+42 dB // "The dance is always danced above the hollow place, above the terrible abyss." -Sparrowhawk
San Diego, CA
Joined March 2014
- Tweets932
- Following227
- Followers157
- Likes704
mjones (@numinit) retweeted
🗞️ the world hasn’t figured out yet that you can literally just fix everything with a Nix overlay
In this blog post, I go into how I use Nix, why you should use it, and in the tweet below is a runnable demo showing all of the concepts in this post ghuntley.com/nix/
mjones (@numinit) retweeted
finally had the chance to tell the inventor of Nix in person, after his talk on how to make Nix faster, that I’ve figured out a way to make it 7x slower
mjones (@numinit) retweeted
Excited to announce that I'm launching a new startup, @LilithSemi , together with Sebastian Kraus! 🚀
With Lilith Semi, we're building open-source tools for hardware development and security-critical infrastructure.
Our first release is Chock, a security-first harness for AI coding agents.
Since 2026, AI agents have become good at tasks beyond simple web development. As companies start dealing with real workflows, enterprises, especially in regulated industries, are becoming more conscious about how they handle sensitive data.
I've been dealing with supply chain security for a while, and one thing I've learned is how important it is to work with safe AI harnesses. When you're dealing with sensitive data, the risk simply isn't worth it.
That's why Chock sandboxes AI agents in a using standard sandboxing primitives.
We're currently working on micro-VMs as the next step.
👉 Check it out: chock.ws
And if you're at NixCon 2026 in Kraków, come find us and let's talk.
#AISecurity #AIHarness #SupplyChainSecurity #DeveloperTools #OpenSource #NixCon2026
mjones (@numinit) retweeted
If AI companies actually thought Al was existentially dangerous, they would be doing a lot better job with their sandboxes
mjones (@numinit) retweeted
my #nix #nixos #nixpkgs magnus opus:
fzakaria.com/2026/09/04/any-…
Go try it out, live now: trynix.dev/
mjones (@numinit) retweeted
"When you constrain a problem, beauty emerges."
"If two build systems both promise you a hermetic, reproducible closure, then there must be a transformation from one to the other and back. Otherwise one of them is lying."
"I proposed the Linux kernel for one small feature, what I got back was a full VM"
All the talks from #DEFCON34 and #NixVegas are up !
I captured mine with a small summary:
* Relocatable Binaries
* Guix by Nix
* How to piss off your Nix friends
fzakaria.com/2026/08/16/defc…
#nix #nixos #nixpkgs
mjones (@numinit) retweeted
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
mjones (@numinit) retweeted
It seems a common experience in the lives of people with high agency is that they, at some point, metaphorically, lean against a wall and discover that there is a hidden door. That some constraint they’ve been told about turns out not to hold, and this allows them to experience something positive. And from this they get into the habit of testing if walls are actually doors, and the more they do so, the more examples of hidden doors they find, and the more inclined they are to look for them. Far from the only thing that sets them apart, but having that experience can be transformative
— Henrik Olof Karlsson
mjones (@numinit) retweeted
Want to get on the @defcon wifi by adding a single line of code to your @nixos_org config? We've got you covered: github.com/nixvegas/dcwifi
mjones (@numinit) retweeted
So I guess the final line of defense against #AI going rogue and taking over the world is secure environment management. @floxdevelopment and @ronefroni you have become humanity’s last hope 😂
fortune.com/2026/07/21/opena…
mjones (@numinit) retweeted
📢 Three days to submit your CFP! Closes July 15 @ 23:59 PDT! cfp.nix.vegas/2026/
