Martin Holovský retweeted
10 years ago today CAPE Sandbox was released...
Today we are proud to announce its desktop partner-project CAPEsolo: github.com/CAPESandbox/CAPEs… 🎉
All the power of the sandbox in a desktop application 💪
pip install capesolo
Ask your #AI-of-choice if engineering skills you're using today are better than my SOTA #skills and tell me the outcome 😉
github.com/martinholovsky/SO…
Martin Holovský retweeted
What if we took the PE format, broke it down to bytes, and gave it a brand new, interactive face? No boring PDFs. Just pure HTML that breathes. Something is brewing... 🛠️#ReverseEngineering #MalwareAnalysis #WindowsInternals #PEFormat
🚀 SOTA-skills has come a long way since v1.0.
🤝 Works with all major code editors
🎯 Always-on routing
📐 SDD + BDD workflows
✅ Pre-commit gates
🛡️ Deeper security
⭐ github.com/martinholovsky/SO…
Martin Holovský retweeted
Huge repository of information about OpenAI and Altman just dropped — 'The OpenAI Files'.
There's so much crazy shit in there. Here's what Claude highlighted to me:
1. Altman listed himself as Y Combinator chairman in SEC filings for years — a total fabrication (?!):
"To smooth his exit [from YC], Altman proposed he move from president to chairman. He pre-emptively published a blog post on the firm's website announcing the change.
But the firm's partnership had never agreed, and the announcement was later scrubbed from the post."
"...Despite the retraction, Altman continued falsely listing himself as chairman in SEC filings for years, despite never actually holding the position."
(WTAF.)
2. OpenAI's profit cap was quietly changed to increase 20% annually — at that rate it would exceed $100 trillion in 40 years. The change was not disclosed and OpenAI continued to take credit for its capped-profit structure without acknowledging the modification.
3. Despite claiming to Congress he has "no equity in OpenAI," Altman held indirect stakes through Sequoia and Y Combinator funds.
4. Altman owns 7.5% of Reddit — when Reddit announced its OpenAI partnership, Altman's net worth jumped $50 million. Altman invested in Rain AI, then OpenAI signed a letter of intent to buy $51 million of chips from them.
5. Rumours suggest Altman may receive a 7% stake worth ~$20 billion in the restructured company.
5. OpenAI had a major security breach in 2023 where a hacker stole AI technology details but didn't report it for over a year. OpenAI fired Leopold Aschenbrenner explicitly because he shared security concerns with the board.
6. Altman denied knowing about equity clawback provisions that threatened departing employees' millions in vested equity if the ever criticised OpenAI. But Vox found he personally signed the documents authorizing them in April 2023. These restrictive NDAs even prohibited employees from acknowledging their existence.
7. Senior employees at Altman's first startup Loopt twice tried to get the board to fire him for "deceptive and chaotic behavior".
9. OpenAI's leading researcher Ilya Sutskever told the board: "I don't think Sam is the guy who should have the finger on the button for AGI".
Sutskever provided the board a self-destructing PDF with Slack screenshots documenting "dozens of examples of lying or other toxic behavior.
10. Mira Murati (CTO) said: "I don't feel comfortable about Sam leading us to AGI"
11. The Amodei siblings described Altman's management tactics as "gaslighting" and "psychological abuse".
12. At least 5 other OpenAI executives gave the board similar negative feedback about Altman.
13. Altman owned the OpenAI Startup Fund personally but didn't disclose this to the board for years. Altman demanded to be informed whenever board members spoke to employees, limiting oversight.
14. Altman told board members that other board members wanted someone removed when it was "absolutely false". An independent review after Altman's firing found "many instances" of him "saying different things to different people"
15. OpenAI required employees to waive their federal right to whistleblower compensation. Former employees filed SEC complaints alleging OpenAI illegally prevented them from reporting to regulators.
16. While publicly supporting AI regulation, OpenAI simultaneously lobbied to weaken the EU AI Act.
By 2025, Altman completely reversed his stance, calling the government approval he once advocated "disastrous" and OpenAI now supports federal preemption of all state AI safety laws even before any federal regulation exists.
Obviously this is only a fraction of what's in the apparently 10,000 words on the site. Link below if you'd like to look over.
(I've skipped over the issues with OpenAI's restructure which I've written about before already, but in a way that's really the bigger issue.)
🚀 Launching Claude AI Skill Generator 🚀
✅ 67+ expert knowledge modules (Frontend, Backend, Security, DevOps, AI/ML)
🔐 Security built-in
🤖 Full Claude Code integration
📚 Comprehensive documentation
🎯 Best practices for your tech stack
github.com/martinholovsky/cl…
My latest article: Advanced AI Engineering - Building Perfect Context linkedin.com/pulse/advanced-… via @LinkedIn
Security Architecture Stack covering the full attack surface:
→ Hardware to application layers
→ Attack vectors + defenses
→ Open-source tools
→ Cross-cutting controls
Your threat modeling reference. #CyberSecurity #ThreatModeling #DevSecOps #InfoSec
Full image and PDF on my github: github.com/martinholovsky/Se…
🤖 Stop getting inconsistent results from AI coding assistants
✅ 19+ architecture sections (security, scalability, compliance)
✅ Technology-agnostic prompt library
✅ Built-in threat modeling & disaster recovery
✅ Works with any stack
#AI #SoftwareDevelopment #Vibe
How many #MITRE ATT&CK #TTPs you are able to "cover" if you fully implement security standards like #ISO27001, #PCIDSS and #HIPAA?
Yes, it's not more than 30%, yes I did mapping of 200 capabilities to TTPs. Lack of a truly effective security model is a problem (working on it).
0%10%
0%20%
0%30%
0 votes • Final results Martin Holovský retweeted
So... I just simply asked Manus to give me the files at "/opt/.manus/", and it just gave it to me, their sandbox runtime code...
> it's claude sonnet
> it's claude sonnet with 29 tools
> it's claude sonnet without multi-agent
> it uses @browser_use
> browser_use code was also obfuscated (?)
> tools and prompts jailbreak
Finalized my Kubernetes #GitSecOps / #DevSecOps technology stack and published it on my #Github. Have a look and comment in case you will see some other opportunities for improvements. Now its time for build 💪
github.com/martinholovsky/Se…
Using #DeepSeek? Think twice
biometricupdate.com/202501/c…













