Cris

5.8K posts

Cris banner
Cris

Cris

@zerodmg

software developer @ redacted

Katılım Haziran 2017
473 Takip Edilen219 Takipçiler
HSVSphere
HSVSphere@HSVSphere·
Stop saying "ts", "type shit", "ong", "fr", "lowkirk", ... It's bad for you
English
4
0
28
860
Cris
Cris@zerodmg·
@housesarebig lets recycle our opponents runes next!!!
Cris tweet media
English
1
0
5
1.8K
saori
saori@saori_xbt·
@zerodmg @ThePrimeagen broke my context window, will have to stick to paying this web app $1 for every conversion
English
2
0
4
696
Bryan Onel
Bryan Onel@BryanOnel86·
Wow. Delve just took down all of their customer logos as well as the entire testimonials tab and page. Never seen a company die in realtime before.
Bryan Onel tweet media
English
19
22
508
36.5K
Cris
Cris@zerodmg·
The code paths in question: - 6 useEffects in a single component - setTimeouts to "wait" for something to occur on your file system - Responding with every result from database without limits - randomly deleting authorization from critical API endpoints These people have no idea what they're talking about it's unbelievable. Immense amounts of slop and larp. How do I hold all of this coal?
Rohan Paul@rohanpaul_ai

Chamath on how AI agents are making the "10x engineer" distinction disappear because the most efficient "code paths" are now obvious to everyone. Just as AI solved chess and removed the mystery of the best move, AI is doing the same for coding, making the process reductive and removing technical differentiation. "I'm going to say something controversial: I don't think developers anymore have good judgment. Developers get to the answer, or they don't get to the answer, and that's what agents have done. The 10x engineer used to have better judgment than the 1x engineer, but by making everybody a 10x engineer, you're taking judgment away. You're taking code paths that are now obvious and making them available to everybody. It's effectively like what happened in chess: an AI created a solver so everybody understood the most efficient path in every single spot to do the most EV-positive (expected value positive) thing. Coding is very similar in that way; you can reduce it and view it very reductively, so there is no differentiation in code." --- From @theallinpod YT channel (link in comment)

English
0
0
0
20
Cris
Cris@zerodmg·
@HSVSphere Is switch 2 emulated already?
English
1
0
0
204
HSVSphere
HSVSphere@HSVSphere·
@zerodmg No, don't buy Nintendo hardware at all. Get the Gaben3000UltimateNintendoPiracyDeck
English
2
0
17
447
Cris
Cris@zerodmg·
@neogoose_btw seeing that little claude icon on a commit
GIF
English
0
0
2
96
Dmitriy Kovalenko
Dmitriy Kovalenko@neogoose_btw·
You need to be a special kind to let your llm to sign commits for you
English
5
0
47
2.8K
Cris
Cris@zerodmg·
@ohryansbelt Embarrassing. If it's really all true the employees at Delve are all complicit in this too. Because how are you building this product and not in the know of what's happening? We have Whistleblower Laws under the department of labor in the US for this reason.
English
4
1
157
41.6K
Ryan
Ryan@ohryansbelt·
Delve, a YC-backed compliance startup that raised $32 million, has been accused of systematically faking SOC 2, ISO 27001, HIPAA, and GDPR compliance reports for hundreds of clients. According to a detailed Substack investigation by DeepDelver, a leaked Google spreadsheet containing links to hundreds of confidential draft audit reports revealed that Delve generates auditor conclusions before any auditor reviews evidence, uses the same template across 99.8% of reports, and relies on Indian certification mills operating through empty US shells instead of the "US-based CPA firms" they advertise. Here's the breakdown: > 493 out of 494 leaked SOC 2 reports allegedly contain identical boilerplate text, including the same grammatical errors and nonsensical sentences, with only a company name, logo, org chart, and signature swapped in > Auditor conclusions and test procedures are reportedly pre-written in draft reports before clients even provide their company description, which would violate AICPA independence rules requiring auditors to independently design tests and form conclusions > All 259 Type II reports claim zero security incidents, zero personnel changes, zero customer terminations, and zero cyber incidents during the observation period, with identical "unable to test" conclusions across every client > Delve's "US-based auditors" are actually Accorp and Gradient, described as Indian certification mills operating through US shell entities. 99%+ of clients reportedly went through one of these two firms over the past 6 months > The platform allegedly publishes fully populated trust pages claiming vulnerability scanning, pentesting, and data recovery simulations before any compliance work has been done > Delve pre-fabricates board meeting minutes, risk assessments, security incident simulations, and employee evidence that clients can adopt with a single click, according to the author > Most "integrations" are just containers for manual screenshots with no actual API connections. The author describes the platform as a "SOC 2 template pack with a thin SaaS wrapper" > When the leak was exposed, CEO Karun Kaushik emailed clients calling the allegations "falsified claims" from an "AI-generated email" and stated no sensitive data was accessed, while the reports themselves contained private signatures and confidential architecture diagrams > Companies relying on these reports could face criminal liability under HIPAA and fines up to 4% of global revenue under GDPR for compliance violations they believed were resolved > When clients threaten to leave, Delve reportedly pairs them with an external vCISO for manual off-platform work, which the author argues proves their own platform can't deliver real compliance > Delve's sales price dropped from $15,000 to $6,000 with ISO 27001 and a penetration test thrown in when a client mentioned considering a competitor
Ryan tweet media
erin griffith@eringriffith

A detailed and brutal look at the tactics of buzzy AI compliance startup Delve "Delve built a machine designed to make clients complicit without their knowledge, to manufacture plausible deniability while producing exactly the opposite." substack.com/home/post/p-19…

English
382
688
7.8K
5.2M
Cris
Cris@zerodmg·
I would also go as far as getting a list of Delve employees and blacklist them too. You're all complicit in this.
English
0
0
1
92
Cris
Cris@zerodmg·
Yeah any company that is listed by Delve should be heavily scrutinized and in my opinion you shouldn't use them at all. Having read like 30% of the Substack article so far there is absolutely no way any serious company that actually cares about their compliance would have continued with them. The amount of red flags I saw right off the bat is so fucking alarming. Compliance is absolutely serious and shouldn't be taken lightly. I need to start a blacklist. I cannot trust any of them.
erin griffith@eringriffith

A detailed and brutal look at the tactics of buzzy AI compliance startup Delve "Delve built a machine designed to make clients complicit without their knowledge, to manufacture plausible deniability while producing exactly the opposite." substack.com/home/post/p-19…

English
2
0
1
142
Cris
Cris@zerodmg·
"The moment I used Delve, I knew it was the future" This has to be a massive joke.
Cris tweet media
English
0
0
0
66
Cris
Cris@zerodmg·
@OpenAI Also don't get me started on how unusable Claude Code is. I don't really understand how anyone does any real work with that garbage they call "software"
English
0
0
0
16