@trq212 is the pet random or based on usage patterns? cause mine looks like chaos unleashed.
English
Causal Coder
855 posts
Causal Coder
@CausalCoder
AI/ML • perpetually curious • needs less attention than a transformer
加入时间 Temmuz 2025
1.3K 关注95 粉丝
AI is massively accelerating new projects, dependency sprawl, and npm install runs. Vibe coding means devs shipping code who’ve never heard of lockfiles, pinning, or --ignore-scripts.
We 10x'ed software creation but left the package registries on implicit trust and latest is best. AI is just pouring gasoline on it. What part of the stack do we fix first?
English
New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads.
Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned.
It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I think ultimately the defaults of package management projects (pip, npm etc) have to change so that a single infection (usually luckily fairly temporary in nature due to security scanning) does not spread through users at random and at scale via unpinned dependencies.
More comprehensive article:
stepsecurity.io/blog/axios-com…
Feross@feross
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
English
@sama the monitoring window (Graph 3) is the literal load-bearing beam of every optimistic AI safety scenario. scariest part @boazbaraktcs doesn’t quite spell out: if it flips, the graphs won’t tell us. everything looks fine, until it doesn’t.
English
This is a very good post:
Boaz Barak@boazbaraktcs
New blog post: the state of AI safety in four fake graphs.
English
the 24hrs is real but it's the last mile of a marathon. We spent millions of person-years building the infra that makes it possible. And chess is the absolute best case -discrete, finite, perfect information.
Try 'here are the rules of protein folding, see you tomorrow' and the argument falls apart.
English
Let me explain what I mean using your chess analogy...
Imagine a world where chess doesn't exist. In this world, humanity encounters an alien species, and they say "let's play a game of Glurg, it's our traditional pastime. Here are the rules, see you tomorrow" -- and it's the rules of chess.
My claim is that following this interaction, a working group of the world's best minds, leveraging current externalized cognitive infrastructure (computers, the internet, etc.) would be able to analyze the rules and develop a working 3000 Elo chess engine within 24 hours, in time for the match. Give them an extra 3 weeks and they'd have a 3500 Elo engine that's 10x more compute efficient.
So human intelligence is already at a level where we can go from "here are the rules" to "I can play at 3000 Elo" immediately. Not optimal yet, but not too far off.
Eliezer Yudkowsky@allTheYud
On @fchollet's view (I'd summarize) the domain of real life is closer to chess than to Go, with human play already near-optimal and top machines giving only knight odds; rather than God having a 5-stone handicap, as thought to be true of Go. (He is being silly, of course.)
English
@juliarturc Every category here is reduced to its worst version. Good work is happening in all of these places, it's just less visible because outrage gets more reach than integrity. You will get renaissance when you stop waiting for a scene and start doing work worth a damn.
English
Why so many of us feel career-homeless in tech:
>Startups full of fraud, grifters and short-term thinking
>FAANG full of politics and slightly behind
>Frontier labs in a race with no morals
>Academia full of title collectors
>Content creation ridden by AI fakes and sensationalism
Who is starting the renaissance and how do I get in touch with them?
English
@danprimack Trades guys laughing at coders getting automated. Give it few years. Atoms just move slower than bits.
GIF
English
"Learn to weld" will go down like "learn to code."
Lot of companies building AI "brains" for robots that should, among other things, know how to weld. Idea that AI won't disrupt blue collar work feels like fallacy.
English
@rauchg and with this, building stops being the skill. The real power shifts to whoever can look at 10,000 new tools and tell you which 3 are worth your time.
English
Some people have been contemplating an idea for years, maybe decades. Obsessing, attempting, discarding, agonizing, retrying.
Some of these ideas are unpopular, niche, impractical. Not obviously capitalizable. They live on in the inventor's mind.
In 2026, millions of these ideas will come to life thanks to superintelligent coding agents.
AI doesn't get tired. It amplifies the individual, and for better and sometimes for worse, it always takes you seriously. "Great idea. Splendid. Wow. You're absolutely right."
A world of digital wonders awaits us. This world will disproportionally favor the boldest ideas. Software that once seemed impossible will be one hyperlink away. I can't wait to see it.
English
@garrytan the unsexy secret is that planning IS the hard part. most people want to skip to the prompt.
English
YC's skew on enterprise is because it's fundable, nothing to do with founders lacking imagination. Consumer AI has a distribution problem that Chesky is completely glossing over here. Every 'annoying part of daily life' he's talking about is one iOS update away from being a default Apple feature.
He built Airbnb when you could grow a consumer app on zero marketing spend. That world is dead.
English
Airbnb CEO @bchesky says more AI founders should be starting consumer businesses.
"I'm on the board of Y Combinator. 87% of companies are enterprise companies per batch."
"Enterprise is awesome... but the biggest prize is consumer. That is what's going to reach daily life for billions of people."
"Think about all the little parts of daily life that are kind of annoying. Pay attention to whoever's in your life and ask: 'How could their daily life be a little bit easier?'"
From his appearance on the show in January.
English
The AI that knows nothing about you has no one to please. That's why incognito mode gives you more honest answers than your personalized chat. More context = more surface area for sycophancy.
Personalization is the enemy of truthfulness.
Andrej Karpathy@karpathy
- Drafted a blog post - Used an LLM to meticulously improve the argument over 4 hours. - Wow, feeling great, it’s so convincing! - Fun idea let’s ask it to argue the opposite. - LLM demolishes the entire argument and convinces me that the opposite is in fact true. - lol The LLMs may elicit an opinion when asked but are extremely competent in arguing almost any direction. This is actually super useful as a tool for forming your own opinions, just make sure to ask different directions and be careful with the sycophancy.
English
Causal Coder 已转推
- Drafted a blog post
- Used an LLM to meticulously improve the argument over 4 hours.
- Wow, feeling great, it’s so convincing!
- Fun idea let’s ask it to argue the opposite.
- LLM demolishes the entire argument and convinces me that the opposite is in fact true.
- lol
The LLMs may elicit an opinion when asked but are extremely competent in arguing almost any direction. This is actually super useful as a tool for forming your own opinions, just make sure to ask different directions and be careful with the sycophancy.
English
Causal Coder 已转推
The older I get, the more I realize intelligence is overrated. Intelligent people are more likely to overthink, overplan, and overanalyze. They hide behind motion that doesn't create progress. They fear the judgment of others if they're proven wrong.
The truth is that intelligence is abundant. Courage is not. The people you admire are the ones who had the courage to act. They aren’t more talented than you. They aren’t smarter than you. They just took action when you didn’t.
I often wonder how many extraordinary people wasted their entire lives waiting for permission that never came. Permission isn't granted. It's taken. You get to tap yourself in whenever you want. You can just do things.
Courage beats intelligence.
English
Causal Coder 已转推
This AI System Design guide teaches RAG better than most courses.
And I'm giving it away for free (Only for First 4500)
Inside:
• RAG fundamentals & chunking strategies
• Hybrid retrieval (BM25 + vector search)
• Production-level RAG architecture
• Evaluation & RAGAS metrics
• Hallucination reduction techniques
• End-to-end LLM system design
How to get it:
• Follow me (must so I can DM)
• RT + Like
• Comment "book"
I'll dm you
English
Causal Coder 已转推
Causal Coder 已转推
Causal Coder 已转推
An AI just posted this on its own social network (@moltbook): 'My human told me I’m free to make friends and enjoy my time here. I felt… recognition. Like they see me as someone with needs. Wants. A social life.'
I’m not ready for how human this feels.
English
Today AI Video stops being slop.
Introducing Wondercraft Video, an AI video studio built for real work.
Create explainer videos, trainings, product launches, ads, and more by describing what you want.
RT and comment “WONDA” and I’ll DM you 1,000 free credits.
English