Sign in

Kelly Shortridge

@shortridge.bsky.social
2.7K followers 113 following 154 posts

software resilience, cybersecurity, complex systems | chief product officer @fastly.com | nyc “In the information society, nobody thinks. We expected to banish paper, but we actually banished thought.” kellyshortridge.com @swagitda_ on Twitter

PostsRepliesMedia
Reposted by Kelly Shortridge
Sung Kim @sungkim.bsky.social · 08/09/2026
They discovered that reasoning models produce fractals when asked to solve hard problems. You can use nonlinear dynamics to probe the thinking processes of recurrent depth models on Sudoku, mathematics, and even ARC-AGI
310610
Reposted by Kelly Shortridge
Elle Cordova @ellecordova.bsky.social · 08/09/2026
I am the very model of a modern day typographer A font take on the tune “Modern Major General” by Gilbert & Sullivan #typography #fonts #graphicdesign
24650271562
Reposted by Kelly Shortridge
Amy Tobey @renice.bsky.social · 13/07/2026
kaibo (multi-model subagents for your agent with safe shell powers) binaries are signed now. grab a binary, add it to your agent as a stdio mcp, use its /configure prompt to do the rest. containers next, then it gets a proper release. please let me know if it works github.com/tobert/kaibo...
github.com
Release v0.2.0-rc.3 · tobert/kaibo
What's Changed fix(release): bundle-only blob signature — cosign v3 ignores the legacy pair (rc.2 kink) by @tobert in #70 Full Changelog: v0.2.0-rc.2...v0.2.0-rc.3
151
Reposted by Kelly Shortridge
Mayor Zohran Kwame Mamdani @mayor.nyc.gov · 13/07/2026
If you’re a software engineer, designer, or technologist who wants to help make City government work better and faster, apply to join our PIT crews at nyc.gov/pitcrew.
Mayor Mamdani races on a Go Kart.
271088233
Reposted by Kelly Shortridge
Gef the Toking Mongoose @geftokingmongoose.bsky.social · 08/06/2026
You used to go to websites and they would have guestbooks that people would sign like it was a bed and breakfast
Still from the television show the Simpsons showing Grandpa Simpson talking the children of springfield
8882221921
Reposted by Kelly Shortridge
[object Object] @zeigenvector.bsky.social · 01/06/2026
I'm looking to line up my next job! If you need a frontend platform girlie, let me know! I particularly like making complex web apps faster! Could an app you work on, use, or know of benefit from that? LinkedIn: www.linkedin.com/in/zeigenvec... LeadDev Talk: www.youtube.com/watch?v=f-B2... ✨
0811
Reposted by Kelly Shortridge
Nick Rempel @nrempel.com · 06/06/2026
15992247
Reposted by Kelly Shortridge
Kate from Kharkiv @kateinkharkiv.bsky.social · 06/06/2026
Birds in Donetsk are using fiber-optic drone wire to build their nests...
27925265
Reposted by Kelly Shortridge
Naomi Alderman @naomialderman.bsky.social · 05/06/2026
every time I say this, someone didn't know: you can get the NYRB, the New Yorker, the LRB, Paris Review, The Spectator (weirdly not New Statesman), The Week, both French & Italian Vogue & New Scientist among many many other magazines FREE via the Libby app from your local library?
261526605
Reposted by Kelly Shortridge
LaurieWired @lauriewired.bsky.social · 05/06/2026
I love looking at old crazy ideas in expired computer patents. Modern CPU Branch Predictors are invisible. You, as a dev, can’t really see *what* paths the CPU is guessing…it’s all a bunch of AMD/Intel/Apple secret sauce. For a brief moment in the 80s, there was this wacky proposition of...
7885
Reposted by Kelly Shortridge
jade @jade.fyi · 30/05/2026
build system alignment chart with two axes: process and product. process goes from purist (sandboxed, precise dependencies), neutral (dependencies are tracked), and radical (dependencies? yolo). product goes from purist (must build a program), neutral (must orchestrate computation), to radical (must build something). lawful good: bazel, neutral good: excel, chaotic good: a kid with a bucket in a sandbox. lawful neutral: make, true neutral: zapier workflows, chaotic neutral: a project manager with a Gantt chart. Lawful evil: build.bat, neutral evil: a jupyter notebook run out-of-order, chaotic evil: bob the builder.
1934960
Reposted by Kelly Shortridge
[object Object] @zeigenvector.bsky.social · 01/06/2026
If you're in NYC on June 18, come to my talk! And if you find yourself in the NYC area and want to give a talk of your own about Web Performance in the coming months, let me know! We'd love to have you!
041
Reposted by Kelly Shortridge
Mayor Zohran Kwame Mamdani @mayor.nyc.gov · 01/06/2026
Discrimination based on gender identity or expression is illegal in New York City. Trans New Yorkers are protected by law. Our City will protect your rights, defend your humanity and stand beside you without hesitation.
them.us
NYC Mayor Zohran Mamdani Kicks Off Pride With “Trans Rights Are Human Rights” Campaign
The campaign will highlight existing protections for transgender and gender-nonconforming New Yorkers.
161139722929
Reposted by Kelly Shortridge
CyberCanon @cybercanon.org · 23/03/2026
(part 3/3) 🪶 Kelly Shortridge - Birds of a Feather: Adapting to the Unknown: Resilience Engineering in a Time of Chaos For more details, see our article on CyberCanon RSAC sessions/signings: www.linkedin.com/pulse/cyberc... #RSAC2026 #CybersecurityBooks
linkedin.com
011
Reposted by Kelly Shortridge
École des Bro-Arts @aphyr.woof.group.ap.brid.gy · 05/02/2026
Anthropic’s paper argues reality distortion is rare in software domains, but I’m not so sure. aphyr.com/posts/405-trudging-throug…
aphyr.com
Trudging Through Nonsense
116
Reposted by Kelly Shortridge
Fastly @fastly.com · 04/02/2026
Big props to Rick Horwitz, Senior Sales Engineer at Fastly, for speaking at FutureCon LA on “Making attackers cry: outsmarting them with deception.” Great insights on using deception to turn the tables on attackers. 👏 Take a look: vimeo.com/1156613679/2...
vimeo.com
FASTLY - 15 January 2026 - LA
This is "FASTLY - 15 January 2026 - LA" by FutureCon Events on Vimeo, the home for high quality videos and the people who love them.
041
Reposted by Kelly Shortridge
ken griffin jr @dijkstracula.bsky.social · 02/01/2026
One of my 2026 goals is to start writing more, so over the holidays I resurrected my old blog and plopped out a post about silly coding interview problems in the Lean theorem prover dijkstracula.github.io/posts/provin...
dijkstracula.github.io
Proving the Coding Interview: Lean vs Dafny cage-match - Nathan Taylor
1186
Reposted by Kelly Shortridge
Camille Fournier @skamille.themanagerswrath.com · 23/12/2025
Free (as in puppy) idea for an enterprising tech journalist/blogger: the 10 year rise of corporatized open source
2193
Reposted by Kelly Shortridge
Fastly @fastly.com · 11/12/2025
Following last week’s critical #React2Shell disclosures, two more related CVEs dropped on 12/11. Fastly customers: Based on current info, Fastly’s platform & apps aren’t vulnerable — but orgs should still review their own React + Next.js apps. Learn more here: www.fastly.com/blog/react2s...
041
Reposted by Kelly Shortridge
Katerina Marchán 🐈 @zkat.tech · 09/12/2025
www.fastly.com/blog/unparal... This is my first big project since joining @fastly.com and I'm very hype about it. Literally C++ built on _top_ of our Rust SDK, because having access to C++ does, in fact, still open doors to a lot of folks.
fastly.com
Unparalleled Performance: Bring Your C++ Logic to the Edge | Fastly
Bring your C++ logic to the edge with the Beta Fastly Compute SDK. Achieve unparalleled, near-native performance, low-latency, and enhanced security via WebAssembly (Wasm).
2376
Reposted by Kelly Shortridge
Jepsen @jepsen.mastodon.jepsen.io.ap.brid.gy · 08/12/2025
A new #Jepsen report: we demonstrate data loss and persistent split-brain in the NATS streaming system, in response to simulated power failures/OS crashes. jepsen.io/analyses/nats-2.12.1
jepsen.io
Jepsen: NATS 2.12.1
12412
Reposted by Kelly Shortridge
Neil Lewis, Jr. @neillewisjr.bsky.social · 09/12/2025
In addition to all of the other benefits already reported about NYC congestion pricing, "In the first six months of the program, air pollution – in the form of particulate matter 2.5 micrometers and smaller – dropped by 22% in the Congestion Relief Zone (CRZ)" news.cornell.edu/stories/2025...
news.cornell.edu
Congestion pricing improved air quality in NYC and suburbs | Cornell Chronicle
Cornell researchers tallied the environmental benefits of New York City’s congestion pricing program and found air pollution dropped by 22% in Manhattan, with additional declines across the city’s fiv...
111123374
Reposted by Kelly Shortridge
Fastly @fastly.com · 06/12/2025
🚨 React2Shell Update: Fastly saw a 2,775% spike in attack traffic after the public PoC dropped. Attackers are actively scanning — verify exposure and patch now. Updates: • Expanded Virtual Patch • NGWAF detecting new scanners • Bot Management flagging tooling More intel to come. #React2Shell
041
Kelly Shortridge @shortridge.bsky.social · 06/12/2025
⚠️ Friday’s #React2Shell update @fastly.com saw a 2,775% increase in attack activity across our global network between the peak we reported yesterday (Dec. 4th) and 20:00 UTC today (see graph). We recommend you immediately patch vulnerable apps and apply proactive protections to buy time as needed.
062
Reposted by Kelly Shortridge
Alex Rasmussen @alexras.net · 05/12/2025
You might want to check on your apps. There’s some 🔥 🥒 🔥 spicy unpickling going on …
031
Kelly Shortridge @shortridge.bsky.social · 05/12/2025
⚠️ update on #React2Shell After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph). We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
Area chart displaying hourly volume of requests triggering Fastly's NGWAF signals for CVEs 2025-55182 & 2025-66478. The chart shows no signals prior to 7pm GMT, a small spike between 7-9pm GMT, followed by a spike at 10pm GMT, and a massive spike at 11pm GMT.
1188
Kelly Shortridge @shortridge.bsky.social · 04/12/2025
There’s a react2shell POC circulating that appears to be viable. Fastly verified our NGWAF successfully blocks this exploit variant. ⚠️ Our initial data points suggest attackers are actively probing for vulnerable apps. ⚠️ Identify and update your React & Next.js apps + layer proactive protection.
1122
Kelly Shortridge @shortridge.bsky.social · 04/12/2025
the bad news: lots of sloppity slop PoCs (slopocs???) abounding for the critical pre-auth React RCE the good news: more time for you to patch your #React & #Nextjs apps ✨ my write up from yesterday on what to know & what to do: www.fastly.com/blog/fastlys...
fastly.com
Fastly’s Proactive Protection for Critical React RCE CVE-2025-55182 and CVE-2025-66478 | Fastly
Protect your apps from the critical React RCE bugs (CVE-2025-55182/66478). Fastly's NGWAF Virtual Patch provides proactive defense.
040
Reposted by Kelly Shortridge
noé @celechii.itch.io · 29/11/2025
last week i remembered that macOS lets you set your own icons and that *I* have the power to delegitimize the professionalism of the software that runs on my machine, so here's a thread of the 16 new icons i've made so far i really forgot how fun it was to just sit down and make art for myself :')
comparison between apple's finder icon and mine. apple's is the split blue and white smiley face, mine is two blue and white anime girls making outcomparison between discord's icon and mine. mine is like a screaming cat on a blue/purple slimy backgroundcomparison between celsys's clip studio paint icon and mine. mine is similar but rotated with some comic styling and pink and blue highlightscomparison between mozilla's firefox icon and mine. mine is similar but looks closer to the old firefox icon and brings back the little arm and gives the fox a cute little smiley face
36126193281
Reposted by Kelly Shortridge
Stefano Zanero @raistolo.bsky.social · 28/11/2025
So, in case you haven’t heard, a recent upset of an A320: avherald.com/h?article=52... Was traced back to, of all things, solar flares disrupting an onboard system: avherald.com/files/AOT-A2... The fix is a software patch on most of the 6000 affected aircraft, but it still takes 3 hours to complete
193
Kelly Shortridge @shortridge.bsky.social · 24/11/2025
OH in my downtown Manhattan hot yoga class: woman 1, sad: “Yeah, I unfortunately had to move to Boston for work.” woman 2, sincere: “Oh no! Do they even have yoga out there?”
2121
Reposted by Kelly Shortridge
Camille Fournier @skamille.themanagerswrath.com · 22/11/2025
Can you believe I wrote about manager READMEs again? medium.com/@skamille/re... If you hate medium, you can also look at my ancient blogger where the formatting is a bit wonky: www.elidedbranches.com/2025/11/revi...
medium.com
Revisiting Manager READMEs
Several years ago, I published a critique of manager READMEs that succeeded in stirring up a lot of feelings, pro and con. I’d like to…
2406
Reposted by Kelly Shortridge
Brent Toderian @brenttoderian.bsky.social · 20/11/2025
Keep this in mind when people claim cars mean business — closing Central #Madrid to cars over holidays resulted in a 9.5% boost in retail spending on its main shopping street: STUDY. There was also a 71% drop in air pollution. Via @carltonreid.com in @forbes.com. #citymakingmath #citiesforpeople
forbes.com
Closing Central Madrid To Cars Resulted In 9.5% Boost To Retail Spending, Finds Bank Analysis
City of Madrid significantly boosted the takings of its shops and restaurants last Christmas by banning cars from the CBD, finds an analysis by Spain's second largest bank.
202173766
Reposted by Kelly Shortridge
Adam Chalmers @adamchalmers.com · 14/06/2025
on type safety
Frog and Toad illustration edited to say: Frog put the value in an option. "There", he said, "now we will not deref any more null pointers". "But we can unwrap the option," said Toad. "That is true", said Frog.
849392
Reposted by Kelly Shortridge
Frontend Dogma @frontenddogma.com · 22/11/2025
The Last Couple Years in V8’s Garbage Collector, by @wingolog.org: wingolog.org/archives/2025/11/13/th… #v8 #javascriptengines #garbagecollection #memory #retrospectives
wingolog.org
the last couple years in v8's garbage collector — wingolog
wingolog: article: the last couple years in v8's garbage collector
023
Reposted by Kelly Shortridge
Camille Fournier @skamille.themanagerswrath.com · 22/11/2025
Which podcast is mispronouncing either metric or matrices as metrices
1111
Kelly Shortridge @shortridge.bsky.social · 22/10/2025
as someone who often thinks in ancient oak-style trees with their sprawling, gnarled branches extending into the blue infinity: I’m so so hyped we launched a way for you to visualize your public API hierarchy as a tree!!! ✨ let us know what you think
091
Reposted by Kelly Shortridge
Fastly @fastly.com · 30/09/2025
💻 Make sense of the chaos with API Discovery 🔍 Managing APIs doesn’t have to be a burden. With just one click, API Discovery takes away the mystery and gives you complete visibility into what APIs are in use on the Fastly edge network. Learn more: www.fastly.com/blog/make-se...
011
Reposted by Kelly Shortridge
Lisi Hocke @lisihocke.bsky.social · 14/09/2025
As we recently talked about our security strategy, my teammate made me aware of this post by @shortridge.bsky.social: kellyshortridge.com/blog/posts/o... There's so much wisdom in there, absolutely recommended reading! ✨
kellyshortridge.com
161
Reposted by Kelly Shortridge
Oregon 🕎🎲 @oregonthedm.bsky.social · 12/06/2025
Modern Programmers do be getting humbled by the little old lady in accounting who has custom crafted 70 excel sheets that all cross communicate and update each other.
514715
Reposted by Kelly Shortridge
halvarflake.bsky.social @halvarflake.bsky.social · 10/09/2025
I have often stated that well-implemented memory tagging will be a game changer for memory corruptions. And it seems that with the next iPhone it's finally here: security.apple.com/blog/memory-...
security.apple.com
Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research
Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our adv...
45617
Reposted by Kelly Shortridge
Dr Nadiah Kristensen @nadiah.bsky.social · 26/08/2025
Check out the graphical abstract for a paper recently published in Ecological Modelling. I have papers published in Ecological Modelling. Never again, I guess.
A diagram titled "Ecological Network Optimisation" with attractive landscapes and networks and very clear AI-generation artifacts.
1712746
Reposted by Kelly Shortridge
Phrack Zine @phrack.org · 18/08/2025
At long last - Phrack 72 has been released online for your reading pleasure! Check it out: phrack.org
The table of contents for Phrack 72 from phrack.org
012061
Reposted by Kelly Shortridge
Fastly @fastly.com · 18/08/2025
👏 Thx to the @python.org for the shout out in their latest blog post on strengthening PyPI security! Their new safeguards against domain resurrection attacks make it harder for attackers to exploit expired domains for account takeovers, a win for open-source security. blog.pypi.org/posts/2025-0...
blog.pypi.org
Preventing Domain Resurrection Attacks - The Python Package Index Blog
PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over PyPI accounts through password r...
055
Reposted by Kelly Shortridge
Tom Warren @tomwarren.co.uk · 10/08/2025
end of an era. AOL is discontinuing its dial-up internet next month
23783200
Reposted by Kelly Shortridge
Camille Fournier @skamille.themanagerswrath.com · 07/08/2025
Ignoring all else, I actually think "it just does stuff" is Bad, Actually. My honest to god thought about work for years and years and years has been "too much doing without thinking, productivity theater, generating just to generate" www.oneusefulthing.org/p/gpt-5-it-j...
oneusefulthing.org
GPT-5: It Just Does Stuff
Putting the AI in Charge
3535
Reposted by Kelly Shortridge
Melanie Walsh @mellymeldubs.bsky.social · 06/08/2025
For PW, I wrote about the persistent gender gap in fictional animal characters—a pattern I noticed while analyzing 100s of picture books with @puddingviz.bsky.social. It's a more interesting (and pervasive) problem than I first thought. #kidlit #booksky 🔗: www.publishersweekly.com/pw/by-topic/...
A dot plot titled '"nthropomorphized Animals in Popular Children's Books (*Animals That Appear in 10+ Books)" showing the proportion of animals depicted with gendered pronouns. Animals toward the left side are more often represented as male (he/him), and those toward the right are more often represented as female (she/her). Birds, ducks, and cats lean female. Bears, monkeys, dogs, elephants, foxes, wolves, and frogs lean male. Each animal is represented by a colorful, illustrated face.Screenshot of Publishers Weekly article titled "The Sneaky Gender Bias in Picture Books: Animal Characters" that includes photo of the author, a woman with brown hair and glasses. Text reads: "Melanie Walsh is an assistant professor in the Information School and an adjunct assistant professor in the English department at the University of Washington. She uses data to analyze contemporary culture, especially literature and publishing. She is currently at work on a book, When Postwar American Fiction Went Viral: Protest, Profit, and Popular Readers in the 21st Century, which follows the surprising social media afterlives of five iconic American authors. Here she shares her investigations into the subtle gender imbalance often at play in picture books featuring animal characters.

I recently published a data analysis with The Pudding, a digital publication known for data-driven storytelling, about animal characters in picture books. We read approximately 300 popular English-language picture books from the past 70+ years and noted the gender of any anthropomorphized animal character that was important to the story.

We found that male animal characters were twice as common as female characters across all the books. Some strong animal stereotypes also emerged: frogs and dogs were boys; birds and cats were girls. Even more surprising, according to our data: this disparity is not obviously improving, even over the last 25 years."
69729