0x4d72 retweeted
So the fastest JSON serializer for .NET now is developed by CAPCOM as part of their game engine that powers Resident Evil / Biohazard
I did not see that coming lol
github.com/CAPCOM-TD-OSS/RED…
0x4d72 retweeted
Cloudflare ha liberado su propia skill para hacer auditorías de seguridad con IA.
Es la que utilizan internamente en la empresa para detectar vulnerabilidades y ahora cualquiera puede utilizarla con su agente.
Se llama Security Audit Skill y organiza cada auditoría en 6 fases:
✓ Reconocimiento de la arquitectura y superficies de ataque
✓ Búsqueda de vulnerabilidades por cobertura
✓ Validación independiente de cada hallazgo
✓ Generación de resultados estructurados
✓ Verificación final con agentes distintos
✓ Creación automática del informe de seguridad
Lo más interesante es que el agente que valida una vulnerabilidad nunca es el mismo que la encontró, reduciendo bastante los falsos positivos.
Es completamente gratuita, open-source y tiene licencia MIT.
Repo 👇
0x4d72 retweeted
El próximo viernes pueden verla en Netflix: cuatro episodios, ideal para el fin de semana. Y si quieren comprobar qué les gusta más, la serie o la novela, tienen disponibles la edición de bolsillo y la original de tapa dura. Disfruten de una, de otra o de las dos. Y ya me dirán.
0x4d72 retweeted
The "whiteboard defense:" I should be able to pull you aside at any moment and ask you to explain any customer-facing system you've shipped. You should be able to clearly explain how it works and defend the decisions you made. This is my benchmark for responsible AI usage.
I don't expect line-level familiarity with the code. I don't care if you remember the exact function name or implementation detail. You may not even know it. I don't care.
But if I ask "why did you do X instead of Y?", "what happens if this actor behaves maliciously?", "what data structure did you use here and why?", or "where does this fail?" you should be able to answer confidently.
For PoCs, demos, experiments, whatever: I don't care. Generate 100% of it and understand none of it. Speed over quality every time in those specific scenarios.
But if you're shipping customer-facing work, you can't be shipping things you don't understand at a high level.
0x4d72 retweeted
Querida comunidad de ciberseguridad española. Echádle un vistazo, firmad y compartid :)
Stop Killing The Internet: No Digital ID & No Age Verification - eci.ec.europa.eu/066/public/…
0x4d72 retweeted
RSA-260 ha caído: un número de 862 bits que llevaba décadas esperando una factorización - microsiervos.com/archivo/seg…
0x4d72 retweeted
Libros de #ciberseguridad gratuitos en mi repo de Github. Por si no los conocías :) #crypto #stego #hacking #IA
- Seguridad del protocolo SSL/TLS. Ataques criptoanalíticos modernos - github.com/mindcrypt/libros/…
- Esteganografía y canales encubiertos. Esteganografía lingüística - github.com/mindcrypt/libros/…
- ESTEGOMALWARE. Evasión de antivirus y seguridad perimetral usando esteganografía. Ocultando ciberamenazas avanzadas y malware - github.com/mindcrypt/libros/…
- Seguridad ofensiva en machine learning. +100 prompts injections en ChatGPT. Atacando y defendiendo organizaciones con prompt engineering - github.com/mindcrypt/libros/…
Google researcher @lauriewired warns the shift from C++ to Python in universities is creating programmers who don't understand how computers actually work:
"When I was in college getting my CS degree, my year was one of the last years that was using C++ as the core language for teaching students. Actually they were switching over to Python of all languages."
"One of the biggest issues that I have is that a lot of these higher level languages are really abstracting away what is happening under the hood. If you're not aware of how the computers work in general, then you're gonna have problems when it comes to debugging."
"Starting with a language like C++ gives you the ability to do these really high level abstractions, but it also gives you the ability to customize your memory management and get really close to the underlying machine. Especially if you're trying to work in high performance computing, game development, or high frequency trading."
"At C++ conferences, there's almost this fundamental anger response when it comes to mentioning something like C or C++. People start complaining about the complexity of it."
@Google
0x4d72 retweeted
¿Son todas las opiniones respetables?
El filósofo José Antonio Marina nos lanza esta reflexión al respecto.
0x4d72 retweeted
A form of Conway's law: high quality internal tools lead to high quality external tools. Here's Hector showing our internal dev tool we use to build our deck icon sets, including publishing the icons.
Making dev tools for our dev tools.
'Super Icon Studio' is how I've been designing the icons for our 'Deck' icon groups - it covers design finish across light/dark modes, layout compositions, animations, an icon catalogue, and ships as a highly customizable Swift package ready to render across our native clients.
0x4d72 retweeted
I caught TDD virus at the start of my career, and this talk by Erik Meijer saved me!
As often the case with snake oil salesmen, they take a good core idea (write usage code first), and turn it into a parody to sell books and courses to people who don't know better.
This talk is 10 years old, but still relevant today. LLMs like writing A LOT of tests, but you must delete most of them and only leave integrational and e2e ones that test real system behavior.
0x4d72 retweeted
¡Esto es histórico! NVIDIA, Microsoft, Mozilla y Linux Foundation, entre otras, han firmado una carta a favor de los modelos de pesos
abiertos.
Defienden que abrir la IA es CLAVE para competir, reducir costes, evitar depender de unas pocas empresas y mejorar la seguridad.
Y dejan otro mensaje importante: usar las respuestas de un modelo para entrenar otro mediante destilación es una práctica legítima y habitual. NO debería considerarse automáticamente un robo.
Y la frase más bestia: “Depender únicamente de modelos cerrados no es intrínsecamente seguro.”
BOOM.

ALT Primera página de la carta «Open Weights and American AI Leadership», fechada el 24 de julio de 2026, que defiende los modelos de IA con pesos abiertos como clave para la innovación, la competencia y el liderazgo tecnológico de Estados Unidos. Pocas veces un folio ha defendido con tanta elegancia que abrir la IA puede ser una buena idea.

ALT Página final de la carta «Open Weights and American AI Leadership», que defiende la destilación como una técnica legítima para mejorar modelos y pide evitar restricciones generales. Aparecen como firmantes NVIDIA, Microsoft, Meta, Mozilla, Hugging Face, Linux Foundation, Mistral AI, IBM, Perplexity y otras empresas tecnológicas.
Os dejo por aquí una buena lectura sobre rendimiento en Rust, muy interesante: kerkour.com/rust-high-perfor…
0x4d72 retweeted
PostgreSQL 19 introduces graph-style queries.
Instead of manually connecting table after table with joins, you can describe the path through your data:
customer → bought → product ← bought ← similar customer → follows → brand
Useful for recommendations, access control, fraud detection, knowledge graphs, and AI context.
xitter.cf/alxshp/status/20752760…
🤖 Made with AI
Postgres 19 made I/O worker pools dynamic instead of fixed.
PG18 forced you to pick one static number (io_workers = X) and hope it was correct.
PG19 gives you real controls instead:
→ io_min_workers
→ io_max_workers
→ io_worker_idle_timeout
→ io_worker_launch_interval
Now the pool can grow and shrink automatically based on load.
Much better than guessing the right number.
xitter.cf/alxshp/status/20741709…


























