Malte Ubl
@cramforce
Self-driving infrastructure
@Vercel CTO.
Immigrant đēđ¸/đŠđĒ/acc
941 Following 52.2K Followers
Given the deserved attention this got we posted a security bulletin
TL;dr: Vercel has completed the application of Linux kernel security updates to address CVE-2026-98432.
I benchmarked against bun --aot
scriptc is 1.6x faster than bun --aot
Should you trust this benchmark? Nope. You should never trust benchmarks, but especially not this one, because it is the one that scriptc was optimized against and it does not benchmark *your* app nor does it benchmark any *real* app. Of course, you all already understand that this is true for all benchmarks you've seen here and are consequently very calm and rational about it.
Show more
Part of the quest to make TS with scriptc faster than rust.
These are valid TS types and have no semantics in JS, but when compiling with scriptc it will not compile if the function buddy may, indeed, throw.
scriptc is already computing this anyway to emit more optimal code, so this is a zero-cost check.
You (your clanker) would use this if you want to ensure that code can be compiled optimally.
Show more
You probably heard about the OpenAI white-hat hack earlier today by @S1r1u5_ and friends.
The same vulnerability impacted most image processing where images can be under attacker control (like an app with profile picture upload), and with that next.js' image optimization support.
Here is the story of how we handled this event, helped track down "the literal guy in Nebraska" that @xkcd predicted and get the underlying issue fixed.
Also, notable, when using image optimization through Vercel's platform you are protected from exploitation through sandboxing of the code that handles potentially hostile payloads.
Show more
Ran @typesafeai's Jev against an existing classifier eval that previously used Gemini 2.5 Flash Lite. It won both on quality (saturated the eval) and speed (6x)
Request to harnesses:
I love that you now send "Accept: text/markdown`. Next thing is: Put the programming language you prefer into the Accept-Language header.
Accept-Language: "en-us, python"
So, I don't have to feed you the TS examples when you're looking for python.
Show more
The big idea of @shadcn registries was that dependencies can be both "vendored" (in your repo) and managed (they can be updated automatically).
This is amazing for AI-based development because the agent can just see the implementation. Security is better because the code isn't hidden in some ephemeral directory. And if the code isn't quite right it can also change it right there.
We're adopting this model for @evedev_ extensions and I believe it's a perfect fit.
Get that extension from the vendor of your choice. And have your agent change it to your liking.
Show more
Just learned that the "Build an agent in @evedev_" workshop by ultra-goated co-creator of eve @andrew_barba is now on Youtube
"We" as in "me and my agents". @shadcn đđđ
