Sabitlenmiş Tweet
Brian Clark
6.5K posts
Brian Clark
@_clarkio
Developer Advocate @Snyksec | Prev @Microsoft @Disney | Web dev and app sec things. Here for community, fun and learning. Not for numbers or influencing you.
More here 👉 Katılım Ocak 2014
1.1K Takip Edilen6.1K Takipçiler
@wesbos Love Raycast and definitely interested in this but I wonder do I have to keep subscribing to access my apps I built? Or is it just credits needed to build and then own for life?
English
In 2010 you could install a Firefox extension called firesheep, visit a coffee shop and dozens of accounts would just pop up and you could log in as them. (Allegedly)
It’s nuts that we used to not use https
Jarred Sumner@jarredsumner
In 2013, when government tried mass domestic surveillance, the tech industry responded with HTTPS everywhere. In 2026:
English
Brian Clark retweetledi
@dazzknowles I agree I think it should still matter. Are you saying it’s because you think AI will not be around to maintain software? I feel like AI isn’t going anywhere so I’m not sure I understand the “why” you’re sharing.
English
@_clarkio Absolutely, you can’t rely on AI always being around or up to the job. At some point these companies are going to have to start making money by charging a lot more, or go bust.
English
Honest question, do software best practices matter with agentic AI?
I feel like they should but seeing some talk about it no longer being necessary since the project will be maintained by AI anyway.
English
This brought to you by my frustration that Opus 4.6 isn't always writing tests and making sure they pass before finishing a task. Even with explicit instructions too...
English
When will AI stop me from accidentally adding an extra / to a redirect uri?
English
Brian Clark retweetledi
Script Commands
Now on Windows 🚀
A quick and easy way to extend the functionality of Raycast. We first released it for the Mac version in 2020 and it's still going strong!
Full changelog 👉 raycast.com/changelog/wind…
English
prediction: package managed skills will lead to one of the most catastrophic supply chain attacks in crypto history
simeonGriggs@simeonGriggs
Can anyone explain why we're not installing skills from npm so we actually get versioning and updates? Downloading plain text files to your project exactly once feels insane.
English
Brian Clark retweetledi
#ToxicFlows So I personally run OpenClaw (well clawdbot still in the cli) but I also wear a security researcher hat at Snyk and we cooked some good study for you:
snyk.io/blog/toxicskil…
English
Brian Clark retweetledi
Brian Clark retweetledi
Do know about the Web Almanac by the @HTTPArchive ? 🕸️👇
1/ It's the HTTP Archive's annual state of the web report. And guess what, it has a Security chapter, continue reading
>>
English
@Naaackers I've not built an iOS app with it personally but have for other tech. Biggest thing is to discuss a plan with it first.
Also this has some helpful gems: x.com/bcherny/status…
Boris Cherny@bcherny
I'm Boris and I created Claude Code. Lots of people have asked how I use Claude Code, so I wanted to show off my setup a bit. My setup might be surprisingly vanilla! Claude Code works great out of the box, so I personally don't customize it much. There is no one correct way to use Claude Code: we intentionally build it in a way that you can use it, customize it, and hack it however you like. Each person on the Claude Code team uses it very differently. So, here goes.
English
I'm not even into CSS but this sounds awesome!
Syntax@syntaxfm
2026 Out: March Madness In: March MadCSS madcss.com
English
Brian Clark retweetledi
Brian Clark retweetledi
The 2025 Web Almanac by HTTP Archive has been officially released! 🚀
We would like to thank all of our contributors from around the globe who made this extensive report possible!
Check out the full report here: almanac.httparchive.org
#thewebalmanac
English
Brian Clark retweetledi
GPT 5.2 vs Security Vulnerabilities, how does that work?
@_clarkio shows the story of a typical Node.js application "production-ready and secure", see the results 👇 youtube.com/watch?v=o7UwCY…
YouTube
English
@snyksec @_JohnHammond I swear it’s not me behind the Snyk account right now 😅
English
Luke shared the URL from the original phishing email with me, so I'd like to showcase it a bit.
Planning to record a video to walk through it, but don't have a chance to record for the next few hours... so will roll with a Twitter/X thread for now 🧵
Linus LinusMediaGroup@linusgsebastian
**BEWARE** The main LTT Twitter account has been hijacked. 4 minutes after I received this email I tried to log in, but the password had already been changed. By the time I could update the password, the 2FA had been deactivated/reactivated. I have contacted Twitter support.
English