lol found a nice vulnerability in one of your favorite observability providers. They accept a webhook URL and don’t validate it, allowing you to SSRF their internal infra 🤭

claude mods

we laugh at our UK/Euro bros for the ridiculous safety act unfortunately, the mind virus has spread here as well this isn’t about “child safety”

your “get this right the first time” reminder

how your message finds waclaude

are you building civilization-grade systems or… chrome extensions and calorie trackers?

The reason to still code by hand is that you can’t think clearly enough about the problem Thus, you have to refine your thoughts by brute force brain token generation

> knows the service is vulnerable, knows it runs in prod ya devs, who would do such a thing

waclaude got his own application security posture management manage your vulns before he does

why can't i just go to github and see all the security issues with a repo i come back to this question a lot

retweets appreciated hi folks, some important life news i’m looking for a new employer - contact via [email protected] this is your chance to nab someone who is nine months in with knowledge on building agents, is a teacher and prolific author and public speaker. I’m based

There’s vulnerabilities and then there are “vulnerabilities”

should I use ABC platform for my agent? given you are asking, you're probably in the build stage and not the optimize stage, so go for it. find what works and optimize later

a lot of you aren’t in it for the shareholders and it shows

reading the docs and occasionally the source will make you better than 90% of your peers

evals show you known failures observability shows you unknown failures one is more important than the other

we had chrome LLMs before it was cool

did you guys create this in-house for clicks? no serious actor would do this, let alone with a 20b model