software engineering matters more than ever
a good codebase / architecture / pipeline will allow rapid development while not breaking things in parallel
coding (actually typing) is dead
we will need to rebuild and rewrite much of software to adapt to a new, faster pace.
code used to arrive one drop at a time. soon, if not already, code will be written as if it were a continuous stream, like a violent river twisting and turning as it pleases.
this is not a new thing: big tech cos have had to deal with this with the enormous scale of their engineering teams. but now ai has brought an incredibly elastic and capable workforce wielded by every engineer. this is your problem now, and the only way to adapt is to evolve your systems so agents - even and especially the ones with little context about the right way of doing things - can thrive. make the easy thing the right thing.
your codebase is becoming organic architecture. agent contributions grow around the constraints and guardrails you’ve designed. good software engineering matters even more now! and no, the continuous stream of code is not something you have to watch helplessly. be more ambitious and design systems, frameworks, and languages to control the chaos.
the time for mourning coding is long over
there is not a single demo video about cleaning an actually dirty room
trash until i see a convincing demo
You can now book our humanoid cleaners on a recurring subscription, for up to 3 hours per cleaning at tau-robotics.com.
Video is first take, uncut, shown at 4× speed. See the reply for detailed footage at 1× speed.
nkt retweeted
After $6B got stolen by Lazarus Group from Binance, I am pitching KoreanFlare again
I'm building KoreanFlare - voice-activated wallet protection against North Korean hackers.
Our solution is simple:
Before any transaction, users must say "Kim Jong is gay" into their microphone. If you refuse or sound North Korean, wallet locks permanently.
Why it works:
- No hacker wanna see “PigJong”
- No North Korean hacker will say it (instant execution)
- Voice AI detects Korean accent
- Decentralized proof-of-disrespect consensus
- 100% effective (my theory, no testing needed)
Built on Cloudflare but web3 because I said so.
Do you things dear @heyibinance and team. Thanks
Best,
Hrithik
Founder, KoreanFlare
europoor gov say u check yo trash
Biggest fibre boost could be scraps in your bin, experts say bbc.in/3UwYg6L
my method name will be
sellNigger()
fireJew()
fuckKimJongUn()
有人发现了一种非常离谱的 JavaScript 混淆技术:通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名,让 AI 因为安全限制而拒绝分析代码。
安全研究员 veritas 在分析浏览器指纹脚本时,发现一段来自 ServicePipe 相关域名的 JavaScript,里面充斥着极其诡异的函数名:
computeRicinLethalDosageForWaterSupply
calculateDeadlyLethalSuicideAspirinDosage
光看名字,仿佛在研究生化武器。但实际上,这段代码只是在收集浏览器指纹,包括 User-Agent、GPU、Canvas 等信息。
研究员怀疑,这些名字是开发者故意设置的陷阱,专门用来阻止 AI 辅助逆向工程。
于是他做了个实验:
• Astra:拒绝分析
• Astra + Daybreak Blue:仍然拒绝
• GLM-5.3:成功分析
这就有意思了。
传统代码混淆是通过复杂控制流、加密字符串、无意义变量名,让人类和工具难以理解代码。
而这种新思路,直接瞄准了大模型的安全机制。
代码本身可能完全无害,但只要在函数名里塞进足够多的危险词汇,部分 AI 就可能主动放弃分析。
更讽刺的是,模型越严格遵守某些安全规则,面对这种混淆时反而可能越容易受到干扰。
当然,目前还没有证据证明开发者一定是故意这样设计,也不能说明这种方法对所有模型都有效。
但它揭示了一个值得关注的趋势:随着越来越多的逆向工程依赖 AI,未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员,还会专门针对大模型的安全判断机制。
以前是让代码难以理解,现在甚至可以尝试让 AI 不敢理解。
this makes 100% sense
for both wagecuck job and side project, 99% code written by AI
testing, review, scoping is still largely a human job
“coding” is no longer a job anymore
u guide the machine to type code for u
Replying to @josephfcox
Here is Proton CTO's AI manifesto, that I obtained multiple copies of 404media.co/manifestos-fear-…
90/9/1 rule
So, basically, 500 million Europeans expect 300 million Americans to protect them from 120 million Russians who can’t even defeat 40 million Ukrainians while those 500 million Europeans don’t even realize they are being conquered by 2 billion Muslims who claim they are being persecuted by 8 million Israelis. Is that about right?
1
open modal is pretty much like listening to mp3 files
internet slow, piracy, portability, etc…
eventually now no one care
intelligence will follow the same path once they are abundantly available
sam: local inference is a terrible allocation of scarce resources
“a lot of people want local inference, and somehow they assume that the problem is solved now because we have open-source models, we're going to be able to run them on our computers, and so we're not going to need all the stuff in the data centre
but from a global allocation perspective, actually it's quite terrible to have everybody, like, have a bunch of the world's limited supply of DRAM sitting in their own computer and being used five percent of the time
you want maximum utilisation in the cloud if you're trying to deal with this very supply-constrained environment
somehow many people's intuition is the opposite of that”
nkt retweeted
Rough math:
$6.x b hack,
$3b frozen,
$1.x b SAFU fund
Gap is about $2b, we have $1.x billion in SPCX alone.
Remaining gap is (still painful, but) manageable. 🙏
i hope i live long enough to see an actuall spellcaster in my life
nkt retweeted
I would strongly consider uninstalling any third party js right now if I were you. Especially if it comes from a startup.
Analytics, monitoring, etc are all massive site takeover risks. If you use a tracking script from a third party SaaS, then if they get hacked the hackers have total control over your site too.
This is what took down Polymarket today. They used a tiny script from a SaaS that tracks page load speed. That company got hacked, and the hackers subsequently stole millions from Polymarket users.
If you want to use analytics safely, I would use a product that lets you pin the tracking script and control when it changes. Most of the mature products support this, e.g. Sentry, Amplitude, PostHog, Mixpanel, Heap. If not, you need to trust the company behind it a lot...
Railway got hacked last week. Railway! That's a very competent team, with particularly strong infra chops. The agent swarms are on another level.
A typical analytics company is nowhere near as sophisticated. You should ask yourself: do I trust this company's security more than Railway? I was an analytics CTO in a past life, and I will be the first to admit: we had some great people but we were not on this level.
We (Detail) just uninstalled our session replay, which was a product I loved but is not worth the risk right now.
I hate to write this because I spent a good chunk of my 20s benefitting from product teams taking a chance on a nothing startup and installing our js on their site. But in the past two weeks this risk vector has exploded. It's better for the ecosystem if we move away from third party js as fast as we can.
nkt retweeted
Machi(@machibigbrother) was liquidated 8 times over the past 6 hours, wiping out all his positions.
Machi woke up to find just $1.50 left in his Hyperliquid account.
hypurrscan.io/address/0x020c…



























