All the money in the world can't buy you a second of yesterday... Live the moment...
On a sunset road
Joined May 2008
- Tweets9.2K
- Following6.4K
- Followers424
- Likes163K
Pinned Tweet
🙏♾️
…thought matters…
teapawt.org/i/grok/share/5b70d3acc…
sunsetroad retweeted
we've found, validated, and prepared patches for almost 1,000 linux local privilege escalations using our cyber vulnerability pipeline, at the cost about $1,000 per vulnerability.
an emerging scalable approach to significantly hardening both open source and proprietary projects
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.
In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
sunsetroad retweeted
be careful out there on the interwebs! backdoored malware in sheep’s clothing is on the rise 🐺
sunsetroad retweeted
General Tibo is now in charge of the internal OpenAI security initiative, and has reassigned 1/4 of OAI's production engineers to improving security infrastructure. Dario said in an interview once that eventually the value of model weights will exceed any possible security spend.
sunsetroad retweeted
Xiaomi is peak Chinese tech firm.
Went from making cheap smartphones and household appliances to EVs and AI models.
Now Xiaomi is making humanoid robots that run autonomously on its own VLA model to help build its EVs.
8 hours on the production line. 🤖
Xiaomi’s full-size humanoid robot takes on an 8-hour task at the Center Console Side-Cover Sorting Workstation at Xiaomi Auto Factory.
Beyond sustained operation, it can autonomously detect and correct anomalies while coordinating with the production line system — another step toward real-world industrial deployment.
#XiaomiRobotics #EmbodiedAI
sunsetroad retweeted
A few random non-partisan thoughts for tonight:
- An uneasy coexistence has been developing between the U.S. political elites and the stewards of powerful AI. The technology is threatening, yet enticing. Politically messy, yet increasingly fueling the economy. These tensions exacerbate from here, with unpredictable results.
- If a company that built the data center is a U.S. company, it doesn't really matter whether that data center is in space.
- The labs, as I understand it, have been told that frontier model training must take place in the U.S. Data centers outside the U.S. might be used for inference, but that's probably about it.
- Data centers shall continue to be built in the U.S.
- Congress is D. President is R. The two centers of power shall be at each other's throats when RSI is brought into the world, and will surely find it difficult to form a united front to face its consequences - for better or for worse.
sunsetroad retweeted
Wow! Perfect timing! I was just getting ready to order a Bambu 3D printer & they just unveiled the new H3C! Its 9 PrintTools & automated tool-changing system look like a real game changer for 3D printing!
I’m gonna connect my Codex Astra to the H3C and have it turn its own CAD designs into real, physical objects!
We can now both vibe code & vibe make physical things! 🚀
Bambu Lab H3C launches today.
Nine independent PrintTools™ that allow multiple nozzle sizes in a single print.
Powered by SwapTek™, Print-to-print tool switch only takes 6 seconds.
Multiple toolheads with multiple possibilities. Print, cut, draw and deboss. All on the same machine.
We built this machine. Now we want to see what you make with it.
--------------------------
To celebrate the launch, we're sending one H3C Combo to a maker ready for it.
How to enter:
• Follow @BambulabGlobal
• Like + Repost with: "Bambu Lab H3C. Tool Changer. Game Changer!"
• Comment: Which H3C feature impressed you the most?
Winner revealed: Nov 6, 4AM EST
Explore the H3C: share.bambulab.com/4yoyNdz
sunsetroad retweeted
I've been looking forward to this day, because Vercel has an internal security agent that is **astonishingly effective** (lovingly called @𝚑𝚊𝚌𝚔𝚎𝚛). Every single line of code gets audited, automatically.
You can now get the same power. Just enable it on all your repos (this product works whether you host on Vercel or not) and your peace of mind will increase tremendously. You'll see it catch things that every other agent misses.
Why: you cannot just bank on your engineers having a skill installed, prompting "please make secure", or rolling the weights' dice that the code is good out of the gate.
The other cool thing about this is that this was entirely developed by our security team. A lot of companies out there are probably in a mad rush right now trying to staff up. If you wanted to 'download a security team' as software, this is the closest you get today.
Today we are launching Vercel Security Review in public beta.
Run vulnerability reviews on every push, and ship fixes in one click with Vercel Agent.
Read the blog → vercel.com/blog/vercel-secur…
sunsetroad retweeted
running a company nowadays feels kinda dystopian
my team is 50+ people in 12 countries, but i talk to my agents more than my human teammates
- voice note to grokbot
- mattpocock/skills /grill-me so the agent interrogates the idea before anything gets built
- spec drops into linear through the linear mcp
- exa + firecrawl agent reads every competitor site, pricing page and changelog
- ideabrowser.com to find ideas and trends
- apify pulls g2, reddit and app store reviews
- prompt: "find the 10 complaints that show up most and quote the users"
- context7 so the agent reads the latest docs before it touches any api
the design
- claude code + paper mcp
- 4 versions of every screen before a single line of code
- pick pieces from 2, it merges them. diverge then converge
- frontend-design skill from anthropic/skills + our own design system skill
- cleanshot screenshots of any ui i like go straight in with "make it feel like this"
the build
- pingdotgg/t3code as the control surface for every agent, from my phone too
- stablyai/orca runs a fleet of agents in parallel, each in its own git worktree
- graphify maps the whole codebase into a knowledge graph so agents navigate instead of guess
- headroom compresses tool outputs before they hit the model, so tokens go 20-95% further
- lsp plugins so the agent sees types and errors like an ide does
- security guidance hook flags risky edits before they land
- supabase mcp for the database, stripe for billing
- github mcp opens the pr, vercel spins up a preview
- loops run overnight, i check what shipped over coffee
the user testing
- lightpanda as the headless browser, way lighter than chromium so you can run hundreds at once
- agents click every flow on the preview like a first-time user
- one persona is impatient, one is confused, one is on a phone
- playwright + chrome devtools mcp for regression tests
the bugs
- sentry mcp catches the error
- agent reads the stack trace and opens a fix pr in under 10 minutes
- human just approves
the data
- posthog mcp cron at 7am on yesterday's funnel
- any step that drops more than 10%, the agent watches 20 session replays and tells me why
- stripe mcp pulls every cancellation reason into one doc every monday
the agents' tools
- orgo so every agent gets its own computer
- agentmail so every agent gets its own inbox
- agentphone so i can call them from the car
- composio connect-apps for every other connector
- akitaonrails/ai-memory, a git-backed markdown wiki so they remember what we decided last week
the skills
- wshobson/agents so skills work across claude code, codex and opencode
- my writing voice
- our design system
- how we write specs
- skill creator so the agents write new skills themselves
some helpful tricks
- one agent per platform. the x agent never touches email
- cheap model for triage, opus for anything that ships
- every output gets scored 1-10 by an llm judge. under 8 goes back
- every agent writes a 5-line log at night so i can read the whole company in 2 minutes
- every agent mistake becomes a new skill, so it only happens once
the team
- humans get version 5, not my voice note which they are happy about lol
- their job is creative feedback, relationships and telling the agents what they got wrong
a human pm reviews the funnel once a week. this reviews it every morning
running a company is now voice notes and inference
sunsetroad retweeted
Introducing Zero Wire: a public vulnerability intelligence feed on @CloudflareRadar, bringing the clarity of a news wire service to critical security developments. cfl.re/4iCvSbj
sunsetroad retweeted
💸 Update: My total biz expenses have now dropped to just ~$300/mo!
This is to run all my websites/apps serving per year:
- 20,000 paying customers
- 252 million visitors
- 2.4 billion requests
- 2.4 petabyte (PB) in bandwidth
(~$8,000/mo if you add the $7,000/mo GPU bill and $800/mo R2 storage I pay for Photo AI, I exclude it above because it's one project that's so much more expensive in size than all the other sites together, but included in the chart below)
Claude Code helped me to find smart ways to save more money, AI is just really really really good at finding cost savings by itself, which is not so great for the economy short-term, but long term it trims all the fat and opens up spending for better investments I think
Anyway here's what it saved me in money, almost $34,000/mo:
- $29,000/mo - switched to better and cheaper video models on Photo AI, video was very expensive and since I didn't update it ever it stayed expensive, also routed some image jobs to Google Cloud where I have some Google Cloud Credits, and also routed some jobs to Sume which sells AI models at market cost, very cool! This made my GPU bill go from $36,000/mo to $7,000/mo
- $3,000/mo - consolidated my servers, cancelled Digital Ocean and Linode and moved everything to Hetzner saving about $3,000/mo
- $1100/mo - analyzed my Backblaze B2 server backups, I had infinite versioning and lifecycle policies, that's reduced now to 30 days, this literally pushed the bill from $1,200/mo to $26/mo, about 50x cheaper! I had essentially versions of files for all my servers for over a decade, crazy!
- $400/mo - similarly added Lifecycle Policies to my Cloudflare R2 bucket for Photo AI, pics are automatically put in cheaper Infrequent Access after 90 days, there was years of photos in there so this reduced the R2 bill from $1,200/mo to $800/mo
- $118/mo - Claude analyzed all my Cloudflare Domain registrations, lots of domains I didn't use and didn't make sense to keep paying for, lots of things that also don't really make sense anymore in a post-AGI world, renewals for .io TLD are now $50/year which adds up fast!
- $100/mo - Claude also analyzed my Claude subscription (yes!) and discovered I don't even use the Max 20x plan limits, so I downgraded from $200/mo to $100/mo
Even including Photo AI, I have now cut my costs by 90% from last year, getting me close to my biz expenses amount from a decade ago when I started building things
Costs slowly creep up over the years and you don't realize all the things you're spending on but AI is nice to help you figure all that out (also in your personal life!)
✨ I replaced all these SaaS with my own vibe coded now, so about $25,000/mo savings:
- Weather API -> My own vibe coded weather service using Norway's meteorology API
- Image resizing API -> My own vibe coded image resizing API with NodeJS's Sharp + Redis (saves ~$1,500/mo)
- Google Vision NSFW detection -> My own $0/mo vibe coded NSFW detection service with Python's NudeNET (saves ~$2,500/mo)
- Cloudflare Streaming -> My own $0/mo Nginx VPS video streaming (saves ~$250/mo)
- API Flash -> My own $0/mo screenshot service (for social images) (saves ~$250/mo)
- New Relic + IPHub -> My own $0/mo error monitoring, DDOS blocking and fleet management service (called error2telegram) (saves ~$250/mo)
- Human moderators -> My own moderation on all my sites with @xAI (saves ~$10,000/mo)
- IFTTT -> Telegram bot (saves ~$100/mo)
- Photopea as editor inside Photo AI -> Vibe coded my own photo editor (saves ~$100/mo)
- Mapbox -> Vibecoded my own free replacement with OpenFreeMaps (saves ~$500/mo)
- Uptimerobot -> My own $5/mo Uptime Canary app running on Kuma (saves ~$50/mo)
- Ghost blog -> My own $0/mo blog platform
- Customer support -> @featurebasehq + AI support bot (saves $5,000/mo)
- Scrapingbee/SerpAPI -> My own $1/mo scraper with Patchright (save ~$250/mo)
I think I have reached my final limit of replacing my SaaS services as I have these left, but that'd mean becoming an ICANN registrar (I don't want 😁), managing my own email (I don't want), managing my own hard drives at home in a storage (I don't want) and managing my own servers at home too (I don't want) and running my own GPU rig at home (I don't want):
- Cloudflare Domains
- Cloudflare Email Sending
- Cloudflare R2 Storage
- Backblaze B2 for backups
- Hetzner for all my servers for all my sites (VPS)
- xAI for all LLMs for all my sites (so many things like moderation, writing emails, anything)
sunsetroad retweeted
> Railway gets caught hacking competitor's infra
> “sorry, my agents accidentally did it”
This is insane
Hey @Railway, is there a reason employee's of yours are trying to breach my infrastructure?
Your employee Jake Runzer, just attempted to tonight.
sunsetroad retweeted
Congrats to the Deep Principle team on Hydrogen-1.0, a frontier scientific research model post-trained from GLM-5.3 on lab records and discovery trajectories.
It is encouraging to see GLM continue serving as a solid base for pushing AI deeper into real scientific work.
We’re introducing Hydrogen-1.0, our first open-weight model for scientific research. We post-trained GLM-5.3 (@Zai_org) on our internal scientific data, lab records, and discovery trajectories.
It scores 38.3% on FrontierScience-Research vs GPT-6-Astra’s 33.3% and scores 93.0% on GPQA-Diamonds.
We believe science should be open, collaborative, and democratized, rather than proprietary. Only open weights let researchers inspect, adapt and build on the unprecedented speed of AI growth. There are many recent models named by chemical elements, but we believe Hydrogen-1.0 is the first aiming towards and open scientific superintelligence for discovery. 🧵
sunsetroad retweeted
PSA for those of u vibecoding naked on your laptop with no containers: tell your agents to DELETE Playwright NOW. Even the latest (1.64.1) bundles early Chromium.156 with
CVE-2026-118306
CVE-2026-118331
CVE-2026-118348
CVE-2026-118344
And the Playwright SANDBOX IS OFF BY DEFAULT
sunsetroad retweeted
Introducing Fontzz!
A collection of 36 new open source fonts.
Free, open source, & available today!
If you want your apps to be more unique, generate your own fonts!
These only cost $0.02 each with DeepSeek V4.1 Flash 1017 on @togethercompute.
Open sourcing all 36 fonts on Monday!
sunsetroad retweeted
So @Ubuntu still hasn't patched this open hole on any Ubuntu server on the public internet that lets anyone take it over
We might just have to switch all our servers over to Debian in this new post-AGI time of rapid cybersecurity hacks which require just as rapid patching
Slowpokes will be left behind
chalmovsky.com/posts/wtf-ubu…
This is why I said you want your VPS ports all closed
Then only let it be accessible inside your Tailscale for SSH and via a Cloudflare Tunnel to receive web traffic
Any Linux box can be taken over with just a single TCP port exposed to the internet now
A stop gap is disabling MPTCP on your VPS now but even better is not having any public ports exposed!
sunsetroad retweeted
Waiting for replication but this is a pretty big deal.
We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math.
It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training.
We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵
Blog: rikiyat.github.io/blog/weigh…
Readers added context they thought people might want to know
LLM was given weights explicitly as text in prompt and used code/forward passes (per authors' logs) to ablate Qwen looping direction, a known thinking-mode issue per model card. Primarily fixed repetition in that mode, not general 'natively' improving weights/math.
rikiyat.github.io/blog/weight-sp…
github.com/RikiyaT/lm_und…
huggingface.co/Qwen/Qwen3.5-0…
huggingface.co/RikiyaT/Qwen3.…
sunsetroad retweeted
Interviewing Joscha always leads to the most fascinating podcasts. One of the few modern real philosophers.
sunsetroad retweeted
supermarkets in sweden, belgium, luxembourg, estonia, ireland, the netherlands and finland hit by cyberattacks on their refrigeration systems
some freezer controls set to 50°C. stores forced to throw away food
this is only the beginning
very few things are going to matter more than cybersecurity in the next few years
