@tedbrine

17 / neovim user / https://xitter.cf/t.co/HXOn1Bsl2I / https://xitter.cf/t.co/tKUwxt9zLe

 England, United Kingdom
ted.ac
Joined May 2026
  • Tweets1.2K
  • Following654
  • Followers296
173Media
Pinned Tweet
Ted
@tedbrineSep 28
oops... i accidentally made my own github
24
1
3
147
15,236
it’s kinda sad that x doesn’t notify me about every bee like/follow/reply anymore
7
Since you posted this, my agent found a cross tenant container isolation bypass in OpenShip. Don’t trust this vibe coded slop. I’d Grok 4.7 can find this in one prompt, god knows what real people find in production.
This quoted post is unavailable.
Try viewing anyway · View on X
1
36
runaway from the railway 😂😂😂
46
Feels like @Cloudflare and @vercel are like the democrats and republicans. They disagree on everything, but when it’s come to security, they are both top notch.
3
17
538
btw i won’t comment which one is which
1
1
52
I’m shipping something tonight or tomorrow.
2
147
anyone wanna make me an affiliate??
1
129
Crazy. Build that panic switch for shit like this.
Theo - t3.gg
@theo3h
Lakebed, Postplan, and Shoo will be down indefinitely until Railway gets their shit fixed and I can actually redeploy them with rolled keys. Incidents happen. I understand. Blocking deploys so we can roll keys without downtime is unacceptable. I'm disappointed in Railway.
2
231
Today has reminded me to rebuild my global mayday button. A single button on my phone which blocks all traffic to everything I own immediately.
1
5
314
Railway was given a second chance, and they threw that off a cliff and shot it with a nuclear bomb.
Jake
@JustJake4h
Today, we were alerted of malicious activity that compromised Railway's servers We are sharing this with you broadly and swiftly. We recommend folks rotate their keys out of an abundance of caution.
1
17
1,078
I won’t be continuing to make a @Railway adaptor for Bast.sh after today.

Bast.sh: native SSH picker and key manager

Browse SSH hosts, manage keys, and connect from the terminal. The fast way into the servers you use every day.

bast.sh
49
This is why I don’t choose shitty providers trying to act big. Much love @vercel ❤️
Varunram Ganesh
@varunram5h
Railway is compromised, rotate all API keys as soon as possible Deployments are down so don’t wait to redeploy Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack Stay safe friends
10
1
26
5,044
This isn’t normal. This is completely unacceptable. Get off Railway NOW. Oh… you can’t! They’re down! And you can’t even roll your variables!
Railway
@Railway4h
An urgent notice from the Railway team blog.railway.com/p/security-…

Security Disclosure: Wednesday October 21st | Railway Blog

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention

blog.railway.com
8
3
1
67
2,179
This. Do NOT fucking announce an RCE without a fix already deployed. And don't schedule the fix, do it immediately. And, what do you mean this was known for weeks? Jesus, MOVE OFF PHP. These guys can't be trusted.
Arlo Gilbert
@arlogilbert5h
Replying to @SocketSecurity
And that is why I pay for Chainguard. The RCE started being exploited last night per X posts I saw. Making customers wait would be irresponsible.
1
3
247
Shit.
The Hacker News
@TheHackersNews7h
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases. CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers. Read - thehackernews.com/2026/10/cr…

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

thehackernews.com
1
160
I don’t mind tipping in America. In the UK, when I see Americans complain about tipping, I honestly agree with them. Until now. Holy fuck. Like yeah your food is shit, but your service goes hard. What do you mean when I’m 2/3 the way through my beer they bring another one… for free? And the @olivegarden breadsticks? I thought they would be doughy shit. HOLY THEY TASTE SO GOOD.
5
124
love this
Malte Ubl
@cramforce6h
Here is a graph of Vercel's WAF blocking attempted exploits of the PHP vulnerabilities. Volume is still low, but I expect it to ramp up quickly. Treat the WAF as temporary protection while you upgrade, but upgrade ASAP
2
83
Thank you very much to Tom from rdke.dev for sponsoring Bast.sh with an incredible $250.00 donation! It's so incredible to see so many people using Bast today to help remove friction in their workflow.
4
119
instagram.com/reel/DewsflDul…

Apple Music (@applemusic) • Instagram reel

instagram.com
Apple Hub
@theapplehub9h
Apple cooked with the Apple Music rebrand 🔥 Hopefully they use this as the new app icon
2
105
The gods aren’t happy with us
GitHub Status
@githubstatus11h
We are investigating reports of degraded performance for Actions, Pull Requests and Webhooks githubstatus.com/incidents/n…

Delays for Pull Requests and Webhook deliveries

githubstatus.com
1
5
247
Load more