Remote

Matt Brown

@mattbrowndev@mastodon.social

mastodon 4.7.0-beta.1

I write developer tooling at Slack. I used to work at Vimeo, where I made @psalm@phpc.social

0 Followers

0 Following

7 Posts

Joined January 26, 2024

Location:

Brooklyn NY

Web:

https://mattbrown.dev

Posts

Matt Brown @mattbrowndev@mastodon.social · Aug 07, 2026

Replying to @beberlei@phpc.social

@beberlei@phpc.social the language can still be a bottleneck if it forces that I/O to be performed serially

Matt Brown @mattbrowndev@mastodon.social · Aug 05, 2026

Replying to @brzuchal@phpc.social

@brzuchal@phpc.social looks cool, but nothing about the word “vec” tells me it’s immutable, nor does the “append” method imply you get a new collection.

Matt Brown @mattbrowndev@mastodon.social · Jul 27, 2026

RE: https://phpc.social/@OndrejMirtes/116987767186918032 A few LLM holdouts are semi-retired, or have enough backers that they can hold to their well-founded principals without risking their career. But most other talented software professionals who refuse to use LLMs are putting themselves at a huge disadvantage.

Quoting

Ondřej Mirtes @OndrejMirtes@phpc.social

Hot take: thanks to LLM coding agents, the average software quality will increase, not decrease.

Open quoted post

Matt Brown @mattbrowndev@mastodon.social · Apr 03, 2026

Replying to @asgrim@phpc.social

@asgrim@phpc.social oh ok, you’re saying it’s a Faustian bargain

Matt Brown @mattbrowndev@mastodon.social · Apr 03, 2026

Replying to @asgrim@phpc.social

@asgrim@phpc.social sorry, but what is the con? LLMs provide value in the same way driving a car provides value. It uses natural and human resources in the same way a car uses natural resources. But we don’t call driving a “con”.

Matt Brown @mattbrowndev@mastodon.social · Mar 23, 2026

Replying to @sarah@phpc.social

@sarah@phpc.social @pollita@phpc.social Here's Daniel's initial blog post on the matter: https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/ In the hands of experts, proprietary LLM-assisted security analysis caught 50 bugs/vulnerabilities in Curl: https://daniel.haxx.se/blog/2025/10/10/a-new-breed-of-analyzers/ But commercially-available LLMs make it easy for clueless grifters to submit HackerOne reports, so they had to shut down the whole thing.

Matt Brown @mattbrowndev@mastodon.social · Nov 12, 2025

Replying to @sebastian@phpc.social

@sebastian@phpc.social small nit: the NPM registry is owned and operated by Microsoft. NPM is not party to the statement because NPM does not have the same resource issues as independent registries like PyPi or Packagist.

Matt Brown

Posts

Remote instance