Philipp Tsipman retweeted
Invention is rarely obvious
“Small research preview” ->
“When we first demoed Claude Code internally, it got two reactions on Slack.”
When we first demoed Claude Code internally, it got two reactions on Slack.
A year after GA, @_catwu and I sat down to talk about what's changed: why I use auto mode instead of plan mode, how routines fix bugs before I see them, why I do most of my coding from my phone now, and where the product is going
Philipp Tsipman retweeted
human-in-the-loop
└ human-on-the-loop
└ human-near-the-loop
└ human-cc'd-on-the-loop
└ human-legally-liable-for-the-loop
Philipp Tsipman retweeted
everyone that uses more tokens than me is just shipping slop and everyone that uses fewer is ngmi
Philipp Tsipman retweeted
Patch or Die!
Today we sent the following out to the CEOs in our portfolio regarding the widespread vulnerabilities that have been detected by AI agents:
The previous week should make it obvious that things have changed. Vulnerabilities are being discovered and exploited at a rate that has never been seen before. While there has been a flood of new vulnerabilities AI agents are being adopted at scale multiplying the potential risk. Agents not only help automate the attacker lifecycle, every ai agent is an insider threat. Your environments are designed to withstand attacks from the outside, not from within. As such, we are suggesting company leaders consider the following changes:
1 - Ensure you're sufficiently staffed for security. The average enterprise allocates roughly 10% of its tech spend to security. Consider doubling that. There are likely thousands of vulnerabilities that need fixing in your environments. Security through obscurity no longer works, all that can be exploited will be exploited.
2 - Establish a zero tolerance policy for secuirty bugs in new features and product releases. Re-examine launch and release schedules and consider delays to ensure all vulnerabilities are patched before deploying new features or products.
3 - Double tap the zombies. Find all old legacy environments that have been neglected and turn them off. Labs, test environments, zombie CI/CD projects etc. Turn it off for now. If it isn’t tied to revenue, kill it.
4 - End the risk acceptance process. Over the last 10 years the risk acceptance process has morphed from a way to accept risks to enable the business, to a way to justify never fixing security issues. Adopt a zero tolerance policy for security issues and risks.
Philipp Tsipman retweeted
Agents ... is the wrong paradigm.
The humans are the agents, we don't want agency (can lead to 👇) we want... assistance.
A good assistant will never put their boss's stuff on Slack.
“We are releasing a model every week after pacing the frontier.”
Seriously!
Philipp Tsipman retweeted
Years into the LLM era, one thing hasn't changed: the model sets the floor, you set the ceiling.
AI makes mediocre work cheap. It doesn't make great work common. Taste, judgment, and depth are still what separate the two.
Philipp Tsipman retweeted
the right way to use model capabilities is not to ship 10x more features to prod
it's to spend more time understanding your users, trying experiments, building prototypes, learning about things you don't understand so that you can ship things that actually work
At @marketecturetv AI drinks - always a good time. :)
- with David Berkowitz, Len Bilello, @philish
Philipp Tsipman retweeted
Own your agent
Own your harness
Own your intelligence
Build on open source
Build model agnostic
Build on Mastra
We’re ending our partnership with Cursor following its acquisition by SpaceX. Under our proposal, Cursor’s direct access to our models would end on November 12.
We know that the people most affected by this decision are the developers who rely on OpenAI models in Cursor. We care about their experience in this transition and we’re ready to go above and beyond to support them.
openai.com/index/our-decisio…
