Jeff Bezos reveals the simple phrase that saved him countless arguments running Amazon "Disagree and commit is a really important principle that saves a lot of arguing" "One of my direct reports would want to do something. I'd think it was a bad idea. We'd go back and forth and I'd often say, you know what, I don't think you're right, but I'm going to gamble with you" "You're closer to the ground truth than I am. I've known you for 20 years, you have great judgment" "At least then you've made a decision and I'm agreeing to commit to that decision. I'm not going to be second guessing it, sniping at it, or saying I told you so" "I'm going to try actively to help make sure it works. That's a really important teammate behavior"

Hey yall! I'm bringing back Twitter Spaces lol. This series will be focused on REAL AI WORKFLOWS FROM TRUSTED DEVS. First guest: the one and only Angie Jones (@techgirl1908)! She'll share: ✅ how she interviews for AI skills ✅ her personal AI workflow ✅ tips for cross org AI enablement Link to twitter space in the thread

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/router/i… Credit to the security researcher for responsible disclosure.

GPT-5.5 is here - two demos I wanted to share and are featured in the launch post. One is a playable 3D dungeon arena prototype built with Codex and GPT models — from game architecture and combat systems to HUD feedback, environment textures, and character dialogue. The other is an interactive visualization of live USGS earthquake data, combining a global map, timeline, and depth profile to explore recent seismic activity. Fun launch, checkout out more in our official blog ➙

It would be hilarious if we go through this whole AI thing just to find out that it’s ultimately cheaper to pay humans to do it

Oh the funny things I see on TikTok. Haha, they’re so funny 😭

Today, I got messages from 3 different devs at 3 different large tech companies (1,000 devs each). "tokenmaxxing" is happening inside all of them. Why? Because all of them measure either token usage, or surface metrics like DX's TrueThroughput that reward complex code!

We need a slur for people who use Microsoft products