Jeremy Morrell

Jeremy Morrell

@jeremymorrell.dev

Principal engineer @ Cloudflare working on Observability Things Location: Squamish, BC 🇨🇦 Website: https://jeremymorrell.dev/

3.3K followers743 following6K posts

Co-signed. This is my employer so apply salt to taste, but if your PHP service was behind Cloudflare the first rules protecting you went up ~9 hours before disclosure blog.cloudflare.com/php-vulnerab...

blog.cloudflare.comCloudflare deploys protections against php2shell vulnerabilityCloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit ...
Ed@ed3d.net

- shrink your surface and offload as much of that surface as you can to competent vendors (Cloudflare, AWS, etc) - I don't think you need abliterated models for this; GLM 5.3 is happy to do a lot of poking at stuff, just ask @hailey.at - reluctantly: give the frontier labs some money too

My existential crisis about “what even *is* an o11y product in 2026” deepens

austin@aparker.io

As of September 2026, over 60% of our weekly active users were connecting via MCP -- running queries, creating dashboards, responding to alerts. That's a pretty wild number, given that our MCP server officially released just a year earlier.

Jeremy Morrell reposted

Hello from #AGNTCon! I'm presenting about what we learned building the @honeycomb.io MCP server. If you'd like to follow along, follow this thread! Otherwise, feel free to mute it. Let's get it started!

Jeremy Morrell reposted

ok non-tech ppl might be hearing some scary things about "critical vulnerabilities" involving certificates. the main thing you need to know, without getting down in the weeds about it, is that the fourth seal is broken. lo, a rider approacheth upon a pale steed, and his name is Death

This is probably my favorite blog post on the CF blog this year. I've never gone from "wait, it's a what?" to "omg, I need to use this for so many things" so quickly I guess CF is a model lab now? 🤔

Cloudflare@cloudflare.social

Introducing Clairic, from Cloudflare. A System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs. https://cfl.re/3UcTaMP

I don’t know if it’s strictly inflation driving discontent, but I suspect it’s the major factor Everything is expensive and people don’t like it!

We get hung up on ideas and philosophies but modeling the collective block of voters as a weather system seems like it would be more in-line with reality

Damn, our municipal elections did… not go the way I was hoping I’m glad the last council got so many bike infra projects over the line because we’re not getting any new ones anytime soon

Jeremy Morrell reposted

Progress! My eval reports now link directly to investigator traces, individual tool-call spans, and grader spans. You can click on a failed tool call's span ID, and inspect the command/error in context. Also according to my evals, Luna 6 is a weird little chaos gremlin.

Jeremy Morrell reposted

🧠: Okay, so we are working on something really cool right now and want to present it to our peers in a technically proficient and approachab... 👄: GET IN BITCHES WE'RE DOING EVALS! Work in progress obviously, but stay tuned!

Jeremy Morrell reposted

Yesterday, the CSSWG accepted my proposal for mesh gradients and diffusion curve gradients! Want to make gradients like this natively in CSS? Well, we've started the work on it. It's coming! Here's the Explainer: github.com/w3c/csswg-dr...

Jeremy Morrell reposted

4o is a more dangerous model than any of the high-end frontier models that get fearmongered about. It has a body count.

aly@aly.codes

I sincerely hope they wipe the weights of GPT 4o from the planet lol

I do not understand the new Apple TV. It’s outrageously overpowered for what it’s supposed to do. Double the storage, and it would make so much more sense as a MacBook Neo-esque desktop mac, and then the price would be justified.

This matches my recent experiences. I can ask for things, and the output works, but it's all wrong in the details. Not in a "doesn't fit my preferences" way, but in a "makes the system vastly more complicated and leaks that out to the user" way.

rain 🌦️@sunshowers.io

I gave Opus 5.5, considered the best model these days, a medium-sized task. Even after a full adversarial review and simplify loop to convergence, it produced code that worked but was garbage, with limited use of newtypes and representable invalid states everywhere

Maybe the system I've been playing with is too new and doesn't have the bones in the right place yet. I have fewer problems working in mature systems. I'm trying to add in guidance and static analysis and loops and adversarial review and that helps, but... I still get a bunch of bad first drafts

This honestly seems like a sea change? classcad.ch I think it’s difficult to overstate how much impact more accessible CAD systems could have…

classcad.chThe headless CAD engine | ClassCADClassCAD is a headless, programmable CAD engine: one API, as a server, a worker or WebAssembly in the browser.
Jeremy Morrell@jeremymorrell.dev

In retrospect it should have been obvious that “as long as you have a reference implementation to check against you can get LLMs to rebuild basically anything” would mean new CAD kernels 👀 github.com/NVIDIA-Omniv...

Another point against the “if AI is so great, where’s all the new software??” argument

Jeremy Morrell@jeremymorrell.dev

In retrospect it should have been obvious that “as long as you have a reference implementation to check against you can get LLMs to rebuild basically anything” would mean new CAD kernels 👀 github.com/NVIDIA-Omniv...

Give me an object store and an LLM and I will observe the world

Jeremy Morrell@jeremymorrell.dev

Starting to wonder if the next gen of o11y products isn’t just: ingests OTLP into ClickHouse and/or DataLake for you and allows you to set alerts (for agents, not people)

Starting to wonder if the next gen of o11y products isn’t just: ingests OTLP into ClickHouse and/or DataLake for you and allows you to set alerts (for agents, not people)