Remote

Matt Brown

@mattbrowndev@mastodon.social

mastodon 4.8.0-nightly.2026-10-06

I write developer tooling at Slack. I used to work at Vimeo, where I made @psalm@phpc.social

0 Followers

0 Following

7 Posts

Joined January 26, 2024

Location:

Brooklyn NY

Web:

https://mattbrown.dev

Matt Brown @mattbrowndev@mastodon.social

· 2mo ago

RE: https://phpc.social/@OndrejMirtes/116987767186918032 A few LLM holdouts are semi-retired, or have enough backers that they can hold to their well-founded principals without risking their career. But most other talented software professionals who refuse to use LLMs are putting themselves at a huge disadvantage.

Quoting

Ondřej Mirtes

@OndrejMirtes@phpc.social

Hot take: thanks to LLM coding agents, the average software quality will increase, not decrease.

Open quoted post

Matt Brown @mattbrowndev@mastodon.social

· 6mo ago

Replying to

@sarah@phpc.social @pollita@phpc.social Here's Daniel's initial blog post on the matter: https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/ In the hands of experts, proprietary LLM-assisted security analysis caught 50 bugs/vulnerabilities in Curl: https://daniel.haxx.se/blog/2025/10/10/a-new-breed-of-analyzers/ But commercially-available LLMs make it easy for clueless grifters to submit HackerOne reports, so they had to shut down the whole thing.

daniel.haxx.se

The end of the curl bug-bounty

tldr: an attempt to reduce the terror reporting. There is no longer a curl bug-bounty program. It officially stops on January 31, 2026. After having had a few half-baked previous takes, in April 2019 we kicked off the first real curl bug-bounty with the help of Hackerone, and while it stumbled a bit at first … Continue reading The end of the curl bug-bounty →

Matt Brown @mattbrowndev@mastodon.social

· 6mo ago

Replying to

@asgrim@phpc.social sorry, but what is the con? LLMs provide value in the same way driving a car provides value. It uses natural and human resources in the same way a car uses natural resources. But we don’t call driving a “con”.

Matt Brown @mattbrowndev@mastodon.social

· 6mo ago

Replying to

@asgrim@phpc.social oh ok, you’re saying it’s a Faustian bargain

Matt Brown @mattbrowndev@mastodon.social

· 2mo ago

Replying to

@beberlei@phpc.social the language can still be a bottleneck if it forces that I/O to be performed serially

Matt Brown @mattbrowndev@mastodon.social

· 2mo ago

Replying to

@brzuchal@phpc.social looks cool, but nothing about the word “vec” tells me it’s immutable, nor does the “append” method imply you get a new collection.

Matt Brown @mattbrowndev@mastodon.social

· 11mo ago

Replying to

@sebastian@phpc.social small nit: the NPM registry is owned and operated by Microsoft. NPM is not party to the statement because NPM does not have the same resource issues as independent registries like PyPi or Packagist.