3 ms·

https://x.com/theo/status/2045871215705747965 https://x.com/theo/status/2045871215705747965 - "Everything I know about this hack suggests it could happen to any

by neom 6mo ago

https://x.com/theo/status/2045871215705747965 https://x.com/theo/status/2045871215705747965 - "Everything I know about this hack suggests it could happen to any host" He also suggests in another post that Linear and GitHub could also be pwned? Either way, hugops to all the SRE/DevOps out there, seems like it's going to be a busy Sunday for many.

techpression 6mo ago
”Any host” of what? That’s such a non-descriptive statement and clearly not true at face value.
embedding-shape 6mo ago
Based on what, "feels like it"? Claiming that Cloudflare is affected by the same hack has to come from somewhere, but where is that coming from?
- gruez 6mo ago
  from his "sources". > Here’s what I’ve managed to get from my sources: >3. The method of compromise was likely used to hit multiple companies other than Vercel. https://x.com/theo/status/2045870216555499636 https://x.com/theo/status/2045870216555499636 To be fair journalists often do this too, eg. "[company] was breached, people within the company claim"
  - eddythompson80 6mo ago
    Isn’t he a Vercel evangelist though?
    - troupo 6mo ago
      He is "whatever gives me short-term boost in popularity". Including doing 180 turns on whatever he's evangelizing or bashing.
      - eddythompson80 6mo ago
        Fair enough. That’s probably a better description from what I’ve seen from him. I remember that arc browser shilling.
      - Barbing 6mo ago
        Good for the content but would sponsors be on board long term?
      - brazukadev 6mo ago
        Let's see. Roasting vercel is more popular than defending but his posts so far he seems to be defending and arguing in the replies.
        troupo 6mo ago
        Note: what follows is absolute 100% speculation based on nothing but gut feelings. Theo has long been Vercel supporter and was sponsored by them several times. In this case it could be a combination of him being genuinely interested in Vercel (a rare thing) and hopes for future sponsorships
        brazukadev 6mo ago
        Yes, this is exactly how I see it too minus the "genuine" part. It is because of money, and for that, he doesn't care about lying.
    - TiredOfLife 6mo ago
      He quite publicly is not anymore.
rvz 6mo ago
I do remember that OpenAI did use Vercel a year ago. They might have likely moved off of it to something better.
- pxc 6mo ago
  OpenAI owns Contexts.ai, doesn't it?
phillipcarter 6mo ago
I don't know if I'd trust some random programmer-streamer-influencer on anything other than the topic of streamer-influencing.
- deleted 6mo ago
  [deleted]
- hvb2 6mo ago
  The link at the top of the page it to vercel acknowledging it...
  - phillipcarter 6mo ago
    Vercel acknowledges a security incident, which nobody is claiming doesn't exist. What they don't acknowledge are this person's vague implications about impact elsewhere.
recursivegirth 6mo ago
Ah, Theo with his vast insights and connections into everything. That man gets around, and his content is worth it's cost. Theo's content boils down to the same boring formula. 1. Whatever buzzword headline is trending at the time 2. Immediate sponsored ad that is supposed to make you sympathize with Theo cause he "vets" his sponsors. 3. The man makes you listen to a "that totally happened" story that he somehow always involved himself personally. 4. Man serves you up an ad for his t3.chat and how it's the greatest thing in the world and how he should be paid more for his infinite wisdom. 5. A rag on Claude or OpenAI (whichever is leading at the time) 6. 5-10 minutes of paraphrasing an article without critical thought or analysis on the video topic. I used to enjoy his content when he was still in his Ping era, but it's clear hes drunken the YT marketer kool-aid. I've moved on, his content gets recommend now and again, but I can't entertain his non-sense anymore.
- neom 6mo ago
  I don't watch his content, but I felt comfortable posting his link as I believe he's generally considered a reputable guy? His tweets sometimes come up in my for you tab and he seems reasonable and knowledgable generally? Maybe I'm wrong and shouldn't have linked to him as a source.
  - steve_adams_86 6mo ago
    He's kind of like an LLM in that his content has the surface texture of something substantial, and sometimes it's backed by substance, yet it's often half-true or totally off the mark too. You'll notice if you're previously acquainted with what he's talking about, otherwise he seems to be as you described. I don't think he's a bad guy or that he's trying to be misleading. I suspect he wants his content to actually carry value, but he produces too much for that to be possible. Primarily he's a performer, not a technologist.
    - arabsson 6mo ago
      I agree with this comment. YouTube's summarize this video feature has been a godsend when it comes to Theo's videos.
nozzlegear 6mo ago
> @theo: "I have reason to believe this is credible. If you are using Vercel, it’s a good idea to roll your secrets and env vars." > @ErdalToprak: "And use your own vps or k3s cluster there’s no reason in 2026 to delegate your infra to a middle man except if you’re at AWS level needs" > @theo: "This is still a stupid take" lol, okay. Thanks for the insight, Theo, whoever you are.
- uxhacker 6mo ago
  What is AWS level needs?
  - nozzlegear 6mo ago
    You'll have to ask @ErdalToprak on Twitter on that one. I just thought it was funny that this slopfluencer, who's taken money to advertise Vercel, ostensibly believes that using a VPS/k3s is "a stupid take."
  - raw_anon_1111 6mo ago
    Hell doing this with fixed price AWS Lightsale based services would be better.
- nozzlegear 6mo ago
  Theo subscribers didn't like this one
enra 6mo ago
Vercel is a Linear customer, that's why Linear was mentioned here. Linear has not been breached, customer data remains secure, and Linear is not hosted on Vercel.
- neom 6mo ago
  Yeah that's my mistake - Sorry! I just went back and and re-read this tweet: https://x.com/theo/status/2045870216555499636?s=20 https://x.com/theo/status/2045870216555499636?s=20 - I had read it as via their Linear/GitHub - I should have known better and double checked what I read when I posted this, please accept my apology, I can't edit my original comment now.

by neom 6mo ago

techpression 6mo ago

”Any host” of what? That’s such a non-descriptive statement and clearly not true at face value.

embedding-shape 6mo ago

Based on what, "feels like it"? Claiming that Cloudflare is affected by the same hack has to come from somewhere, but where is that coming from?

gruez 6mo ago
from his "sources". > Here’s what I’ve managed to get from my sources: >3. The method of compromise was likely used to hit multiple companies other than Vercel. https://x.com/theo/status/2045870216555499636 https://x.com/theo/status/2045870216555499636 To be fair journalists often do this too, eg. "[company] was breached, people within the company claim"
- eddythompson80 6mo ago
  Isn’t he a Vercel evangelist though?
  - troupo 6mo ago
    He is "whatever gives me short-term boost in popularity". Including doing 180 turns on whatever he's evangelizing or bashing.
    - eddythompson80 6mo ago
      Fair enough. That’s probably a better description from what I’ve seen from him. I remember that arc browser shilling.
    - Barbing 6mo ago
      Good for the content but would sponsors be on board long term?
    - brazukadev 6mo ago
      Let's see. Roasting vercel is more popular than defending but his posts so far he seems to be defending and arguing in the replies.
      - troupo 6mo ago
        Note: what follows is absolute 100% speculation based on nothing but gut feelings. Theo has long been Vercel supporter and was sponsored by them several times. In this case it could be a combination of him being genuinely interested in Vercel (a rare thing) and hopes for future sponsorships
        brazukadev 6mo ago
        Yes, this is exactly how I see it too minus the "genuine" part. It is because of money, and for that, he doesn't care about lying.
  - TiredOfLife 6mo ago
    He quite publicly is not anymore.

rvz 6mo ago

I do remember that OpenAI did use Vercel a year ago. They might have likely moved off of it to something better.

pxc 6mo ago
OpenAI owns Contexts.ai, doesn't it?

phillipcarter 6mo ago

I don't know if I'd trust some random programmer-streamer-influencer on anything other than the topic of streamer-influencing.

deleted 6mo ago
[deleted]
hvb2 6mo ago
The link at the top of the page it to vercel acknowledging it...
- phillipcarter 6mo ago
  Vercel acknowledges a security incident, which nobody is claiming doesn't exist. What they don't acknowledge are this person's vague implications about impact elsewhere.

recursivegirth 6mo ago

Ah, Theo with his vast insights and connections into everything. That man gets around, and his content is worth it's cost. Theo's content boils down to the same boring formula. 1. Whatever buzzword headline is trending at the time 2. Immediate sponsored ad that is supposed to make you sympathize with Theo cause he "vets" his sponsors. 3. The man makes you listen to a "that totally happened" story that he somehow always involved himself personally. 4. Man serves you up an ad for his t3.chat and how it's the greatest thing in the world and how he should be paid more for his infinite wisdom. 5. A rag on Claude or OpenAI (whichever is leading at the time) 6. 5-10 minutes of paraphrasing an article without critical thought or analysis on the video topic. I used to enjoy his content when he was still in his Ping era, but it's clear hes drunken the YT marketer kool-aid. I've moved on, his content gets recommend now and again, but I can't entertain his non-sense anymore.

neom 6mo ago
I don't watch his content, but I felt comfortable posting his link as I believe he's generally considered a reputable guy? His tweets sometimes come up in my for you tab and he seems reasonable and knowledgable generally? Maybe I'm wrong and shouldn't have linked to him as a source.
- steve_adams_86 6mo ago
  He's kind of like an LLM in that his content has the surface texture of something substantial, and sometimes it's backed by substance, yet it's often half-true or totally off the mark too. You'll notice if you're previously acquainted with what he's talking about, otherwise he seems to be as you described. I don't think he's a bad guy or that he's trying to be misleading. I suspect he wants his content to actually carry value, but he produces too much for that to be possible. Primarily he's a performer, not a technologist.
  - arabsson 6mo ago
    I agree with this comment. YouTube's summarize this video feature has been a godsend when it comes to Theo's videos.

nozzlegear 6mo ago

> @theo: "I have reason to believe this is credible. If you are using Vercel, it’s a good idea to roll your secrets and env vars." > @ErdalToprak: "And use your own vps or k3s cluster there’s no reason in 2026 to delegate your infra to a middle man except if you’re at AWS level needs" > @theo: "This is still a stupid take" lol, okay. Thanks for the insight, Theo, whoever you are.

uxhacker 6mo ago
What is AWS level needs?
- nozzlegear 6mo ago
  You'll have to ask @ErdalToprak on Twitter on that one. I just thought it was funny that this slopfluencer, who's taken money to advertise Vercel, ostensibly believes that using a VPS/k3s is "a stupid take."
- raw_anon_1111 6mo ago
  Hell doing this with fixed price AWS Lightsale based services would be better.
nozzlegear 6mo ago
Theo subscribers didn't like this one

enra 6mo ago

Vercel is a Linear customer, that's why Linear was mentioned here. Linear has not been breached, customer data remains secure, and Linear is not hosted on Vercel.

neom 6mo ago
Yeah that's my mistake - Sorry! I just went back and and re-read this tweet: https://x.com/theo/status/2045870216555499636?s=20 https://x.com/theo/status/2045870216555499636?s=20 - I had read it as via their Linear/GitHub - I should have known better and double checked what I read when I posted this, please accept my apology, I can't edit my original comment now.