Malte Ubl
@cramforce
Self-driving infrastructure
@Vercel CTO.
Immigrant đēđ¸/đŠđĒ/acc
932 Following 51.1K Followers
You probably heard about the OpenAI white-hat hack earlier today by @S1r1u5_ and friends.
The same vulnerability impacted most image processing where images can be under attacker control (like an app with profile picture upload), and with that next.js' image optimization support.
Here is the story of how we handled this event, helped track down "the literal guy in Nebraska" that @xkcd predicted and get the underlying issue fixed.
Also, notable, when using image optimization through Vercel's platform you are protected from exploitation through sandboxing of the code that handles potentially hostile payloads.
Show more
Ran @typesafeai's Jev against an existing classifier eval that previously used Gemini 2.5 Flash Lite. It won both on quality (saturated the eval) and speed (6x)
Request to harnesses:
I love that you now send "Accept: text/markdown`. Next thing is: Put the programming language you prefer into the Accept-Language header.
Accept-Language: "en-us, python"
So, I don't have to feed you the TS examples when you're looking for python.
Show more
The big idea of @shadcn registries was that dependencies can be both "vendored" (in your repo) and managed (they can be updated automatically).
This is amazing for AI-based development because the agent can just see the implementation. Security is better because the code isn't hidden in some ephemeral directory. And if the code isn't quite right it can also change it right there.
We're adopting this model for @evedev_ extensions and I believe it's a perfect fit.
Get that extension from the vendor of your choice. And have your agent change it to your liking.
Show more
Just learned that the "Build an agent in @evedev_" workshop by ultra-goated co-creator of eve @andrew_barba is now on Youtube
"We" as in "me and my agents". @shadcn đđđ
