Father, Husband, Coach builder, believer, sedulous. @HAXTheWeb ♎+🃏+🔥+ ♥️ ≥ 💸 "Our integrity sells for so little, but it is all we really have."
2027
Joined October 2008
- Tweets79K
- Following1.1K
- Followers1.9K
- Likes5.7K
Pinned Tweet
npm install --global @haxtheweb/create
version 11 out with new themes, new capabilities, better dark mode support. just getting bonkers what you can do, like ship this killer blog to github btopro.com/
I am starting to give it my analogies. We're colonizing the moon actively so it's time to peak ahead at mars.
we're building small interactive games. then they will be views. then we'll have dynamic content driven interactives in content made by agents.
No. Idea.
claude.ai/artifact/9nVhdtBGa… upload .h5p files to hax and render them in place using @HAXTheWeb to place them. This won't let you edit .h5p files but at least allows them to still run. This Flash without the Macromedia side of things but for educators migrating to HAX.
Good luck to everyone out there. skills.sh/openai/skills/secu… is your friend but just one of many steps needed to harden against the coming storm
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
We now can prototype real hax blocks with real hax using just Claude artifacts.
claude.ai/artifact/Q86Jt8P3K…
This is a skill in PRAW. New components are coming from prompts with ridiculously high levels of accuracy and wire up automatically. This is always where we were going..
btopro retweeted
This is almost everyone
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
btopro retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
2 shot. 1 shot was 99% of the way there. 2nd shot was fixing a height issue in the demo. 3rd shot was asking for an interactive hax demo to be built on demand just for this element so I could play with it.
Meanwhile, I still test everything, review everything within reason, ask questions when I don't understand, and ask to break some parts out into follow ups. I hit flow state on a regular basis with this workflow. PRAW is the brain of how hax works. Agents load and work
Last week we started being able to have claude use hax CLI and you can download a site. Next release it should be able to function as an artifact so you don't have to install anything to host. The next release optimized AI awareness not just of platform but sites created
Getting better at a nightly PR push. Kick off and research and do then during off peak times so they run faster and more at the same time. Then the next day I work through the PRs, testing and closing out issues. Opened a dozen tonight which I'll then start working through
New record today. Can't wait to be out of tooling and QA clean up and into release and feature enhancement. Love how fast I can get through the muck like SSR so that I can get back to stuff users see