Brandon Kelly

Brandon Kelly

@brandonkelly.io

Head honcho at @craftcms.com 📍 Bend, Oregon 🔗 https://brandonkelly.io

595 followers159 following283 posts

How much could a hamburger cost, $8,000?

Aaron Rupar@atrupar.com

Trump's affordability message: "You could even come to Mar-a-Lago. You'll be my guest. The problem is that for $5,000 the most you'll be able to buy is a hamburger and maybe a small dessert. I'm not even sure you could buy that! No, don't go there. It's not a good place if you're price conscious."

Peloton Flex acquired! Definitely *completes the look* for Project Home Gym. Unfortunately it is not turning on, so Peloton needs to send a technician out. So close…

It's such a thrill to see software features build on each other to become something that's greater than the sum of their parts.

Brandon Kelly reposted

Following the tragic event at Silver Rail Elementary School last week in Bend, there are free support services, local resources, and opportunities to connect. This is the current resource list compiled by the Bend community. You can find links to all resources at bendoregon.gov/community-su...

Brandon Kelly reposted

The School District sent a message today that they will be preserving and moving the community memorial at Silver Rail Elementary this week. Appreciate everyone who created a place to grieve and mourn together as we remember those lost and keep all those affected in our hearts.

View full thread

The city held a vigil last night, led by community leaders and pastors from several local churches. Massive turnout. Heartbreaking and beautiful all at once. This is the way. 💔

View full thread

Tread Flex ordered 🏃 I've been wanting a (preferably Peloton) treadmill for a while but don't really have the space for one. The Flex looks like the perfect solution. It being half the cost is a nice added bonus.

When “a date that will live in infamy” was already taken…

Aaron Rupar@atrupar.com

Trump: "We will always remember the victims and families of September 11th twenty O one. Very famous date, unfortunately."

If computers are like a "bicycle for the mind", AI is like a "supercar for the mind". - can get you further, faster - less personal energy spend - much greater overall energy spend - makes you lazier - encourages suicidal behavior

Apple, etc: if you want me to believe the hype around AI, start filtering my incoming emails, phone calls, and text messages. It's 2026 ffs.

Catching up with the news after being mostly offline for two days and omg, "Lake America"—brilliant! That'll teach Canada not to boycott US goods and impose retaliatory tariffs for sure. Bravo, Mr. Trump 👏

¡AI, caramba!

brandonkelly.io¡AI, caramba!I generally despise AI. Even ignoring the ethical and existential concerns, if I could trade every second I’ve had to spend reading/conversing about AI for time spent actually working , I’d probably be more productive. And happier. But I was recently forced to partake, as we had a security vulnerability report (AI-discovered, I’m quite sure) that was way over my head, and I needed to tap into the Pluribus for some help. The end result was craftcms/url-validator , a new package that helps protect against SSRF vulnerabilities for applications that support uploading files via user-provided URLs. Just the sort of thing I always pictured myself worrying about when I grew up. That experience opened my eyes to the potential, a bit, I guess. I love to code, but if I’m being honest, there are definitely aspects of it that I don’t love. Such as: Resolving merge conflicts Line-by-line code reviews with all potential breaking change/security side effects in mind Debugging complex bugs, especially when third party plugin/project-specific code is involved, which I have zero incentive to commit to memory Debugging npm issues Writing tests I’ve started leaning on it more for those sorts of things. And I have to admit, it’s pretty nice to not spent so many brain cycles on shit work. So I guess I’m kind of coming around. Slowly. Contentiously. I’m still mad about every app that tries to cram it down my throat at every opportunity. And fuck everyone using it for content creation. That’s a human’s job.

It’s based on several months of fine-tuning #CraftCMS ’s defenses against SSRF attacks via asset mutations, which got complex enough that it felt like it warranted a dedicated package.

(Full disclosure: Claude helped a bit with some of the more complex defenses. I’m generally pretty anti-AI, but we live in a world where AI is arming hackers and security researchers, and at some point you gotta fight fire with fire.)