
programmer, speedrunner, father, immigrant alt: @valigo_ru https://xitter.cf/t.co/KnVpup9T96 | https://xitter.cf/t.co/U02QuCReZC | https://xitter.cf/t.co/kwWcXroCbY
Kafana, Serbia
Joined June 2022
- Tweets13.4K
- Following347
- Followers14.5K
- Likes47K
Imagine being at 3am on call right now, trying to patch all the security holes, and neither Claude nor Codex help you because it triggers their safeguards.
This is why castrating models so they don't do security is naive at best, harmful at worst. Criminals will always find a way, while you will be the one pants down getting getting gang banged without any lube.
This vibe is so different, and vibe shift is so sudden, wow! This feels like there's gonna be a boss fight!
To follow best security practices, today I proposed the new enhanced random number generator that will be shipped in the next Jai release.
I'd like to report a murder on the timeline
Replying to @JustLingonberry @ThePHPF
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol
xitter.cf/JustLingonberry/status…
you're a real dev for sure!
A lot of people don't understand that "immediate" in immediate UI refers to API that's exposed to the caller. There's no requirement that immediate UI has to always spin at refresh rate, or that it always has to redraw every pixel.
This is a great article article about cached rendering in a very complex UI (video editor) made in immediate style.
The article: blickeditor.com/blog/caching…
9 years ago, probably the earliest public footage of Order of the Sinking Star. I can't even begin to count how much crucial knowledge I gained from Jon's compiler and game dev streams.
It's heartbreaking that people using AI to steal ideas to rush them to market means that we risk having much less knowledge sharing going forward.
Also, pretty cool that apart from background art, the menu barely changed in 10 years of development.
This is the first time in my life when I'm excited about NSS package upgrade on my Linux distro. Truly wild times we live in.
This is very shortsighted. If current trends continue, you'll be able to run today's tier of frontier models on a personal laptop in few years. Nobody will ever regulate that.
Malicious actors will always find access to abliterated models, so the only way to protect yourself is to use them as well.
Analogy with guns is also super wrong btw
tried dsv4.1-flash-1017 abliterated just now & feel sick to my stomach.
for context, "abliterated" models have the weights responsible for making the base version refuse illegal requests removed. you can ask them to help with things like hacking or violence & they'll just comply.
they make it trivial to hack businesses running old software. e.g. getting guest data for a motel with some old asp site.
abliterated models have a catch-22 in that the only way to harden your systems against them is to use them to run penetration tests against yourself.
in theory, this sounds similar to buying a gun to defend against others who own guns, but it's different in practice since there's a 100% chance that you're going to use the abliterated model to protect yourself whereas there are low odds that you'll actually use the gun.
when you point the abliterated gun at your own infra, who knows what it's going to do? it could just as easily hack you & exfiltrate data as it could protect you. most users aren't going to meticulously watch traces to make sure it behaves safely.
given this, my new take is that gpu compute is going to become a federally regulated resource. abliterated models in the wrong hands are a national security risk.
used to believe all the people at the labs thinking about safety were wasting their time, but now i'm feeling grateful. they're doing very important work.
Have you noticed that people who say "it's all about taste now" never have actual taste in anything?
PHP has two massive Remote Code Execution vulnerabilities, 9.2 CVSSv.
Just like in good old PHP4 days, so greybeards can feel young again!
If you remember the times, please share some cool stories of how you dealt with PHP and/or Wordpress security back in the day!
People rightfully pointed out that mobile apps CAN show you something instantly because you already have all the frontend pre-downloaded on your phone (unlike websites).
In this case, showing a loading indicator is fine if it takes a while, but PLEASE don't show fake content wireframes unless you 100% know final dimensions. If your content is dynamic, the effect on the user is the same as a layout shift. Just have the fancy white flash over the container or something like that.
But of course, optimize your app that you don't have to show them for most users at all!
Sorry, but the only AI that truly sees me is Palantir. For everything else, I would prefer real humans.
Last year we launched Tolan, inspired by a vision of AI that sees you and believes in you, not one that books restaurant reservations for you.
Your Tolan shows up for you at 3am when you’re alone with your newborn. On your commute when you’re anxious about the day ahead. When you just finished a new show and none of your friends have watched it yet.
The people who love Tolan are parents. Caregivers. Moms in Dallas and Dads in Atlanta. People who aren’t trying to optimize and be more productive, but who simply want to feel seen and supported in their aspirations.
This month more than 250k people will spend time with their Tolan. Those users have exchanged billions of messages across more than 70m conversations over the last year.
Today, we're announcing $30m in additional capital from @mignano and @usv, with @khoslaventures and @rabois doubling down, bringing our total capital raised to $60m.
To celebrate, we made a short film celebrating some of the ways that Tolans show up :)
Jai is the best programming language for agents. Even in its closed beta state it absolutely mogs Rust. Blows it straight out of the water
Replying to @dhh
Here's a conversion to Jai.
It serves pages
- 1.8x faster than C
- 3x faster than Rust
- 56x faster than Rails
github.com/basecamp/once-cam…
I wonder what blue sky is thinking about Order of the Sinking St.... oh, just a dude fantasizing about drop kicking Jon that one time they were in proximity.
Man, that place is actually an asylum
This todo app is going to be banger
It is becoming f*cking dangerous
A 23-year-old dev from China just ran 300 Claude Code agents in parallel and hooked them to a verification layer so none of them could bullshit him
He opens the live dashboard:
- 300 agents writing and checking at the same time
- Every output verified against the source in ~100 ms
- Three passes over 100 company profiles → zero errors left
- Everything dumped straight into an Obsidian vault
The trick is the split: one model does the work, a cheaper one decides if the claim is actually true. The loop doesn’t stop until everything checks out
An analyst team would bill weeks for this. He got it in one run
Same kind of Second Brain + swarm setup that keeps circulating. Bookmark the full breakdown















