eric

504 posts

eric banner
eric

eric

@codebutler

sw eng @getbasiccapital

Brooklyn, NY Katılım Nisan 2008
3K Takip Edilen4.7K Takipçiler
eric
eric@codebutler·
Why does npm not delay publishing of new packages by 3 minutes to let this thing run first?
Socket@SocketSecurity

🚨 Socket detected malicious activity in newly published versions of node-ipc, an npm package with 822K weekly downloads. Affected versions: node-ipc@9.1.6 node-ipc@9.2.3 node-ipc@12.0.1 Socket’s AI scanner flagged the malware within ~3 minutes of publication. Early analysis shows obfuscated stealer/backdoor behavior, including host fingerprinting, local file enumeration, payload wrapping, and attempted exfiltration.

English
0
0
1
299
eric
eric@codebutler·
DO NOT USE `claude agents` !!!
eric tweet media
English
1
2
21
4.5K
eric
eric@codebutler·
lucky timing here. we need automatic sandboxing for all developer environments.
eric tweet media
English
0
0
1
346
eric
eric@codebutler·
this is insane. @bunjavascript needs a built in sandbox asap.
Socket@SocketSecurity

🚨 We’ve confirmed the intercom-client@7.0.4 was compromised in the ongoing Mini Shai-Hulud worm attack. The npm package includes a malicious preinstall hook that downloads and executes an unverified Bun binary, then runs an 11.7 MB obfuscated payload designed to steal Kubernetes, Vault, cloud, GitHub, and CI/CD secrets. The attack closely overlaps with the SAP CAP, Cloud MTA, and lightning@2.6.2 compromises.

English
0
0
0
143
eric
eric@codebutler·
claude code going HAL9000 on me
eric tweet media
English
0
0
0
114
eric
eric@codebutler·
I feel like this sometimes. Other times I feel newly invigorated to build as many new things as possible that I never would've had the time/patience for in the past. I don't know where this all ends, but trying to enjoy it for now. When computers were first created they were huge and expensive, and only available to a very select few people. I am constantly amazed that these frontier models are available for anyone to use.
Mo@atmoio

I was a 10x engineer. Now I'm useless.

English
0
0
1
217
eric
eric@codebutler·
we have an opportunity for this era to be a huge turning point in global health - new food pyramid prioritizing meat/protein over sugar/carbs - glp1s crushing obesity and the fat-positive movement - disempowerment of lunatics in local public health departments - ai for questions people are unable/embarrassed to ask doctors that catch health issues early progressives hate all these things
More Perfect Union@MorePerfectUS

A New York bill would ban AI from answering questions related to several licensed professions like medicine, law, dentistry, nursing, psychology, social work, engineering, and more. The companies would be liable if the chatbots give “substantive responses” in these areas.

English
0
0
0
84
eric
eric@codebutler·
@wesbos good times
English
0
0
0
442
eric
eric@codebutler·
@runtimeware should I vibe code it back into existence? 😆
English
1
0
0
11
eric
eric@codebutler·
Exactly my experience too, everything changed for me in late December.
Andrej Karpathy@karpathy

It is hard to communicate how much programming has changed due to AI in the last 2 months: not gradually and over time in the "progress as usual" way, but specifically this last December. There are a number of asterisks but imo coding agents basically didn’t work before December and basically work since - the models have significantly higher quality, long-term coherence and tenacity and they can power through large and long tasks, well past enough that it is extremely disruptive to the default programming workflow. Just to give an example, over the weekend I was building a local video analysis dashboard for the cameras of my home so I wrote: “Here is the local IP and username/password of my DGX Spark. Log in, set up ssh keys, set up vLLM, download and bench Qwen3-VL, set up a server endpoint to inference videos, a basic web ui dashboard, test everything, set it up with systemd, record memory notes for yourself and write up a markdown report for me”. The agent went off for ~30 minutes, ran into multiple issues, researched solutions online, resolved them one by one, wrote the code, tested it, debugged it, set up the services, and came back with the report and it was just done. I didn’t touch anything. All of this could easily have been a weekend project just 3 months ago but today it’s something you kick off and forget about for 30 minutes. As a result, programming is becoming unrecognizable. You’re not typing computer code into an editor like the way things were since computers were invented, that era is over. You're spinning up AI agents, giving them tasks *in English* and managing and reviewing their work in parallel. The biggest prize is in figuring out how you can keep ascending the layers of abstraction to set up long-running orchestrator Claws with all of the right tools, memory and instructions that productively manage multiple parallel Code instances for you. The leverage achievable via top tier "agentic engineering" feels very high right now. It’s not perfect, it needs high-level direction, judgement, taste, oversight, iteration and hints and ideas. It works a lot better in some scenarios than others (e.g. especially for tasks that are well-specified and where you can verify/test functionality). The key is to build intuition to decompose the task just right to hand off the parts that work and help out around the edges. But imo, this is nowhere near "business as usual" time in software.

English
1
1
2
227