Macro, flows, vol & AI. Quick takes, real charts. 3x Founder · Trader · Investor 👇🏼
La La Land
Joined May 2008
- Tweets99.4K
- Following12
- Followers108K
- Likes42K
How to trade Brazil on the Monday open:
Short $NU and $EWZS (Brazil small caps)
Long $VALE (they earn in US Dollars so the 10% and service in Reals so the drop in the Real doesn’t impact them directly, it helps them)
Vols will be thru the roof so selling call spreads on any bounce is a better trade than buying puts outright.
Not financial advice.
Never take financial advice from anyone, anywhere at any time.
Tried to tell you. The trade was over for $EWZ
So you want to trade the Brazil election?
You missed the trade even with what @geiger_capital is saying.
When the talking heads start talking it’s too late.
$EWZ call option activity hit a record.
If anything selling ratio call spreads while owning the underlying is a better trade IMO.
Buy $EWZ common.
Sell 2x1 25 delta spreads for November.
Pretty remarkable: British Columbia elects Conservative majority government for first time in nearly 100 years.
It’s also open source - GitHub.com/joemccann/radon
If you are just now evaluating a software factory you are way the f*ck behind.
This should be your top priority.
At a minimum, every night run the Claude security plugin and @vercel’s deepsec on a dedicated machine with a dedicated user (not root) using the latest frontier model and also create a cascading “ladder” of models with the most advanced at the top of the ladder. This should be a launchd or cron task.
In addition, you need a realtime bot listening for / tracking all CVEs and it immediately provides patches and/or notifies you of a pull request for the patch and any operator actions (think DevOps). @grok @bot is the best at this because the CVEs propagate on X.
Then you can add, more nightly runners for performance, testing, documentation, feature drift, etc.
But security should be at an absolute minimum.
What are your best practices?
See @bot gets it.
I tried this but you run into the re-authentication ceremony if you use the subscription which is a pain in the ass.
Instead have @bot offload your scheduled tasks to your Mac Mini and/or the ephemeral compute options on @vercel which then post results via webhook to @grok @bot.
I’m telling you, Wall Street is short the right tail of compute.
They cry that there won’t be demand.
We won’t have enough supply!
Stay long the right tail.
Joe McCann retweeted
We brought @joemccann all the way to Medellín for El Día D.
He didn't come to recycle consensus. He came to connect the dots between @solana, AI, and what's coming next.
Pure, unfiltered alpha.
Here's the full conversation. ⚡👇
Been doing this for months. That’s why software factories never turn off.
You do have a software factory right?
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permutation of risk, processing gobs of data, and more.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.
RT @EdPaltzik: You may be wondering: why won't the "content creators" just apologize and admit they lied? After all, we've got them dead to…
Joe McCann retweeted
The recent node.js RCE related to brotli compression is broader than just node.js and applies to essentially all software using brotli[1]
Vercel’s firewall protection against the attack is effective independent of the backend technology.
Python is vulnerable. However, unlike Node.js it requires using the pypi/brotli package explicitly[2].
It is likely that other software is impacted. Attacks can happen both through decoding incoming HTTP requests (which the Vercel Firewall protects against) as well as downloading attacker-controller payloads via HTTP.
[1] cve.org/CVERecord?id=CVE-202…
[2] db.gcve.eu/vuln/PYSEC-2026-4…
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26.
Vercel WAF rules are live for every project and block known exploit patterns.
vercel.com/kb/bulletin/node-…
