founder @ boring software forward deployed clanker @compai open sourcerer @tripwiredotsh

Joined July 2022
introducing dither-kit a library of gorgeous dithered charts built from the ground up, no dependencies, they're built on top of a tiny <canvas> engine install it today at tripwire.sh/dither-kit
163
215
65
4,487
743,094
grim retweeted
Speaking of security, we created a registry for building OIDC configuration components. Pick your providers, form and validation libraries, and token verifier (powered by jose). Then run one command to copy everything into your app. I've built these a few times before. I know how annoying they can be to get right. Hope this helps. ui.shadcn.com/oidc
It's time to retire long-lived static credentials. We surveyed 1,000+ SaaS vendors and found only 8.4% support secure auth. This is our call to action and how we're doing our part. vercel.com/blog/death-to-lon…
37
41
3
799
50,747
Got this email from Openrouter. Rightfully so, I was confused. So I check the logs... oh boy. the Railway hack leaked my keys. 45 minutes later, ~25 different customers were using them one load balancer alternating between my two keys. one single request cost $3.17 I've been running a free Claude reseller business for a week and I'm not even getting a cut what kind of fucked up business is this?
13
3
49
6,779
It only gets worse. They weren't satisfied with their 400 token love letters, so they use my api key IN FUCKING CURSOR, burning my precious tokens These damn russians
2
1
52
How dare you burn my precious spend on cursor of all harnesses, AND on love letters I was hoping it was china running a distillation attack No. It's just a fucking russian guy writing love letters 🤦
38
Replying to @SenSanders
> independently without your authorization You authorize them to act on your bank account when you give them access, if you don't want them to have access to your bank, don't give them access, it's that simple We do not need to treat the general public like children
19
22
1
610
12,219
grim retweeted
Get your tmp.now domain today (and then keep it for an hour)
𝚟𝚎𝚛𝚌𝚎𝚕 𝚍𝚎𝚙𝚕𝚘𝚢 --𝚝𝚎𝚖𝚙𝚘𝚛𝚊𝚛𝚢 is wild (and so is ultrafast ai)
9
5
2
91
10,041
grim retweeted
prime time to switch to @heliumbrowser
We've decided to sunset Arc on December 22, 2026. That's not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community. Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant, dedicated work that is only increasing in the age of AI. Dia was built from the ground up to meet today’s security standards, so that's where our engineering and security teams will focus moving forward. We've worked to make switching to @diabrowser as easy as possible for Arc members. Here's how: · Your passwords, bookmarks, extensions and history come over to Dia seamlessly. · Spaces, Folders, and Tab Groups are in Dia and import over with your data intact. · Dia now surpasses Arc benchmarks in stability, speed, and security. · The browser features you use in Arc are free in Dia, and the AI is optional. Thank you for using Arc, for pushing us to make it better, and for building alongside us. The team that made Arc is the same team behind Dia, and some of our most ambitious work is just ahead. We'd love for you to be there with us when it lands.
79
78
4
1,751
33,189
grim retweeted
every time i use claude ultracode i have my mind blown a bit about what is possible with agents these days this one was from 1ish prompt of 'minecraft x mirrors edge'
15
4
2
153
9,561
Oh shit, I didn't even realize Dither Kit was featured on Shoogle! Thank you @alibey_10
1
13
385
Our giant laundry list of rules is cool... But what's even cooler is the level of transparency we offer to maintainers trusting us to defend their precious repos Every decision our platform makes has an extensive backlog of evidence backing it up
1
1
357
the future of open source moderation is in beta: tripwire.sh I don't trust github to moderate my repos, and neither should you
144
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
558
890
523
8,470
1,551,005
grim retweeted
sooo bullish on @autumnpricing
7
5
2
55
4,892
Fine. I'll do it myself.
Make it open source
23
3
1
297
15,902
React Bits just passed 50,000 stars on GitHub ⭐ That's enough people to fill a stadium. I'm grateful to everyone who uses it. More to come.
28
2
2
134
4,195