Puja Abbassi

15.5K posts

Puja Abbassi banner
Puja Abbassi

Puja Abbassi

@puja108

VP Product @GiantSwarm; CNCF Ambassador; CKA; recovering Data Science Academic; into Chinese Martial Arts; not updating his website; @[email protected]

Cologne, Germany Katılım Nisan 2009
1.9K Takip Edilen2.3K Takipçiler
Puja Abbassi retweetledi
Daniel San
Daniel San@dani_avila7·
Something that significantly improves your Claude Desktop experience is filling in the preferences field Save this post to fill it in later You can find it in Settings, General. It applies to all your conversations Run this prompt so Claude builds your preferences based on what it already knows about you: gist.github.com/davila7/85e450… It first pulls from Claude's memory (you approve), then generates your preferences from that context Claude gives you a few options to choose from Worth revisiting them every now and then depending on what you're using Claude for
Daniel San tweet media
English
7
2
104
12.8K
Puja Abbassi
Puja Abbassi@puja108·
I've started doing something similar but using a github repo to share it with colleagues. I used it recently to prepare for a workshop I'm giving and it helped prepare the status quo, a roadmap, and even further lines of questioning I should run in the workshop.
Andrej Karpathy@karpathy

LLM Knowledge Bases Something I'm finding very useful recently: using LLMs to build personal knowledge bases for various topics of research interest. In this way, a large fraction of my recent token throughput is going less into manipulating code, and more into manipulating knowledge (stored as markdown and images). The latest LLMs are quite good at it. So: Data ingest: I index source documents (articles, papers, repos, datasets, images, etc.) into a raw/ directory, then I use an LLM to incrementally "compile" a wiki, which is just a collection of .md files in a directory structure. The wiki includes summaries of all the data in raw/, backlinks, and then it categorizes data into concepts, writes articles for them, and links them all. To convert web articles into .md files I like to use the Obsidian Web Clipper extension, and then I also use a hotkey to download all the related images to local so that my LLM can easily reference them. IDE: I use Obsidian as the IDE "frontend" where I can view the raw data, the the compiled wiki, and the derived visualizations. Important to note that the LLM writes and maintains all of the data of the wiki, I rarely touch it directly. I've played with a few Obsidian plugins to render and view data in other ways (e.g. Marp for slides). Q&A: Where things get interesting is that once your wiki is big enough (e.g. mine on some recent research is ~100 articles and ~400K words), you can ask your LLM agent all kinds of complex questions against the wiki, and it will go off, research the answers, etc. I thought I had to reach for fancy RAG, but the LLM has been pretty good about auto-maintaining index files and brief summaries of all the documents and it reads all the important related data fairly easily at this ~small scale. Output: Instead of getting answers in text/terminal, I like to have it render markdown files for me, or slide shows (Marp format), or matplotlib images, all of which I then view again in Obsidian. You can imagine many other visual output formats depending on the query. Often, I end up "filing" the outputs back into the wiki to enhance it for further queries. So my own explorations and queries always "add up" in the knowledge base. Linting: I've run some LLM "health checks" over the wiki to e.g. find inconsistent data, impute missing data (with web searchers), find interesting connections for new article candidates, etc., to incrementally clean up the wiki and enhance its overall data integrity. The LLMs are quite good at suggesting further questions to ask and look into. Extra tools: I find myself developing additional tools to process the data, e.g. I vibe coded a small and naive search engine over the wiki, which I both use directly (in a web ui), but more often I want to hand it off to an LLM via CLI as a tool for larger queries. Further explorations: As the repo grows, the natural desire is to also think about synthetic data generation + finetuning to have your LLM "know" the data in its weights instead of just context windows. TLDR: raw data from a given number of sources is collected, then compiled by an LLM into a .md wiki, then operated on by various CLIs by the LLM to do Q&A and to incrementally enhance the wiki, and all of it viewable in Obsidian. You rarely ever write or edit the wiki manually, it's the domain of the LLM. I think there is room here for an incredible new product instead of a hacky collection of scripts.

English
0
0
7
216
Puja Abbassi
Puja Abbassi@puja108·
The Goose is out of the bag, we're now GIANT SWAN - Gracefully Orchestrating Poultry - Official Homepage!! giantswan.tiiny.site
English
0
0
2
77
Puja Abbassi retweetledi
Puja Abbassi retweetledi
Thorsten Benner
Thorsten Benner@thorstenbenner·
This by Rheinmetall CEO is precisely the arrogance that will come to haunt 🇩🇪. It was arrogance vis-à-vis Chinese competitors that helped bring German carmakers in the ditch they are in. And it‘s this type of arrogance vis-à-vis lessons learned by Ukrainians that will cost us.
Thorsten Benner tweet media
Simon Shuster@shustry

I asked Europe's main producer of tanks and artillery what he thinks about the cheap drones wrecking all those tanks and artillery pieces in Ukraine. "This is not innovation," he said of the Ukrainian weapons. "This is how to play with Legos." An exclusive interview with Armin Papperger in my profile of his company, @RheinmetallAG, whose stock price has grown 15-fold since the Russian invasion, as the Europeans buy up all the tanks and artillery he can produce. Out today @TheAtlantic. Gift link below.

English
103
487
2.2K
230.5K
Puja Abbassi
Puja Abbassi@puja108·
@loujaybee 100% I love 1password and it even works with ESO (todo for my home lab right now) but it's getting more and more complex with AI agents and such. I don't want things to run around with my identity and the whole limited key stuff in services right now is custom and cumbersome
English
0
0
1
48
Lou (@aiDotEngineer LDN)
Lou (@aiDotEngineer LDN)@loujaybee·
@puja108 To me the hardest part is secrets. Secrets need to be easier to share and delegate. If I sign-up for a new service, downloading keys, putting in a secrets manager, etc is way too much of a pain.
English
1
0
1
77
Puja Abbassi retweetledi
Andrej Karpathy
Andrej Karpathy@karpathy·
Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Daniel Hnyk@hnykda

LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below

English
1.4K
5.4K
28.1K
66.3M
Puja Abbassi retweetledi
alexa griffith
alexa griffith@lexal0u·
Time to get started!! Come find me at #kubeconAIday where I’ll be emcee’ing and telling AI dad jokes
alexa griffith tweet media
English
0
1
2
76
Puja Abbassi retweetledi
Bart Farrell
Bart Farrell@birthmarkbart·
(Almost)Everyone at KubeCon will be talking about AI. Asked ~20 engineers what they actually use on Kubernetes. Most common answer: “None.” A few MCP / agents / VLLM… but a lot of “not useful yet.” Even got a “I am John Connor” 😂 Are you actually using AI on K8s?
English
0
2
8
401
Puja Abbassi retweetledi
Mark Suster
Mark Suster@msuster·
If you are not on the side of Iran becoming a free society and overthrowing their repressive dictatorship, you are deeply lost in a mind-virus, ideological black hole, likely reinforced by foreign actors influencing through social media
U.S. Senator John Fetterman@SenFettermanPA

The Iranian regime executed a 19 year old for demanding democracy. I stand with his memory and the thousands of other young Iranians. Those who grieve the elimination of Iranian leaders over murdered protesters is telling.

English
48
121
628
17.9K
Puja Abbassi
Puja Abbassi@puja108·
@_ediri @vfarcic Still on my todo to switch to cmux. You two using it makes me more confident it’s not a bad idea
English
0
0
1
31
Viktor Farcic
Viktor Farcic@vfarcic·
Goodbye ghostty.org. You'll keep running on my machines forever, but I will never see you again.
English
2
1
19
7.9K
Puja Abbassi retweetledi
Aakash Gupta
Aakash Gupta@aakashgupta·
Cursor is raising at a $50 billion valuation on the claim that its “in-house models generate more code than almost any other LLMs in the world.” Less than 24 hours after launching Composer 2, a developer found the model ID in the API response: kimi-k2p5-rl-0317-s515-fast. That’s Moonshot AI’s Kimi K2.5 with reinforcement learning appended. A developer named Fynn was testing Cursor’s OpenAI-compatible base URL when the identifier leaked through the response headers. Moonshot’s head of pretraining, Yulun Du, confirmed on X that the tokenizer is identical to Kimi’s and questioned Cursor’s license compliance. Two other Moonshot employees posted confirmations. All three posts have since been deleted. This is the second time. When Cursor launched Composer 1 in October 2025, users across multiple countries reported the model spontaneously switching its inner monologue to Chinese mid-session. Kenneth Auchenberg, a partner at Alley Corp, posted a screenshot calling it a smoking gun. KR-Asia and 36Kr confirmed both Cursor and Windsurf were running fine-tuned Chinese open-weight models underneath. Cursor never disclosed what Composer 1 was built on. They shipped Composer 1.5 in February and moved on. The pattern: take a Chinese open-weight model, run RL on coding tasks, ship it as a proprietary breakthrough, publish a cost-performance chart comparing yourself against Opus 4.6 and GPT-5.4 without disclosing that your base model was free, then raise another round. That chart from the Composer 2 announcement deserves its own paragraph. Cursor plotted Composer 2 against frontier models on a price-vs-quality axis to argue they’d hit a superior tradeoff. What the chart doesn’t show is that Anthropic and OpenAI trained their models from scratch. Cursor took an open-weight model that Moonshot spent hundreds of millions developing, ran RL on top, and presented the output as evidence of in-house research. That’s margin arbitrage on someone else’s R&D dressed up as a benchmark slide. The license makes this more than an attribution oversight. Kimi K2.5 ships under a Modified MIT License with one clause designed for exactly this scenario: if your product exceeds $20 million in monthly revenue, you must prominently display “Kimi K2.5” on the user interface. Cursor’s ARR crossed $2 billion in February. That’s roughly $167 million per month, 8x the threshold. The clause covers derivative works explicitly. Cursor is valued at $29.3 billion and raising at $50 billion. Moonshot’s last reported valuation was $4.3 billion. The company worth 12x more took the smaller company’s model and shipped it as proprietary technology to justify a valuation built on the frontier lab narrative. Three Composer releases in five months. Composer 1 caught speaking Chinese. Composer 2 caught with a Kimi model ID in the API. A P0 incident this year. And a benchmark chart that compares an RL fine-tune against models requiring billions in training compute without disclosing the base was free. The question for investors in the $50 billion round: what exactly are you buying? A VS Code fork with strong distribution, or a frontier research lab? The model ID in the API answers that. If Moonshot doesn’t enforce this license against a company generating $2 billion annually from a derivative of their model, the attribution clause becomes decoration for every future open-weight release. Every AI lab watching this is running the same math: why open-source your model if companies with better distribution can strip attribution, call it proprietary, and raise at 12x your valuation? kimi-k2p5-rl-0317-s515-fast is the most expensive model ID leak in the history of AI licensing.
Harveen Singh Chadha@HarveenChadha

things are about to get interesting from here on

English
247
549
4.4K
1.4M