Álvaro Cuesta

Software Developer

[DHH @dhh]

You need to upgrade your Rails application right away if you're using Active Storage to store files and allow uploads from untrusted users. The underlying libvips used for image processing has a severe security issue. Great work by @flavorjones to lead the response on this.

[David Senra @davidsenra]

My conversation with @dhh, co-founder of @37signals.

0:00 Cutting Rework From 50,000 Words To 25,000
2:54 Basecamp Was Built In 380 Hours
6:46 Unlimited Resources Build A Blob
10:22 Terminator Beats Avatar By A 1000x
15:24 The Printer DHH Never Wants To Upgrade
17:31 Millions In Profit From 16 Year-Old Software
20:10 The Beauty Of A Finished Product
22:54 I Would Quit Before Working In An Office
25:41 Four Uninterrupted Hours Or The Day Is Lost
31:21 Tobi Lütke Saw The AI Future First
38:51 Apple Pissed Him Off Enough To Switch
42:47 The 19 Year-Old Who Beat Apple
47:16 If Nobody Else Will Build It, I Will
52:02 The Need For Control, Independence, And Freedom
53:44 Chef's Choice, Not A Construction-Kit Burger
56:50 A New Computer Ready In 2 Minutes
1:00:33 A Cheaper Mac Will Never Win
1:02:27 The Best Ideas Sound Stupid At First
1:03:47 Out-Teach Your Competition
1:06:57 The Algorithms Broke Reciprocity
1:10:53 No Investors Is Freedom. No Customers Is Transcendence.
1:13:25 No One Gets To Tell Me What To Do
1:16:49 Your Moral Obligation To Buy A Ferrari
1:23:19 Costs Are The Only Thing You Control
1:26:49 Bezos Paid For The Promise
1:30:17 The Confidence To Say No To Everyone
1:32:59 The Day A Third Of The Company Left
1:36:49 Marc Andreessen Came To Help

Includes paid partnerships.

[David Senra @davidsenra]

A picture of @DHH's desk goes viral every few months, and he says the number one comment he always gets is that it can't be a real office because it’s too clean.

His response:

"If I have shit all over my desk, I'm not creating work, because my mind will just go to the shit."

“It's a bit like that Marie Kondo thing where you go through simplifying your home and throwing out all this stuff. It actually creates free mental space.”

“I need this pure cocoon.”

“It's actually a form of procrastination, and I need to run out of obvious things to procrastinate on before I'll start the real work.”

[David Senra @davidsenra]

Andrew Carnegie would repeat the mantra, “Profits and prices are cyclical, subject to any number of transient forces on the marketplace. Costs however can be strictly controlled, and any savings achieved in the cost of goods are permanent.'"

@DHH agrees, and says this is why he loves going through expense reports:

“I really shouldn't have to worry about a $2,000/month recurring expense on something, but oh my God—the satisfaction I get from striking that line.”

“Very often what I find is, when you take out expenses that shouldn't be there, it's not just about the extra money you get to keep, the whole thing gels better.”

[John Jumper @JohnJumperSci]

A bit of news: After nearly 9 years, I have decided to leave Google DeepMind and join Anthropic (after taking some time to recharge). I am incredibly grateful for my time at GDM. @demishassabis took a real chance letting me lead the AlphaFold team just six months after finishing my PhD, and the entire GDM team taught me so much about how to do great science. GDM is a special place, and I’ll still be excited to hear about what amazing things they discover next.

[Noam Shazeer @NoamShazeer]

I’m excited to share that I’ll be joining OpenAI and look forward to working with the exceptional team there.

It was a difficult decision to move on. I’m incredibly proud of the amazing team at Google and everything we’ve built together. It has been an honor and a pleasure to work with all of you.

[Candy樂兒 @candyyueliu]

Introducing Monako Glass 👓

The world's first wearable Linux computer in glasses form.
Run Claude Code, Codex, and any coding agent — anywhere.

[Suni @suni_code]

Software Engineers right now

[Andrej Karpathy @karpathy]

Personal update: I've joined Anthropic. I think the next few years at the frontier of LLMs will be especially formative. I am very excited to join the team here and get back to R&D. I remain deeply passionate about education and plan to resume my work on it in time.

[ClaudeDevs @ClaudeDevs]

What are best practices for running Claude Code at scale?

New blog post on what we've learned from teams running it across multi-million-line monorepos, decades-old legacy systems, and distributed microservices:

https://t.co/rJUYlIUiTT

[ClaudeDevs @ClaudeDevs]

Usage limits are up, effective today we're:

1) Doubling Claude Code's 5-hour limits for Pro, Max, Team and seat-based Enterprise plans

2) Removing peak hours limit reduction on Claude Code for Pro and Max plans

3) Substantially raising our API rate limits for Opus models

[ollama @ollama]

🤯 Ollama now supports Claude Desktop via Claude’s built-in third party inference.

ollama launch claude-desktop

This allows all models from Ollama's Cloud to be used across Claude Cowork and Claude Code from the Claude Desktop app.

[CG @cgtwts]

Silicon Valley was really so ahead of their time

[OpenAI Developers @OpenAIDevs]

GPT-5.5 is here.

It’s our smartest frontier model yet, introducing a new class of intelligence for agentic coding, computer use, knowledge work, and scientific research.

Rolling out in ChatGPT and Codex today. API is coming soon.

[ClaudeDevs @ClaudeDevs]

Here’s what developers should know to get the most out of Opus 4.7:

[Latam Fintech Hub @latamfintechhub]

📢📢 GOcuotas lanza GOtarjeta con tecnología de @pomelo_latam

La Fintech argentina presentó su nueva tarjeta para que los usuarios puedan comprar en cualquier comercio, online o físico, incluso en aquellos que no estén integrados directamente a la red de GOcuotas, ampliando así el alcance de su modelo Buy Now Pay Later sin necesidad de una tarjeta de crédito tradicional.

La solución se apoya en la infraestructura de Pomelo y permite:

✅BIN Sponsorship para emitir tarjetas bajo licencias existentes
✅Procesamiento cloud en tiempo real
✅Tokenización para pagos NFC (Apple Pay, Google Pay, entre otros)

Conoce los detalles ➡️ https://t.co/TMPSBMZ6bo

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[shirish @shiri_shh]

BIGGEST AI LEAK OF 2026 JUST DROPPED

Anthropic “super safe” AI company accidentally shipped its entire Claude Code source code in a public npm package.

thousands of lines of their secret sauce, agent brains, hidden features, and internal magic… now public on GitHub for anyone to download.

This is the THIRD time it’s happened btw

Finally, Anthropic is more open than OpenAI

[Chaofan Shou @shoucccc]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[Cloudflare Developers @CloudflareDev]

Introducing the new /crawl endpoint - one API call and an entire site crawled.

No scripts. No browser management. Just the content in HTML, Markdown, or JSON.