@ctrlaltdylan

I like building stuff on the internet. Maker of Real ID for Shopify, Woo and BigCommerce - and lots of OSS you've never heard of

 us-east-2
dylanjpierce.com
Joined July 2009
  • Tweets4.6K
  • Following218
  • Followers892
534Media
2nd @Shopify app up and running 🙌 apps.shopify.com/real-id

Real ID ‑ ID verification - Eliminate fraud & verify customer age with ID verification | Shopify...

A.I. powered ID verification including verifying facial biometrics. Prevent fraud, chargebacks, automate real age verification, and protect rentals with KYC

apps.shopify.com
3
2
22
So which frontier lab is going to rewrite PHP internals with Rust as a massive marketing stunt?
1
106
T minus 1 hour till critical PHP patch release. I wish they disclosed the affected major version(s)
The PHP Foundation@ThePHPFOct 20
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
3
403
Shopify is taking app security seriously too. Breaches hurt the whole system, not just the individual apps with poor sec policies. How can you trust installing apps if you're seeing others? Shopify's app security skill is a solid start but there's more you can do: community.shopify.dev/t/secu…

Securing your app, together

Merchants install your app because they trust it, and because they trust the Shopify App Store. There are bad actors out there who are motivated to exploit that trust. Alongside the rest of the...

community.shopify.dev
1
3
32
2,388
Here's a Shopify App Security Field Guide so we can keep up with this changing landscape: verybadpanda.dev/field-guide… I've been publishing new guides and tactics based on what's happening in the ecosystem. Clearly the times have changed, and it's an opportunity to improve

Field Guide · Very Bad Panda

Reference and best-practice how-tos for building secure Shopify apps — authorization, OAuth, HMAC, secrets, and more.

verybadpanda.dev
3
5
3
30
3,843
The newest guide on how to harden your app against supply chain attacks, with new tooling available in package managers and integrations to help prevent breaches: verybadpanda.dev/field-guide…

Supply chain attacks: guard the loading dock · Very Bad Panda

You didn't write most of the code you ship, and neither did your agent. How supply chain attacks work, why AI coding makes them worse, and how to layer Socket.dev and pnpm so a poisoned package never...

verybadpanda.dev
4
327
Finally able to build something that merchants have been asking over and over for years now. So so excited. Can't share details now but so grateful for the opportunity
7
145
Merchant trust is everything Which means security is everything Introducing `app security check` A tool that finds common vulnerability patterns in Shopify apps Run it with AI Toolkit
31
34
28
272
35,427
Ordered a fire pit direct from a local one man shop and manufacturer with Shop checkout to boot Feels good man
1
2
212
Confirmed. This fire pit slaps
50
Real runners don’t post to strava
8
227
I can't believe I missed this. Now you can write automated tests for your Shopify UI Extensions - including POS 🤯 pnpm i --dev @shopify/ui-extensions-tester
1
5
317
Now it's limited to unit tests only, it doesn't actually mock the UI. But at least you can test business logic and error edges, which is at least giving you a base line foundation to work from.
85
Not rocket science but proud of this new intro page design I launched today. 1. (Hopefully) clear instructions 2. Visual and primary action above the fold 3. Dismissible by power users
6
415
We had a great turn out to the first Cleveland Commerce meet up last night. The turnout was much better than I expected! Of course I forget to take any photos 😅 Looking forward to the next one. Thanks for coming and helping organize @TRPage_dev and @jeff_codes
2
3
282
The first Cleveland Commerce Meetup is tonight! Join us at Anthology Cask House (formerly Bookhouse Brewery) for casual networking with other operators, designers and eCommerce builders in the Cleveland Area. Free draft pours for the first 25 attendees luma.com/o9hl9xrt
1
2
372
Longest print yet. Wish me luck🤞 Need to make this trophy in time for a cornhole tourney
1
3
180
Some people have no shame
2
9
1,602
🦝 Been using an AI security harness to break into every PR before merging. Securing code before it even reaches prod. Here's the exact Strix + GitHub Actions setup 👇 verybadpanda.dev/field-guide…

Security reviews in CI: an AI pentester on every PR · Very Bad Panda

How to wire Strix (or any AI harness) into GitHub Actions without letting it own your repo. Run it before merging, and on a regular interval.

verybadpanda.dev
213
In one week + one month you will no longer be able to create or update script tags on Shopify storefronts. You can still use App Embeds as a replacement for storefront integrations. End of an era. It was so simple to inject functionality storewide shopify.dev/changelog/online…
1
1
2
723
The Lake is like glass today. Loving it
7
226
Load more