Future Corpse • People Watcher • Gym Lover • Full-Stack Developer • Co-Organizer @phpvancouver https://xitter.cf/t.co/jvkzdgCBNE
Vancouver, British Columbia
Joined June 2011
- Tweets3.8K
- Following1.1K
- Followers671
- Likes735
James Doyle retweeted
@james2doyle's Final Fantasy Tactics Advance recomp comes bundled with emibios!
emibios isn't just for emulators. It can remove a proprietary dependency (Nintendo's BIOS) in GBA recomp projects. I've also tested it personally with a Pokémon Emerald recomp and gbarecomp. Check it out. github.com/james2doyle/ffta-…
James Doyle retweeted
Everything is a stream.
In Unix, "everything is a file" was always really "everything is a stream": stdin, stdout, and the pipe.
Today we're launching Ante v0.2.0: our first numbered SemVer release, stabilizing the wire protocol that decouples the agent engine from the interface. 🧵👇
The @Cloudflare Workers AI vs. AI Gateway thing is so confusing. The credits in AI Gateway can’t be used for the models in the Workers Plan? The "gateway" endpoint is deprecated in the docs but suggested on the main page in the dash!
I didn’t like the @OpenRouter review bots on Github actions, so I started creating my own with @antigma_labs ante CLI tool! github.com/james2doyle/ante-…
There are a few things that make ante great for CI:
- Single binary, fast and simple
- Ranks #1 on many evals
- Sub-agents for parallel tasks
- Many providers and models
James Doyle retweeted
MCP support added!
will check the models.dev support soon~
xitter.cf/NoCommas/status/205213…
James Doyle retweeted
i went to clickup.com. opened the page source. found a hardcoded API key in the javascript. copied it. sent one GET request.
got back 959 email addresses and 3,165 internal feature flags.
employees from Home Depot. Fortinet. Autodesk. Tenable. Rakuten. Mayo Clinic. Permira. Akin Gump. government workers from Wyoming, Arkansas, North Carolina, Montana, Queensland Australia, and New Zealand. a Microsoft contractor. 71 clickup employees.
fortinet sells enterprise firewalls. tenable makes Nessus, the vulnerability scanner half the industry runs. their employees emails are exposed because clickup hardcoded a third party API key in a javascript file that loads before you even log in.
this was first reported to clickup through hackerone on January 17, 2025. its now April 2026. the key has not been rotated. i just pulled the response five minutes ago. every email is still there.
clickup raised $535 million at a $4 billion valuation. claims 85% of the Fortune 500 use their platform. looks like the proof is in the page source.
What is up with @Google_Stitch rendering markdown content on the client?? stitch.withgoogle.com/docs/d…
This page is not statically rendered. It renders on the client. So when a CURL this URL, I just get empty HTML with a bunch of scripts!
Could the "elephant-alpha" on @OpenRouter be "Ling-2.6-flash" from @TheInclusionAI ?. They have the same parameter count, context window, and max output size. And Ling 2.6 flash just went live on @ZenMuxAI and @novita_labs
Try `ante` by @antigma_labs because it is really good antigma.ai/ I started using it more than @opencode because of just how responsive it is. It just needs MCP and models.dev support and it would be perfect
The gap is closing. Companies are laying people off due to AI. But everyone has access to AI. It is not secret sauce. Their competitors also use AI. Instead of laying people off, train them on these tools. 10 experts with AI are not shipping more than 20 experts with AI, right?
Looks like @MistralAI @mistralvibe just released a new open source model: news.ycombinator.com/item?id…
Created a tool for models.dev that will generate provider configurations for @goose_oss, @MistralAI vibe, and @charmcli crush. This was pretty tedious otherwise! github.com/james2doyle/model…
I made a tool to hunt down changelog.md docs for @nodejs packages github.com/james2doyle/chang…
I was recently upgrading a site and had a hell of a time finding all the notes I needed to safely upgrade all the dependencies. I’m curious to have some people try it out
James Doyle retweeted
Two years ago, I reported an improper path parsing vulnerability in Next.js. Today, they reported the exact same vulnerability to their competitor, Vinext. Funny coincidence.
We've identified, responsibly disclosed, and confirmed 2 critical, 2 high, 2 medium, 1 low security vulnerabilities in Cloudflare's vibe-coded framework Vinext.
We believe the security of the internet is the highest priority, especially in the age of AI. Vibe coding is a useful tool, especially when used responsibly.
Our security research and framework teams are extending their help and expertise to Cloudflare in the interest of the public internet's security.
James Doyle retweeted
We rebuilt Next.js in a week. No, really.
The team ported the framework to run natively on Workers to prove what’s possible with edge-first architecture. Dive into the technical hurdles we solved to eliminate Node.js dependencies.
cfl.re/4ciNc3L
