Jamil Bou Kheir

@yordisprieto There's definitely some kind if vibe happening here. Castro St hasn't seen this level of hustle and bustle since maybe... 2011

Sometimes, I do miss San Fransisco and Mountain View; but thinking about having kids, ask somebody else to trust and follow me, or maybe the tech scene not being the same, and taxes ... gives me anxiety. Am I missing anything? 🤷‍♂️ Is it worth it? 🤷‍♂️ 😭 Could somebody invite me to hack for a week? I pay my own stuff, just want to hack, and feel personally connected a bit!

Audit logs shipping very soon in @firezonehq. Stay tuned.

Every engineer I know (incl myself) is annoyed that subsidized Fable 5 access is coming to an end. We've been gorging on wagyu beef burgers for free over the last few days and now complaining we'll soon have to pay for the deliciousness. Sign of a great product.

Big throughput uplift coming in the next Firezone Gateway release and all clients. Turns out you can readily surpass kernel WireGuard throughput on Linux in userspace with batching and offloading. This works on other platforms too to varying degrees. Will write up our findings soon!

sendmsg_x silently falls back to single-packet mode instead of batching when you use unconnected sockets too. The fix is just to use a connected socket to talk to each WireGuard peer. kqueue then wakes us reliably when the socket is ready too.

Found the source of our mysterious packet loss issue on macOS and iOS: Apple's BSD sockets API fails to surface ENOBUFS for *unconnected sockets* - sockets which have no specific destination. The datagrams (or batches in our case) are just silently dropped. No backpressure.

🚨 Ongoing supply chain attack on Composer packages! We just found multiple laravel-lang/* packages compromised on Packagist (lang, http-statuses, attributes). Payload runs at autoload time. At least 50 package versions were compromised. If you installed a compromised version, the malware already executed. Pin to a clean COMMIT (not version) and rotate secrets immediately. If your lockfile already had an older commit from before today, you are safe. But you should not update at the moment.

I don't know who needs to hear this, but: Replacing an explicit button or form in your app that works 100% of the time with an AI chat bot that works 50% of the time is a UX disaster.

@Jonathan_Blow Or the open source version: how dare you give it to me for free and not support my niche use cases

"How DARE someone work hard to make something, and not then give it to ME for FREE!"

@PalmerLuckey The problem is we aren't the customers, the advertisers are. It funds them.

It is time for the United States Postal Service to ban junk mail. Unsolicited spam calls are already prohibited by the FCC. Emails are heavily regulated by the CAN-SPAM Act of 2003. Junk mail is the majority of mail, 100 million trees per year. Enough!

Claude for mermaid diagrams... game changer when writing PR descriptions

Attempting to generate a reliable repro for a bug in some of our open source code (not sec-related). It's failing with: "API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy" @claudeai is this a known issue?

@amasad Disturbing if this is valid

On its 50th birthday Apple is doing its best to become the most hated company in the world.

@tqbf Tis our stack - no major regrets thus far!

I don't love Elixir and I actively dislike Rust (I respect it, but I do not like writing it) but if you've got Claude doing the boring work for you, Elixir+Rust is a pretty nice combination; there's an almost first-class bridge (rustler).

I have to say Claude + Codex have greatly increased the amount of code I can write, but this is how writing that code now feels sometimes: