Bryan Bryce – e/tacos

@myrhex Show me the benchmarks

Grok Build is amazing. The early beta just dropped for SuperGrok Heavy users and the first real feedback from developers is overwhelmingly positive. People are saying it already feels 10x ahead of other coding agents. It handles full agentic workflows natively, runs multiple agents in parallel, does live refactoring, and has a surprisingly polished terminal UI with both vim mode and mouse support. It’s fast, manages huge context cleanly, and actually feels like you’re working with a real autonomous coding partner instead of just getting suggestions. This is the kind of serious high quality tool xAI keeps shipping. If the beta keeps this momentum, Grok Build is going to be a real great tool for power users. Try it out right now at x.ai/cli if you have SuperGrok Heavy subscription.

@mitchellh I worry about Vercel, all those nextjs vulnerabilities

I strongly believe there are entire companies right now under heavy AI psychosis and its impossible to have rational conversations about it with them. I can't name any specific people because they include personal friends I deeply respect, but I worry about how this plays out. I lived through the great MTBF vs MTTR (mean-time-between-failure vs. mean-time-to-recovery) reckoning of infrastructure during the transition to cloud and cloud automation. All those arguments are rearing their ugly heads again but now its... the whole software development industry (maybe the whole world, really). It's frightening, because the psychosis folks operate under an almost absolute "MTTR is all you need" mentality: "its fine to ship bugs because the agents will fix them so quickly and at a scale humans can't do!" We learned in infrastructure that MTTR is great but you can't yeet resilient systems entirely. The main issue is I don't even know how to bring this up to people I know personally, because bringing this topic up leads to immediately dismissals like "no no, it has full test coverage" or "bug reports are going down" or something, which just don't paint the whole picture. We already learned this lesson once in infrastructure: you can automate yourself into a very resilient catastrophe machine. Systems can appear healthy by local metrics while globally becoming incomprehensible. Bug reports can go down while latent risk explodes. Test coverage can rise while semantic understanding falls. Changes happens so fast that nobody notices the underlying architecture decaying. I worry.

@CRUDEOIL231 go get 'em

A peculiar tanker movement has been observed. The VLCC Huge, owned by the National Iranian Tanker Company(NITC), has resurfaced after 10 days. This tanker loaded 2mb of crude at Kharg on April 1 and managed to exit the SoH just before the US blockade took effect. After last being spotted passing through the Lombok Strait on May 3, it vanished for 10 days before reappearing in the South China Sea. What’s striking is its choice of the Lombok Strait over the traditional Malacca route, likely an attempt to evade enforcement risks in Malacca. The ingenuity of the Iranians is becoming increasingly resourceful, though it won't be enough to resolve all the difficulties they face. #oott #iran

@morganlinton @modat_magnify

@BryanJBryce @modat_magnify Well I don't think it's that bad, but you do have a lot of people vibe coding w/agents that default to using it

CVE-2026-44578  ⚠️ Next.js – WebSocket Upgrade SSRF (CVSS 8.6)  A server-side request forgery vulnerability in Next.js allows unauthenticated attackers to force self-hosted instances to make internal HTTP requests via the WebSocket upgrade handler.  By sending a crafted absolute-form HTTP request with Upgrade: websocket headers, attackers can access internal services, cloud metadata endpoints, admin panels, and internal APIs reachable from the Next.js server on port 80. Successful exploitation may expose cloud credentials, API keys, secrets, and configuration data.  Affected: Next.js 13.4.13+, 14.x, 15.x <15.5.16, 16.0.0–16.2.4  Mitigation: Upgrade immediately to 15.5.16 or 16.2.5.   Modat Magnify Query:  technology="Next.js"  The platform:  magnify.modat.io  #threatintel #vulnerability #CVE202644578 #Nextjs #SSRF #WebSocket #CloudSecurity #infosec #Critical #ModatMagnify

@CosmoSoake81435 that's where they should redirect football funding

Utes curing cancer and deadly virus infections. #Big12

@elder_plinius people get even dumber

what’s your biggest fear with AI?

@zeddotdev now show vscode

Big diff go brrrrr

@zeddotdev clap out loud

@modat_magnify Keep Calm and Phoenix on

@morganlinton @modat_magnify it's just a dumpster fire to start with

@modat_magnify Phew, feels like Next.js is becoming the primary target for hackers 🫠

@YIMBYLAND include tasers

I’m going to build this but for antagonizing people who don’t pick up their dog’s shit.

@anitakirkovska @nextjs @sanity_io from one slave master to the next

We officially churned off of Webflow and saved $30k/year Now, our whole website runs on @Nextjs + @sanity_io Our marketing team ships updates in minutes It wasn't an easy journey, here's what we did & the path ahead 👇🏻

how're hex packages doing?

@thinkymachines OpenCV Yolo + LLM ¯\_(ツ)_/¯

Lili and Martin get some help controlling themselves.

The model works in more real situations too, like when Mianna is trying to say words she's only read before.

@natolisnuggets so net then?

@BryanJBryce they're def not gross

My wife will make $5k this month from cinnamon rolls CINNAMON ROLLS!!! $5k!!! And she’s just getting started.

@wesbos Come to Elixir/Phoenix/Live View land

i’m tried dog

@NHueMtal @JoeWilliams010 @sama úsalo directamente entonces

@BryanJBryce @JoeWilliams010 @sama Los que venden el uso de 4o por medio de la API

OpenAI is launching Daybreak, our effort to accelerate cyber defense and continuously secure software. AI is already good and about to get super good at cybersecurity; we'd like to start working with as many companies as possible now to help them continuously secure themselves.

@NHueMtal @JoeWilliams010 @sama que sitios? developers.openai.com/api/docs/model…

@BryanJBryce @JoeWilliams010 @sama Pero no con las actualizaciones recientes y no se sabe la seguridad de esos sitios tampoco

@aarondfrancis @prashant_hq your web design is similar: zed.dev

@BryanJBryce @prashant_hq wouldn't know, never used it 😎

Subscribed to my third Codex Max plan last night after I maxed out the first two ama

@hridoyreh Wait, don't you sell SEO services?

I fired my SEO team last year. And used Claude to automate SEO. Here is the result: