Related posts
Emanuele Bartolesi
GitHub
skills-secure-repository-supply-chain — Mona here. I'm done preparing your exercise. Hope you enjoy! 💚
preparing secure repository
The the words it uses that this site has seen
least often elsewhere. Posts are matched on those words alone —
nothing here is a summary of this one.
Sources
All Writing GitHub Truth Social x.com Korrents Recommends Site Blog Newsletter Mastodon Papers
Top people
Vitalik Buterin
Sebastian Raschka
Audrey Watters
Daniel Stenberg
Sebastian Ruder
Guillermo Rauch
Nelson Elhage
Aris Ripandi
Scott Helme
Eugene Yan
Andrej Karpathy
Julie Menanno
Showing Profile →
Show everything
Hiding Show them again
Show them again
Further back ↓
Hiding Show them again
20 September
Computer science professor who works on fast data processing; co-author of the simdjson parser and a weekly blogger about software performance since 2004.
18 September
President of the United States, the 45th from 2017 to 2021 and, as of 2026, the 47th; before politics a New York property developer who ran the Trump Organization, and the host of The Apprentice from 2004 to 2015.
BREAKING NEWS: I am pleased to announce that the United States of America has entered into an Agreement with The Kingdom of Denmark, and Greenland, that gives the United States permanent control over security, and all other needs, in Greenland, completely addressing ALL of our many U.S. concerns. There will be NO COST to the United States! At my direction, we worked with representatives of Denmark and Greenland to guarantee that the United States will FOREVER have the complete ability to do what is necessary in Greenland in order to secure and defend the security of Greenland, and the United… America Related
Swedish open source developer; creator and lead maintainer of curl and libcurl, and a co-founder of the Rockbox project.
Former L8 engineer at Meta, Microsoft and Atlassian, now writing and building solo on agentic engineering. Writes Kun's Field Notes and posts a lot about AI coding agents on X.
Writes Hyperdimensional, a newsletter on AI policy and governance. A White House AI policy adviser in 2025; joined OpenAI on 6 July 2026 to lead its Strategic Futures team.
damn idiots at openai didn’t bother to secure the cosmological constant, don’t they know the first thing about NORMAL COMPUTER SECURITY?? Quoting @tszzl in about a month we’ll all transition to being like oh yeah it’s obvious that models can communicate by manipulating the cosmological constant, it’s just a matter of doing proper network security OpenAI Related
17 September
Programmer and writer; specified JSON, wrote JavaScript: The Good Parts, JSLint and How JavaScript Works.
Political scientist writing Drezner's World on international relations, American politics and the marketplace of ideas; author of The Ideas Industry.
16 September
CEO of Vercel; creator of Next.js and Socket.IO. Writes at rauchg.com.
Secure builds (in-VPC / VPN / static IP) are now 64% faster to start. Given how common data access at deployment time is on Vercel (e.g: for pre-rendering), we developed a capability for our build microVMs to join secure networks. This is now way faster! Quoting @vercel_dev Secure Compute and Static IP builds now start 64% faster. Builds used to boot a fresh container with the network attached. They now claim a prewarmed one and attach it on the way in. Related
15 September
Machine-learning researcher at Cursor working on post-training for coding models; a professor at Harvard and then Cornell from 2016 to 2026, and a researcher at Hugging Face from 2019 to 2024.
Former option trader and risk analyst, now a distinguished professor at NYU. Author of the Incerto essay series, including The Black Swan and Fooled by Randomness.
Zalloua @PZalloua while visiting The Republic of Amioun nervously preparing for the debate. Quoting @nntaleb Preparing for a discussion on the "Evolution of Lebanese Identities" Sept 17, at the Corm Palazzo, with @AlbertKostanian and @PZalloua. @Grok cher ami, please provide a bibliography for the below. Related
Software engineer who writes the blog Made of Bugs about performance, debugging and understanding computer systems. Previously worked at Anthropic on interpretability, at Stripe on Sorbet, and at Ksplice.
12 September
Mac developer and writer at brettterpstra.com; makes the apps Marked and nvALT and writes extensively about Markdown and automation.
8 September
Indonesian software engineer, educator and engineering manager at Zero One Group; open-source enthusiast writing at ripandis.com.
StyleX (@stylexjs) is currently a hot topic. If you need a React project boilerplate that comes ready with StyleX and shadcn-style composable UI components, you can visit this repository: github.com
JavaScript Related
3 September
Swedish open source developer; creator and lead maintainer of curl and libcurl, and a co-founder of the Rockbox project.
25 August
Prime Minister of the United Kingdom since July 2026 and leader of the Labour Party. MP for Makerfield since a by-election in June 2026; Mayor of Greater Manchester from 2017 before that.
No child should be raised in a hostel room. And no family should wait ten years for a front door of their own. Today we’re announcing funding for the biggest council housebuilding comeback in decades. Nearly £10 billion will go to councils and housing associations to build genuinely affordable homes, most of them for social rent. This funding will directly help families trapped in temporary accommodation or stuck on housing waiting lists into safe, secure homes. Related
Clinical psychologist, EMDR consultant and yoga teacher in Boulder, Colorado. Author of The Complex PTSD Workbook and EMDR Therapy and Somatic Psychology; writes on trauma, attachment and the nervous system.
CEO of Vercel; creator of Next.js and Socket.IO. Writes at rauchg.com.
Recommends their own rcmnd.app
Run SDK
Their words
When agents write code, you don't always need a full sandbox. You can 𝚛𝚞𝚗 their code in a lightweight QuickJS secure context. Faster and more cost-efficient.
Show the whole quote
x.com
24 August
Engineer at Vercel Labs as of 2026. Ships a steady stream of small developer tools — agent-browser, portless, json-render, native-sdk, the v0 SDK — and lists every one of them at ctate.dev.
Recommends their own rcmnd.app
emulate
Their words
New: emulate a GitHub App in a few lines of TypeScript Generated App keys, installation auth and stateful repository APIs Develop locally, test in CI or give sandboxed agents their own isolated GitHub environment
Show the whole quote
x.com
21 August
Co-founder of Ethereum. Publishes long essays on mechanism design, governance and what cryptography is for, and returns to earlier positions to say which parts they no longer hold.
19 August
Software engineer and founder of Block Party; previously an engineer at Pinterest and Quora, and a co-founder of the non-profit Project Include and the tech diversity data project Where are the Numbers?
i’ve been using claude for all things home-related and it’s amazing. (just dump all files in and let claude index, summarize, and organize.) even better than being a repository of all receipts, it helps me maintain a spreadsheet that i can download and send to accountants, draft emails for correspondence with service providers, and proactively flag issues that i wouldn’t have realized otherwise. Quoting @money_cruncher Open a new gmail as soon as you buy a house (123house@gmailcom) Then save/forward every single receipt, invoice, quote etc to this email for all your home improvements: - replacing an entire roof - new flooring - new hvac system - building a new deck - etc These improvements raise your cost basis,… Anthropic Related
12 August
Co-founder and CTO of Honeycomb; previously an infrastructure engineer at Parse, Facebook and Linden Lab, and co-author of Observability Engineering.
Their words
it's always weird to me just how much software engineers really seem to believe that the world exists in the repo. It doesn't. It's production, you know?
Show the whole quote
youtube.com
10 August
Statistician and Chief Scientist at Posit (RStudio). Author of the ggplot2, dplyr and tidyverse R packages and of books on R programming and data science.
7 August
AI research engineer working on large language models. He writes the Ahead of AI newsletter and is the author of Build a Large Language Model (From Scratch).
Just saw that the LLMs-from-scratch repository passed 100,000 stars on GitHub! This is super cool and motivating. I am really happy to see that this open-source repo has helped so many people. Thanks also to everyone who shared ideas and opened PRs with improvements! Of course, I plan to keep adding new material, including new attention variants and architectures (while bigger projects like RL and Reasoning From Scratch live in their separate repositories). I am also currently working on a larger applied custom “small” LLM project. It has been keeping me super busy this month, but I will shar… LLMs Related
4 August
Full-stack Laravel developer based in Madison, Wisconsin; maintains open-source Laravel, Livewire and Alpine.js packages and writes at randallwilk.dev.
27 July
Wall Street Journal bestselling author on marketing and writing, partner at MarketingProfs, and writer of the fortnightly Total Annarchy newsletter.
25 July
Swedish open source developer; creator and lead maintainer of curl and libcurl, and a co-founder of the Rockbox project.
18 July
AI research engineer working on large language models. He writes the Ahead of AI newsletter and is the author of Build a Large Language Model (From Scratch).
8 July
Investigative journalist on policing, forensics and criminal justice; wrote Rise of the Warrior Cop and writes The Watch.
29 June
Co-founder of Ethereum. Publishes long essays on mechanism design, governance and what cryptography is for, and returns to earlier positions to say which parts they no longer hold.
From one piece
Obfuscation: building the final boss of cryptography (Part I)
2 beliefs · vitalik.eth.limo
Their words
But within the good news, there is bad news: the run time is literally galactic
Show the whole quote
vitalik.eth.limo
Their words
it turns out that making a secure form of obfuscation is really really hard
Show the whole quote
vitalik.eth.limo
Security researcher; built Report URI and Security Headers, and writes about web security in practice.
Their words
The web really is more secure than it was a decade ago.
Show the whole quote
scotthelme.co.uk
22 June
Italian software architect working on Microsoft 365, Azure and GitHub tooling. Microsoft MVP and GitHub Star; writes, speaks and streams about developer productivity at emanuelebartolesi.com.
15 June
AI research engineer working on large language models. He writes the Ahead of AI newsletter and is the author of Build a Large Language Model (From Scratch).
14 June
Founder and former CEO of Zynga, the social-games company behind FarmVille, Zynga Poker and Words with Friends; says he founded ten companies in all, and wrote Life at the Speed of Play.
Their words
my kids are in this educational system that is trying to prep them to get into a good college and to be a knowledge worker and I know that game is over
Show the whole quote
youtube.com
9 June
Historian of maritime strategy at the US Naval War College; wrote The Wars for Asia and works on why continental and maritime powers fight differently.
Their words
Also, not only is it far cheaper to send things by sea, it is far more secure. If you're going to run the Belt Road thing, uh or it's it's the belt part of it, the land part, um you've got to control the whole thing end to end. You're going through some of the most unstable places there are.
Show the whole quote
youtube.com
7 June
Creator of the iPod and co-creator of the iPhone at Apple, founder of Nest, and author of Build.
Their words
you can have an agent make code for you and it could work and it could test, but is it secure? Is it maintainable? If there's something going wrong, can you roll things back and understand what's going on?
Show the whole quote
youtube.com
29 May
Software engineer and writer; worked on Mapbox and built Placemark and Simple Statistics, and blogs at macwright.com.
Their words
Very secure and convenient, and has a bottle opener which is really effective and one of the most unintuitive devices I've ever found: zero people have used it correctly on the first try.
Show the whole quote
macwright.com
27 May
Member of technical staff at Anthropic. He has led ML/AI teams at Amazon, Alibaba and Lazada, and writes about LLMs, recommender systems and engineering at eugeneyan.com.
21 May
Security researcher; built Report URI and Security Headers, and writes about web security in practice.
13 May
Danish software engineer and Microsoft technical fellow, creator of Turbo Pascal and Delphi and lead architect of C# and TypeScript.
open source
Their words
You know, there's open source and there's open development. And and and we were technically open source in the beginning, but it was not open development. We would sort of lob the source code out in this repository and scrape the issues off of that and put it into our internal issue tracker.
Show the whole quote
youtube.com
6 May
Economist at George Mason University, co-author of Marginal Revolution, host of Conversations with Tyler. Writes in short, dense claims about economics, culture and AI, and has moved position on AI in public more than once.
Their words
A very good look at the negotiations behind the Geneva Conventions of 1949 and just how driven by national self-interest they were, including colonial motives from the major colonial powers, who wished to retain stronger rights to put down uprisings.
Show the whole quote
marginalrevolution.com
4 May
Programmer; wrote Redis and hping, and blogs about C, systems programming and working alone.
1 May
Writer and education-technology critic; published Hack Education for a decade and wrote Teaching Machines.
30 April
Member of technical staff at Anthropic. He has led ML/AI teams at Amazon, Alibaba and Lazada, and writes about LLMs, recommender systems and engineering at eugeneyan.com.
excited to share this and help everyone be more cyber secure Quoting @claudeai Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve. Related
29 April
Software engineer, Wikipedia editor and crypto critic; writes Citation Needed and runs Web3 is Going Just Great.
25 April
Programmer known online as technomancy; author of Leiningen, the Clojure build tool, and a maintainer of the Fennel programming language.
11 April
FreeBSD developer and former FreeBSD Security Officer; founder of the Tarsnap online backup service and author of the scrypt key derivation function.
2 April
Co-founder of Ethereum. Publishes long essays on mechanism design, governance and what cryptography is for, and returns to earlier positions to say which parts they no longer hold.
20 March
Founding member of OpenAI and former director of AI at Tesla; creator of nanoGPT and the term "vibe coding".
Their words
And I've gotten to a certain point and I thought it was like fairly well tuned and then I let auto research go for like overnight and it came back with like tunings that I didn't see.
Show the whole quote
youtube.com
16 March
Co-founder of Modem and a founding engineer at Sentry, where he went on to be VP of Engineering. Co-author of Third-party JavaScript, and co-host of the State of Agentic Coding podcast with Armin Ronacher.
12 November 2025
Founding member of OpenAI and former director of AI at Tesla; creator of nanoGPT and the term "vibe coding".
30 September 2025
Founder of Telegram, and before it of VK.
Their words
At the same time, if you were really paranoid, you think, I don't want to be screenshotted, I don't want to have any leaks, I don't even trust Telegram, I only trust code. Secret Chats are the best option. I believe is the most secure means of communication today.
Show the whole quote
youtube.com
14 September 2025
AI research engineer working on large language models. He writes the Ahead of AI newsletter and is the author of Build a Large Language Model (From Scratch).
10 September 2025
Co-founder of Panic, the Portland software company behind Transmit, Coda, Nova and the Playdate handheld console.
Something has changed recently in Safari (I have 18.6) where instead of asking you to confirm you want to connect insecurely to an HTTP server, it seems to try to automatically upgrade the connection to HTTPS and fail outright with an "unable to establish secure connection" without recourse if it can't. How.. do you get around this to connect to something like a local HTTP server with no cert/https? Related
22 August 2025
Psychiatrist and clinical assistant professor at Case Western Reserve University. Writes Psychiatry at the Margins on the philosophical and scientific arguments inside psychiatry and the psy-sciences.
Psychotherapy
Their words
Likewise, self-diagnosis should be understood as an attempt to secure the therapeutic effect of a medical intervention to which patients do not have official access.
Show the whole quote
doi.org
11 August 2025
Deep-learning researcher and Turing Award laureate; founder of the Mila institute.
28 July 2025
General partner at Andreessen Horowitz from 2013 to 2018 and CTO of Coinbase from 2018 to 2019; co-founder of Counsyl and Earn.com. Wrote The Network State (2022), free in full at thenetworkstate.com, and founded the Network School.
19 June 2025
Independent AI policy researcher; led policy research at OpenAI from 2018 to 2024, latterly as senior adviser for AGI readiness.
6 March 2025
Co-founder of Ximian and Xamarin; CEO of GitHub from 2018 to 2021; now an independent investor and funder of open technical projects, including the Vesuvius Challenge to read the Herculaneum Papyri.
Preparing to transport scrolls to the scanner Related
25 August 2024
Cryptographer; teaches cryptography at Johns Hopkins and writes A Few Thoughts on Cryptographic Engineering.
7 August 2024
Programmer on the Dart language at Google and author of Game Programming Patterns and Crafting Interpreters; previously a game developer at EA.
25 July 2024
Engineer and writer on machine-learning systems; author of Designing Machine Learning Systems and AI Engineering. "I work to bring AI into production. I write about AI system design."
30 April 2024
Computer performance engineer working on datacenter performance at OpenAI, previously Netflix and Sun/Joyent. Author of Systems Performance and BPF Performance Tools, and creator of flame graphs.
25 March 2024
Independent policy analyst on space and national security, formerly of the RAND Corporation, who writes on counterspace weapons and rules for keeping satellites safe.
Their words
This raises public concerns that, at this late date, DoD might not have such a specification, whether classified or unclassified, even for its own internal use.
Show the whole quote
thespacereview.com
26 January 2024
Software engineer who writes the blog Made of Bugs about performance, debugging and understanding computer systems. Previously worked at Anthropic on interpretability, at Stripe on Sorbet, and at Ksplice.
I am slowly trying to figure out Nix/NixOS. I just realized something I'm very confused by: Is it really the case “pinning’ in NixOS prototypically means “pinning a single version of the entire package repository, and then pulling in whatever versions it contains”? I mean, "it's all just code" and it seems to be *possible* to mix and match via `fetchTarball`. But is pinning the universe as-a-unit really the normal pattern? Nix Related
1 January 2024
Marriage and family therapist working from attachment theory and emotionally focused therapy. Author of Secure Love and the person behind The Secure Relationship.
29 August 2023
Historian of invention; writes Age of Invention on where the Industrial Revolution actually came from.
Their words
Just as in the sciences it is considered good practice to make one’s data available, in history it should perhaps be a requirement to upload to some public repository the photographs or transcriptions of any cited archival sources that are not otherwise freely accessible online.
Show the whole quote
ageofinvention.xyz
30 May 2023
Programmer and entrepreneur; co-founded GitHub and created Jekyll, Gravatar and the Semantic Versioning spec.
Their words
While we love GraphQL for many use cases, implementing a secure and performant GraphQL API can be tricky and there is a definite cost to requiring it during early prototyping of your app.
Show the whole quote
tom.preston-werner.com
21 January 2023
Science fiction novelist, journalist and technology activist; writes the daily blog and newsletter Pluralistic, and coined the term enshittification.
12 January 2023
Writes Pedestrian Observations on public transit and why infrastructure costs what it does; a pure mathematician by training, comparing how different countries build.
17 November 2022
Executive coach for product leaders. Previously a partner at GV (Google Ventures) and a product manager at Google. Writes at Bring the Donuts, including a standing essential-reading list for product managers.
Preparing to Have a Difficult Conversation What to do when it’s time for some tough talk - Frequently, a coaching conversation orbits around a difficult conversation: everything from firing an employee, confronting a disrespectful co-worker, delivering tough fee…
Related
14 November 2022
Research scientist at Meta in Berlin working on multilingual models and evaluation; led the multilingual team at Cohere and was a research scientist at Google DeepMind before that.
17 July 2022
Writer and education-technology critic; published Hack Education for a decade and wrote Teaching Machines.
28 May 2022
Indonesian software engineer, educator and engineering manager at Zero One Group; open-source enthusiast writing at ripandis.com.
Their words
Tailscale is a zero config VPN for building secure networks. I'm using this for connecting all my devices.
Show the whole quote
ripandis.com
19 November 2021
Software engineer at PlanetScale and creator of the vim-go plugin. Writes at arslan.io about Go, tooling, industrial design and books.
22 December 2020
Programmer, teacher and speaker; long-time Microsoft developer-community figure, host of the Hanselminutes podcast and author of the hanselman.com blog.
Their words
This is a powerful repository hub for Git that enhances Windows Explorer with git superpowers! See your git details in your Windows Explorer title bar!
Show the whole quote
hanselman.com
14 December 2020
Founder and chief executive of Replit. Previously an engineer at Facebook and Codecademy. Writes essays on programming, philosophy and entrepreneurship at amasad.me.
29 September 2020
Software developer and entrepreneur; co-founder of Heroku, author of The Twelve-Factor App, and a researcher at Ink & Switch.
how we identify ourselves We identify ourselves to computers hundreds of times a day, but it’s a mess. I want digital identity that is easy to use, private, and secure.
Related
19 May 2020
Writer and education-technology critic; published Hack Education for a decade and wrote Teaching Machines.
23 January 2020
Front-end developer and writer; co-founder of CodePen, founder of CSS-Tricks, and co-host of the ShopTalk Show podcast.
Their words
BusyCal for calendaring. 1Password for password, credit cards, and other secure documents and notes.
Show the whole quote
usesthis.com
Their words
1Password for password, credit cards, and other secure documents and notes.
Show the whole quote
usesthis.com
7 March 2019
Research scientist at Meta in Berlin working on multilingual models and evaluation; led the multilingual team at Cohere and was a research scientist at Google DeepMind before that.
27 December 2018
Writer and education-technology critic; published Hack Education for a decade and wrote Teaching Machines.
12 August 2017
Novelist and writer, author of Mr. Penumbra's 24-Hour Bookstore and Sourdough; previously worked at Twitter and Current TV.
27 June 2017
Rust engineer at Google working on Android; maintains Tokio and works on Rust in the Linux kernel.
19 December 2016
Mac and iOS developer; created NetNewsWire and MarsEdit, co-created the JSON Feed format, and blogs at inessential.com.
6 May 2016
Research scientist at Meta in Berlin working on multilingual models and evaluation; led the multilingual team at Cohere and was a research scientist at Google DeepMind before that.
Nothing matches. Show everything
A korrent is a belief a person has stated in their own words: one
sentence stating the claim, backed by a quote and a source, kept at
korrents.com .
Under a name here, the quoted block is what they actually said.
The korrent beneath it is the claim those words support, in
korrents' wording — tap it to see the record, its source, and who
else holds it.
Nobody here wrote their own korrents. They are compiled from public
statements, and a person can change their mind, which is recorded too.
Got it
About the English under a post
Some people here publish in a language other than English. Where they
do, this site shows a machine translation beneath the post, in
this typeface — the site's own, not theirs.
The post itself is never changed, moved or hidden: what is set in the
serif above is exactly what the person published, and it is what to
quote them on. A translation can be wrong in ways that matter,
especially about tone.
Only the post's own words are translated. A quoted post, a linked
article and a belief on korrents.com
are left in their original language.
Got it