloudflare.com/php-vuln…



























