team @AmpCode velocity is for real
exploring as new user. filed a few bugs. saw them closed or fixed under 60min.
personal email response to two of them. very good signal.
podcasts and strong opinions on future of work from founders are helping as well.
possibly next daily driver for me.
many such cases
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
it's great that there are companies out there who take shots in the most entrenched spaces.
despite the many joyous ux moments, i'd say that Arc paved the way for vertical tabs. i'm sure there were others, but i'm going to imagine that chrome vertical tabs would be another 12+ months out if it weren't for arc.
for that, we thank you.
interesting byproduct of named agents..
multiple times today i wanted to launch the “peb” app (my dot’s name) instead of chatgpt.
finding myself reaching for the codex suggested prompts more and more. it's doing a great job anticipating the next task in the chain.
Serge Doubinski retweeted
This might be the first time I’ve ever watched an Apple ad that made me actively not want to buy the product
starting to wish that X put these on top of posts. seems like a big influx of these for all ai launches.
company brain products will definitely settle a bit by q1 '27 with patterns from Glass & River getting copied into something like Buzz or maybe even Atlassian suite.
even if these products start becoming the system of record for decision traces, moving them to another free/cheaper solution will be quite easy.
it's very cool that Ramp is pushing the frontier of how the work gets done.
was hoping the story about Bites taking on DoorDash would hold up but in head to head with Eats for my local order it’s proving difficult to win on price.
may still move to it for transparent pricing and hopefully better outcome for restaurants.
competition is good.
Change anything in the Spotify app with a prompt.
People underestimate Open Source because they still wait for someone else to customize software. Sure you can use it as an alternative, but true freedom is in changing it in a way that works for You.
This is in part inspired by malleable software like Omarchy. In this example i take Spotifast and introduce an "inspector" which allows me to point to any part of the experience and send it to Codex to customize.
Spotify got bloated over the years, expanding to cover the needs to millions. I started paying for it when it was just starting up as a simple music service. That's still what i want now.
With a few prompts (and a bit of harness engineering) i can finally make the experience work for me.
Every product builder should be prepared for their service to be remixed this way.
Spotifast 0.12 is out!
Spotify, fast, in 200MB of RAM, for all OSs.
It now consumes 0% CPU when idle.
spotifast.rocks/
heyyy so is this the magic of Codex plugins?
i can select @tldraw elements and they're easily added as context to my thread?
maybe this was possible before, but this is so cool!
Is everyone receiving both desktop and mobile notifications from their ChatGPT Dot?
I haven't seen a setting like the one we have in Slack.
this could be a standard feature for any store.
shopify listings often have confusing selections. just show me a picture.
behind outputs that look too good to be one shot is a story like this one
- some experience with film and typography
- many revisions
- specific language to drive the model
Is wireframing still necessary? I think it's helpful. Updated my workflow and easily 10xed the speed with which concept come together.
ChatGPT + tldraw + Mobbin MCP and all through voice edits.
Use it to collaborate with your team, get fresh ideas and just get your ideas out faster.