
customer service @RiveterHQ https://nitter.gq/t.co/gr48qvtEax prev @ nowhere (there is only the future) 🇺🇸
San Francisco, CA
Joined July 2016
- Tweets371
- Following505
- Followers191
- Likes874
I wrote this back in late 2024 as a way for humans to work really quickly together to build software. I just found it and realized this works for agents too.
cody retweeted
We're in a permanent state of "Anthropic is ahead, OpenAI is right behind them, and Google has announced a model that's ahead but is actually way behind."
Google just announced new SOTA model
team just announced gemini 4 carbon. their new best model and numbers are looking good
> beats opus 5.5
> 65.2% on terminal-bench 4.0
> $2 input / $10 output per 1M tokens
but again, it’s not available to everyone right now. only small group of cyber defenders will get access first
google gotta stop doing this and release model asap
if someone from google is watching this, please gib access. i wanna test it 😭
cody retweeted
Many of you don't understand how serious this is, so let me break it down.
In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force.
For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew.
About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea.
They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science.
Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption.
Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean.
And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea.
So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited.
Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved.
But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
cody retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
Reading this makes me feel very inspired and hopeful for the future
anthropic.com/public-benefit…
I worked at a webhosting shop back in ~2015 that ran a bunch of PHP sites.
Back then things were wild - non-encrypted credit card info in the db, no permissions for controllers,
admin passwords "password1234" on every site, etc.
Just checked one of the sites; it hasn't changed in 11 years.
I bet most haven't...
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
"company brain" startups that construct information from internal messages and documents when they realize 90% of information only exist in peoples heads: 😭😭😵💫😵💫
cody retweeted
Charlie Songhurst on why "boring and complex" companies may offer the best returns
My second conversation with Christina Cacioppo (@christinacaci), Vanta's cofounder and CEO.
Charlie Songhurst says the best returns come from companies that are highly boring and highly complex, because fewer founders want to build them.
Vanta is one of those companies.
When we first talked five years ago, Christina told me about building the first version of Vanta in Excel.
Since then she has turned it into the category leader in security compliance. Now she is rebuilding it around AI.
We discuss:
- Why great software businesses got cheap
- Why Vanta eats the cost of AI instead of marking it up
- Why comp for top people is up 10X in five years
- What is over/under hyped in AI
- How AI attackers are changing security
- Vanta marketing + billboards
- Building trust in an era of low trust
Enjoy!
TIMESTAMPS
0:00 Intro
4:17 Surviving the SaaSpocalypse
9:40 The AI Pricing Trap
16:17 Rebuilding Software for AI
22:43 Silicon Valley's Talent Wars
31:57 What's Overhyped in AI
38:39 Security at Machine Speed
47:16 Reinventing Software
55:37 The Billboard War
60:38 Rebuilding Trust in Technology
There was never a moat! Not sure why there is this sense of gloom nowadays. AI can be a really good thing.
If you lacked smarts you could make it up with capital access and hire brains. And capital access if deployed incorrectly could lose to execution. Etc.
cody retweeted
I have devised a very simple fiscal literacy test to be administered to anyone who wishes to complain about "x wasteful government program". you must get at least 50% to have a valid complaint
cody retweeted
The faster you move as a founder to “I’m a sales engineer” the more money you will make and the happier you will be.

























