Martín Schere
2.1K posts

Martín Schere
@scheredev
CTO @ https://t.co/c0U856TCk8 🇦🇷 Argento #Cardano
Buenos Aires Katılım Mart 2021
578 Takip Edilen1.7K Takipçiler


el default es yolo 😆 asi que ojo!!
yo configure todo para que use 1pwd vault
Los secrets *nunca* están en el código ni en archivos de configuración. Todos los tokens/API keys viven en 1Password (en un vault dedicado)
cuando clawd necesita un secret, usa el CLI de 1Password:
```
bash
source ~/.op-token # carga el service account token
SHOPIFY_TOKEN=$(op item get "Shopify" --vault="xxxx" --fields credential --reveal)
```
el secret existe solo en memoria durante la ejecución del comando. No se guarda en variables persistentes ni archivos temporales.
Le pedi que:
- Nunca muestre secrets en el chat (tengo instrucción explícita de no hacerlo)
- Nunca los commiteo a git
- El service account token de 1Password tiene permisos limitados al vault específico
1Password registra cada acceso a secrets, así que hay trazabilidad.
obviamente si alguien entra con mi usuario x ssh a esta instancia (tendria que comprometer mi private key) tendria acceso al secret del vault que esta en un file con chmod 600 y ademas podría dumpear la memoria y buscar ahi tambien. Esto se puede mejorar creo con `op run` que lee las credenciales on-demand e inyecta en el proceso hijo que despues se destruye.
pero en resumen, el default de clawd es extramadamente inseguro... deberian mejorar eso para el usuario comun
Martín Schere@scheredev
@woloski Cómo hace con los secrets? Los pone como placeholder para que 1pass los reemplace?
Español

@woloski Cómo hace con los secrets? Los pone como placeholder para que 1pass los reemplace?
Español

clawdbot is wild. running on a free aws medium instance since yesterday.
in a few hours integrated: claude, openai, shopify, airtable, github, brave search, 1password, cloudinary, you name it…
i can:
- make PRs from whatsapp with claude code
- pull custom shopify sales reports & charts
- transcribe voice notes instantly
- upload images to cloudinary
- update blog posts in my CMS
- create shopify variants with metafields
- fetch secrets securely from 1password
million use cases more
feels limitless… all through chat 🤯
English

Second time I see a wave of posts about a product.
First one was Remotion. Now this.
Are they manipulating X's algo?
Damian Player@damianplayer
English

AGI is now on the horizon and it will deeply transform many things, including the economy.
I'm currently looking to hire a Senior Economist, reporting directly to me, to lead a small team investigating post-AGI economics.
Job spec and application here: job-boards.greenhouse.io/deepmind/jobs/…
English

Please make an MCP server for making companies, so my autonomous agent can spawn corporations.
Stripe Atlas@atlas
🆕 You can now pay for your Atlas incorporation and registered agent fees with USDC.
English

@rauchg I think agents just overcomplicate code nowadays. They implement a 100-line solution to something that could be 10 lines instead.
English

Use Manus for 30 seconds, then look me in the eyes and tell me that crude oil isn’t going to 50B a barrel
Mason@MasonFoard
Use Clause Code for 10 minutes, then look me in the eyes and tell me Bitcoin isn’t going to $10 million.
English

@Kazanjy This just creates a culture of fear, where engineers will rather not push code to production to not get punished instead of "risking it".
English

A buddy of mine ran a large part of the DoorDash engineering org. When an engineer caused an outage, they knew exactly what the revenue cost was, and that revenue cost was hung on that engineer.
They didn't do fines, per se, but it went into performance reviews, and it definitely negatively impacted future promotions / raises - so essentially it was a delayed fine.
More orgs should do this.
English

They had to say the word at the end
nico laqua@nico_laqua
@TheCorgiCompany is coming out of stealth with $108M raised to build the future of financial infrastructure. A lot of the GDP flows through highly regulated financial entities that haven't been meaningfully changed in decades. To fix this, we're starting in insurance.
English

