Anthony Wu

In general, we should treat AI like a utility, not like a being. The more we confuse what AI is the more we will make ourselves go crazy with analogies that will never fully hold true.

In the next version of Bun `Bun.Image` - fast builtin multi-format image processing library

Team shipped a Codex Security plugin with 5 AppSec workflows: > Security Scan Scans PRs, commits, branches, patches, folders, or full repos. Runs the full pipeline end-to-end > Threat Model Maps the repo: assets, trust boundaries, attacker inputs, invariants, and failure modes > Finding Discovery Finds plausible vulns: authz bypass, SSRF, path traversal, injection, cross-tenant leaks, sandbox escapes, dangerous sinks, etc > Validation Separates signal from noise. Uses PoCs, tests, debugger traces, ASan/valgrind, realistic repros, or static tracing > Attack Path Analysis Turns findings into attacker stories: reachability, counterevidence, impact, severity, and whether it should actually be reported It’s a packaged security review for your projects: threat model → discovery → validation → attack path → report Try it out today!!

Codex now has a Security Scanner? when tf was this added and why is this not a bigger deal?

- headless "github" - agent first - empower others to build superior UI (cursor, linear, graphite, ..?)

In the next version of Bun `Bun.Image` - fast builtin multi-format image processing library

OpenAI’s GPT-5.5 is the second model to complete one of our multi-step cyber-attack simulations end-to-end 🧵

Fun fact - if you have a recent commit that mentions OpenClaw in a json blob, Claude Code will either refuse your request or bill you extra money. This is an empty repo, I'm just calling Claude Code directly. Insanity.