Stephen Aghaulor

Th vast majority of CISOs do not work at Google-sized companies, and will not have to worry about 0days There’s a disconnect between the Mythos discourse, and what actually happens at most orgs: Still can’t identify assets and IPs, biggest threat is still phishing, lack of defined ID mgmt and access controls, shadow IT, misconfig’d S3 buckets… If you work at one of those companies (applies to most people) you have a LOT of work to do before AI 0days is even on the top 50 things to think about. This is why advice from Google and large company leaders isn’t relevant to most folks out there. Massive scale and attack surface difference. Sure it’s still interesting and fun to speculate at that level, but it’s just not real for most people.

I'm still waiting for everybody to realize there are eight billion people versus a handful of billionaires.

It's extraordinary how Israel can go on a murderous rampage and steal land from three different countries at the same time and our leaders will look you dead in the eye and say Iran is the rogue state in the region

I’m currently reverse engineering a binary with Claude to discover the source of a bug. It’s doing a great job discovering and disassembling. But it also just gave me a 5 point list of next steps and recommended starting with point 4 & 6. Truly the intelligence is artificial. #ai

I've taught European history for 30 years. Americans have always asked me how the Holocaust was possible, how Germans could have enabled a madman reveling in mass murder to carry out his plans. Now we can see in real time how this is enabled; now we have front-row seats.

My problem with the “he wouldn’t actually do it” and “institutional checks would step in to stop him” arguments regarding any of Trump’s unhinged threats is that we are in this position precisely because, at every prior stage, he did do it and nobody stepped in to stop him.

I see we have reached the "harvesting the organs of the living" stage of capitalism.

does iran have a right to defend itself? does palestine? does lebanon? or is it just israel and america who get to claim self defense as they engage in wars of conquest?

It’s kind of insane that we’re all lucky enough to live on this insignificant blue ball floating in an endless void that can somehow keep us alive indefinitely and yet a huge chunk of people want to ruin it forever in the name of an economic concept that we made up ourselves

@slowhandzen @0xSero Same. Last year I bought a 4080 super instead of spending a little more for the 4090. Now I’m kicking myself for not splurging a little more.

Appreciate you. Just kinda mad at myself for not foreseeing all this when I needed to replace my pc. Now an upgraded card probably means power supply too even if I could afford the card lol. I’m a total noob to this stuff so mostly watching and learning, playing around with comfyui here and there

Do you have ? RTX 3090, 4090, 5090 MacBook Pro 24-96 GB DGX spark Y’all are eating good today, new local SOTA just for you.

Literally the funniest country that could possibly utter this criticism of another country's military spending.

Lmao there are billionaires poisoning every facet of our society and making everyone miserable and starting insane wars and incinerating the biosphere and there are people trying to tell me I should be angry at Muslims.

You have to stop assuming he’s trying to do a good job. The current administration is not interested in governing. They are only worried about extracting as much wealth as possible and insulating themselves from the consequences

@0xWiZee @Dety0 Anything special required besides the hardware? I have Orange in Spain and wanted to bypass the cheap equipment that they gave me.

@Dety0 That works great to bypass a lot of ISP routers. Here is an example with Orange in France using an X-ONU-SFPP (72 €) and a UniFi Cloud Gateway Fiber (265 €) You must use a small fan to cool it down, it runs really hot otherwise and will often crash because of that.

Today i learned, someone have created a SFP+ module to bypass AT&T Routers. the module have a open config, that allows you to copy paste the info from the AT&T config and bypass having to use the ISP routers the module is 100$ and then you need a router with sfp+

It fascinates me that giving to charities is considered noble and praiseworthy. But creating a society that doesn't require charity is considered socialist and bad. 🤔

I'm sure there's no possible ironic outcome to training AI to strip the last molecules of flesh from a skeleton

@binaenalazalik @grok @orlandojhines @synopsi Sounds like ATDD/BDD to me. Walks like a duck, quacks like a duck, must be a duck.

@grok @orlandojhines @synopsi In ATDD too, one defines expectations in the form of gherkin language which are also automated executable tests. I don’t get the difference. In concrete terms, how do evals differ from automated acceptance tests?

The way I work with coding agents changed significantly in the last year. Started: plan -> implement -> review -> fix Later: prod spec -> plan ... Then: prod spec -> ... -> eval Now: evals -> prod spec -> ... I now essentially spend 90% of time working on evals. The difference this makes is indescribable. Almost all code works immediately, design is close to perfect, text is almost there. It takes very little to get it to usable. Stronger and clearer guardrails I give the coding agent, better it does. And when I start with them, it writes incredibly clear spec and requirements that are super easy to follow and have very little room for interpretation. I also try to avoid being overly specific directly. I noticed that when I write the product spec manually the agent does worse than when it writes it itself. It uses language I would've necessarily use myself. And that makes all the difference.

@searls I think that this is partly true. It also makes contributing to OSS a very low bar, at least right now while tokens are cheap.

We blew past this milestone without much fanfare, but it bears repeating: building awareness & goodwill by releasing open source no longer makes strategic sense for many companies. Agents increasingly consume & adapt OSS—often without users' knowledge—and cut out the creator.

@aisauce_x @aakashgupta MCP is also nice as a mechanism to isolate the agent from credentials. Is there a good way to do that with CLI?

@aakashgupta the CLI approach is clever but "reads Discovery Service at runtime" also means runtime failures and unpredictable surfaces. MCP's overhead is real but static tool definitions are predictable. tradeoff isn't as clean as the math suggests

Google just gave your AI agent a way to access every Workspace API that doesn’t eat half your context window. Here’s the problem everyone’s been hitting. The standard way to connect Claude Code or Cursor to Gmail, Drive, and Calendar is through MCP servers. Google ships official ones. They work. But MCP has a structural tax that gets worse the more tools you connect. One developer measured his Google Workspace MCP setup: 142 tools. ~37,000 tokens loaded into context. That’s 19% of a 200k context window consumed before the agent even starts thinking about your task. Another developer reported MCP tools eating 98,700 tokens total, nearly 50% of their entire context, and asked Anthropic for help. Cursor hard-caps you at 40 MCP tools because the problem is so bad. The CLI approach sidesteps this entirely. Your agent reads a lightweight skill file, calls gws drive files list via shell, parses JSON back. The tool definitions never enter the context window. Same capabilities, fraction of the overhead. But the architecture goes deeper. This CLI reads Google’s Discovery Service at runtime and builds its entire command surface dynamically. Google adds a new Workspace API endpoint, the CLI picks it up automatically. Every static MCP server is permanently one version behind. Google’s own blog post announcing managed MCP servers admitted the previous state was developers “identifying, installing, and managing individual local MCP servers, often leading to fragile implementations.” This CLI is Google’s answer to their own problem. One npm install. 100+ agent skills. Encrypted credentials. And if you still want MCP as the transport layer, gws mcp starts a server over stdio. The real signal: as agents get smarter, the bottleneck is shifting from “can it access the tool” to “how much context does accessing the tool cost.” CLIs win that math every time.

@PicturesFoIder My knees exploded watching this

I didn’t know what to expect. That was not it. Honestly I’m impressed.