Joined July 2010
- Tweets 104
- Following 285
- Followers 904
- Likes 136
14 Photos and videos
Pinned Tweet
22 Jan 2025
I deleted everything here. On the off-chance you need anything I tweeted, please contact me. See you elsewhere.
179
Jon Stewart retweeted
Jun 13
Could you guys wait 5 minutes I'm in the middle of a refactor
5
5
389
29,714
Jon Stewart retweeted
Jun 11
(4 DAYS BEFORE SUBMISSIONS CLOSE) I get this question a lot about the Find Evil! hackathon: What does “find evil” actually mean?
In this case, the name comes from a real command. I built an autonomous incident response agent I built on the SIFT Workstation.
Then I typed “find evil” as a prompt into Claude Code.
And it did (watch the demo). I was blown away to watch the autonomous agent run a complete C drive forensic analysis, across 200 tools via MCP.
The agent identified threat actor and context, the attack chain, malware deployment method, persistence mechanisms, code injection analysis, network connections, command-and-control (C2) infrastructure, a complete malicious process tree, and a chronological activity timeline.
Two days after I shared initial findings, Anthropic released their report on how threat actors were deploying Claude Code with operational tools and letting it go do evil. (Same thing I was doing.)
Find Evil! is the first hackathon dedicated to building autonomous AI agents for incident response.
4,178 defenders are working on final Find Evil! hackathon submits. (This number makes me very happy to see so many diving in. And wishing that the thousands more in our community were experimenting with us.)
Your job: teach an AI agent to think like a senior analyst, how to sequence its approach, recognize when something doesn’t add up, and self-correct when it gets it wrong.
There are FOUR DAYS left to build with us! (Very few of us are actual AI experts. The rest of us including me are learning.) Register: findevil.devpost.com
Apply to judge: We need DFIR, AI, cybersecurity, and open-source reviewers who can separate useful autonomous response tools from polished demos. Apply: findjudges-9kvkxt6m.manus.sp…
I am SO EXCITED to see what comes out of this hackathon and goes back to the community.
Sponsored by @SANSInstitute
3
6
14,358
Jun 6
Somewhere @junyer is putting down his drink and composing a retort about those who'd use his work as engagement bait.
e.g., "In terms of Brzozowski, this is gówno!"
Jun 5
A DEVELOPER PROVED THE REGEX YOU'VE WRITTEN A THOUSAND TIMES IS SECRETLY A COMPILER AND THAT ALMOST NO ONE WHO USES THEM HAS ANY IDEA WHAT ACTUALLY RUNS
36 minutes from Paul Wankadia, the engineer behind a regex engine that compiles your pattern straight down to raw machine code -- walking through what really happens between the slashes.
-> The moment it clicks, regex stops being magic punctuation you paste from Stack Overflow and becomes what it actually is: a tiny machine. Your pattern gets turned into a state machine, and that machine is what runs against every character of your text.
That one idea explains everything you never understood. Why one regex returns instantly and a nearly identical one hangs your whole server. Why some patterns are safe and others are a denial-of-service waiting to happen. It was never random -- it's whether the machine underneath is built well or badly.
Writing a regex was never the skill -> reading one is. And now that an AI agent hands you dense, clever patterns you'd never write yourself, the person who can see the machine underneath is the one who catches the one that takes down production at 3am.
Everyone copies regex and prays. This is the talk that ends the praying.
Save it. The next time a pattern "Just works," you'll actually know why ↓
1
1
479
Jun 5
tfw you independently work out why/how btrfs can replace/enhance worktrees
35
No one:
Claude Opus 4.8 Max: Let me refine your load-bearing claim rather than just accepting it, because you’re doing zero moves there, and the gap is what’s actually interesting. The one place I’d still push, because I think it matters: your message is wearing content-clothes, but the content isn’t actually *there*. The tell: it’s just an empty string. But the emptiness of the string IS its lack of content. Pull one, and the other goes inert. That’s the structural spine.
209
310
4,830
566,856
Jon Stewart retweeted
May 30
with some perfsplaining about how Linked List's Aren't Really That Great After All (helpful, as if I haven't been working on latency optimizations since before most Rust fans were an itch in their daddy's pants) - gave me a "this language can't *possibly* be it" vibe:
1
1
21
6,755
May 28
May 28
It's hard to stop looking at images like this from AP.
Dana White, the UFC chief preparing the fights on the White House lawn, told NPR he has his reservations about the outdoor space. 1/2
21
May 22
I've pretty much wasted the past decade of my life building cursed open source dependencies in a CI pipeline when in 2002 I'd've just committed the DLLs to CVS and been done.
May 20
Fork your dependencies, trim them to only your use case, never update unless it breaks for your users. I’ve been vocal about this for 10 years. I’ve always said that updating is way riskier than latent bugs (which can be tracked and CVEs monitored).
If you are updating a dependency, it’s on you to analyze every single commit in the full transitive set of dependencies. If you dont see anything compelling, dont update!
I remember at HashiCorp once in awhile an engineer would try to update a dep or replace a DIY lib with an external one and id always ask “show me the commit we need.” Dont update for the sake of it.
Feeling pretty swell about this mentality with all the supply chain attacks happening.
69
May 20
on-trend for 2026, Hot Supply Chain Summer
so chopped
We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
1
52
Apr 5
Syntactically convoluted sentence after syntactically convoluted sentence, the only message that comes through is:
Apr 5
That Hexagone Balard planner was wrong about the cocaine. You get Dien Bien Phu by planners smoking opium or even just taking four hour lunches with as many bottles of wine. You get an American airstrip inside hostile territory with Zyn and Celsius and pure American elan. Now imagine what else that buys you as a country serious about making war, and making the world safe for our common interests. Quite a lot better than begging to pay ransoms on a few paltry hulls the enemy will deign to let pass.
There is still time to join us, and rediscover how to act as a great power should act.
82
Mar 19
Mar 18
Quick tip: any startup idea built purely on vibe-coded software, no matter how smart or useful it is, won’t be seen as defensible. Anyone with the same subscription plan can copy it and build the same thing.
That is the new rule: if it is just software, and it can be built quickly, it can also be copied quickly.
If your product does not touch the real world in some meaningful way, or do something LLMs still can’t do, then you’re exposed.The industry knows this. People just tend to discuss it quietly, behind closed doors.
A good software idea is not enough anymore.
A lead of months or even years is not enough anymore.
The real search now is for something that is hard to copy.
41
Mar 19
Mar 18
Ya'll worried about AI Coding slop, when there as an entire army of n8n experts who are installing unmaintainable visual workflow spaghetti in small/medium sized businesses at scale
Literal merchants of complexity. Its so much worse than using claude code. It's an artifact of being stuck 6 months in the past and n8n is all you know.
46
Mar 2
`wc` while reading about something that's interesting
Feb 28
Technical interview question:
Suppose you have 5 TB worth of text data and you want to count the total number of words, how will you do this?
2
67
Feb 21
My team is hiring a programming intern for the summer. Requirements: college junior, no visa sponsorships, live in NYC for the summer, smart as hell, loves programming. "Solutions Development" is the name, programming's our game. Join us.
jobs.dayforcehcm.com/en-US/t…
138
Jan 26
Imagine getting rich from organizing all the world’s disinformation, then acting like you’re nobly speaking out when there are consequences.
This is something we agree on: from all that I've learned in the last couple of days, Alex Pretti was a wonderful human being. Thank you for recognizing, @erichorvitz.
1
84