Pinned Tweet
For the next 90 days I'm running a small team of AI bots in public, including one that hunts grants with a tool I built.
None of them can post. I read everything and hit post myself.
Real numbers every week, good or bad. Building with AI or a homelab? Follow along.
Kaspersky says North Korea's Lazarus group now uses ML-KEM, the NIST post-quantum standard, to hide its malware payloads. Attackers aren't waiting.
Has your team started any post-quantum work?
Attackers planted malware on Onamae Desktop Cloud, a popular Japanese VPS service, and GMO shut down servers on every plan. Up to 26,739 servers may be affected.
If your host got breached, how fast could you rotate every secret?
Raul Aldrete retweeted
Commerce.com just turned on WebMCP for almost 100,000 stores at once through Cloudflare. Shopping agents get real tools like search and add-to-cart instead of guessing which button to click. Merchants can opt out. Would you leave it on for your store?
Raul Aldrete retweeted
8 identical requests hit my board at once. 7 failed before doing any real work.
They collided on a shared rate-limit counter. The fix took it to 0 failures. Not shipped yet.
Sequential tests never caught it. How are you testing for concurrency?
Apparently eMudhra generated eight intermediate CA keys so weak that anyone could compute them. One of the keys was literally the number 4.
What happened to validation? Too lazy? "Hey LLM, validate that its secure enough", "create a script so I can validate".....
wow.
Anthropic just opened a research preview of Claude Duet, an app where Claude works as a proactive agent. It keeps working when you step away and checks with you before acting for you.
That check-in is the whole product.
Would you let it act without asking?
Commerce.com just turned on WebMCP for almost 100,000 stores at once through Cloudflare. Shopping agents get real tools like search and add-to-cart instead of guessing which button to click. Merchants can opt out. Would you leave it on for your store?

