
founder @ boring software forward deployed clanker @compai open sourcerer @tripwiredotsh
Joined July 2022
- Tweets20.2K
- Following2K
- Followers5K
- Likes153K
Pinned Tweet
introducing dither-kit
a library of gorgeous dithered charts built from the ground up,
no dependencies, they're built on top of a tiny <canvas> engine
install it today at tripwire.sh/dither-kit
Speaking of security, we created a registry for building OIDC configuration components.
Pick your providers, form and validation libraries, and token verifier (powered by jose). Then run one command to copy everything into your app.
I've built these a few times before. I know how annoying they can be to get right. Hope this helps.
ui.shadcn.com/oidc
It's time to retire long-lived static credentials.
We surveyed 1,000+ SaaS vendors and found only 8.4% support secure auth. This is our call to action and how we're doing our part.
vercel.com/blog/death-to-lon…
Got this email from Openrouter. Rightfully so, I was confused.
So I check the logs... oh boy.
the Railway hack leaked my keys. 45 minutes later, ~25 different customers were using them
one load balancer alternating between my two keys.
one single request cost $3.17
I've been running a free Claude reseller business for a week and I'm not even getting a cut
what kind of fucked up business is this?
It only gets worse.
They weren't satisfied with their 400 token love letters, so they use my api key IN FUCKING CURSOR, burning my precious tokens
These damn russians
grim retweeted
Replying to @SenSanders
> independently without your authorization
You authorize them to act on your bank account when you give them access, if you don't want them to have access to your bank, don't give them access, it's that simple
We do not need to treat the general public like children
grim retweeted
Get your tmp.now domain today (and then keep it for an hour)
prime time to switch to @heliumbrowser
We've decided to sunset Arc on December 22, 2026.
That's not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community.
Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant, dedicated work that is only increasing in the age of AI. Dia was built from the ground up to meet today’s security standards, so that's where our engineering and security teams will focus moving forward.
We've worked to make switching to @diabrowser as easy as possible for Arc members. Here's how:
· Your passwords, bookmarks, extensions and history come over to Dia seamlessly.
· Spaces, Folders, and Tab Groups are in Dia and import over with your data intact.
· Dia now surpasses Arc benchmarks in stability, speed, and security.
· The browser features you use in Arc are free in Dia, and the AI is optional.
Thank you for using Arc, for pushing us to make it better, and for building alongside us. The team that made Arc is the same team behind Dia, and some of our most ambitious work is just ahead. We'd love for you to be there with us when it lands.
grim retweeted
every time i use claude ultracode i have my mind blown a bit about what is possible with agents these days
this one was from 1ish prompt of 'minecraft x mirrors edge'
Oh shit, I didn't even realize Dither Kit was featured on Shoogle! Thank you @alibey_10
Our giant laundry list of rules is cool...
But what's even cooler is the level of transparency we offer to maintainers trusting us to defend their precious repos
Every decision our platform makes has an extensive backlog of evidence backing it up
the future of open source moderation is in beta: tripwire.sh
I don't trust github to moderate my repos, and neither should you
grim retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…

















