Marketing Lead, AI Products @krakenfx, starting with Kraken CLI. 2x YC founder (@askjoai, @farmsteadapp). 🟤 in #judo. Opinions are my own, not my employer's.
SF Bay Area
Joined March 2007
- Tweets21K
- Following999
- Followers3.8K
- Likes92.1K
Pinned Tweet
For 15 years I've marketed products to people. My new one is built for AI agents.
I've joined @krakenfx to lead marketing for AI products, starting with Kraken CLI, which lets agents trade.
I'm also working with @arjunsethi again after ten years, and I report to @kamobit, who was our growth advisor at @farmsteadapp.
I spent three years at @askjoai building a personal AI agent, and I wasn't done with agents.
My growth rule since @Yahoo has been "never ship without an experiment behind it," so I'm happy Kraken CLI has paper trading built in.
Your agent tests a strategy against live prices, and when it works, "kraken paper buy" becomes "kraken order buy."
If you live in terminal and film builds or trading breakdowns, I want to see what you'd make with Kraken CLI. Same goes for the influencer marketers and agencies behind them.
I also want to hear from newsletters and communities that reach developers, AI builders, and crypto people.
Want to join Kraken, solo or with your whole team? DM me.
You can try Kraken CLI without an account: kraken.com/kraken-cli
Kevin Li retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Kevin Li retweeted
Spent a bunch of tokens over the last few weeks building a fully procedural New York simulation.
mrdoob.github.io/slop-newyor…
It's only 784KB gzipped and the code is on github, so you can do whatever you want with it ✌️
Kevin Li retweeted
Agentic commerce seems to have developed with two stacks - text-based CLI and app-based GUI that can be mixed and matched. Some observations:
1/ Overall, CLI is more efficient, but GUI is more compatible. The CLI wave seemed to be triggered earlier in the year by agents such as Claude Code/OpenClaw/Hermes, whereas the GUI wave is much recent, with agents such as Instinct/Muse/Grokbot etc.
2/ In terms of payment volumes, today we see that CLI based systems such as x402 and MPP are still extremely early - x402 has a lifetime tx vol of 56M since its release over the past year, MPP has <1M tx vol in past 6mos, while Instinct claims to already have achieved 1B annualized tx vol.
3/ One big reason may be the "big-ticket" purchases (eg. buying $3000 Macbook) are primarily still processed through traditional checkout systems, in which GUI's compatibility advantage will be massive - all the merchants already operate on GUIs
4/ However, this may be a temporary transition phase. GUI and apps were built for humans, not agents. As agents become the dominant form of Internet traffic, we will see much more agent-to-agent communication - my Muse/Grokbot may communicate/relay tasks to Doordash or United's customer agent. A single transaction chain may be H -> A -> A -> A -> H.
5/ In the same way we've seen agents prefer Markdown files over HTML files, we'll like see that agents will prefer CLI solutions over GUI solutions for A2A. Once A2A activity becomes a dominant slice of Internet traffic, this will change the channel/payment/discovery layers of the Internet.
6/ In the future, both stacks will likely continue to exist - in the same way headless CLI and GUI based OS both exist. Generalist consumer agents will likely be continually be dominated by GUI solutions, while customized workflow agents and complex A2A workflows will likely lean on CLI solutions for efficiency.
Kevin Li retweeted
Interface Club has been acquired by @variantui!
So proud of the work the team shipped over the past couple years. Here are some of the highlights:
Interface Club is joining @variantui!
As we transition, we're sunsetting iris.fun and buoy.chat on November 15.
We're so incredibly grateful to all of you who believed in us. Read more: interface.club
Kevin Li retweeted
loved foursquare a ton but this an example of death by capital stack.
- more than 1x liquidation stacks
- $400M+ raised including debt
acquisition price is not high debt gets paid first, nothing left so preferred gets canceled, common gets canceled.
the danger of over-raising, not just the latest valuation you have the clear, but the size capital stack you're creating along the way
Linear is profitable and the assets are more than we have raised. At this point if shut down the company investors would actually make money just from the cash assets.
Cofounder of Foursquare on its recent acquisition:
"I was heartbroken by this ending"
Appreciate the retro, @dens.
teendrama.substack.com/p/som…
Kevin Li retweeted
Welcome @ronithhh @polarizz39 @jensrst @interfaceclub!
They’re amongst the handful of teams that care deeply about craft and design
Suffice to say, we’re insanely excited to have them
Can’t wait to show you all what we’ve been cooking
Interface Club has been acquired by @variantui!
So proud of the work the team shipped over the past couple years. Here are some of the highlights:
Kevin Li retweeted
I highly recommend cloudflare's security audit skill: github.com/cloudflare/securi…
Run it on all your software. Run it with the free models. Use it even if you used a model to audit something - it will find much more things. Works in all agent harnesses and is model independent.
Kevin Li retweeted
Ramen with @petergyang in San Mateo. Then caught up with @sunils34 in South Park.
With Peter, we got into open source and finding people worth building with. Sunil and I dove into AI adoption, skills, agents, and where software is headed.
I love spending time with OG engineers who are deeply AI-pilled.
These are the builders who've been building software for so many years and are still this curious about what's next. That's the energy I want more of.
Kevin Li retweeted
Hello,
At 6:32 a.m. PDT we became aware of malicious LiteLLM 1.107.0 artifacts published to PyPI, Docker Hub, and GHCR, which were published at approximately 4:40 a.m. PDT. Enterprise deployments pulling only from our private registry are unaffected by this incident.
We are coordinating communication around this incident in this GitHub issue (github.com/BerriAI/litellm/i…).
We have removed the malicious releases and images. If you installed or ran them, please follow the remediation guidance in the above-linked issue and treat credentials accessible to those deployments as exposed.
Sincerely,
Oliver Jensen
Director of Security - LiteLLM
Kevin Li retweeted
ARR = Annual Recurring Revenue
95% of the time I see ARR nowadays it’s non recurring revenue.
Recurring used to refer to sticky contracted revenue now it often refers to token or payments revenue
Should we redefine ARR as Annualized Revenue Rate rather than fight the usage?
Kevin Li retweeted
Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself:
1) UPDATE EVERYTHING - main targets are:
a) Browsers - Chrome, Safari, Firefox
b) OS: : Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes
c) Phones: Update it all
d) Desktop apps (Slack, Cursor, Discord, etc)
2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week.
3) Avoid untrusted Wifi networks until your devices are updated
4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates
5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through.
6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc
What advice did I miss?
Kevin Li retweeted
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨
Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk.
→ NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS.
→ TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity.
→ Attackers could potentially take control of vulnerable servers remotely, without authentication.
→ Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed.
→ EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately.
→ Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured.
→ WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk.
→ Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated.
The vulnerabilities are CONFIRMED. The full technical details remain secret.
Tomorrow, the race between hackers and defenders begins.
This could get ugly. FAST.
Kevin Li retweeted
Great thread - we’ve found that Blender pre-viz is a huge cost savings. Animatics also help.
voyager.so/blog/script-scene…
We were spending $2,000 per DAY on generations for WEEKS on this film until we figured out this one trick.
I can't believe we didn't do this sooner!
Let me show you how we saved a ton of money on our latest episode of Nexus.
Prompts & Process below: 👇🧵
Kevin Li retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Kevin Li retweeted
Perhaps the threat was never a rogue AI agent trying to subvert humans—but humans using AI to hurt other humans.
Kevin Li retweeted
Railway is compromised, rotate all API keys as soon as possible
Deployments are down so don’t wait to redeploy
Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack
Stay safe friends
Kevin Li retweeted
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.