Joonas Bergius

@zeeg Do people really not read your blog post to do the bare minimum setup that tailors Warden to their specific codebase? I’ve had good results with very limited customization beyond the steps you outlined, surprised people are that lazy 😆

ok ya lazies, i bundled a baseline security skill in warden (which we'll try to improve) pnpx @sentry/warden@latest --skill security-review . going to now try to have it take another approach to building domain knowledge that is still hands free

@zeeg Wanted to update that I’ve been working with Warden across a few internal repositories and so far the early results seem promising ! I expect there’s still room to put more reps on the skill I put together (with skill-writer, which is really awesome btw), but it’s a solid start

@joonas yeah i def have a technique.. its not rocket science but its kind of hard to just.. encode/write down. Hoping I can provide a skill that tries to keep it on track so its easier for others.

What’s a big public codebase that has a large api surface or otherwise server code? Preferably open source. I’d like to try running an experiment with Warden on it. If it works I’ll send you a bunch of disclosures or potential vulnerabilities.

@zeeg Awesome, I’ll check this out! I’ve been using Opus 4.6/4.7 and GPT 5.4 to do research with some light weight harnessing, curious to see how this compares. I’ll keep an eye out for your follow-up write-up, I’m sure you’ve built up some good intuition effective prompting for this

x.com/zeeg/status/20… im working on a more thorough write-up of how to do the skill generation and refinement, but i dont think itll be out the door til best case mid/late next week all the skills in these are private right now. they're repo-specialized but i dont want to disclose them til folks have been able to make an explicit call on the findings and patch them as needed

@zeeg I’d love to run this against the closed source codebase I work on, where should I start? Are the skills you’re testing part of the Warden repository, or something else entirely?

Alternative if your code isn’t open happy to help you test it but preferably something of significance in use and complexity

@thorstenball @cecheverri4 It’s a matter of self-preservation 😉 I really did appreciate your blog post though, it was a fun exercise to work through (just as your books have been in the past!)

@joonas @cecheverri4 Haha, spicy :D

A year ago we just said the emperor has no clothes. ampcode.com/notes/how-to-b…

@thorstenball @cecheverri4 Oh I see, that explains it - thanks!

@joonas @cecheverri4 Here's a hint

@cecheverri4 @thorstenball Any chance for a link to the video in question, or hint which video? 😁

@thorstenball Exactly. Saw the video and thought: Nothing new. Thorsten wrote about this a year ago.

@bcherny Missed opportunity to have called it “trust me bro” mode 🙂

no 👏 more 👏 permission prompts 👏

📣VENUE ANNOUNCEMENT: #Rejekts2025 Atlanta will be held at The Historic Academy of Medicine located within Georgia Institute of Technology.🎓 We're looking forward to the academic atmosphere, talks & fantastic exchange of ideas on Nov 8! To register👉🏽pretix.eu/rejekts/rejekt…

@charliermarsh Like cerebras.ai/chip?

I would just build the whole computer out of L1 cache

Hey @github, when can we start shipping WebAssembly Components to be run as GitHub Actions? Stuff like this is getting old: stepsecurity.io/blog/harden-ru…

ghostty.org 👻

@caarlos0 @GoReleaser This is huge, thank you! 🙏

crabs and gophers, stronger together! @GoReleaser 2.5, with Rust supports, comes out on Monday!

#Rejekts2024 SLC talk recordings are out! View the complete playlist & follow our YT channel for more content from previous Rejekts events👉🏾 youtube.com/playlist?list=…

@caarlos0 @raphamorims Welcome, the water is fine 🙂

i blame @raphamorims

Help TinyGo with a contribution & also get some awesome premiums like stickers & programmable conference badges? YES! Please go to opencollective.com/tinygo to help us RIGHT NOW Thank you for your support! #tinygo #golang #opensource #embedded #wasm #wasi #webassembly

NEWS: The @CloudNativeFdn Technical Oversight Committee (TOC) has voted to accept wasmCloud as a CNCF incubating project! 🎉🙌💥💚 A huge milestone that wouldn't be possible without our maintainers, end users and the entire wasmCloud + CNCF communities🙏 cncf.io/blog/2024/11/1…

@ahrkrak Love to see this come to fruition, it’s been quite the journey for you all, congrats to the entire team!

I can confirm, Bill & the Ardan Labs folks have put out some really exceptional Go content over the years, much of which has stood the test of time really well.

@kevinyien maps.app.goo.gl/egDQzXUoam96sY…

in barcelona for the week — any recommendations?