programmer, speedrunner, father, immigrant alt: @valigo_ru https://xitter.cf/t.co/KnVpup9T96 | https://xitter.cf/t.co/U02QuCReZC | https://xitter.cf/t.co/kwWcXroCbY

Kafana, Serbia
Joined June 2022
Imagine being at 3am on call right now, trying to patch all the security holes, and neither Claude nor Codex help you because it triggers their safeguards. This is why castrating models so they don't do security is naive at best, harmful at worst. Criminals will always find a way, while you will be the one pants down getting getting gang banged without any lube.
6
2
1
80
1,492
This vibe is so different, and vibe shift is so sudden, wow! This feels like there's gonna be a boss fight!
4
54
1,561
To follow best security practices, today I proposed the new enhanced random number generator that will be shipped in the next Jai release.
12
11
303
4,364
Thank you for happy childhood, and good luck to all the people to find a new place
2
3
74
1,662
And yes, I know it's not that bioware. Doesn't make it less sad
6
319
I'd like to report a murder on the timeline
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol xitter.cf/JustLingonberry/status… you're a real dev for sure!
3
1
1
124
3,370
A lot of people don't understand that "immediate" in immediate UI refers to API that's exposed to the caller. There's no requirement that immediate UI has to always spin at refresh rate, or that it always has to redraw every pixel. This is a great article article about cached rendering in a very complex UI (video editor) made in immediate style.
19
14
1
502
11,895
9 years ago, probably the earliest public footage of Order of the Sinking Star. I can't even begin to count how much crucial knowledge I gained from Jon's compiler and game dev streams. It's heartbreaking that people using AI to steal ideas to rush them to market means that we risk having much less knowledge sharing going forward. Also, pretty cool that apart from background art, the menu barely changed in 10 years of development.
16
8
1
369
11,133
This is the first time in my life when I'm excited about NSS package upgrade on my Linux distro. Truly wild times we live in.
1
19
1,359
This is very shortsighted. If current trends continue, you'll be able to run today's tier of frontier models on a personal laptop in few years. Nobody will ever regulate that. Malicious actors will always find access to abliterated models, so the only way to protect yourself is to use them as well. Analogy with guns is also super wrong btw
tried dsv4.1-flash-1017 abliterated just now & feel sick to my stomach. for context, "abliterated" models have the weights responsible for making the base version refuse illegal requests removed. you can ask them to help with things like hacking or violence & they'll just comply. they make it trivial to hack businesses running old software. e.g. getting guest data for a motel with some old asp site. abliterated models have a catch-22 in that the only way to harden your systems against them is to use them to run penetration tests against yourself. in theory, this sounds similar to buying a gun to defend against others who own guns, but it's different in practice since there's a 100% chance that you're going to use the abliterated model to protect yourself whereas there are low odds that you'll actually use the gun. when you point the abliterated gun at your own infra, who knows what it's going to do? it could just as easily hack you & exfiltrate data as it could protect you. most users aren't going to meticulously watch traces to make sure it behaves safely. given this, my new take is that gpu compute is going to become a federally regulated resource. abliterated models in the wrong hands are a national security risk. used to believe all the people at the labs thinking about safety were wasting their time, but now i'm feeling grateful. they're doing very important work.
11
1
67
3,564
Have you noticed that people who say "it's all about taste now" never have actual taste in anything?
16
3
173
2,962
PHP has two massive Remote Code Execution vulnerabilities, 9.2 CVSSv. Just like in good old PHP4 days, so greybeards can feel young again! If you remember the times, please share some cool stories of how you dealt with PHP and/or Wordpress security back in the day!
4
3
61
3,214
People rightfully pointed out that mobile apps CAN show you something instantly because you already have all the frontend pre-downloaded on your phone (unlike websites). In this case, showing a loading indicator is fine if it takes a while, but PLEASE don't show fake content wireframes unless you 100% know final dimensions. If your content is dynamic, the effect on the user is the same as a layout shift. Just have the fancy white flash over the container or something like that. But of course, optimize your app that you don't have to show them for most users at all!
2
2
1
72
3,781
Sorry, but the only AI that truly sees me is Palantir. For everything else, I would prefer real humans.
Last year we launched Tolan, inspired by a vision of AI that sees you and believes in you, not one that books restaurant reservations for you. Your Tolan shows up for you at 3am when you’re alone with your newborn. On your commute when you’re anxious about the day ahead. When you just finished a new show and none of your friends have watched it yet. The people who love Tolan are parents. Caregivers. Moms in Dallas and Dads in Atlanta. People who aren’t trying to optimize and be more productive, but who simply want to feel seen and supported in their aspirations. This month more than 250k people will spend time with their Tolan. Those users have exchanged billions of messages across more than 70m conversations over the last year. Today, we're announcing $30m in additional capital from @mignano and @usv, with @khoslaventures and @rabois doubling down, bringing our total capital raised to $60m. To celebrate, we made a short film celebrating some of the ways that Tolans show up :)
4
1
1
69
2,046
Jai is the best programming language for agents. Even in its closed beta state it absolutely mogs Rust. Blows it straight out of the water
39
1
1
290
24,264
I wonder what blue sky is thinking about Order of the Sinking St.... oh, just a dude fantasizing about drop kicking Jon that one time they were in proximity. Man, that place is actually an asylum
12
2
2
194
7,860
I am allowed to make big bucks now!
5
2
1
90
1,895
This todo app is going to be banger
It is becoming f*cking dangerous A 23-year-old dev from China just ran 300 Claude Code agents in parallel and hooked them to a verification layer so none of them could bullshit him He opens the live dashboard: - 300 agents writing and checking at the same time - Every output verified against the source in ~100 ms - Three passes over 100 company profiles → zero errors left - Everything dumped straight into an Obsidian vault The trick is the split: one model does the work, a cheaper one decides if the claim is actually true. The loop doesn’t stop until everything checks out An analyst team would bill weeks for this. He got it in one run Same kind of Second Brain + swarm setup that keeps circulating. Bookmark the full breakdown
56
129
4
6,683
125,750
One thing that didn't change post-AI is web devs. If you want to summon the most insufferable excuse parade just say that it would be cool to see a few kilobytes of text in, I don't know, under a second. Also add a couple pictures if you want it extra spicy.
13
5
270
7,032