Lawrence retweeted
In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/information-…
#security #Python #pki
discuss.python.org/t/information-…
#security #Python #pki
discuss.python.org/t/information-…
4
398
1,020
88,651
Lawrence retweeted
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
110
325
1,909
299,916
Update time. 🥲
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.com
0
0
0
43
YouBike Taipei : ). Photo taken a couple years ago during a summer trip to Taipei. The YouBike system makes moving around Taipei a breeze.
Fijufilm X-Tra 400 (expired, 10+ years) shot at iso 100
Nikon F801
Nikon 50mm F1.8
Fijufilm X-Tra 400 (expired, 10+ years) shot at iso 100
Nikon F801
Nikon 50mm F1.8
0
0
1
107
On the bright side, finally folks might have capacity to catch up on the non-AI tech stuffs…. right? 😅
It's not your imagination. Some hyperscalers have slowed down updates to non-AI products.
I asked one of my agents this AM to investigate 2026 releases across Google, AWS, Microsoft, and Oracle, and compare to past years. The agent looked at thousands of releases!
On Microsoft is down y/y (22%), but dedicated AI product updates increased 239%. Makes sense.
Oracle stayed flat on total release notes, but surged on Generative AI.
AWS didn't slow foundational product releases this year, but also grew AI releases by 113%.
And Google Cloud sgnificantly grew both foundational product updates AND its AI releases in 2026. Interestingly, we had 87 products with ≥ 10 updates, vs. 40 on AWS, 18 on Azure, and 11 on OCI.
We're all shipping a lot! Product focus is changing for all of us. It's pretty amazing that we can chew through this much data in minutes!
0
0
1
125
Lawrence retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
730
1,476
11,648
2,944,318
Lawrence retweeted
C is a programming language to honor "What You See Is What You Get" (WYSIWYG).
Rust compiler: "I cannot allow you to compile this because reference x might outlive borrowed scope y on line 42."
C compiler: "You want to cast an integer to a function pointer and jump straight into uninitialized heap memory? Hell yeah brother, here's your binary."
5
10
228
71,901
Lawrence retweeted
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
1,177
2,660
25,977
8,303,300
Added to reading list. Google defined SRE and keen to read about how their practices evolve.
To mark the 10th anniversary of the Google SRE book, we are excited to announce a completely rewritten second edition that reflects a decade of lessons and offers fresh guidance for today's operational challenges.
Check it out → goo.gle/4zv9do9
0
0
0
62
"AI SRE" somehow reminds me of the dark medical humou: "The operation was a success, but the patient died." Will we see a day that AI SRE patches the symptom but the business failed to survive?
When I hear about “AI SRE” startups (products hoping to automate oncall so no dev gets woken up at 2am):
Putting in more work so stuff works so you don’t get paged at 2am is what we have today. Should we get more AI and less feedback systems reliability could get a lot worse
0
0
0
61
We went for a short walk today. Autumn filled this section of the trail with glowing sunshine and golden foliage. I am thankful to have the freedom to spend peaceful time with my family. 💛
0
0
1
44
I’m not always right. But I am always eventually right, after admitting I was wrong and changed mind.
0
0
0
40
Anna Meredith's new track "Dusky" is another brilliantly excitement piece of music. Wow!
youtube.com/watch?v=6_9pQC…
youtube.com/watch?v=6_9pQC…
0
0
0
42