Peter Ullrich

My personal productivity app is now available on Moatless 🚀 moatless.store/zachdaniel/l...

thinking about stealing fire from the gods. a hot take

Bandit, fixed 11 CVSS-HIGH CVEs in 1.14.0. com.erlef.org/wg/sec/2026/... Hard work by Matt Trudel and the EEF CNA & SEiR. Support fire prevention at sponsor.erlef.org

Some background on the 11 CVEs we published in Bandit today: com.erlef.org/wg/sec/2026/...

We just released 11 CVEs for Bandit, most being 8.7 (HIGH), so please update to version 1.14.0 ASAP. Thanks to @mtrudel.bsky.social for triaging and fixing these vulnerabilities promptly ❤️ #ElixirLang

Since 2004, this community has helped make Firefox and the open internet possible. Our “Come Back to Firefox” campaign reunites a few early internet icons to remind people what made the internet special, and why it’s worth protecting.

@andrewnez.bsky.social I couldn't decide which Atom feeds were useful so I implemented all of them. You can subscribe to the feeds through the little RSS icon at the top of a repo now. More info in the new and improved docs: pushin.eu/docs/guides/...

I had a great time talking about our cybersecurity work at the @erlef.org together with @maennchen.dev today. The past days have proven that our work is more relevant than ever! 📸 @pragtob.bsky.social

CVEs will continue until morale improves

I hope Apple announces new macBook Pros on Wednesday so that I can upgrade from my M2 to the M6 or M7 whatever they announce. It'd be nice to have 2x compilation times and not have to worry about disk space anymore (I only have 512GB and it's constantly at 480gb)

Just FYI everyone not using AI at least at GLM 5.3 level to secure their systems already is basically fucked, and the aversion to this reality is making things catastrophically worse

I had a great time talking about our cybersecurity work at the @erlef.org together with @maennchen.dev today. The past days have proven that our work is more relevant than ever! 📸 @pragtob.bsky.social

Your AI assistant reads untrusted input for a living. @peterullrich.com and @maennchen.dev are on Track 2 with 'Don't Get Pwned by AI Attacks'. Practical, and probably a little uncomfortable. #CodeBEAM #Security

talking about coherence, collaboration in the community is as strong as ever behind the noise. they're going to unlock so many paths to explore with this project. check it out and get involved 🧡

I review Pushin.eu every 2-3 weeks with Mythos/Daybreak Blue/Sol-6.1/Opus-5.5 for security vulnerabilities and it’s 100% worth it. If you don’t include vulnerability scans in your workflow you’ll have a bad time going forward

i beg you please send a deepseek/glm/daybreak sol/opus to do a full audit of your infra you won't regret it

🚀 Check out what I've been spending my evenings working on with some OSS friends! 👀 It's so exhaustive and ambitious already. 💭 What will you build on top of this? Does this give you ideas? What didn't seem possible before that may now be in reach?

Daniel Roe, the creator of Nuxt, and the NPMX team released a JS client that can connect to any Git forge and they were gracious enough to include Pushin! Thanks to then and their valuable feedback, Pushin’s API is now much better. Thank you, NPMX team! ❤️

🙋‍♂️ what if one client worked on every forge? 𝔣𝔬𝔯𝔤𝔢𝔰 is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges ✨ forges.link

software engineering in 2026 is like 80% fixing supply chain vulnerabilities, 20% waiting for github to come back online

Oh it's like, bad bad. thehackernews.com/2026/10/crit...

BREAKING: everything

the timing of this post, just a couple of days before several fragmented but terrifying CVEs are being released in other ecosystems, is borderline comical zach made an important point here, and I hope this is now even more crystal clear to everyone

Time to update your #ElixirLang apps!

If your company is working with #elixirlang in production and wants to get some real human, non-AI feedback on your issues and pull requests or have technical discussions with the one and only José himself, we’ve got some open spots for clients at dashbit.co 👀

Drawing from tips that we've given to Oban users over the years, we've published an article on monitoring Oban health. oban.pro/articles/mon...

The first version of verified_pubsub is now available on Hex. It's live in production at work, so I feel a bit more comfortable recommending it others. I'll be talking about this a lot more at ExMex in a few weeks. hex.pm/packages/ver... #ElixirLang

It appears we’re close enough to the US elections to make social media completely unusable again. I’ll be a bit more offline until this all blows over. Cya on the other side!

Munich airport gets a 1 ⭐️ out of 5 from me. Absolutely ridiculous maze layout and why the hell do they play *every* announcement at *every* gate? When I’m at my gate A25 to AMS I don’t need to hear announcements for gate A01 to Warsaw. Where’s the Bavarian exceptionalism?

When time meets state (and sand) #elixirlang youtu.be/KhIuEShKUgA?...

Maybe a stupid idea but could we build a printer running Nerves that doesn’t suck?

#ElixirJobs 📣 Vibrant Planet is hiring for an Elixir developer position. Check it out: https://jobs.ashbyhq.com/Vibrant%20Planet/030af323-bf73-4c81-a62d-e69b054c7842 #ElixirLang

My most difficult learning as an adult is: There’s always *fucking* something Rarely anything ever goes to plan and life will continuously throw sticks into your spokes, so you might as well learn to roll with the punches. I now take it with humor as in: *Of course* this shit now happens too

@peterullrich.com recently ran a huge security scan on all of #AshFramework repositories. He found a lot, we fixed them all, and I wrote a bit about it here: ash-hq.org/blog/concent...

This slaps 🤘 music.apple.com/nl/album/vio...

Why yes you can connect the badge to a GoPro in case anyone was wondering

🎙️ Just published a new episode of Macro Mayhem: 007 - Goatmire, Old Android Phones, and How To Keep a Secret. Have a listen: