Michael Coyne
@michaeljcoyne.me
Seasoned software engineer and architect @Huntress
📍🗽
📍🗽
Just in time for v4.0!
December 20, 2025 at 2:29 PM
Just in time for v4.0!
Reposted by Michael Coyne
Like others we are seeing attacks attempting to exploit React CVE-2025-55182 at scale, incl. botnet related activity. How successful have these attacks been? You can get a view here, where we track compromised host with Next.js attacking our sensors:
dashboard.shadowserver.org/statistics/h...
dashboard.shadowserver.org/statistics/h...
December 8, 2025 at 11:31 AM
Like others we are seeing attacks attempting to exploit React CVE-2025-55182 at scale, incl. botnet related activity. How successful have these attacks been? You can get a view here, where we track compromised host with Next.js attacking our sensors:
dashboard.shadowserver.org/statistics/h...
dashboard.shadowserver.org/statistics/h...
🤯
been doing this shit for 20 years
and TIL
i am so conflicted and ashamed 😭
and TIL
i am so conflicted and ashamed 😭
November 5, 2025 at 4:01 AM
🤯
Reposted by Michael Coyne
That was the greatest baseball game I’ve ever seen.
November 2, 2025 at 4:19 AM
That was the greatest baseball game I’ve ever seen.
Reposted by Michael Coyne
NEW: breach of Discord age verification data.
Including some users passports & DLs
Age verification is a badly implemented data grab wrapped in a moral panic.
Mark my words, as age verification mandates expand, we'll end up more surveilled and less secure. 1/
Including some users passports & DLs
Age verification is a badly implemented data grab wrapped in a moral panic.
Mark my words, as age verification mandates expand, we'll end up more surveilled and less secure. 1/
October 5, 2025 at 4:51 PM
NEW: breach of Discord age verification data.
Including some users passports & DLs
Age verification is a badly implemented data grab wrapped in a moral panic.
Mark my words, as age verification mandates expand, we'll end up more surveilled and less secure. 1/
Including some users passports & DLs
Age verification is a badly implemented data grab wrapped in a moral panic.
Mark my words, as age verification mandates expand, we'll end up more surveilled and less secure. 1/
Yikes 😬
NEW: The Microsoft Exchange vulnerability disclosed tonight coincided with a talk delivered at Black Hat, where a security researcher demoed the exploitation. Federal systems are exposed and an emergency directive is planned tomorrow, I’m told:
www.nextgov.com/cybersecurit...
www.nextgov.com/cybersecurit...
‘High-severity’ Microsoft Exchange vulnerability disclosed on heels of Black Hat talk
Parts of the federal enterprise are likely susceptible to the flaw that allows hackers to hijack on-premises versions of Active Directory. CISA plans to release an emergency directive on Thursday, acc...
www.nextgov.com
August 7, 2025 at 5:00 AM
Yikes 😬
Coding outside on vacation:
:set background=light
:set background=light
July 22, 2025 at 9:09 PM
Coding outside on vacation:
:set background=light
:set background=light
Reposted by Michael Coyne
After 7.5 years, we finally updated the functionality overview in the @cilium.io README 😅
A lot has changed in that time, but the overall vision of the project is still very consistent. We just have a more articulate way to say it now 😀
github.com/cilium/ciliu...
A lot has changed in that time, but the overall vision of the project is still very consistent. We just have a more articulate way to say it now 😀
github.com/cilium/ciliu...
July 18, 2025 at 3:23 PM
After 7.5 years, we finally updated the functionality overview in the @cilium.io README 😅
A lot has changed in that time, but the overall vision of the project is still very consistent. We just have a more articulate way to say it now 😀
github.com/cilium/ciliu...
A lot has changed in that time, but the overall vision of the project is still very consistent. We just have a more articulate way to say it now 😀
github.com/cilium/ciliu...
Reposted by Michael Coyne
Reposted by Michael Coyne
The singularity is awesome
June 28, 2025 at 5:19 PM
The singularity is awesome
Reposted by Michael Coyne
If you haven't used it yet, there is truly no better way to write resilient background jobs in Rails.
github.com/fractaledmi...
github.com/fractaledmi...
GitHub - fractaledmind/acidic_job: 🧪 Durable execution workflows for Active Job
🧪 Durable execution workflows for Active Job. Contribute to fractaledmind/acidic_job development by creating an account on GitHub.
github.com
June 18, 2025 at 11:49 PM
If you haven't used it yet, there is truly no better way to write resilient background jobs in Rails.
github.com/fractaledmi...
github.com/fractaledmi...
Reposted by Michael Coyne
If you use "AI agents" (LLMs calling tools in a loop) you need to be aware of the Lethal Trifecta
Combine access to private data, exposure to untrusted content and the ability to externally communicate and an attacker can trick the system into stealing your data simonwillison.net/2025/Jun/16/...
Combine access to private data, exposure to untrusted content and the ability to externally communicate and an attacker can trick the system into stealing your data simonwillison.net/2025/Jun/16/...
The lethal trifecta for AI agents: private data, untrusted content, and external communication
If you are a user of LLM systems that use tools (you can call them “AI agents” if you like) it is critically important that you understand the risk of …
simonwillison.net
June 16, 2025 at 1:21 PM
If you use "AI agents" (LLMs calling tools in a loop) you need to be aware of the Lethal Trifecta
Combine access to private data, exposure to untrusted content and the ability to externally communicate and an attacker can trick the system into stealing your data simonwillison.net/2025/Jun/16/...
Combine access to private data, exposure to untrusted content and the ability to externally communicate and an attacker can trick the system into stealing your data simonwillison.net/2025/Jun/16/...
Reposted by Michael Coyne
Here’s the thing: Mets games are fun to watch because the team is good, but they’re also fun to watch because they look good and are fun to listen to. It’s incredible overall entertainment in a way that other baseball teams just aren’t doing.
June 1, 2025 at 7:56 PM
Here’s the thing: Mets games are fun to watch because the team is good, but they’re also fun to watch because they look good and are fun to listen to. It’s incredible overall entertainment in a way that other baseball teams just aren’t doing.
Midtown Greenway views
June 2, 2025 at 12:39 AM
Midtown Greenway views
Reposted by Michael Coyne
Gary Cohen: "By BlueChew. Chew it and do it."
Keith Hernandez: "What did you mean by that?"
Gary Cohen: "I just read the copy here. I try to give it a good read. Try and give the advertiser everything that they paid for, Keith. And then it's somebody else's problem." #MLB
Keith Hernandez: "What did you mean by that?"
Gary Cohen: "I just read the copy here. I try to give it a good read. Try and give the advertiser everything that they paid for, Keith. And then it's somebody else's problem." #MLB
May 31, 2025 at 10:45 PM
Gary Cohen: "By BlueChew. Chew it and do it."
Keith Hernandez: "What did you mean by that?"
Gary Cohen: "I just read the copy here. I try to give it a good read. Try and give the advertiser everything that they paid for, Keith. And then it's somebody else's problem." #MLB
Keith Hernandez: "What did you mean by that?"
Gary Cohen: "I just read the copy here. I try to give it a good read. Try and give the advertiser everything that they paid for, Keith. And then it's somebody else's problem." #MLB
Reposted by Michael Coyne
benjaminaster.com/css-minecraft/ by @benjaminaster.bsky.social is incredible! Editable Minecraft-style world, entirely CSS and HTML, not a single line of JS
My notes on how it works here. It uses radio boxes for state, paused animations for controlling the viewport simonwillison.net/2025/May/26/...
My notes on how it works here. It uses radio boxes for state, paused animations for controlling the viewport simonwillison.net/2025/May/26/...
May 26, 2025 at 11:55 PM
benjaminaster.com/css-minecraft/ by @benjaminaster.bsky.social is incredible! Editable Minecraft-style world, entirely CSS and HTML, not a single line of JS
My notes on how it works here. It uses radio boxes for state, paused animations for controlling the viewport simonwillison.net/2025/May/26/...
My notes on how it works here. It uses radio boxes for state, paused animations for controlling the viewport simonwillison.net/2025/May/26/...
Reposted by Michael Coyne
This is a new image from #JWST.
The bright points with spikes are stars in the Milky Way.
Everything else is a galaxy.
Everything. Else. Is. A. Galaxy.
The bright points with spikes are stars in the Milky Way.
Everything else is a galaxy.
Everything. Else. Is. A. Galaxy.
April 29, 2025 at 6:47 PM
This is a new image from #JWST.
The bright points with spikes are stars in the Milky Way.
Everything else is a galaxy.
Everything. Else. Is. A. Galaxy.
The bright points with spikes are stars in the Milky Way.
Everything else is a galaxy.
Everything. Else. Is. A. Galaxy.
Reposted by Michael Coyne
If you read @byroot.bsky.social 's "What's the deal with Ractors?", and were bummed at how poorly they handled JSON parsing, then @jhawthorn.com has brightened your day!
Frozen interned strings are now stored in a lock-free hash, making the Ractor example 2x faster than the single-threaded example!
Frozen interned strings are now stored in a lock-free hash, making the Ractor example 2x faster than the single-threaded example!
April 20, 2025 at 12:12 AM
If you read @byroot.bsky.social 's "What's the deal with Ractors?", and were bummed at how poorly they handled JSON parsing, then @jhawthorn.com has brightened your day!
Frozen interned strings are now stored in a lock-free hash, making the Ractor example 2x faster than the single-threaded example!
Frozen interned strings are now stored in a lock-free hash, making the Ractor example 2x faster than the single-threaded example!
Reposted by Michael Coyne
Huntress has observed in-the-wild exploitation of CVE-2025-30406, a critical vulnerability in the Gladinet CentreStack enterprise file-sharing platform.
April 14, 2025 at 12:53 AM
Huntress has observed in-the-wild exploitation of CVE-2025-30406, a critical vulnerability in the Gladinet CentreStack enterprise file-sharing platform.
Reposted by Michael Coyne
They're called public records for a reason. Starting today, WIRED will *stop paywalling* articles that are primarily based on public records obtained through the Freedom of Information Act, becoming the first publication to partner with @freedom.press to offer this for our new coverage.
Wired is dropping paywalls for FOIA-based reporting. Others should follow
As the administration does its best to hide public records from the public, Wired magazine is stepping up to help stem the secrecy
freedom.press
March 18, 2025 at 1:11 PM
They're called public records for a reason. Starting today, WIRED will *stop paywalling* articles that are primarily based on public records obtained through the Freedom of Information Act, becoming the first publication to partner with @freedom.press to offer this for our new coverage.
Reposted by Michael Coyne
I had a front row seat to watch 18F get started a dozen years ago by some of the smartest and most dedicated public servants I’ve ever met. Their work saved countless lives, and yes, hundreds of millions, probably billions, of dollars. But just as significantly: it made government more responsive.
The work that I led at 18F I naturally feel was really important (I hope all 18Fers felt the same way about their work): codifying the procurement principals that we’d all identified there over the years. I thought this would have a tiny audience. Instead it became a foundational text.
Introduction | 18F De-risking Guide
A guide for government agencies to deliver successful technology projects, from pre-award planning through post-award vendor management.
guides.18f.gov
March 1, 2025 at 3:36 PM
I had a front row seat to watch 18F get started a dozen years ago by some of the smartest and most dedicated public servants I’ve ever met. Their work saved countless lives, and yes, hundreds of millions, probably billions, of dollars. But just as significantly: it made government more responsive.
Reposted by Michael Coyne
