Writing about TypeScript, AI and everything related. @tamery_app https://nitter.cf/t.co/qi5hoSNgfg
Ukraine
Joined December 2023
- Tweets4.2K
- Following411
- Followers3.8K
- Likes9.4K
Does anyone know any really cool ways to test for vulnerabilities like these?
We went crazy after the attack on Railway.
For several weeks now, we've been checking every possible way user data could leak.
Fortunately, we haven't found anything, but we'll keep looking anyway and will most likely create a new service that searches for new vulnerabilities every week.
We have a very important area - your databases. That's why the security of your data comes first for us.
pretty sure they used Claude Code to build the fake Claude Code nitter.cf/TheHackersNews/status/…
This quoted post is unavailable.
I think this about code, music, videos, and everything AI does.
Yes, it helps me, but I wish things were the way they used to be.
I want to think more.
Travis Knight says that LAIKA will never use generative AI in their films.
“AI is theft. It’s the ingestion of years and years and years of human creativity and ingenuity, regurgitated back. It has no humanity. It has no spirit.”
(Source: theplaylist.net/wildwood-tra…)
I'm so sad that hardly anyone talks about frameworks anymore.
These days, it's cool to write about agents and models 🥲
We get used to AI quickly, but forgetting that useEffect runs after the HTML has been rendered is wild to me.
We literally have no idea how to build software like this anymore ethanniser.com/blog/a-clock-…
Don't want to give a colleague access to your database just to show them some data?
Now you can share any table from Tamery as a link, with filters and sorting already applied.
You know what I realized?
@bunjavascript, which was completely rewritten by Claude, has never been found to have these kinds of security issues.
How many conversations there were about it.
Railway is working now. Yes, there are still issues, but you can build things and so on.
Thanks to @itsnoahd and P.S. Because of this situation, many people decided to improve the security of their projects. In a way, it was an important push, and perhaps it helped prevent other leaks as well. for keeping everyone informed.
And please, don’t be sad. The situation turned out badly, but it could have been much worse. Everyone gets into a mess at some point, but time heals.
Railway ❤️
p.s. Because of this situation, many people decided to improve the security of their projects, so in a way, it was an important push, and perhaps it prevented other leaks as well
This is an incredibly bad situation that could have affected a lot of people, but even so, I’m not leaving Railway.
What doesn't kill you makes you stronger.
It's rare to see a provider targeted like this. I'm confident that the Railway team is doing everything possible to resolve it and will make sure it doesn’t happen again.
We all need to analize what happened and ensure this issue doesn't repeat anywhere - not on Vercel, Render, Fly, or anywhere else.
At the end of the day, we're all part of the same community, and while any of us can switch providers at any time, working together makes the whole ecosystem stronger.
I really hope Railway shares a detailed post-mortem on what went wrong and how they fixed it. It will benefit everyone.