ESTERLUST | ELUST retweeted
EVERYTHING is a gift when we make the choice to live in a beautiful state of being. ❤️🙏
#TonyRobbinsUPW
ESTERLUST | ELUST retweeted
We're publishing our most detailed threat intelligence report to date.
It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them.
We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies.
These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve.
We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop.
Read the report: anthropic.com/threat-intelli…
ESTERLUST | ELUST retweeted
Ladies and gentlemen, it's time to pass the torch and demote myself to my natural state: a poster. I'll be stepping back from leading product for 𝕏 and will continue on as an advisor.
Serving the X community has been the privilege of a lifetime. X is, and will remain, the most important communication technology in history. But running this app is a 24/7 job and it's now time for me to take a breather.
The app is seeing unprecedented growth in new users & engagement. We continue to break records every month. We've climbed 70 spots in the App Store since this time last year.
And in the last 400 days, we rebuilt almost every aspect of X: the Timeline, the Android app, onboarding, notifications, chat and more.
We also launched nearly 30 new products while protecting the integrity of the town square: becoming the first app to show Country-of-Origin on profiles and mounting defenses against AI bots. There's certainly much more work to be done, but our foundation is stronger than ever.
None of this would have been possible without the incredible team here. The next leaders will take X to even greater heights with @benjitaylor on design, @singhai on core product engineering and @dinkin_flickaa on mobile engineering -- among many other great people.
Thank you to Elon and the X team for welcoming me into the company. See you on the Timeline.
ESTERLUST | ELUST retweeted
Begin with a process so simple that it can be maintained on a tired day, a busy day, a distracted day, and an ordinary day.
ESTERLUST | ELUST retweeted
Legibility and accessibility — how well a sign reads — should be topmost considerations when designing signage. Our columnist Heidi Tillmanns gives some pointers as to the why and how.
signsofthetimes.com/sign-leg…
ESTERLUST | ELUST retweeted
Vibe coders are getting sued.
People are shipping apps with real users and skipping the boring stuff that kills them.
A 20+ year dev shared the pre-launch checklist every AI builder needs.
I added what I learned after shipping 60+ apps at the agency.
Don't skip this:
1. Protect yourself, not just your app. The moment you collect user data you're in legal territory (GDPR, CCPA). Have a privacy policy. Know where user data lives.
2. Row Level Security. Without RLS, anyone can open DevTools and read your entire database. Supabase → Auth → Policies. Zero policies means your app is naked. 5 min to fix.
3. Test the failure path, not just the happy path. Wrong password 5x. Reset for an email that doesn't exist. Verification link clicked twice. Signup with an existing email. Catches 80% of auth bugs.
4. Security baseline in 2 min. Prompt your AI: "Review my app as a security specialist and make sure I have strong security headers and a solid baseline security posture."
5. OWASP. Prompt: "Review my app against OWASP standards and highlight vulnerabilities." This is where SQL injection, XSS and auth bugs actually get caught.
6. Client-side validation is UX, not security. Attackers disable JS and hit your API directly. Validate again on the server. Every time.
7. AI code leaks data in 3 spots: .env values in the frontend, API responses returning too much, secrets in logs. Prompt: "Check my app for credential or sensitive data leaks in frontend or API routes."
8. API keys in the frontend means game over. If it's in the browser, assume it's already taken. Move it server-side or proxy it.
9. Rate limits before someone burns your API bill. Cap every endpoint hitting a paid API. I've watched a Supabase bill jump from $20 to $200 in a day.
10. CAPTCHA on public forms (Cloudflare Turnstile is free) plus CORS locked to your domain. 10 min, kills bot floods.
11. Error messages that don't leak. "User not found", not "SELECT * FROM users failed". Log full errors server-side, show users generic messages.
Build fast. Just don't ship naked.
(full breakdown in my article below)
ESTERLUST | ELUST retweeted
Replying to @signulll
the grind of turning hobbies into personality traits is exhausting but here we are
ESTERLUST | ELUST retweeted
Thinking and speaking clearly are no longer "soft" skills
not in the age of ai at least
ESTERLUST | ELUST retweeted
Replying to @Pontifex
Human dignity grounded in lived being versus machine output grounded in computation.
1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.
Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.
ESTERLUST | ELUST retweeted
🔥 Hot off the press: BELLA+CANVAS has entered into a definitive agreement to be acquired by SanMar Corporation.
Details of the acquisition are available here: gpro.link/sanmarbella
#blankapparel #customapparel @BellaCanvasLA @sanmar_corp
We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
ESTERLUST | ELUST retweeted
If you have API keys in your code, even private repos, now is the time to double check and change them...
We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
ESTERLUST | ELUST retweeted
It's time to think beyond the product 🤔💡 In this month's Cliff's Notes, Cliff Quicksell describes why creative packaging is the most underutilized profit lever in promotional marketing.
promojournal.com/Packaging-I…
ESTERLUST | ELUST retweeted
"Some of your best work won't be noticed. No applause. No validation. Do it anyway. Because character is built in private." ~Bruce Lee
Somebody released a directory of 1,700+ dead startups (backed by YC)
here is the link: startups.rip
all of them have deep analysis of product inside and full funding story (in short, 100% product's description)
many of these startups failed not because the idea was bad, but because they launched at the wrong time or were just grant cash grabs
the ideas themselves are still worth drawing inspiration from (i've already found few ideas of my further startups btw)
[ BOOKMARK ]























