MattIPv4

Related: https://news.ycombinator.com/item?id=50177413

Seen multiple folks in the Railway Discord confirming that their secrets stored in Railway have been used by third parties, so it definitely sounds like the attackers were able to read decrypted environment variables.

Very sad to see that DigitalOcean is ending its Open Source Credits Program, and I'm sure there are many other large OSS projects beyond Node.js that will be impacted by this.

Looks like MLH + DEV have taken over Hacktoberfest, and are trying something new this year: pushing AI development skills and local gatherings, rather than counting how many PRs folks open.

Just ran into a bunch of my E2Es failing on innocuous POST requests. Really interested to know how Cloudflare managed to outright break POST requests going through them.

I can unfortunately report that these dots have not helped me in cars or trains; anything more than a few seconds looking at a screen during a journey will ensure I feel awful until I have an opportunity to sit or lie still for quite a while after. To be fair, even facing backwards on a train usually makes me sick rather rapidly.

Related: https://news.ycombinator.com/item?id=47824426

https://x.com/theo/status/2045862972342313374

> I have reason to believe this is credible.

https://x.com/theo/status/2045870216555499636

> Env vars marked as sensitive are safe. Ones NOT marked as sensitive should be rolled out of precaution

https://x.com/theo/status/2045871215705747965

> Everything I know about this hack suggests it could happen to any host

https://x.com/DiffeKey/status/2045813085408051670

> Vercel has reportedly been breached by ShinyHunters.

Hitting 500s when trying to push branches and create PRs.

Related: A better streams API is possible for JavaScript: https://news.ycombinator.com/item?id=47180569

Are y'all aware your agent's name clashes with an established and rather popular streaming bot/tool, https://fossabot.com ?

Again... Unicorns when trying to view files or PRs, errors trying to leave comments or review things if they do load.

Looks like they've got a status page up now for PRs, separate from the earlier notifications one: https://www.githubstatus.com/incidents/smf24rvl67v9

Edit: Now acknowledging issues across GitHub as a whole, not just PRs.

Status page currently says the only issue is notification delays, but I have been getting a lot of Unicorn pages while trying to access PRs.

Edit: Looks like they've got a status page up now for PRs, separate from the earlier notifications one: https://www.githubstatus.com/incidents/smf24rvl67v9

Edit: Now acknowledging issues across GitHub as a whole, not just PRs.

https://github.com/google-gemini/gemini-cli/issues/16723 is even worse, GitHub shows `5195 remaining items` in the collapsed timeline.

Leaked data includes:

  - Name, Discord username, email + other contact details.
  - Limited payment information, including type + last four of cards.
  - IP addresses.
  - Messages and attachments sent via the customer service system.
  - Notably, any government ID provided to Discord.

No, the content felt incredibly outdated and I can’t say I gained any technical knowledge from it. The only skill it really taught me was how to write effective filler content to boost the word count on something.