Sign in

Paraxial.io

@paraxialio.bsky.social
111 followers 250 following 32 posts

Real Security for Developers - paraxial.io

PostsRepliesMedia
Paraxial.io @paraxialio.bsky.social · 14/09/2026
Watch: Paraxial.io Founder Michael Lubas and EEF CISO Jonatan Männchen at ElixirConf US 2026 - Pentesting Hex: Real Findings from the Ægis Initiative @maennchen.dev @elixirconf.bsky.social www.youtube.com/watch?v=_fER...
youtube.com
Pentesting Hex: Real Findings from the Ægis Initiative | Michael Lubas & Jonatan Männchen | ECUS'26
YouTube video by Code Sync
052
Reposted by Paraxial.io
ElixirConf @elixirconf.bsky.social · 10/09/2026
Now on Track 1: 'Pentesting Hex: Real Findings from the Ægis Initiative' with Michael Lubas & Jonatan Männchen (@maennchen.dev) #ElixirConf #ElixirConfUS #ElixirConfUS2026 #security #hex
052
Reposted by Paraxial.io
Brian Meeker @brianmeeker.bsky.social · 11/09/2026
Big thanks to everybody who came out to #ElixirConf lightning talks tonight. My repo for verified pub/sub is available at github.com/CuriousCurmu.... Feedback welcome before I publish the first version of the Hex package. #ElixirLang
github.com
GitHub - CuriousCurmudgeon/verified_pubsub: Builds compile-time checks on top of Phoenix.PubSub, similar to Phoenix.VerifiedRoutes. Define your topics and messages up front and get compile-time valida...
Builds compile-time checks on top of Phoenix.PubSub, similar to Phoenix.VerifiedRoutes. Define your topics and messages up front and get compile-time validation. - CuriousCurmudgeon/verified_pubsub
1216
Paraxial.io @paraxialio.bsky.social · 07/08/2026
Big day for Ruby deserialization fans
070
Paraxial.io @paraxialio.bsky.social · 05/08/2026
If you are a software engineer frustrated that the cybersecurity ability of LLMs as hyped (best hacker in the world etc) do not match your own experience (frequently wrong, focused on pedantic issues, not finding true issues), this is the problem:
100
Paraxial.io @paraxialio.bsky.social · 04/08/2026
Security Vendor's AI Best Practices Labels Critical Elixir RCE Safe The dangers of AI generated SEO spam are real, especially when it comes to cybersecurity! paraxial.io/blog/ai-spam
paraxial.io
Security Vendor's AI Best Practices Labels Critical Elixir RCE Safe
Double check your work
021
Reposted by Paraxial.io
Peter Ullrich @peterullrich.com · 28/07/2026
🚨 Announcing our new Podcast 🚨 Gus (@gworkman.bsky.social) and I have started a new #ElixirLang Podcast Macro Mayhem - @macromayhem.fm We cover Elixir news and general industry topics every 2 weeks. Our first episode is out now, available on all podcast players or on our website: macromayhem.fm
macromayhem.fm
Macro Mayhem
The latest Elixir news and general software industry topics
35922
Reposted by Paraxial.io
ElixirConf @elixirconf.bsky.social · 01/06/2026
@paraxialio.bsky.social joins ElixirConf as a Silver Sponsor! Built specifically with #Elixir developers in mind, Paraxial helps teams secure #Phoenix applications and prevent #security issues before they reach production. Interested in sponsoring? Let’s talk. elixirconf.com#sponsor
031
Reposted by Paraxial.io
Jonatan Männchen @maennchen.dev · 27/05/2026
Atom exhaustion is not just an old BEAM footgun. As of today, 35% of CVEs published by the EEF CNA fall under uncontrolled resource consumption, with atom exhaustion being one of the recurring causes. It’s well understood, documented, and preventable. erlef.org/blog/securit...
erlef.org
Erlang Ecosystem Foundation - Supporting the BEAM community
0329
Paraxial.io @paraxialio.bsky.social · 18/05/2026
Paraxial.io Founder Michael Lubas on Episode 83 of the Elixir Mentor Podcast Discussing Elixir security, the recent penetration test of Hex,, how developers can stay secure in 2026, and the effect of AI on the security of open source software www.youtube.com/watch?v=gDNd...
youtube.com
Michael Lubas on AI, Attack, and Defense
YouTube video by Elixir Mentor
020
Reposted by Paraxial.io
Peter Ullrich @peterullrich.com · 12/05/2026
🚨 New Blog Post 🚨 I wrote about how I got into finding CVEs and what's the plan going forward. Also, I open-sourced the prompts I've been using. peterullrich.com/what-the-cve
peterullrich.com
What the CVE?
How I'm using Claude Opus 4.7 to find and report CVEs in popular Hex packages to make the BEAM ecosystem safer.
43814
Paraxial.io @paraxialio.bsky.social · 11/05/2026
@mtrudel.bsky.social and @peterullrich.com are making major security contributions to the security of the Elixir ecosystem. As AI models get more powerful this work is more important than ever, thank you!
120
Paraxial.io @paraxialio.bsky.social · 14/04/2026
Great episode, make sure to listen and subscribe!
010
Reposted by Paraxial.io
Philipp 🐘 keila.io @pentacent.bsky.social · 13/04/2026
I just used zizmor to improve the security of our GitHub actions pipeline: github.com/pentacent/ke... Thanks to Michael from @paraxialio.bsky.social for the tip in the most recent @thinkingelixir.com episode! #myelixirstatus
github.com
Apply fixes suggested by zizmor · pentacent/keila@7eb6aeb
- Define clear permissions - Avoid templating vulnerabilities - Pin non-GitHub-provided actions (+ update all external actions) - Use persist-credentials: false - Use Docker build cache directly - ...
051
Paraxial.io @paraxialio.bsky.social · 09/04/2026
Securing Hex, the Backbone of the Elixir Ecosystem paraxial.io/blog/hex-pen...
paraxial.io
Securing Hex, the Backbone of the Elixir Ecosystem
Paraxial.io Completes Security Audit of Hex Package Manager
053
Paraxial.io @paraxialio.bsky.social · 19/03/2026
Paraxial.io Now Supports Req! paraxial.io/blog/req-sup...
paraxial.io
Paraxial.io Now Supports Req
Moving to the modern Elixir HTTP library
000
Paraxial.io @paraxialio.bsky.social · 04/03/2026
How Killswitch Uses Paraxial.io to Protect Client Estates paraxial.io/blog/killswi...
paraxial.io
How Killswitch Uses Paraxial.io to Protect Client Estates
Secure AI coding with Paraxial.io
000
Reposted by Paraxial.io
Tyler A. Young ⚗️🧑🏻‍💻 @tylerayoung.com · 03/12/2025
Got a few PRs in flight for Credo which cumulatively dropped the runtime from ~33 seconds down to ~9 on our 3500 file #ElixirLang codebase at work. 😁
5332
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 23/12/2025
Elixir v1.20 with full-type inference coming soon, @gleam.run v1.14.0-rc1, mjml_eex v0.13.0 for email templates, Dashbit’s nimble_zta library for zero trust auth, Björn Gustavsson’s #BEAM history talk, and more! #ElixirLang www.youtube.com/watch?v=rzjb...
youtube.com
Thinking Elixir Podcast 284: ‘Tis the Season for a Type System
YouTube video by Mark Ericksen
0136
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 16/12/2025
Celebrating #Erlang’s 27th birthday as #OpenSource, Elixir Hub 2025 survey results, new data_migration LiveDashboard package, critical #React RCE vuln, and Zig leaves #GitHub, and more! #ElixirLang www.youtube.com/watch?v=0FWy...
youtube.com
Thinking Elixir Podcast 283: Erlang Turns 27 and React at Risk
YouTube video by Mark Ericksen
086
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 04/11/2025
News includes a new HexDocs search engine built in Gleam, Software Mansion's interactive Elixir Language Tour running in #WebASM, Stable Diffusion on Mac GPUs through EMLX, #AWS outage lessons, and more! #ElixirLang www.youtube.com/watch?v=SKMA...
youtube.com
Thinking Elixir Podcast 277: Searching Across the Hexiverse
YouTube video by Mark Ericksen
0103
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 28/10/2025
News includes Elixir v1.19 release, #OpenChain certification for the BEAM ecosystem, #TailwindCSS 4 update for a LiveView component library, ClaudeCode Web with #GitHub integration, a critical #Redis CVE, and more! #ElixirLang www.youtube.com/watch?v=1-3m...
youtube.com
Thinking Elixir Podcast 276: Elixir v1.19 Types and Speed
YouTube video by Mark Ericksen
0114
Paraxial.io @paraxialio.bsky.social · 10/10/2025
Secure AI Coding in Elixir: I Want to Believe - Elixir Montréal Sept 2025 Presented by Michael Lubas, Paraxial.io Founder www.youtube.com/watch?v=biSJ...
youtube.com
Secure AI Coding in Elixir: I Want to Believe - Elixir Montréal Sept 2025
YouTube video by Montreal Elixir
000
Paraxial.io @paraxialio.bsky.social · 24/09/2025
Tonight @ 6pm EDT!
000
Paraxial.io @paraxialio.bsky.social · 22/09/2025
This Wednesday, 9/24 @ 6pm EDT join the online Montréal Elixir Meetup for a talk by paraxial.io Founder Michael Lubas: Secure AI Coding in Elixir: I Want to Believe RSVP Now! guild.host/events/secur...
guild.host
Secure AI Coding in Elixir: I Want to Believe | Guild
Sep 24th 6:00PM: The rapid adoption of AI coding tools is generating vulnerabilities faster than ever, creating new risks for coders and bus
010
Paraxial.io @paraxialio.bsky.social · 05/09/2025
Why We Don't Run Your Code How an AI code review tool exposed 1 million private repositories, and why our design prevents that from happening to you. paraxial.io/blog/code-run
paraxial.io
Why We Don't Run Your Code
A cautionary tale of security design.
000
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 26/08/2025
News includes Tidewave Web’s #AI-powered development assistant with José Valim joining to go deeper, a comprehensive #ElixirLang blog post on 2025 interoperability options, Livebook Teams launching out of beta, and more! www.youtube.com/watch?v=pKlw...
youtube.com
Thinking Elixir Podcast 267: Dive into Tidewave Web with José Valim
YouTube video by Mark Ericksen
0146
Paraxial.io @paraxialio.bsky.social · 16/08/2025
"How can an Elixir web application be faster for end-users than one written in C?"
2205
Paraxial.io @paraxialio.bsky.social · 12/08/2025
Glad this is settled thank you @pgus.bsky.social
000
Paraxial.io @paraxialio.bsky.social · 07/08/2025
Secure all your Elixir code - including AI generated - today!
000
Paraxial.io @paraxialio.bsky.social · 05/08/2025
Claude Code x Paraxial's CLI native scan - tips for prompting + context soon!
000
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 05/08/2025
News includes Phoenix v1.8 shipping with AGENTS support, Popcorn bringing Elixir to the browser via #WebAssembly, LiveVue v0.6.0 with major performance improvements, and more! #ElixirLang #AI www.youtube.com/watch?v=8hMc...
youtube.com
Thinking Elixir Podcast 264: Hot Reload In Dev and QA Bottlenecks
YouTube video by Mark Ericksen
0135
Paraxial.io @paraxialio.bsky.social · 04/08/2025
Hope you can make it tonight!
000
Reposted by Paraxial.io
ExMex Conf @exmexconf.bsky.social · 30/07/2025
🎉 Tickets for ExMex Conf go on sale today! Join us Nov 6–7 in downtown Austin for two days of Elixir talks and community connection. 🎟️ Our “Doors Open” price is available for 2 weeks—grab your spot: → exmexconf.com #ExMexConf #ElixirLang #MyElixirStatus
077
Paraxial.io @paraxialio.bsky.social · 29/07/2025
This Monday, Aug 4th join the online Denver Elixir Meetup for a talk by Holden Oullette - What's Next for Elixir Security Hope to see you there! www.meetup.com/denver-erlan...
meetup.com
Denver Elixir Meetup (Online), Mon, Aug 4, 2025, 6:00 PM | Meetup
Speaker: Holden Oullette Talk: What's Next for Elixir Security This event is fully remote, see the Zoom link to join. Meetup schedule: 6pm - 6:30pm, Group introductions
011
Reposted by Paraxial.io
Steffen Deusch @steffend.me · 15/07/2025
We released #Phoenix 1.8.0-rc.4 yesterday and Phoenix #LiveView 1.1.0-rc.3 just now. This should be the final RC before 1.1.0, so please check it out if you can! #MyElixirStatus
1298
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 15/07/2025
News includes Phoenix LiveView 1.1.0 release candidates, @josevalim.bsky.social's DevLabs interview on building authentic tools, 9 reasons to choose Elixir, Fgma's $300K daily AWS costs, and more! #ElixirLang www.youtube.com/watch?v=Di-4...
youtube.com
Thinking Elixir Podcast 261: Why Elixir and a $300K Daily Bill?
YouTube video by Mark Ericksen
1124
Paraxial.io @paraxialio.bsky.social · 02/07/2025
Elixir and Phoenix Security Checklist: 11 Best Practices paraxial.io/blog/elixir-...
paraxial.io
Elixir and Phoenix Security Checklist: 11 Best Practices
A practical guide to Elixir security.
000
Paraxial.io @paraxialio.bsky.social · 18/06/2025
Phoenix 1.8 Gets Official Security Documentation paraxial.io/blog/phoenix...
paraxial.io
Phoenix 1.8 Gets Official Security Documentation
Protect your application from hackers
0154
Paraxial.io @paraxialio.bsky.social · 09/06/2025
Why GetThru uses Paraxial.io paraxial.io/blog/getthru...
paraxial.io
Why GetThru uses Paraxial.io
Why GetThru uses Paraxial.io for application security from development to production.
010
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 20/05/2025
News includes Hex 2.2.0 with dependency updates, @HoneyBadgerApp 's APM for #ElixirLang, @josevalim.bsky.social demos Tidewave with @zed.dev, LiveDebugger v0.2.0, @davelucia.com's Elixir #Lua library, Paulo's "handoff" for distributed execution, and more! www.youtube.com/watch?v=eBgi...
youtube.com
Thinking Elixir Podcast 254: Lua Scripting and Tidewave on Zed
YouTube video by Mark Ericksen
2165
Paraxial.io @paraxialio.bsky.social · 29/04/2025
Why VC Funded Security Firms Miss a Critical Vulnerability paraxial.io/blog/why-vcs...
paraxial.io
Why VC Funded Security Firms Miss a Critical Vulnerability
Outcomes are often determined by financial incentives.
011
Reposted by Paraxial.io
ThinkingElixir @thinkingelixir.com · 29/04/2025
News includes a critical vulnerability in Erlang/OTP SSH, @JoseValim's new project teaser, Oban Pro's new "Cascade Mode", Semaphore Ci open-sourcing their Elixir platform, code sandboxing options, and more! #ElixirLang #Erlang www.youtube.com/watch?v=TG0l...
youtube.com
Thinking Elixir Podcast 251: SSH Vulnerability and Cookies are Changing
YouTube video by Mark Ericksen
0155
Reposted by Paraxial.io
Adolfo Neto @adolfoneto.elixiremfoco.com · 17/04/2025
What the Critical Erlang SSH Vulnerability Means for Elixir Developers #ElixirLang paraxial.io/blog/erlang-...
paraxial.io
What the Critical Erlang SSH Vulnerability Means for Elixir Developers
How to determine if you are vulnerable.
031
Reposted by Paraxial.io
Jake Morrison @reachfh.bsky.social · 17/04/2025
A critical security vulnerability has been found in Erlang’s ssh server. paraxial.io/blog/erlang-ssh
021
Reposted by Paraxial.io
Mike Zornek, looking for work. @mikezornek.com · 17/04/2025
👨‍💻 Be sure to update your BEAM things asap. There is a bad SSH vulnerability out there. #ElixirLang
paraxial.io
What the Critical Erlang SSH Vulnerability Means for Elixir Developers
How to determine if you are vulnerable.
043
Paraxial.io @paraxialio.bsky.social · 17/04/2025
What the Critical Erlang SSH Vulnerability Means for Elixir Developers paraxial.io/blog/erlang-...
paraxial.io
What the Critical Erlang SSH Vulnerability Means for Elixir Developers
How to determine if you are vulnerable.
163
Reposted by Paraxial.io
{:ok, Noah} @nezteb.net · 07/04/2025
Aaaaand, merged. 😄 github.com/elixir-ecto/... #ElixirLang
github.com
Add @schema_redact: :all_except_primary_keys module attribute to Ecto Schema by Nezteb · Pull Request #4599 · elixir-ecto/ecto
Initial proposal: https://groups.google.com/g/elixir-ecto/c/kQJN-7HPn6E @josevalim initially approved of the second of my two proposed options: @schema_redact :all_except_primary_keys schema "...
0173
Reposted by Paraxial.io
José Valim @josevalim.bsky.social · 16/04/2025
Soon™
A rounded blue logo with a wave inside.
1813217
Paraxial.io @paraxialio.bsky.social · 15/04/2025
We are proud to sponsor Thinking Elixir, a fantastic podcast!
010