QIP: Quick Isolated Portable WebAssembly components: https://xitter.cf/t.co/fhKA3m9FXV blog: https://xitter.cf/t.co/EtrtGaXYON

Melbourne, Australia
Joined August 2013
My WebAssembly debugger lets you time-travel with your scroll wheel. WebAssembly (and Ghostty) are so fast that a step back just reruns from scratch.
I’m working on a WebAssembly debugger. You can even time-travel backwards!
34
127
9
1,641
119,842
Who can beat my implementation for unescape_html? calculated.world/submissions…
83
I’d like to publish qipx to npm. These names do not sounds similar to me at all.
84
Here’s lynn. It combines a shell with agents. Spawning an agent is like spawning a process. You can pipe between agents and different models. You can write `git status` without burning any tokens. Agents are read-only by default and only get write privileges when you decide. cargo install lynn
1
266
Patrick Smith retweeted
LLMs make it easier than ever for normal software to get down to zero allocations.
3
2
57
4,348
Is this really a public company then?
1
82
We should think about what Hyrum’s law teaches us about security in the age of AI. Hyrum’s law states: With a sufficient number of users of an API, it does not matter what you promise in the contract: all observable behaviors of your system will be depended on by somebody. We can restate this for AI attacks: With a sufficient number of attacks of an API, it does not matter what you verify in behavior: all potential vulnerabilities of your system will be discovered by somebody.
96
Patrick Smith retweeted
Got a cheap embroidery machine off amazon for $300 where the biggest complaint is the mandatory $12/mo app that you’re forced to use. Had ChatGPT create its own app that communicates with the machine. Generative art patches incoming!
124
128
44
4,544
182,209
Patrick Smith retweeted
Corrupt autocracies prefer to do business with other corrupt autocracies because the profits are personal on both sides, not for the state or the country. No oversight, no investigations.
The US is willing to betray its closest allies in Europe, a market of 450 million people and an economy worth nearly $20 trillion, just to cut shady, corrupt deals with Putin's Russia, an economy roughly the size of Italy's. What an absolutely insane foreign policy.
63
1,760
29
5,899
67,864
Patrick Smith retweeted
Yesterday, someone posted a task runner claimed to be 39x faster than Turborepo. I got really excited, thinking they found some edge case in Turborepo and that I could make something way faster. I open the benchmark repo, and its just straight up, flat out incorrect. Like, not even sorta useful. Not only was it not measuring the task runner parts of the script, it was overfit to a highly specific, completely unrealistic workload. 💀 The entire project is obviously Opus 5.5 vibe coded and Opus cheated the goal. Easy to miss if you're not experienced in build systems. Forgivable! So, I open a PR to show that the algorithm being used can also make scheduling slower, by any arbitrary factor, with only a tiny adjustment. I chose 100x slower than Turborepo for demonstrative purposes. The author fixed some of the problems but there are still grave issues. They're still comparing on an overfit bench that doesn't hold up when you insert the slightest variable, and *insisting* that its right. It is very obviously incorrect, but oh, well. After revision, Turborepo is only 1.36x slower. Down from 39x, but a more realistic number nonetheless. So I figure: "Great! There must be something I can learn to make Turborepo faster." I go digging, and it turns out the other tool is only faster still because it has correctness bugs. Once they correct those, they'll be roughly on par with Turborepo. On top of that, the numbers they post now report with a mix of "% faster" and "✗ faster", using "% faster" whenever the difference isn't big enough to make their tool look good. 1.36x gets turned into "36%", which looks like more than it is to a casual observer. This is a story of how I thought I was going to speed up Turborepo by 39x, and got nothing out of it. I'm not mad; I'm just disappointed. 😄
11
7
8
330
29,940
The weight of this feels great.
71
Patrick Smith retweeted
43
2,365
75
30,682
283,724
Patrick Smith retweeted
Actual expertise is the most important thing right now in tech. Knowing how things work, and how they are implemented on a deep level is more important than ever.
13
26
5
380
5,920
I just picked up my iPhone Duo, let’s look at the quirky hardware and software. xitter.cf/i/broadcasts/1qKDzWkdv…
202
If you are interested in zero-network, memory-safe, self-contained WebAssembly modules that plug in into your existing stack check out qip.dev
2
163
Perhaps we need a system where we only download code that we know the sha256 ahead of time. Working on it.
I read this and I'm terrified, the situation seems intractable. In the python ecosystem alone every cpython install, venv, UV is at risk. Don't get my started on npm, pnpm, yarn, go, rust. My current 2026 security posture: stay home and only connect to the internet from a trusted ISP. The winter is coming. discuss.python.org/t/informa…
1
206
It’s exciting what can be one-shot with coding agents today. I wonder if in the future we’ll scatter-shot completely different experiments to learn what directions look best.
95