anthropic seems to be experimenting with swarming in claude code much like how openai was experimenting pre-astra back in the spring
0
0
1
370
this is what open source looks like
github.com/galadran/we-ha…
coordinated research and patching updates, workarounds, fixes...all done in the open, for a problem that affected every OS, Browser, programming language, web-facing application and service.
thanks @Dennis__Jackson and all those that contributed!
github.com/galadran/we-ha…
coordinated research and patching updates, workarounds, fixes...all done in the open, for a problem that affected every OS, Browser, programming language, web-facing application and service.
thanks @Dennis__Jackson and all those that contributed!
0
0
1
197
security has to shift left and people don't realize what that means. lemme try to explain...
watching the coordination of heroes across all major OSes, browsers, languages, dozens of core infrastructure libraries (just for the eMudhra certs issue) was inspirational. and vicariously deeply frustrating what they had to go through.
and it's going to be more and more exhausting for those folks for the next 1-2 years until security looks much different than the last 30 years.
what 99.9% of SWEs and tech companies aren't realizing is that sheer speed and ~0 cost of **exploiting an already patched vulnerability** now requires the same level of coordination and responsibility and action in all apps and services downstream to update to the patched version or apply workarounds instantly.
think about that for a moment.
the actual fundamental vulnerability is in the global architecture and norms and practices of software and the internet.
fundamental assumptions for the risk calculus informing processes and how we work are almost instantly anachronistic, from another time.
the parameters are different and the system will not hold.
in the short term, the glaring implication is that every engineer needs to be considering security of their code and codebases daily.
we need new tools. we need fire to fight fire.
over the coming days and weeks and months, we and others will continue to release tools and products as fast as we can to help the world of software and every engineer out there.
if software or the internet breaks, the world breaks down.
please pay attention less to the noise of hot takes and more to what new responsibilities and actions you should take right now to keep a watchful eye and instantly act to safeguard your little slice of the world of software.
watching the coordination of heroes across all major OSes, browsers, languages, dozens of core infrastructure libraries (just for the eMudhra certs issue) was inspirational. and vicariously deeply frustrating what they had to go through.
and it's going to be more and more exhausting for those folks for the next 1-2 years until security looks much different than the last 30 years.
what 99.9% of SWEs and tech companies aren't realizing is that sheer speed and ~0 cost of **exploiting an already patched vulnerability** now requires the same level of coordination and responsibility and action in all apps and services downstream to update to the patched version or apply workarounds instantly.
think about that for a moment.
the actual fundamental vulnerability is in the global architecture and norms and practices of software and the internet.
fundamental assumptions for the risk calculus informing processes and how we work are almost instantly anachronistic, from another time.
the parameters are different and the system will not hold.
in the short term, the glaring implication is that every engineer needs to be considering security of their code and codebases daily.
we need new tools. we need fire to fight fire.
over the coming days and weeks and months, we and others will continue to release tools and products as fast as we can to help the world of software and every engineer out there.
if software or the internet breaks, the world breaks down.
please pay attention less to the noise of hot takes and more to what new responsibilities and actions you should take right now to keep a watchful eye and instantly act to safeguard your little slice of the world of software.
1
1
3
228
🚨 PSA: UPDATE YOUR CLAUDE DESKTOP APP RIGHT NOW. 🚨
in my testing, the in-app browser was also affected by the eMudhra Intermediary Certificate Incident (which affected basically everybody).
Earlier today, my version was still compromised. I have run tests and it appears the latest version is fully patched.
in my testing, the in-app browser was also affected by the eMudhra Intermediary Certificate Incident (which affected basically everybody).
Earlier today, my version was still compromised. I have run tests and it appears the latest version is fully patched.
0
0
4
370
Erik Thorelli retweeted
PHP users: patch today.
Two critical RCEs (CVSS 9.2) affect "all PHP installations serving web requests".
Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
Two critical RCEs (CVSS 9.2) affect "all PHP installations serving web requests".
Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. #php #security thephp.foundation/blog/2026/10/2…
2
7
36
2,768
Erik Thorelli retweeted
I gave my Grok bot $1000 to build itself a body. Parts just keep showing up at my apartment.
676
427
10,640
449,868
the single greatest set of minimal job requirements ever posted
We at @coderabbitai shipped 5K PRs last week. Our tiny team is shipping more than a thousand-person dev team. And we are nowhere near hitting our maximum potential. If we industrialize software development correctly, 50K PRs a week are totally achievable, if not more. At this ilding machines.
We are looking for pioneers to join our software factory initiative. Must meet one of the following criteria to join the project:
- Tastefully shipped at least 1000 PRs in the last 30 days.
- Played at least 500 hours of strategy or simulation games such as Civilization, Age of Empires, Transport Tycoon, Factorio, etc.
This is a once-in-a-lifetime opportunity to define the UX/DS for building and shipping software at scale. You'll solve a broad spectrum of problems, from designing provably correct software using formal methods to achieving operational excellence with agentic operations. You will also get millions of dollars of token budgets!
Please DM me only if you qualify and want to spend your next few months/years on this!
1
0
2
296
Erik Thorelli retweeted
@jalcowastaken @esthor @coderabbitai @mastra @AllThingsOpen my new whatsapp sticker when someone says some shit
1
1
2
229
good morning @AllThingsOpen!
if you want to talk candidly about leadership, i'll be facilitating a roundtable discussion at 11:15 today
come downstairs to the @NVIDIAAIDev unconference
if you want to talk candidly about leadership, i'll be facilitating a roundtable discussion at 11:15 today
come downstairs to the @NVIDIAAIDev unconference
0
0
5
162
genuinely asking, would it be useful to do a writeup about how to orient your agent sessions to do a lot of verifiable autonomous work loops in a simple way?
context: i just realized that some people outside of colleagues/my bubble are doing 0-1 PRs per agent session while our occasionally triple, if running for a few days).
it would be weird to me to have a claude or codex session ship anything less...if _that_ quantity sounds weird to you, lmk and i'll do a blog post and open source a thin harness.
context: i just realized that some people outside of colleagues/my bubble are doing 0-1 PRs per agent session while our occasionally triple, if running for a few days).
it would be weird to me to have a claude or codex session ship anything less...if _that_ quantity sounds weird to you, lmk and i'll do a blog post and open source a thin harness.
5
0
4
355
in other news, botnetting consumer iot is gonna be huge again
Vibe coded my parents' TV this afternoon!
It was showing a sponsored ad before you could even get to Netflix.
Gave Claude Code the model number, it found the TV on wifi, removed 25 Xiaomi packages and wrote a new launcher.
Looks like an Apple TV now lol
0
0
2
197
Erik Thorelli retweeted
Friends at @coderabbitai helped me celebrate shipping Mima.social with a post-@vercel Ship happy hour! Amazing how quickly people would install Mima locally to get their hands on a limited edition, handcrafted Mima mascot!
Thank you for a spectacular launch and great company, SF 🙏
Thank you for a spectacular launch and great company, SF 🙏
8
2
51
2,799
well that's interesting...
GPT-6-luna gives you more reasoning tokens per effort level with an API Key. Worth knowing if you love Luna and use it through different routes/providers.
Runs are Codex CLI 0.160.0 with terminal-bench 2.1 (excluding the 10xQEMU tasks).
For tb-21 tasks with this model, 10.5k int of diminishing returns. Max via API can get you up to around 18,000 tokens with a score of ~80.5% - just below Luna 5.6 in my testing.
0
0
5
280
