Eloff (@eloffd) header
Eloff (@eloffd) profile picture

Software engineer and founder of https://nitter.cf/t.co/Wg7NFKdIe7 RevScope connects your web traffic to your payments so you see which channels are most profitable.

Vancouver, Canada
Joined September 2011
Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)Photo by Eloff (@eloffd)
Indeed, it might cost you $5.6B
Do NOT click links in emails. Do NOT download attachments. Even from people you trust, they may unknowningly have a virus on their computer.
3
417
I asked Claude to find a patch from a GitHub issue, apply it to my Nvidia display drivers, build it, tap me on the shoulder when it needs sudo, and then installed it and rebooted. YOLO
2
8
394
Holy fucknuts it worked
1
1
93
Coming soon!
3
1
1
350
By the way, Opus 5.5 almost one-shotted this trailer. It's insane what it can do now.
93
Today was not a good day to announce earnings
313
Timberrrr!
BREAKING: Tether has frozen $971 million worth of USDT which has been linked to a suspected Binance hack. This comes just minutes after Binance wallets saw a $2.8 billion outflow across five blockchains. Binance has yet to comment on the situation.
1
413
More walled gardens nonsense
BREAKING: Reddit, $RDDT, is going to start requiring users to log in. Reddit is becoming a ‘logged-in-only experience,’ says CEO Steve Huffman
3
2
441
Some of the most novel manufacturing research right now looks like a blacksmith shop connected to a GPU. A few things happening in labs that folks here are not aware: AI-generated forging sequences are running physical machines. Simulating how to deform a billet, generate a sequence of operations, and test it on a real forge. Initial demonstrations are already happening. English wheels are getting robotic control and machine vision. Combining shape measurements with models that predict how the next pass will deform the sheet. Metal printing is being combined with forging and hot peening. These operations change the material’s internal structure as well as its shape. Experiments on printed aluminum have already shown improved ductility after forging.
What would prove manufacturing technology has fundamentally advanced? Throughput alone is too low a bar. More output can simply mean more capital. My candidate: how many genuinely new designs did we (as human race) take to 1,000+ good units? The deeper, Thielian question: what can we manufacture economically today that we couldn’t before?
4
3
2
69
3,408
What's your most important line in AGENTS.md? If you could only keep one thing in that file, what can't you live without? For me it's: When a task is done, make tests and lints pass and commit.
6
5
662
As someone who has personally spent $500k / mo+ on Google Ads for years, I can tell you with certainty: This revenue growth in Search is artificial & extremely unhealthy for Google’s business long term Search volumes are declining as legacy search is being increasingly cannibalized by non-monetized LLM queries Google’s response? Manufacture revenue growth via short-sighted, highly extractive, customer-hostile tactics. I.e. charge advertisers more for lower quality clicks, including clicks they do not want and explicitly did not approve Google to charge them for A few examples to illustrate: For all of its history until recently, Google operated on a 2nd price auction model I.e. if you bid $5 CPC and the next highest bidder bids $1 CPC, Google charged you $1.01 for the click (one penny more than the 2nd highest bidder) rather than the $5 you bid This was a genius move by Google early on as it incentivizes advertisers to input their true maximum willingness to pay rather than trying to play the game of bidding low and constantly adjusting to try to stay just ahead of the next highest bidder while still not paying too much However recently, Google silently deprecated the 2nd price auction and began charging advertisers as much as their bid and budget caps allow, regardless of what anyone else is bidding It’s a short-sighted cash grab at the expense of the long term health of the advertiser ecosystem Making thing worse, Google also recently nerfed keyword targeting precision Google previously had precise keyword targeting settings that allowed advertisers pick individual search phrases to bid on, defined down to the character w/ exact match or phrase match targeting This was one of the core features that made search advertising magic, enabling advertisers to run extremely precise campaigns based on exactly what their target customer typed But now, even if you bid on a specific term or phrase using the strictest exact -match targeting settings, Google will show your ad across 1000’s of unrelated keywords, labeling them as as “exact match (close variant)” The definition of “close variant” means whatever they want it to and changes constantly. The result is advertisers get billed for clicks that are totally irrelevant to their business and that their targeting settings explicitly forbid Google from targeting. Google does it anyway and there’s no ability to turn this off So now exact match is broad match, and broad match is just meaningless spam This is all very bad for advertisers, but for Google, it allows them to show your ad and bill you for clicks across 1000x more searches that were previously going unmonetized (mainly because they’re garbage queries no one wants) This is how you grow revenue atop declining search volumes Lastly, and perhaps most egregiously, Google quietly stopped respecting budget caps by a factor of 2x. For example campaigns we’ve been running for years with $1000 daily budget caps suddenly began spending $2000+ per day And the extra spend is entirely on the garbage keywords Google arbitrarily throws in as “exact match (close variants)” which have no value to our business, but can’t be turned off Google offers no refunds nor any recourse for overspend or spend on keywords you explicitly did not target These are not the actions of a healthy business. These are the actions of company whose core business is in decline but desperately needs to pump quarterly earnings so Wall Street will continue to fund insane capex while hopefully looking through their rapidly deteriorating negative free cash flow Google operated a benevolent monopoly for the better part of 25 yrs Meaning the value Google captured from Search was but a small fraction of the value it created, and that spread produced a potential energy that justified expectations of high earnings growth far, far into the future This is now no longer the case At the alter of AI capex, Google is sacrificing the golden goose
Q2 was an amazing quarter, with our AI investments redefining what’s possible across every part of our business. Alphabet revenue grew 24% YoY and Google Cloud accelerated to 82% growth. We saw exciting momentum across the board from Search to YouTube to the Gemini app (which reached 950M monthly active users). Our model APIs are processing 22B tokens/min (up from 16B+ last quarter) driven by our workhorse Flash models. We’re also seeing great adoption of Gemini Enterprise, used by 90% of the Fortune 100, as well as strong demand for our security solutions. Outstanding results and momentum, and such an exciting moment—thanks to all of our partners and employees around the world! 🙌 About to hop on the call!
839
1,995
719
17,466
5,689,567
You joke, but I'm starting to think this is the future. I'm pretty sure Claude would do a better job running a country than our politicians do. No corruption, no concern over what is popular instead of what is logical, fair and balanced perspectives on everything.
I'm at the stage of AI psychosis that I feel I could easily vibe code a better government than Spain or the EU or most countries
3
1
7
607
It wouldn't be perfect of course, but the bar is set pretty low.
1
89
This turned out to be "expected behavior" (fork of a private repo got cascade-deleted when the original repo got axed), and wasn't communicated clearly. A reminder of just how important it is to have clear attribution and messaging in your audit trail. People freak out easily.
someone outside our GitHub org deleted one of our private repos. no membership or invite or role. nothing in our org or enterprise audit logs gave them access. just one repo.destroy from the gh CLI. and it's not in deleted repositories, so no restore. @github how is this possible, what sorcery is this?
48
5
1
39
6,474
Boomers had some advantages, higher wages to house prices is a big one. But so what, life's not fair, play the hand you're dealt and do the best you can with it. Newer generations have advantages too. Look at how easy it is to learn or build things now. Except Gen X. Gen X always gets the short straw. 😂
Boomers didn’t get free money. They got jobs, got married, had kids, bought houses, paid off the mortgage, and stacked dividends. Turns out the discipline of sacrificing for family still works.
5
11
678
Things that only some people understand ... 😂🤣
2
2
11
376
Does everyone just use the number 4 as a secure secret? It’s worse than what an idiot would put on their luggage.
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…
1
1
432
Would you buy that? I rock an 18” Alienware. Thor could use my power brick as a weapon if he ever lost his hammer.
3
1
457
That really wasn’t on my 2022 bingo card
mathematicians and software engineers getting automated before truck drivers is pretty surprising
3
445
Imagine what teachers are TEACHING your children. This has to stop. Replace this nonsense with: Economics! Financial planning! Taxes! Healthy eating! Physical fitness! Our schools are failing our children.
Many of our institutions are ideologically captured.
33
63
1
504
7,832