Father of 2. Mathematician, Physicist, Data Scientist and Software Dev/‘Engineer’; and now comedian! Aspiring to be Bandit Heeler.

Australia
Joined April 2014
Jon Klaric retweeted
ok update on the deleted repo thing, since it kind of blew up first, some context on why i posted it like that. there have been so many security incidents lately that my brain is basically stuck in alert mode. so when i saw a stranger in our audit log deleting a private repo, i assumed the worst. we figured out what happened. nobody hacked us, and it wasn't a github bug. that repo was a private fork of a repo owned by @StainlessAPI, the company that generated our SDKs. our entire SDK pipeline ran on it. Stainless got acquired by @AnthropicAI back in may. and on october 27, with zero heads-up to us, someone there deleted their copy of the repo. turns out when you delete a private repo on github, every private fork of it gets deleted too. same request, under two seconds. and our audit log shows the person who deleted *their* repo as the one who deleted *ours*. that's why it looked like a random outsider walked into our org and nuked something. no email. no "hey, we're cleaning these up, grab a copy." just gone, along with the production repo behind every one of our SDKs. github support walked us through all of it within a day, which, genuinely, thank you. one ask though @github: put this in the audit log. right now the event for our repo just says "repo.destroy" by an outside user. if it said "deleted because upstream fork parent X was deleted", we'd have understood it in two minutes instead of spending a night thinking we'd been breached. we had a local clone, so we pushed it back up as a standalone repo and the SDKs are running again. if you were a Stainless customer and you've got anything living as a private fork of one of their repos, go detach it today. it takes ten minutes. their delete is your delete.
someone outside our GitHub org deleted one of our private repos. no membership or invite or role. nothing in our org or enterprise audit logs gave them access. just one repo.destroy from the gh CLI. and it's not in deleted repositories, so no restore. @github how is this possible, what sorcery is this?
65
71
67
1,595
104,716
Please tell me this is a Halloween tale designed to scare the sh*t out of devs…
someone outside our GitHub org deleted one of our private repos. no membership or invite or role. nothing in our org or enterprise audit logs gave them access. just one repo.destroy from the gh CLI. and it's not in deleted repositories, so no restore. @github how is this possible, what sorcery is this?
1
1
4
286
If you believe free speech is for you but not your political opponents, you're illiberal. If no contrary evidence could change your beliefs, you're a fundamentalist. If you believe the state should punish those with contrary views, you're a totalitarian. If you believe political opponents should be punished with violence or death, you're a terrorist.
15,610
137,261
8,038
605,103
26,909,235
Jon Klaric retweeted
#BREAKING 🚨 At least 4 people in life threatening conditions and multiple injured following a drive by-shooting at boxing event in Logan, south of Brisbane
28
13
234
29,389
Jon Klaric retweeted
732
1,414
1,123
20,443
2,248,784
Oh, and a cheeky little CVE in libc (regcomp) to finish up the day too. openwall.com/lists/musl/2026…
1
3
179
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
288
3,271
673
22,656
2,271,090
Jon Klaric retweeted
The Supabase .NET SDK is now officially supported with a major new version. v8 puts every package in one repo, on one version number. Learn more → supabase.com/blog/introducin…
8
13
5
103
11,483
Jon Klaric retweeted
Forked @ecklflorentin's LG TV launcher to add more TVs and casting. Then I had a worse idea: T3 Code on the TV. Agents now sitting next to Netflix, and the home screen tells me when one is still working, failed, or needing my attention. @theo @maria_rcks @jullerino it's slow on a Fire TV stick, but it runs 📺
2
1
1
8
794
You can now code from your TV with T3code. @theo you coming around for some Netflix and coding?
2
3
145
XKCD strikes again m.xkcd.com/221/
a trusted intermediate CA just "leaked" (the private key was 4)
1
6
191
Jon Klaric retweeted
Replying to @wagslane @joelhooks
🫡 appreciate yall a ton Everyone who doesn’t qualify under my “have your boss pay for it” callout should probably be on boot :)
3
1
2
77
5,197
Jon Klaric retweeted
DeepSeek V4.1 Flash updated to 1017 in OpenCode Go and Free No changes needed on your end
495
673
380
12,894
718,378
These ‘signs’ were clearly written by an NPC who is ‘retardmaxxing’.
1
3
54
Jon Klaric retweeted
OpenCode Go is just too good of value to pass up right now
8
1
1
23
1,105
Jon Klaric retweeted
Starship, Starlink, Grok, and Roadster. These should all have been Sputnik moments for Europe. Triggered immediate deregulation, mobilization of capital, and ambition to catch up. And that's just the work of Elon's companies alone. But what do we get? A hollowed out EU Inc 💀
323
489
48
8,892
211,600
Jon Klaric retweeted
GLM 5.3 Flash is now free in OpenCode
787
1,437
1,193
20,352
2,801,094
Jon Klaric retweeted
Linus is unfathomably based. Forever bullish on Linux.
17
82
9
733
24,590
Jon Klaric retweeted
DeepSeek V4.1 Flash is now free in OpenCode
884
1,850
1,236
26,192
3,770,431