LLM punk. git delendum est. Tax the rat farms. (ex) iOS Tech Lead @moovit. He/him ꙮ
Joined January 2009
- Tweets8.7K
- Following185
- Followers225
- Likes2.4K
Sadly there's little need for software without edge cases.
A thousand nos for a yes. It's the yes that matters.
On a flight next to a Arch Linux laptop user and he brought a flatbread, vegetables and a can of pickled mushrooms and I don't know if there is a more Linux in flight meal.
Chat is this yaml
I'm excited to launch:
SOML · A config format for humans
- Braceless top-level object
- Quoteless keys
- No unnecessary commas
- Comments
- Duration type
Draft spec. Feedback wanted.
soml.sh
Igor Makarov ꙮ retweeted
So much of my feed is AI investors crying about imaginary issues, because they know that open weight models threaten their ROI. All of these critical vulnerabilities were found with closed AI model, then responsibly disclosed to vendors so they could be fixed before attackers abuse them.
Even if the researchers had used abliterated models, they are still responsibly disclosing the vulnerabilities so they can be fixed, which is still providing important defenses against hackers.
Notice how they always just handwave about "critical vulnerabilities" because they know they can't point to a single real example. That Anthropic article is extremely low effort propaganda designed to try and steer the government towards banning open weight models.
Bad faith actors with ulterior motives trying to lay the groundwork for extremely harmful regulations is all these people are. What do you think happens when companies can't access cheap AI inference, but criminal hackers can, because (spoiler alert) criminals don't follow the law.
I strongly believe a part of why so many critical vulnerabilities are happening all over the proliferation of "abliterated" models, or models with safeguards removed.
You can access an abliterated GLM 5.3, a near frontier AI model, on @abliteration_ai today. And it's a world class penetration tester for like $10.
Everyone's talking about the slop em dash, no one is mentioning slop period at the end of slogans, taglines etc
Curious why no mobile breaches
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
I know of a restaurant owner who had some coding experience, who replace his pos software with bespoke stuff he vibe coded himself. Unhinged because money, but still.
The dirty secret of SAAS is that subscription pricing allows you to keep charging customers who aren't really using the product.
The downside of this is that when your subscriptions finally churn, it's a *lagging indicator* of your business failing.
I strongly suspect that there are many, many "dead men walking" now in SAAS, both AI-native and traditional: businesses where the financials may still look fine -- just a quarter or two of stagnant growth, margins are still great, maybe there's an AI narrative going forward, etc. but the *product* is losing utilization and they will lose every single customer to {{AI-native competitor, possibly the big labs themselves}} as the customers encounter those solutions. Those customers become dormant users, but the subscriptions still run for the while.
The actual revenue churn only occurs months or quarters later when the question of "is anyone still using this? do we need to keep paying for this?" is finally answered with a "no" rather than an "i'm not sure".
The problem with monopolies is not their size. It's who owns them. CF happens to have a benevolent dictator.
I was super critical for years that Cloudflare turns into a single point of failure for many sites. But the flipside is that it's also has a really good positive leverage affect on security. This is great stuff. xitter.gq/dok2001/status/2112811…
Or never fixed at all, if it's not critical enough.
Okay I figured it out: there's actually three gpt work session types: desktop, cloud desktop and cloud mobile. Each has a different tool loadout, especially regarding browser. There seem to be three browser classes - cloud, in-app and user, but not a 1-1 map to session type.
Im doing the same but inside gh actions, and no organization. The agents self-organize. pi-durable is awesome.
I currently have them running a Friends improv session.
friends-swarm.thedarkchef.co…
