CTO, writer, snowboarder, gooner. Geek out on mobile / AI / F1. Team papaya! 🧡 Team Gunners!

Joined March 2009
52 Photos and videos
Fable 5 is basically useless right now, so many prompts get blocked. And you can't audit your own code. 🤣 Madness.
2
519
My family and I are walking to raise money for Breast Cancer Now! Support us at: justgiving.com/fundraising/L…
2
434
Paul O'Brien retweeted
We're opening up the waitlist for a new version of Jules. We're evolving Jules into an end-to-end agentic product development platform that reads your entire product context, figures out what to build next, comes up with solutions, and then ships a PR. Join the waitlist today! Link in comments.
75
113
1,446
443,453
Paul O'Brien retweeted
Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server self-replicate. link below
1,352
5,307
27,822
66,585,497
The Codex app for Windows is out! apps.microsoft.com/detail/9P…
1
2
915
Gemini 3 Flash just arrived on @GoogleColab, for free and paid accounts! Great model!
662
In this week's Enterprise AI Weekly, I talk about the money flowing into London AI, Sonnet 4.6's release, Gemini 3.1 Pro setting new benchmarks, fast AI with custom silicon, agent insurance, impending RAMageddon, and NotebookLM and Tesla upgrades. For anyone working in or with AI, I suspect you feel the same as me that just keeping up with what's going on can be time consuming and mentally exhausting (we'll cover that in a forthcoming issue!). I hope EAIW is a useful resource for you! enterpriseaiweekly.substack.…

619
Paul O'Brien retweeted
💞 This Valentine’s Day fall in love with racing! Win the chance to join us for our first @BTCC race day in exclusive hospitality - the perfect experience to share with someone special. To enter: follow, like and repost 💜 #PlatoRacing #BTCC
39
358
450
32,559
Be careful with that Openclaw chat isolation 😄
3
1,126
I sync my OpenClaw skills directory to @github, which means @julesagent proactively suggests improvements, which I can action with a click. Neat! And I can get a second opinion on any changes from GitHub Copilot of course... 😎 @_davideast @film_girl
3
2
13
2,471
Checking out Berry by @leon_chlon's Hassana Labs for hallucination reduction in AI assisted coding. Super interesting, MCP based, free 1 month trial. What's not to like. Let me know your thoughts! strawberry.hassana.io/about

1
1
4
733
Massive rug pull by Google on the Antigravity usage limits, including for paid subscribers, particularly for the Anthropic models. Incredibly poor form!
4
1
16
2,607
Anyone else get annoyed that #skisunday sound quality is AWFUL from their lav mic setups... every week? How can the beeb not get this right?
730
Absolutely gutted! It's the only thing I bought / use my Quest 3 for... 😢
Meta says Supernatural will no longer receive any "new content." uploadvr.com/supernatural-co…
657
Oops, managed to get myself an expectedly large @cloudflare bill experimenting with Durable Objects (which are awesome). Really no account wide bill total alerting capability? Bit odd @eastdakota.
520
Paul O'Brien retweeted
Looking for something you can play over and over with the family? Look no further. My most-played board games of 2025! A🧵:
91
237
2,916
610,941