founder @ boring software forward deployed clanker @compai open sourcerer @tripwiredotsh
Joined July 2022
- Tweets20.2K
- Following2K
- Followers4.9K
- Likes153K
grim retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
grim retweeted
You can now use your Claude plan in Capy!
Free for everyone
Claude plan usage and OIDC cloud access are here!
Capy 0.5.0
• Use Claude Pro and Max subscription usage with Claude Code mode
• OIDC cloud access for GCP, AWS, Azure and Vault
• Capy can move itself to a bigger machine
• Subagents on paired devices
capy.ai/changelog/0.5.0
grim retweeted
Yesterday we shipped Cap v0.6.1. A full migration from Tauri to GPUI.
Here's a full technical deep dive into how we did it 👇
Cap.so/blog/rebuilding-cap-i…
grim retweeted
>junior dev at a mid startup
>wednesday morning
>just want to push a minor bugfix to our php app today
>open laptop, check slack
>company group chat is an absolute warzone
>CTO typing in all caps about php2shell
>fucking php
>whatever, server hasn't blown up yet, I just need to get my code in
>open gitlab to merge the PR
>forced emergency logout because of a critical gitlab security patch release
>fucking gitlab
>pipeline fails because of some weird regex compiler bug
>spend 40 minutes fighting CI/CD
>i can just use AI to help debug
>fire up opencode
>api keys nuked because they were breached
>fucking opencode
>i’ll just get fresh LLM api keys from our corp proxy, LiteLLM
>it won’t connect? It’s down?
>look up LiteLLM news: supply chain compromise
>fucking litellm
>cold sweat forming
>slack alert: db connection error
>check our database connection
>we host on TiDB Cloud
>they just announced a security breach, unauthorized access via stolen service account credentials, data copied
>fucking tidb cloud
>full panic attack incoming
>figure fuck it, just ship the container to Railway and go home
>open Railway dashboard
>bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused."
>fucking railway
>try to open the app URL in browser to see if anything is even working
>NET::ERR_CERT_AUTHORITY_INVALID
>eMudhra intermediate certificates compromised
>4
>instantly untrusted by every major browser
>fucking emudhra
>stare blankly at mac screen for 10min
>random pop-up
>restarting in 10min to fix a critical vulnerability
>fucking macos
>close laptop
>leave office
>never come back
grim retweeted
If you do become a customer of @unkeydev I might just show up in your repo and make things better
grim retweeted
alright, glad to announce that databuddy has fully migrated off railway and onto @unkeydev
all keys have been rolled, and we've conducted an internal audit concluding that none of our systems were breached, no user data was accessed, and there has been 0 downtime with 0 data loss
grim retweeted
I reworked the Hex homepage for no reason 😅
Try it out for all your speech to text needs. It's free, multi-platform, and pretty good.
Also, I just added added faster Parakeet streaming models, so dictation's even faster now.
grim retweeted
deepseek v4.1 flash abliterated going live on @morphllm in ~1hr
dm me if you want access, it will be application only
i feel like this is important to society to serve. idt mythos the correct choice. you need to be playing defense with the same model that's on offense
the recent security incidents are going to 100x the demand for open source models
the software security game is now: the side that wins is the one that can deploy the most tokens
so every organization will rush to harden their software, the demand for tokens will 100x
because if you don’t want to get pwned, you *have* to use ai now
grim retweeted
shut... the ... front... door...
was JAVA feeling lonely and wanted to get into the party?????
Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1
oracle.com/security-alerts/a…
@uwu_underground
grim retweeted
I am here once again to say “put up or shut up”
One million to open source this year, as we continue to give back to the ecosystem via the pledge.
More than half has gone directly to your favorite open source developers.
blog.sentry.io/another-year-…
