Chris

Bro has so much intimacy with Assembly that he sees C as Python 😭

What’s going to happen to open source? A prediction: Dependencies are over. The same Brotli vulnerability impacted .NET, Node, Bun, Envoy and more. Dependencies are too big of a target. When rewriting a dependency is one prompt away, why take the risk?

There's a buzzy new paper about GPT-6 Astra being able to directly interpret model weights (prompts full of floating point numbers) - I tried it with Qwen 3.8 27B on my laptop and found that, after 45+ minutes, that model could achieve the same thing simonwillison.net/2026/Nov/3…

This is wild. (CTO of Legora, one of the most popular Legal AI platforms btw): Related to the whole 'frontier models can understand and directly modify weights' topic from the last several days. My brain continues to break as we see new things in this space. What a fun time to be building and learning.

So unbelievable... Adam changed the GTM industry in more ways than almost anyone Rest in peace to a legend and the greatest bootstrapped founder to ever do it in Sales tech

another misunderstood property of working this way we can cut spend by 95% without firing anyone. all we have to do is say no to more. if we were wrong we can scale it back up 10,000% the next day it’s perfectly elastic capacity this is a capability that has never been possible before

No. We've got to stop applying old human-centric patterns to working in the new era. delete all your wikis. have an agent answer questions from source instead. at spawn we have: - zero dashboard tools - zero docs - we do not make or use summaries everything we do is primary sources + intelligence Nothing to go stale Nothing to organize Nothing to navigate Always exactly up to date Perfectly personalized The answers get better with every model If we want to see a chart, we ask for it, and we have it in a minute If we want an answer to a question, we ask it, and we have a to-the-minute correct answer

lot of people making stuff up so here's some more context you can imagine there's hidden enterprise demand for open source models that isn't visible but if you look at the top inference providers that aggressively go after this business, they have shared some numbers and they are all roughly the same size as us. and at best there's 5 of them if you think enterprises are self hosting inference on their own GPUs, there are so few people who can run reliable inference and they get paid a lot and work at ai labs. and if they really want sovereignty they're not getting that by leasing GPUs from a third party the root point here is this is entirely the wrong way to look at things, you just have to look at products how many products exist with a lot of traction that can use open models? this is what creates demand, it's not some magic thing that grows on its own OpenCode is one of those and we do see a lot of enterprise inbound. but it's so early, all of these companies are just starting to look at mixing in some OSS inference so yes demand will probably go up in the future but everyone in this industry is investing resources in preparing for that future. and so few people are building the products that will make it happen

Note from a laid off Cisco Manager to all, valid life lessons: "Just a quick 7 min Webex and a very long career is over. Even after serving my entire career, running a very large team, building software, minting $100+ Million in YOY revenue. Stuck with legacy technology knowledge no one wants in other companies with age that's discriminated in tech companies. I am feeling like the biggest fool now and learned loyalty never pays. Hard Lessons- Self serve first. Corporate companies are not your friend. They are there to make money even if US citizens suffer. Cheap Indian 'engineer' will one day take your job anyway. Keep yourself relevant by learning market-relevant technologies. In today's time, stick to open-source technologies. Do not work on proprietary technologies. In case you are stuck, have an exit plan. Do not be lured by false future promises. Stick to what can be compensated in the present. No one knows the future, not even your boss or his boss. You will be taken advantage of if you allow that to happen. Fight for your rights diplomatically if your personal situation allows else have an exit plan ready. Do not stay for more than 2 years in a place unless you see strong future growth Maintain a work-life balance. I regret this as time lost will never come back. Try getting a side income, you never know when your side hustle will turn out to be a life saver. Save as much as you can and invest wisely."

The coding interview is dead, at least for my team at Anthropic. I've seen enough to know that it no longer provides signal. I removed it from loops this month. I have a spicy, optimistic take - I think there's an opportunity for junior engineers: felixrieseberg.com/hunger-be…

Hey look RAM prices are totally acceptable nowadays.

There's more money out there than you can possibly imagine, and people are willing to spend it if you provide a valuable service (from the Anthropic S1)

I had a $10 plan. Terrible idea. I got rid of it and overnight my support emails dropped to almost nothing. The $10 customers were the vast majority of support tickets. Not even close.

So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

🇯🇵 There's a very interesting dialogue from "Serial Experiments Lain" which is: "Don't ever confuse the real world with the internet". This was in 1998. I guess it did end up predicting many things about the current decade.