🤖 Made with AI
Next up, @nickytonline talks about fine-grained auth for hosted MCP servers.
Bobby DeSimone retweeted
If you're at @githubuniverse, catch my talk, "Open PRs, don't merge them: Fine-grained authorization for hosted MCP servers", @ 10:30am in the Firehouse building to the right of the pavillion building where they keynotes are.
#GitHubUniverse
go.pomerium.com/universe26
Bobby DeSimone retweeted
Original game is here . I’ll open source the badge game once it’s finished.
github.com/nickytonline/pome…
Bobby DeSimone retweeted
Alright, full game is done and open sourced for your #GitHubUniverse badge.
Hack your badge by throwing your clanker at the repo and learn about @pomerium_io in this old-school Zelda like game. Repo in the replies.
Shoutout to the @syntaxfm usb-c cable that made my hack possible!
What we are seeing is people proving their use case with frontier models (fabel, astra etc) , then fine-tuning open models for prod for cost, control, and data tenancy reasons.
I think we'll see a lot more of this as prod deployments ramp up. You don't need a hyper-capable general frontier model for most deployed use cases.
lot of people making stuff up so here's some more context
you can imagine there's hidden enterprise demand for open source models that isn't visible
but if you look at the top inference providers that aggressively go after this business, they have shared some numbers and they are all roughly the same size as us. and at best there's 5 of them
if you think enterprises are self hosting inference on their own GPUs, there are so few people who can run reliable inference and they get paid a lot and work at ai labs. and if they really want sovereignty they're not getting that by leasing GPUs from a third party
the root point here is this is entirely the wrong way to look at things, you just have to look at products
how many products exist with a lot of traction that can use open models? this is what creates demand, it's not some magic thing that grows on its own
OpenCode is one of those and we do see a lot of enterprise inbound. but it's so early, all of these companies are just starting to look at mixing in some OSS inference
so yes demand will probably go up in the future but everyone in this industry is investing resources in preparing for that future. and so few people are building the products that will make it happen
what we are seeing as well... there's a lot of factors going into this, but the main one is the difficulty from going from dev to prod. cost, security, reliability, All the things we had to figure out with cloud computing we're having to figure out for this new type of actor model.
This is correct. The vast majority of enterprise workflows have not actually had agents applied to them in any meaningful way. The economy probably has this deployed < 1% right now.
At best you have a few automated systems in a company that do a single pass of an LLM to make a decision or provide feedback, but very little real “automation”. Some of this is a statement about the adoption rates of technology in enterprises, but the vast majority of it is really just due to the capability of AI itself.
That’s all changing. Now with computer use, long running agents, harness improvements and surrounding infrastructure, we’re finally at a point where we can start to apply agents at more complex workflows.
We will see self-improving systems that can take any particular workflow goal and improve the execution rates over a volume of instances. And with the emerging form factor of agent swarms, you can just choose to deploy any amount of compute at a problem and agents will off and do the work.
This won’t be about and users prompting agents to complete a specific task for them, but instead the organization reengineering the underlying workflows to take advantage of agents in their processes. This will have a massive impact in finance, life sciences, healthcare, and other information-heavy domains. Lots of opportunity to build and deploy these systems right now.
Complete slopfest of a report.
Which matches most reports everyone is getting rn.
Bobby DeSimone retweeted
‼️ HPE fixed 72 flaws in the software behind its Aruba Wi-Fi controllers, gateways and access points, 30+ of them critical.
Eight score a perfect 10.0 and let unauthenticated attackers bypass login or run commands on AOS-8 and AOS-10.
This time it happened in my town, bend Oregon.
It could happen to yours.
Don’t look away.
opb.org/article/2026/10/23/b…
Bobby DeSimone retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
Bobby DeSimone retweeted
Quest Diagnostics has been hacked. Patient data was exposed. They serve roughly half of U.S. hospitals and physicians. Investigation ongoing.
Bobby DeSimone retweeted
If you're at AGNTCon + MCPCon in San Jose this week, be sure to catch Nick's talk!
events.linuxfoundation.org/a…
Boarding in about an hour to start my mini US conference tour.
If you're at @AllThingsOpen this week, come say hey! I'll be speaking on Tuesday, but also working the @pomerium_io booth.
I'll also be at AGNTCon + MCPCon in San Jose and wrapping up a whirlwind tour at @githubuniverse with a talk on the 29th.
If you're at any of those conferences, I'd love to hang. Don't be shy and come say hey!
Insane number of security incidents in the last couple of days. CA leak, PHP CVE 10, Railway, Plex, LiteLLM to name a few. All would be year defining in a different era.
Things are going to get much worse.
And sorry, no, AI is not the "fix" here. LLMs are very good at finding needles (e.g. exploits).. They are shit at fixing them.
Insane number of security incidents in the last couple of days. CA leak, PHP CVE 10, Railway, Plex, LiteLLM to name a few. All would be year defining in a different era.
Things are going to get much worse.
And sorry, no, AI is not the "fix" here. LLMs are very good at finding needles (e.g. exploits).. They are shit at fixing them.





























