Tessera
Folgen

Brandon Kelly

@brandonkelly.io

Head honcho at @craftcms.com 📍 Bend, Oregon 🔗 https://brandonkelly.io

253 Posts576 Follower157 Folgt
Brandon Kelly@brandonkelly.io · 5d ago

If computers are like a "bicycle for the mind", AI is like a "supercar for the mind". - can get you further, faster - less personal energy spend - much greater overall energy spend - makes you lazier - encourages suicidal behavior

Brandon Kelly@brandonkelly.io · 2w ago

ALSO e-bike test rides are happening #inBend September 18-20! events.ridealso.com/bendridelab

Bend

Join ALSO for an immersive, hands-on electric bike experience across California. Ride Lab is our official launch series where you can explore our newest e-bike lineup, test ride multiple models, and connect directly with ALSO Ride Experts.Whether you're commuting to work, cruising the coast, or exploring your city — there’s an ALSO built for your lifestyle.This is more than a demo. It’s your first ride into electric freedom.

events.ridealso.com

Brandon Kelly@brandonkelly.io · 2w ago

Catching up with the news after being mostly offline for two days and omg, "Lake America"—brilliant! That'll teach Canada not to boycott US goods and impose retaliatory tariffs for sure. Bravo, Mr. Trump 👏

Brandon Kelly@brandonkelly.io · last mo.

¡AI, caramba!

¡AI, caramba!

I generally despise AI. Even ignoring the ethical and existential concerns, if I could trade every second I’ve had to spend reading/conversing about AI for time spent actually working , I’d probably be more productive. And happier. But I was recently forced to partake, as we had a security vulnerability report (AI-discovered, I’m quite sure) that was way over my head, and I needed to tap into the Pluribus for some help. The end result was craftcms/url-validator , a new package that helps protect against SSRF vulnerabilities for applications that support uploading files via user-provided URLs. Just the sort of thing I always pictured myself worrying about when I grew up. That experience opened my eyes to the potential, a bit, I guess. I love to code, but if I’m being honest, there are definitely aspects of it that I don’t love. Such as: Resolving merge conflicts Line-by-line code reviews with all potential breaking change/security side effects in mind Debugging complex bugs, especially when third party plugin/project-specific code is involved, which I have zero incentive to commit to memory Debugging npm issues Writing tests I’ve started leaning on it more for those sorts of things. And I have to admit, it’s pretty nice to not spent so many brain cycles on shit work. So I guess I’m kind of coming around. Slowly. Contentiously. I’m still mad about every app that tries to cram it down my throat at every opportunity. And fuck everyone using it for content creation. That’s a human’s job.

brandonkelly.io

Brandon Kelly@brandonkelly.io · 3mo ago

New package! github.com/craftcms/url-v… If you have a #php app that can download files via user-provided (untrusted) URLs, you’re going to want this. It’s the most robust defense against SSRF vulnerabilities out there.

GitHub - craftcms/url-validator: Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks.

Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks. - craftcms/url-validator

github.com