
Not financial advice. Cofounder & CTO of @leadtruffle - AI lead capture for home services in USA & Canada (Tinyseed S25 batch).
Hyperreality
Joined December 2015
- Tweets1.5K
- Following418
- Followers436
- Likes22.4K
Pinned Tweet
Replying to @rohanpaul_ai
Been working on a project where I just ask all the popular AIs their opinions on stocks and compare them. Its pretty interesting, they all tend to agree with each other and have the same biases. They love NVDA and BTC for example. hallucinationyield.com/
I patched @leadtruffle to 24.22.1 before people even started tweeting about this. Running a SaaS is not a joke 😅
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
For this particular case, sending all your code Claude maybe compression does help at the start of a session. But I also doubt these numbers a bit because gzip just compresses your data and doesn’t by itself make anything faster unless you have big payloads relative to your bandwidth.
If you think in more detail about a network request if you are sending, say 1k or 10k or 100k text chunks the network latency is the network latency. Your bandwidth is usually measured in megabits or gigabits so orders of magnitude beyond the payload size.
Compression doesn’t magically speed up your latency. It does if you are sending huge payloads but normally it doesn’t for web app traffic.
It actually slows down your system slightly because you have to compress and decompress. And of course it also saves you money on your cloud server bandwidth bill so that’s a more real reason to do compression for web app traffic.
Super clear example: 1mb of data gzipped on a 50mbit connection only saves 32 millieconds. So it starts to matter around there. Below that it’s not important. (Ie 100kb compression only saves 3.2 ms).
I guess it’s possible that Claude is making you send entire convos back and forth over the wire but it should be doing that either. It should be storing some conversations on their server and just syncing updates over back and forth.
Anyway, just a nuance I think the “always compress everything” people do miss perhaps.
Wasting time on “my custom coding agent orchestrator” is just intellectual masterbation.
i remember early in my career wondering why most people missed out on building early internet products
but i look around now and i get it
so many people fiddling around with "my custom agent setup" and so few using this miracle of a tool to actually do anything
Another thing several people approached us about is AI agents taking payments and deposits. Are you kidding me? The average person actively hates & mistrusts AI voice customer support and you think they will give them a credit card payment over the phone. WTF.
lol we're going to get into a fun situation where AI math discoveries break all the trusted cryptography primitives but nobody trusts the next gen AI designed cryptography
What does it mean now that Luna an Haiku are cheaper than deepseek and also better AND faster? I think a lot of people saying opensource would kill closed source need to rethink their priors.
Do you use Chinese datacenters instead of AWS? No? Hmm...
I wonder if physics professors will feel the same way? That's next.
really astonishing to me, somehow, to see how many math professors implicitly understand the goal of the profession to be providing them with a prestigious paid hobby rather than increasing the amount of mathematical knowledge available to humanity
yes we're all going to lose our jobs and it sucks and i hope we live through it. and also, this is the most exciting time in the history of math
Can somebody explain why this matters for a normal web app if latency between the app server + database + external APIs dominates to 99% of the request time? I use node anyway which is much faster than ruby btw.
I've had agents implement and optimize the Campfire web app in Elixir, Go, and Rust. Yes, Ruby is the slowest. I didn't care about that when the pay-off was huge in terms of productivity and developer joy. But if you're no longer reading the code? github.com/basecamp/once-cam…
Readers added context they thought people might want to know
The shown benchmarks use non-equivalent implementations: Elixir routes all DB queries through a single GenServer with Redis for jobs (retained from Rails), while Rust uses in-process queues, omits CSRF tags/fields, and applies other caching changes.
github.com/basecamp/once-…
raw.githubusercontent.com/basecamp/once-…
github.com/basecamp/once-…
github.com/basecamp/once-…
x.com/zachsdaniel1/s…
Swapped my x86 lambdas to arm64 yesterday. So far it improved cold boot times a lot, like 30%. Otherwise it shaves off a millisecond from most requests which doesn't really matter. It is 20% cheaper too but not like lambdas are expensive.
This is very interesting bc if you are home service company starting to get bombarded with email from people like this @leadtruffle is good at doing a bunch of ai mediated automations from email.
Well this was an easy fix.
I had my AI agent scape and contact all 82 pool companies in DFW while I slept.
It sent my plans and survey and said I’d prefer to not hop on a call yet. Just need a ballpark price via email.
I already have 5 prices. 77 to go. The game has changed. It’s managing all follow up questions as well.
If a company doesn’t want my business, I don’t want theirs. I have cash and am ready to break ground tomorrow, but I’m not driving to Frisco to look at travertine before I know a ballpark price. Absolutely ridiculous.
I've been using GPT 6.1 all day today on 3 different long parallel tasks and my usage went down only 2%. I already like this model much more than Astra btw, way more reliable and trustworthy.
Some math on bandwidth capacity of new v3 starlink satellites on starship cost curves vs the old v2 satelites + falcon 9.
The fact that Astra can now super reliably do all my annoying bookkeeping tasks like download receipts and uploading them to Mercury correctly is huge in itself.
We have a customer that has now cancelled twice tried out competitors and come back 🤣. I'm not sure if that means our product is good or just sucks less and everyone has a convoluted product in this space.
I've seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in the dark near the Tannhäuser Gate. All those moments will be lost in time, like tears in rain
I am done with this shit. It is over. The state of engineering right now is horrible. It has been half a month since I started a new role at a big company. Nobody knows anything here. The specs, code, tests, PRDs, tickets, resolution of those tickets, reports, etc., everything is made by Claude Code. Nobody on my team likes this. They are being forced to ship as much as they can. I have heard multiple times from higher management that pushing code is not a bottleneck, so why are we slow? People are working 12 to 13 hours a day just to press enter. Nobody is reading anything. Humans in corporate are doing nothing on their own. Everyone, literally everyone, from an L1 to an L7 engineer here is doing the same thing. Talk to Claude. There is no sense of victory. Nobody is resolving bugs. In reality, nobody is thinking anymore. Everything is done by LLMs. It is so soul-sucking. I would not mind it, to be honest, if we were at least given the time to check out the code and see what is going where. But no, the goal is to just ship. No matter what happens.
Once a month I go check on instagram and I notice the slop reels on there are better and more addictive. This time, I gotta say, every AI generated reel was a straight up gem.
uuuuhhh long softbank?
To make sure our current users have an incredible experience and continued access to Astra, we are going to pause subscriptions to our $200 Pro plan. These put the most strain on our systems and we wanted to take the smallest step that allows us to continue giving the broadest access possible. All other plans and the api remain available.
There is no impact to existing accounts and we are working on adding more capacity as fast as we can. Thanks!
lol Astra on high just made this game for me in 17 minutes ard.ninja/standalone-games/p…
btw I learned about this interesting google face detection library called mediapipe while doing this - developers.google.com/edge/m…


















