technologist, builder, catalyst, finance guy
NYC/OG
Joined March 2007
- Tweets2.8K
- Following2.1K
- Followers294
- Likes7K
jon cooper retweeted
We will all be learning in coming weeks & months, that most human-made software:
▫️ Was really slow
▫️ Had many security vulnerabilities
▫️ Was under-specified and incorrect
AI will rewrite it all. Many times. It will make it fast, cost-efficient, and secure. It will think about failure modes we couldn't wrap our heads around.
It will prove, formally verify, load test, harden. It will turn memory-unsafe foundations into robust, optimized ones. If you ask, it'll thoroughly document it, teach you about it, make diagrams, animations, and slide decks.
In many ways, we are witnessing the true birth of software engineering.
Seems like human flow from Anthropic to OpenAI picking up. IPO related or something else?
lots of news breaking these days so I may as well sneak mine in if anyone cares and share that I recently joined @OpenAI 🫡
my time at Anthropic was a fever dream in the best way possible. got to help build the growth function, work alongside some really really talented people, and tackle some of the most challenging problems of my career.
incredibly grateful for the experience and excited for what’s ahead. also in case you were wondering, Ant has better coffee/drinks and OAI has better snacks.
jon cooper retweeted
After Anthropic cracked down it looks like OAI will now get a big slice of the distillation revenue
Curious what happens if OAI closes it too. Does the teacher ceiling start to hurt??
jon cooper retweeted
SmartLoader and StealC must be on a generational run with this malware delivery strategy
SmartLoader and StealC, masquerading as a legitimate GitHub repo, using AI to generate a slop ReadMe, has been persistent for like, a year, maybe longer, and it's still going strong
🧐 We found 73 GitHub repos posing as AI agent tools (Claude skills, Codex, MCP servers, OpenClaw) that delivers malware ZIP "installers." @SecurityBreakAI
51 were still live this morning. The payload is SmartLoader a Lua loader that usually drops the StealC infostealer. A small thread (Including IOCs) 🧵
jon cooper retweeted
a few years ago, I started out skeptical that many non-engineers really wanted to make/mod their own personal software -- but I've come around, think I was wrong. range of desires from:
- I feel so powerful
- no one will make me the workflow/personalization I need
- can I just PM the product for a few weeks and fix this thing that is driving me crazy
obvious in retrospect, but if the ease:power ratio is good enough, of course people will make their own software
👀
We at AIFP are spooked by this information. IF (big IF) Anthropic really is imminently about to meet the RSP threshold of 2x acceleration over baseline, then it seems timelines to full RSI and superintelligence may be very short indeed. For example if we naively optimize the AIFM parameters to achieve 2x acceleration over baseline progress in Jan 2027, we get superintelligence sooner than depicted in AI 2027. We are thinking harder and longer about this now and will hopefully have a lengthier update on our thinking to share in the next week.
jon cooper retweeted
BREAKING:
Scientists confirm that an ADHD partner cannot actually relax on the couch while you are cleaning the kitchen—they just sit there frozen in "Guilt Paralysis," scrolling their phone in misery while their brain refuses to let them stand up.
Researchers baffled.
Here is why your partner looks "lazy" on the sofa while secretly panicking inside—and how to break the freeze: 1/6
jon cooper retweeted
there is a massive business opportunity now to help companies implement automatic vulnerability scanning and patching.
massive.
not having a system like this will be like running a webserver without SSL.
Security release pre-alert:
We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities.
The highest severity issue fixed in this release is HIGH.
nodejs.org/en/blog/vulnerabi…
jon cooper retweeted
hands down the best talk I’ve ever seen. the slides are public now.
- Calif got permission from @openai to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is possible in ~3 hours (with the right prompting, skills, and primitives)
- the world is changing faster than expected
I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️
thank you so much for the presentation! @pwnlambda @brucedang @calif_io
Finally back home! Slides from "0clicks in an AI World," the talk @brucedang and I gave at @unpromptedconf, are now up:
github.com/pwnlambda/talks/b…
jon cooper retweeted
I've been looking forward to this day, because Vercel has an internal security agent that is **astonishingly effective** (lovingly called @𝚑𝚊𝚌𝚔𝚎𝚛). Every single line of code gets audited, automatically.
You can now get the same power. Just enable it on all your repos (this product works whether you host on Vercel or not) and your peace of mind will increase tremendously. You'll see it catch things that every other agent misses.
Why: you cannot just bank on your engineers having a skill installed, prompting "please make secure", or rolling the weights' dice that the code is good out of the gate.
The other cool thing about this is that this was entirely developed by our security team. A lot of companies out there are probably in a mad rush right now trying to staff up. If you wanted to 'download a security team' as software, this is the closest you get today.
Today we are launching Vercel Security Review in public beta.
Run vulnerability reviews on every push, and ship fixes in one click with Vercel Agent.
Read the blog → vercel.com/blog/vercel-secur…
jon cooper retweeted
this is basically the bitter lesson at work
the smartest models will need fewer and fewer tokens, they won't need to verify their work or check it for bugs, they will just be right
maybe a hot take but i now consider adversarial reviews mostly a waste of tokens. far better to use those tokens on empirical combined with formal verification. i have updated pstack to use the interrogate skill less, and eventually i think i may remove it altogether
i have found very little value with code review in the abstract, agents tend to just get lost in the nitpicks and yagnis
Facts. I want to invest.
7 hours into our seed raise that we started this morning, 3 meetings down, and we have 17 more booked
most interesting thing so far is people asking about the platform
why can't their claude code just do this
why do you need the platform at all
1. data pipeline + data warehouse: 50% of marketing teams don’t have this. Their CTO or IT team won’t let them touch Snowflake, especially not with an agent “What about building it themselves?” Maintaining this infrastructure is a product in its own right
2. cloud infra - a person would have to monkey patch 7 primitives to build everything a coding agents needs to do fully autonomous marketing
3. agent tools - to do marketing and GTM across display ads, search ads, SEO, cold email etc you need 250+ tools. No one wants to get subscriptions to all of them
follow me to watch more from the front line
jon cooper retweeted
Applications are now open for the Anthropic Residency, a paid, fixed-term research program for academics, technical founders, and staff-level engineers who want to make AI safe and beneficial for everyone. No ML background is required.
Apply by November 22: alignment.anthropic.com/2026…
jon cooper retweeted
What a disaster atlasum.net/blog/cve-2026-98…
