Author @OReillyMedia "Scaling AI Adoption in Eng" Founder @Gatherdev the CTO community for CTOs who don’t have time for community. Host CTO summit @Kubecon_
New York, NY
Joined March 2007
- Tweets20.2K
- Following2.3K
- Followers4.8K
- Likes8.2K
Peter Bell retweeted
Some news: I’m joining OpenAI to lead product management for Core Products!
I have a lot of respect for OpenAI for showing the world that scaling works, for bringing AI to over a billion people, and for believing great products are core to the mission.
I’m excited to work with @thsottiaux, an incredible PM team, and everyone across OpenAI. Together, we’ll build agents that have your back and your team’s, and keep you in control, so you get more time for the people and work you love.
Lots to learn, and lots to build. Please keep your feedback coming!
Peter Bell retweeted
Introducing Zero Wire: a public vulnerability intelligence feed on @CloudflareRadar, bringing the clarity of a news wire service to critical security developments. cfl.re/4iCvSbj
Trying to thin my agent orchestration stack by composing durable execution and/or agentic orchestration. Going through the usual suspects.
What are most people doing these days? OSS factory like Fabro/Archon (any experiences with Kestra) or getting temporal/restate/hatchet for durable execution and owning the workflow semantics?
Want to have thinnest layer possible while still owning capabilities...
Peter Bell retweeted
above is theory; below is practice ghuntley.com/nix/
nix is the tits for bare metal btw. almost impossible to accidentally break a machine from a devops basis. i do my agentic development using sudo (on dev) and it’s rock solid safe.
look into nixosMachineTest
Peter Bell retweeted
So @Ubuntu still hasn't patched this open hole on any Ubuntu server on the public internet that lets anyone take it over
We might just have to switch all our servers over to Debian in this new post-AGI time of rapid cybersecurity hacks which require just as rapid patching
Slowpokes will be left behind
chalmovsky.com/posts/wtf-ubu…
This is why I said you want your VPS ports all closed
Then only let it be accessible inside your Tailscale for SSH and via a Cloudflare Tunnel to receive web traffic
Any Linux box can be taken over with just a single TCP port exposed to the internet now
A stop gap is disabling MPTCP on your VPS now but even better is not having any public ports exposed!
My response to Anthropic when I contested the restriction of my claude acounts for activity in May was "May 6th? Really? I have no idea". For some reason I just got a note back based on that and both accounts were re-instated.
Thanks, but, also, wow :)
Wow - just had a couple of claude ultra accounts restricted with questions about WHAT I DID on MAY 6th.
Not even worth spinning up Astra to go check the transcripts on Cloudflare.
Just wow.
Peter Bell retweeted
🚨 PSA for anyone running a Linux server, node, or relay
CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed.
Ubuntu and Red Hat haven't shipped a fixed kernel yet. Debian, SUSE, Oracle and Amazon have.
What to do today:
1. Check your kernel: uname -r
Fixed versions: 6.1.190+, 6.6.159+, 6.12.113+, 6.18.56+, 7.2.10+ or 7.3+. Below that, you're exposed.
2. If your distro has a fix, update and reboot.
3. If not, block the attack. It needs TCP packets with "IP options," which normal traffic never uses. One nftables rule drops them. Log what gets dropped so you can see if someone's probing you.
4. Turn off MPTCP unless you need it:
sysctl -w net.mptcp.enabled=0
Programs built with Go 1.24+ use MPTCP automatically, and that's how the known exploit gets in.
5. Make it survive a reboot, and check it still works after one.
If you run a Bitcoin node, a Lightning node or a Nostr relay, your machine is on the internet by design. Do this today.
Self-hosting is freedom. Patching is part of the job. 🛡️
Peter Bell retweeted
FWIW here is my talk on CI/CD for a fully agentic delivery process: leaddev.com/culture/the-cont…
Peter Bell retweeted
Yikes. An Accenture contractor gave a Claude Code agent their own admin login so it could write and deploy code on a Pentagon network. It ran for 2 months and appears to have sent the creds and a network map to a site NIST had already flagged as high risk for prompt injection.
So perhaps this is a roundabout way to remind you that your agents should get their own scoped credentials, never yours?
Sources tell WIRED that an Accenture employee’s personal Claude agent ran on a DOD network for two months before it was identified and the vulnerability could be patched. buff.ly/nUjCkPs
Peter Bell retweeted
I once won a Star Trek trivia night while blacked out. I don’t remember winning, but I did wake up with the prize - pair of off-Broadway tickets - in my pants in the floor.
Fortunately for you, I will not be competing.
Come celebrate the life of Sir Pat with us!
Ok! @davidcrawshaw, @ledwards and I are hosting a Star Trek Trivia Night this coming Monday in honor of Sir Patrick Stewart. I'm still finalizing the venue but register here to join us. luma.com/hydyqgll
Anyone dev tool company with marketing $ for re:invent should ping @QuinnyPig - and please do tell me what he’s plotting - sounds like fun!!!
If your company is going to @awscloud re:Invent, and is looking to sponsor something that's quite different than the usual stuff, ping me. I might have an idea to fit most budgets.
Love this!
Alternative - ask the model to make a detailed skill for some task, with very light steering. Basically just the natural language message you would normally expect to activate the skill.
Read the created skill contents (primarily from the weights and whatever light harness-supplied context it may have eg about your codebase)
If the skill contents look correct, delete the skill. It’s in the weights.