Sunil Sadasivan (@sunils34) header
Sunil Sadasivan (@sunils34) profile picture

Builder, engineering leader and solopreneur #goblue

Washington, DC
Joined January 2009
Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)Photo by Sunil Sadasivan (@sunils34)
Sunil Sadasivan retweeted
We must face the reality that Tech's brand in America has taken a real hit, and it will take hard work to win back Americans' trust.
27
5
3
160
9,113
Sunil Sadasivan retweeted
One of the more exciting parts of this election - among many - is the return of a religious left.
1,372
1,890
826
19,672
3,545,439
Sunil Sadasivan retweeted
6ers are 6-1!!! LFG!!!
7
69
2
575
10,182
Sunil Sadasivan retweeted
Let yourself have more fun. Even in the chaos, if that’s where you find yourself.
23
18
3
123
11,532
Sunil Sadasivan retweeted
SIXERS BEAT KNICKS 98-93 IN NBA CUP TYRESE MAXEY DROPS 27 POINTS ANFERNEE SIMONS WITH 21 AND LEBRON JAMES WITH 20 SIXERS START SEASON 5-1 PLAY THE SONG
10
199
9
2,047
55,980
Sunil Sadasivan retweeted
Every time we discover P=NP they just reset the universe.
98
382
41
7,331
290,476
Sunil Sadasivan retweeted
In third-party OSS vs first-party vibe-coded evaluation, the question will turn from "which has better code quality/security?" to "which has a smaller supply chain attack surface?", which is a very easy answer.
One potential outcome of the vulnpocalypse is that companies decide the cost (in risk, dollars, and engineering hours) of OSS dependencies is too high. Vulnerability management isn’t cheap or glamorous, and it’s unlikely that you need all of the attack surface you inherit with these packages. All of the small packages from the many transitive dependencies you inherit present supply chain risk that likely outweighs whatever value you’re getting from that few hundred lines of code. The cost of the tokens to rewrite the fraction of that code you need, and maintaining it as 1p code, will eventually be lower than the continued cost of dependency management. This will improve security, but would have negative consequences for the OSS ecosystem.
4
1
9
1,208
Sunil Sadasivan retweeted
This one maybe as bad or worse than the PHP ones. Get used to lots of patching.
we've found and have been working on disclosure for a remote code execution in a widely-deployed compression library. it's both an impactful issue and an example that shows how complicated it can be to coordinate patching, since it's integrated into a lot of downstream software:
50
129
29
1,866
215,188
Sunil Sadasivan retweeted
Why are people acting like it's @OpenAI/@AnthropicAI's fault that vulns are being fixed/disclosed? This is the result of decades of security debt from poor software engineering. The labs' models are not creating net-new security risk, the risk has always been there and we're finally able to uncover and fix it.
Replying to @hinapansari
yes. it was always going to be this way. we tried to warn the world.
14
14
9
110
25,382
Sunil Sadasivan retweeted
PLAY THE SONG SIXERS WIN!!!
11
131
6
696
18,892
Sunil Sadasivan retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
287
3,261
674
22,599
2,280,490
Sunil Sadasivan retweeted
every security engineer this week
61
100
15
1,877
77,031
Sunil Sadasivan retweeted
SIXERS WIN! PLAY THE SONG!!!!
1
132
3
612
13,623
Sunil Sadasivan retweeted
Philly sports fans:
2
2
14
3,174
Sunil Sadasivan retweeted
one day you wrote console.log("here") for the last time and didn't even know it
16
319
7
4,091
112,403
Sunil Sadasivan retweeted
In June, @SamAsante and I launched Typeahead, the first product from our new company. Today we're releasing our next Mac app. It's called Beam, and we're live on Product Hunt. I've got Macs all over my house doing different work. Some run agents and local models. Others handle builds. When I want to use one app on another Mac, I usually end up navigating a whole second desktop through Screen Sharing. Beam brings that app's window onto the Mac I'm using. It gets its own Dock icon and shows up in ⌘Tab. I can type into it and resize it while everything keeps running on the other Mac. Sam has put a lot of care into making this feel natural. The video shows it better than I can explain it. Live on Product Hunt → producthunt.com/products/bea…
115
38
28
474
101,302
Sunil Sadasivan retweeted
systems is back, baby
The most exciting blog posts in the last few weeks have been about source control, virtualization, compilers, filesystems and hardware heterogeneity. Looks like we’re back to the 90s!
2
4
85
3,717
Sunil Sadasivan retweeted
Philly:
We've won more games in Philly in the last nine days than the Flyers, Eagles, and Phillies combined this month.
9
26
1
631
18,607
Sunil Sadasivan retweeted
The NFC East winning 0 games on a week in which two teams played each other feels like a pretty good encapsulation of the division at the moment
372
6,331
342
70,202
1,266,567
Sunil Sadasivan retweeted
Ten years of Sad Affleck memes and it turns out he'd just been trying to install CUDA drivers the whole time.
58
1,154
67
15,420
271,803