Pinned Tweet
i’ve been having an existential crisis about indie hacking.
is it dying? have i wasted three years building apps that AI will commoditize? am I trapped inside the X bubble? should I pivot to robotics?
well, i built an app to talk myself through it all.
today, i’m launching it a traditional founder video, but with an indie-rock music video born from some of my existential dread.
walky talky is what i use to vent, process my thoughts, capture ideas quickly, and make sense of whatever’s on my mind.
it asks me thoughtful questions as I speak, and then summarizes my rambling into useful notes I can revisit later.
most AI products give you more answers, more content, and more things to consume. I want AI to do the opposite: stay quietly in the background and give you more space to think.
if you've been feeling some of the same uncertainty lately, i hope this little app can help.
is it dying? have i wasted three years building apps that AI will commoditize? am I trapped inside the X bubble? should I pivot to robotics?
well, i built an app to talk myself through it all.
today, i’m launching it a traditional founder video, but with an indie-rock music video born from some of my existential dread.
walky talky is what i use to vent, process my thoughts, capture ideas quickly, and make sense of whatever’s on my mind.
it asks me thoughtful questions as I speak, and then summarizes my rambling into useful notes I can revisit later.
most AI products give you more answers, more content, and more things to consume. I want AI to do the opposite: stay quietly in the background and give you more space to think.
if you've been feeling some of the same uncertainty lately, i hope this little app can help.
74
26
311
103,392
Tailscale's vp of eng Mike Shaver said that you don't need to disable Tailscale SSH at this point
His message below:
Hi folks, Mike Shaver here, VP of Engineering at Tailscale.
We've seen the concerns about Tailscale SSH and wanted to share what we know so far.
If you want to ant part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
We've now received the researcher's report and are reviewing it. Our engineering and security teams had already been investigating independently, with help from external security specialists. That work has identified issues we're working to fix. We're still validating the full scope, including which configurations are affected.
A bit of technical context:
Tailscale SSH uses your tailnet's access policies to control who can connect to which machines. Most of the issues we've identified so far concern what happens after someone has been authorized to connect, particularly how Unix privileges and SSH forwarding are handled. In some cases, a session may be able to do more than the configured local user should be allowed to do.
While it’s a serious concern, it isn't the same as an unauthenticated attacker being able to connect to arbitrary machines, but the potential impact depends on how SSH access is configured. We're still investigating, so we don't want to make blanket claims about what's affected or not.
Again, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
In the meantime, there are a few precautions you can take:
- Review your SSH access policies. Make sure only the people and devices that need access have it.
Review SSH forwarding permissions and remove access you don't need.
- Consider enabling SSH check mode for an additional authentication step. This won't fix privilege escalation issues, but it does add another barrier to gaining access.
- Enable automatic updates where supported so you can pick up fixes when they're released.
- For particularly sensitive systems, consider temporarily tightening your Tailscale SSH access policies while we investigate, so that only the specific users and devices that need access can connect.
We're working on fixes and testing them carefully. We'll publish a security advisory explaining the confirmed findings, affected configurations, recommended actions and available patches. We'll also follow up with a more detailed technical write-up.
If we find anything that changes our assessment or requires immediate customer action, we'll communicate that.
We know it's been a rough week for security teams, and we understand why people are concerned. We'd rather give you the technical context we have than speculate about things we haven't confirmed yet.
We'll share more as we verify the details. If you have any questions about how this relates to your particular environment, please get in touch with our team tailscale.com/contact/suppor…
His message below:
Hi folks, Mike Shaver here, VP of Engineering at Tailscale.
We've seen the concerns about Tailscale SSH and wanted to share what we know so far.
If you want to ant part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
We've now received the researcher's report and are reviewing it. Our engineering and security teams had already been investigating independently, with help from external security specialists. That work has identified issues we're working to fix. We're still validating the full scope, including which configurations are affected.
A bit of technical context:
Tailscale SSH uses your tailnet's access policies to control who can connect to which machines. Most of the issues we've identified so far concern what happens after someone has been authorized to connect, particularly how Unix privileges and SSH forwarding are handled. In some cases, a session may be able to do more than the configured local user should be allowed to do.
While it’s a serious concern, it isn't the same as an unauthenticated attacker being able to connect to arbitrary machines, but the potential impact depends on how SSH access is configured. We're still investigating, so we don't want to make blanket claims about what's affected or not.
Again, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
In the meantime, there are a few precautions you can take:
- Review your SSH access policies. Make sure only the people and devices that need access have it.
Review SSH forwarding permissions and remove access you don't need.
- Consider enabling SSH check mode for an additional authentication step. This won't fix privilege escalation issues, but it does add another barrier to gaining access.
- Enable automatic updates where supported so you can pick up fixes when they're released.
- For particularly sensitive systems, consider temporarily tightening your Tailscale SSH access policies while we investigate, so that only the specific users and devices that need access can connect.
We're working on fixes and testing them carefully. We'll publish a security advisory explaining the confirmed findings, affected configurations, recommended actions and available patches. We'll also follow up with a more detailed technical write-up.
If we find anything that changes our assessment or requires immediate customer action, we'll communicate that.
We know it's been a rough week for security teams, and we understand why people are concerned. We'd rather give you the technical context we have than speculate about things we haven't confirmed yet.
We'll share more as we verify the details. If you have any questions about how this relates to your particular environment, please get in touch with our team tailscale.com/contact/suppor…
0
0
0
137
Michael Pfister retweeted
got inspired by @pfista and decided to build a video for my website preview with paper planes
instead of asking ai directly, i instead built a tool to interactively explore and tweak my ideas
really fun and powerful, and very enjoyable to be deeply involved in the creative m tools for one-off use cases is a new muscle, highly recommend it
here's a quick overview of the tool, and what tuning looked like
final result shared in next tweet
instead of asking ai directly, i instead built a tool to interactively explore and tweak my ideas
really fun and powerful, and very enjoyable to be deeply involved in the creative m tools for one-off use cases is a new muscle, highly recommend it
here's a quick overview of the tool, and what tuning looked like
final result shared in next tweet
5
2
11
2,262
nah, just keep bookmarking posts
grok @bot can already read your x bookmarks and summarize them
or remind you of things you might want to re-visit
this is one of my favorite bots actually
grok @bot can already read your x bookmarks and summarize them
or remind you of things you might want to re-visit
this is one of my favorite bots actually
Stop bookmarking posts on X
Instead, send the post to Grok Bot and give your bot a routine
> read the post
> give you an honest opinion
> if good, file to second brain
> apply it to any projects it's working on
No more procrastination folders
1
0
6
579
dessa will bring character realism to a whole new level in ai video
i generated this short clip from one of the audio samples
i generated this short clip from one of the audio samples
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
36
23
399
38,989
Note how each demo is quite short in length
Seems eerily reminiscent of Nvidia personaplex demo, which went completely off the rails for any long conversation
Seems eerily reminiscent of Nvidia personaplex demo, which went completely off the rails for any long conversation
We made the first AI model you can have a realistic conversation with that was trained entirely on speech!
Dessa is a full-duplex speech-to-speech model that you can run on consumer GPUs.
This is a GPT3 moment for speech.
2
0
13
2,818
it's always funny when you have a customer reach out demanding things but you can't do anything about it
0
0
2
458
Michael Pfister retweeted
Just found this cool service that mails checks on your behalf, because it's faster than ACH a lot of times.
Meaning now, your agents can send checks :)
check.supply
Meaning now, your agents can send checks :)
check.supply
0
2
4
617
when @Starlink becomes a mobile carrier i will be switching faster than lightning
i also really hope they do something about all this text spam for business loans / political promotion
imagine @grok @bot being able to help manage your texts and spam filter settings
we do not have to live in a spam filled world
i also really hope they do something about all this text spam for business loans / political promotion
imagine @grok @bot being able to help manage your texts and spam filter settings
we do not have to live in a spam filled world
6
3
11
590
one of my favorite things about AI right now is how random vibe coders are absolutely CLOWNING the gaming and tv industries
yes, we can play halo ce on a mac at 120fps
yes, we no longer have to deal with shitty bloated spyware tv OS's
if these companies don't start solving ing to do it ourselves
yes, we can play halo ce on a mac at 120fps
yes, we no longer have to deal with shitty bloated spyware tv OS's
if these companies don't start solving ing to do it ourselves
2
1
16
494