Dick Hardt

@WorldPeaceCorps @bekacru Did not see it — email is better :)

Congrats @bekacru 🎉

@motdotla We should chat!

I'm working on something new. I wasn't happy with the agent auth tooling I saw out there. I'm building a new product for dotenvx that targets agents. It's called as2 and it's coming out soon. The thing is, I don't want humans signing up for it. I want agents. So I started to explore tooling to do that and it was all quite bad. It was way to focused on humans. And it sort of half solved for agents. So I started hacking my own version. And that has grown into this. It's called vestauth. And I think it is currently the best way to identify and authenticate agents for tool providers. You can use it for a product like dotenvx as2 or just for internal tool calling. In fact, I also find it much easier to use than MCP. MCP is too ceremonial in my opinion. My vision of the future is agents running in loops making sharp tool calls using simple authenticated and signed http curl calls. With vestauth you can do just that. Try it yourself. $ vestauth agent init $ vestauth agent curl ping.vestauth.com/ping And then get involved. Vestauth is built on emerging web standards like http message signatures and web-bot-auth. As of now it is the most ergonomic tooling around those technologies. I'm really stoked on it and hope you will be to. It's auth for agents - from the creator of dotenv and dotenvx.

@deedydas Point 3 is a fable — ATMs happened at same time as banking deregulation — many new branches were opened increasing demand for tellers which offset decline from ATMs paulkedrosky.com/ai-and-the-fab…

Karpathy says "I haven't typed a line of code since December" in his latest podcast. Here are the 10 most interesting things he said: Industry-level thoughts: 1. The new way to code is the Peter Steinberg (OpenClaw) way. Have 10 Claude Code / Codex windows open in parallel. The skill is now more how to manage a small org of agents. You need to know how to carve up a codebase into parallel non-conflicting workstreams, write good specs so agents don't go off the rails, and tune when you should review code output. 2. Open source started 18mos behind frontier and is now 6-8mos behind. He thinks this equilibrium will last. He's worried about centralization 3. Two-minded on the future of engineers. On one hand, Jevons paradox could apply where the ease of building software means more software demand than ever (like ATMs allowed more bank tellers, not less). At the same time, in the long run, recursive self-improvement could remove humans from the loop entirely. 4. Interesting startups are at the intersection of physical + digital. The interface between intelligence and the real world is with "Sensors" for reading and "Actuators" for doing. Data for AI is just using humans as sensors. He cites Periodic Labs using lab equipment for material science as sensors. Talks about Daemon by Daniel Suarez. 5. Education will shift from humans to teaching agents. He's writing markdown for agents to teach microGPT. Personal projects: 6. Autoresearch found things he missed after two decades of experience, citing NanoChat where it found weight decay on value embeddings and insufficiently tuned Adam betas jointly interacted to create improvements. 7. "Dobby the Elf Claw" runs his entire home. Overproduction of bespoke apps. Reverse engineered Sonos API and now controls his entire home (lights, HVAC, shades, camera) through WhatsApp. Takes: 8. Claude Code personality better than Codex, but uses both. Finds himself trying to present better ideas to earn Claude's approval, which is a feedback loop that actually improves the quality of his input. 9. Token throughput is the new GPU utilization. If you have tokens left, you haven't maximized leverage. 10. He's not at a frontier AI lab because financial misalignment compromises your independence, social pressure to stay on-message, and as an employee you don't have much sway on decisions.

Simon’s Agentic Engineering Patterns is evolving to be a pointer I share with others — latest installments on walkthroughs are great guidance simonwillison.net/guides/agentic…

@bcherny It’s evolved into the most profound development tool I’ve ever used. Congrats!

We shipped Claude Code as a research preview a year ago today. Developers have used it to build weekend projects, ship production apps, write code at the world's largest companies, and help plan a Mars rover drive. We built it, and you showed us what it was for.

Portugal edges out France and Spain — I’m going to move back to Lisbon.

@QuinnyPig I’ve been burned too many times by them . I’m no even going to read the article.

Speaking as a developer, this is great! Surely they won’t pull the rug out from under me this time!

@HarryStebbings I came to France to build a business — @france_espagne gave me a kafkaesque denial. Heading back to Lisbon. They welcome founders.

This is an embarrassment to the European ecosystem. It shows how out of touch and irrelevant the French administration is. For the love of God, if you are not going to help, then do no harm. Stop embarrassing Europe on a global stage.

@EmmanuelMacron I’m a recognized leader in Internet Identity and came to Paris to work on agent auth — but @france_espagne gave me a kafkaesque denial that is unactionable. And I had to fly to Madrid to get it. France has the open sign on door — but the keys are lost.

“This clown wants to make France an AI leader with €30M.” €30 million → to attract and support around forty top-tier international researchers. They chose France for its values and its commitment to science. Sometimes it’s too slow… €54 billion → mobilized as early as 2022 to build France 2030. A France that advances health, climate, and fundamental science by investing boldly in artificial intelligence. Over €100 billion → in private investment announced at the Paris AI Summit by French and international companies to develop AI in France. That’s it? #1 → In 2025, France ranked first among countries attracting foreign investment to build data centers. More billions invested in our regions and in our talent. Yes. Here in France, we believe in science. And AI is here to elevate, to build, to move the world forward, not to insult. 🙊 #ForSure

@HarryStebbings Curious. Do these posts generate real flow or is this signaling to current investments that they are unhinged?

I really need to find unhinged founders. I'm not looking for intellectually curious. I am looking for unwaveringly obsessed, borderline psychotic individuals intent on changing a generation.

@bpiatt @eastdakota @sparkycollier @Cloudflare Agree. OAuth is not a fit — but how do you think @Cloudflare would help? web-bot-auth ?

@eastdakota @sparkycollier Can it involve an amazing solution for agentic authentication and authorization, much better than what we have now? @Cloudflare seems uniquely positioned to be solution driver here.

Excited to help define the future of the agentic Internet.

I'll be speaking next week in Paris about the future of identity - AuthN to AuthZ ticket.apidays.global/event/apidays-…

#Lisboa recebe o Natal! 🎄

@tweetsbycolin I said that a couple of months ago on LinkedIn — a few of us are exploring something new. DM if interested

MCP/Agent auth might need oauth3 or something new entirely Trying to square-peg-round-hole the old oauth2 specs feels like it’s stalling out. Oauth2 simply wasn’t designed with agents in mind

@auren I’m also not a fan of porches — loved my Carrera GT — turn the key and go all the time — pretty amazing street legal race car.

@DickHardt It’s a beautiful car, but it runs like crap. It’s super slow has no pick up. Tesla is much faster. It barely works. It’s buggy. It’s in the shop all the time. Highly recommend people don’t buy porches.

Germany cars used to have the highest quality. recently, they have the LOWEST quality. lower than Japan. lower than US. even lower than China. this is true for BMW, Mercedes, Audi, Porsche. their cars just don't really work anymore.

@XDevelopers You need to proof read your email announcements

🚨NEW RELEASE: X Activity API in Open Beta 🚨 We are launching a powerful new suite of endpoints designed to deliver real-time signals from the world’s best real-time data platform. XAA unlocks instant access to everything unfolding on X. Subscribe to events you care about and your app gets near-instantaneous delivery of events via stream or webhook. We’re releasing this to all paid developer tiers. Jump in during our open beta! Check out more in the thread below 🧵

New X API announced over email Proof reading still not a core skill set there

@zepfietje Using passwords increases friction and lowers security. Outsource your auth to providers that are experts in account protection.

Unpopular opinion: “Confirm password” fields are bad. Forcing users to enter passwords twice adds friction and lowers conversion rates. Why optimize for a couple users who make a typo? Just let them reset their password. More friction for a few, less friction for most. 👌