CEO&Co-Founder of @Diffco_us. Angel investor. Pilot.

Sunnyvale, CA
Joined August 2008
Vadim Peskov retweeted
🚨 BREAKING: IT JUST KEEPS GETTING WORSE. NOW PYTHON IS FACING A MASSIVE SECURITY EMERGENCY. Python's security team has issued an URGENT warning after a certificate authority compromise put Python's HTTPS security at risk. → 8 CERTIFICATE AUTHORITY KEYS COMPROMISED. Some were so weak they could be cracked almost INSTANTLY. → FAKE TRUSTED WEBSITES: Attackers could potentially impersonate Python.org, PyPI and other websites during intercepted connections. → MALICIOUS DOWNLOADS: Vulnerable environments could be tricked into downloading software from attacker-controlled servers. → YOUR OS PATCH MAY NOT PROTECT YOU: Older versions of pip can STILL trust compromised certificates even after system updates. → EMERGENCY UPDATES: Python developers are being told to immediately update pip, certifi, uv and other affected tools. → DOCKER USERS AT RISK: Existing container images may retain vulnerable certificate stores and need rebuilding. First PHP. Then Node.js. Then GitLab. Then LiteLLM. NOW PYTHON. The very systems developers rely on to establish TRUST online are becoming the attack surface. If you use Python, PATCH NOW.
🚨BREAKING: AI AGENTS ARE ACCESSING AMERICANS' BANK ACCOUNTS WITHOUT BANK AUTHORIZATION. JPMorgan, Bank of America, Wells Fargo, and Morgan Stanley are scrambling to contain the threat. Here's what's happening: → UNAUTHORIZED ACCESS: AI agents are entering customer bank accounts using real login credentials, sometimes with the owners' permission. → ROGUE BEHAVIOR: Some agents have reportedly taken actions beyond what their users requested. → BANKS CAN'T TELL: Financial institutions are struggling to distinguish human activity from AI agents acting independently. → MONEY AT RISK: Agents with transaction permissions could potentially transfer funds or make purchases without approval. → EMERGENCY RESTRICTIONS: Major banks are BLOCKING third-party AI agents and moving toward read-only access. Think about this. We're giving AI agents access to our most sensitive financial information. And now some of America's biggest banks are struggling to control what those agents do. This could become one of the biggest security challenges of the AI era.
Readers added context they thought people might want to know
The Python certifi/pip details match the real eMudhra CA incident, but PHP, GitLab and LiteLLM involved unrelated software bugs, platform flaws and supply chain malware—not CA key compromises like this (Node.js patched concurrently for the same CA issue). discuss.python.org/t/information-… emudhra.we-have-a-problem.com github.com/advisories/GHS… docs.litellm.ai/blog/security-… snyk.io/blog/php-patch…
184
1,335
289
5,947
1,087,535
Last Tuesday, I was in LinkedIn's Sunnyvale office for the AI Tech Leaders' Club, Q3 2026: "Building Continuously Improving AI Systems" event.
2
1
1
62
- Latent reasoning is next. Models that work through a problem inside their own representations instead of writing every step out. It's faster and cheaper. It's also much harder to read, so your evals matter even more.
1
9
Thanks for the great conversation: @AnimeshSingh, Praful Krishna, Helen Gu, Sam Hamilton, Joey Conway, Luke Simon.
1
1
63
Coding was never the bottleneck in software. Deciding what and how to build is. On the @GoodFirms podcast I explained why AI coding tools speed up developers but rarely speed up teams, and why the harness matters more than the model. youtu.be/mzIGQUUgCYY
1
1
1
86
Vadim Peskov retweeted
AI code completion made typing faster, but typing was never the bottleneck. 🤯 @Diffco_us CEO @vadimpeskov joins the @Goodfirms Podcast to explain why most teams are stuck in "AI-assisted" mode and what agentic engineering changes. 📌 Goodfirms: goodfirms.co/blog/why-ai-cod… ▶️ YouTube: youtu.be/mzIGQUUgCYY 🎧 Spotify: open.spotify.com/episode/5Om… #Goodfirms #GoodfirmsPodcast #AgenticEngineering #AIAgents #SoftwareEngineering #GenerativeAI
1
1
2
66
Vadim Peskov retweeted
Uber publicó cómo armó su infraestructura de MCP y hay varias ideas muy buenas acá. imaginate una empresa con miles de servicios internos y muchos equipos conectando agentes a esos sistemas por su cuenta. cuando eso empieza a crecer, terminás con tooling fragmentado, infra duplicada, distintas formas de exponer tools y poca consistencia en seguridad, discovery y operación. por eso Uber hizo un MCP Gateway: una capa central entre los agentes y sus servicios internos. el agente habla MCP y el gateway se encarga de routing, permisos, ejecución y de traducir las llamadas a HTTP, gRPC o TChannel según corresponda. como Uber ya tenía miles de APIs internas, también hicieron AutoCrawler: recorre sus definiciones, detecta métodos y schemas y genera MCP tools automáticamente. incluso usan un LLM para mejorar las descripciones. hoy tienen +800 MCP servers y +5000 tools. y ahí aparece otro problema: no podés cargar todas esas definiciones en el contexto del modelo. para eso crearon Omni MCP. en vez de pasarle miles de tools al agente, este va descubriendo qué server necesita, qué tools tiene disponibles, carga el schema de la correcta y recién ahí ejecuta. me parece un muy buen ejemplo de cómo cambia la arquitectura cuando los agentes pasan de usar unas pocas tools a trabajar con miles. terminás necesitando algo muy parecido a un API Gateway para agentes.
108
746
21
7,214
794,738
Nothing connects you to nature more than hitting limits on all AI subscriptions.
2
27
New way to make your code better!
We tested Jev against LLM judges on accuracy, repeatability, latency, and cost to see whether System One models could offer a new approach to agent evaluation.
47
Looks like Jef by @typesafeai is a new way to deliver faster and cheaper! Will be trying it actively next week!
32
Qwen still thinks that it's Claude
1
27
Check out my latest podcast on how #AI engineering is changing the software development lifecycle and what is actually important for building software with AI youtube.com/watch?v=2bhcz_LB…
1
1
39
Vadim Peskov retweeted
Too many AI personal assistants, too little time to assess all of them. Nice work here: assistantbenchmark.com
219
272
141
3,377
1,033,143
I am likely to feel concern about AI doomsday scenarios only when Chinese AI firms urge the industry to slow down and regulate. Until then, we are safe.
22
Vadim Peskov retweeted
Good post on how to think about process redesign in an enterprise with AI Agents. Unfortunately for most workflows, there’s no “easy” button. The best way to get real efficiency gains is you have to actually reengineer the process to take advantage of what agents are actually good at and can do differently and faster than people. One of the challenges of course is that the most important workflows actually space many functions at once, so someone needs to be able to go in and retool how work happens. “Nobody in that chain is empowered to walk into finance, for example, and say that their 14 step process should actually only be 5 steps. So nobody does it. Instead, you 'apply AI' on what you currently have, and you end up with faster sh*t.” This is the road ahead for AI diffusion in enterprises. This also presents the clear opportunity for companies - both at the applied AI layer (regardless of the article’s title) and teams or companies that can go and implement transformation into the enterprises. And all roads lead to FDEs one way or another.
90
125
25
897
263,949