Bobby DeSimone (@bdd_io) header
Bobby DeSimone (@bdd_io) profile picture
Joined August 2017
Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)Photo by Bobby DeSimone (@bdd_io)
Bobby DeSimone retweeted
Alright, full game is done and open sourced for your #GitHubUniverse badge. Hack your badge by throwing your clanker at the repo and learn about @pomerium_io in this old-school Zelda like game. Repo in the replies. Shoutout to the @syntaxfm usb-c cable that made my hack possible!
1
1
1
271
What we are seeing is people proving their use case with frontier models (fabel, astra etc) , then fine-tuning open models for prod for cost, control, and data tenancy reasons. I think we'll see a lot more of this as prod deployments ramp up. You don't need a hyper-capable general frontier model for most deployed use cases.
lot of people making stuff up so here's some more context you can imagine there's hidden enterprise demand for open source models that isn't visible but if you look at the top inference providers that aggressively go after this business, they have shared some numbers and they are all roughly the same size as us. and at best there's 5 of them if you think enterprises are self hosting inference on their own GPUs, there are so few people who can run reliable inference and they get paid a lot and work at ai labs. and if they really want sovereignty they're not getting that by leasing GPUs from a third party the root point here is this is entirely the wrong way to look at things, you just have to look at products how many products exist with a lot of traction that can use open models? this is what creates demand, it's not some magic thing that grows on its own OpenCode is one of those and we do see a lot of enterprise inbound. but it's so early, all of these companies are just starting to look at mixing in some OSS inference so yes demand will probably go up in the future but everyone in this industry is investing resources in preparing for that future. and so few people are building the products that will make it happen
1
21
what we are seeing as well... there's a lot of factors going into this, but the main one is the difficulty from going from dev to prod. cost, security, reliability, All the things we had to figure out with cloud computing we're having to figure out for this new type of actor model.
This is correct. The vast majority of enterprise workflows have not actually had agents applied to them in any meaningful way. The economy probably has this deployed < 1% right now. At best you have a few automated systems in a company that do a single pass of an LLM to make a decision or provide feedback, but very little real “automation”. Some of this is a statement about the adoption rates of technology in enterprises, but the vast majority of it is really just due to the capability of AI itself. That’s all changing. Now with computer use, long running agents, harness improvements and surrounding infrastructure, we’re finally at a point where we can start to apply agents at more complex workflows. We will see self-improving systems that can take any particular workflow goal and improve the execution rates over a volume of instances. And with the emerging form factor of agent swarms, you can just choose to deploy any amount of compute at a problem and agents will off and do the work. This won’t be about and users prompting agents to complete a specific task for them, but instead the organization reengineering the underlying workflows to take advantage of agents in their processes. This will have a massive impact in finance, life sciences, healthcare, and other information-heavy domains. Lots of opportunity to build and deploy these systems right now.
1
14
Bobby DeSimone retweeted
Bring me back to Italy 20 years ago, When life was lived the right way
72
167
10
4,783
625,493
I’m experiencing how my wife felt during Covid. Not fun.
Sometimes I think “how do all of these people know so much about ai and cybersecurity and biology” and then I realize
1
62
Complete slopfest of a report. Which matches most reports everyone is getting rn.
RE: Tailworm 1. The "report" is totally unreadable. I, as someone who is very familiar with reporting vulns and kubernetes, am totally unable to parse the sections on kubernetes. There may be valid bugs, but I can't tell. I would not have reported these as vulns in this state.
32
Bobby DeSimone retweeted
Was anyone else around when that root SSH 0-day dropped in like 1997?
13
1
25
1,781
‼️ HPE fixed 72 flaws in the software behind its Aruba Wi-Fi controllers, gateways and access points, 30+ of them critical. Eight score a perfect 10.0 and let unauthenticated attackers bypass login or run commands on AOS-8 and AOS-10.
6
111
11
647
45,441
unfortunately
SITUATION DETECTED: CloudFlare CEO Matthew Prince says he is aware of additional severe vulnerabilities in other pieces of critical software, and said “I think we’re going to have a couple years where every single week it’s going to feel like the sky is falling,” per Reuters.
21
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
The vulnerability tsunami is coming in just a few months and there won’t be enough time to patch critical infrastructure. Network isolation described below (air-gaps and data diodes!) needed now!
457
1,398
748
10,235
4,439,733
Bobby DeSimone retweeted
Quest Diagnostics has been hacked. Patient data was exposed. They serve roughly half of U.S. hospitals and physicians. Investigation ongoing.
501
2,820
1,098
14,039
2,517,990
Bobby DeSimone retweeted
If you're at AGNTCon + MCPCon in San Jose this week, be sure to catch Nick's talk! events.linuxfoundation.org/a…
Boarding in about an hour to start my mini US conference tour. If you're at @AllThingsOpen this week, come say hey! I'll be speaking on Tuesday, but also working the @pomerium_io booth. I'll also be at AGNTCon + MCPCon in San Jose and wrapping up a whirlwind tour at @githubuniverse with a talk on the 29th. If you're at any of those conferences, I'd love to hang. Don't be shy and come say hey!
1
2
62
Insane number of security incidents in the last couple of days. CA leak, PHP CVE 10, Railway, Plex, LiteLLM to name a few. All would be year defining in a different era. Things are going to get much worse. And sorry, no, AI is not the "fix" here. LLMs are very good at finding needles (e.g. exploits).. They are shit at fixing them.
23
Insane number of security incidents in the last couple of days. CA leak, PHP CVE 10, Railway, Plex, LiteLLM to name a few. All would be year defining in a different era. Things are going to get much worse. And sorry, no, AI is not the "fix" here. LLMs are very good at finding needles (e.g. exploits).. They are shit at fixing them.
1
1
2
184
- eMudhra CA compromise - PHP2Shell - LiteLLM supply chain attack - Node2Shell - Gitlab CVSS 10.0
1
162
Wiz sells. I think they make software too.
Why is Wiz taking any credit for this? Their blog post words it like they discovered it.
32