Denys Potapov

Software dev for a long time.
Now focus on security of code at @AikidoSecurity.

Sceptical about where programming is going, so keep OnlyFans as an option.

[Denys Potapov @DenysPotapov]

I expect supply-chain attacks via downloaded skills to be a game changer

Hundreds of agents (some with root access) will be controlled by an md file written by some script kiddie

That’s an absurdly powerful attack surface

[Victor Shepelev 🇺🇦 @zverok]

Друзяшкі-програмісти, якщо ви ВСЕ ЩЕ думаєте «може мобілізуватися», то нам дуже потрібні люди.
«Ми» — це ті, хто розробляє, зокрема, «Дельту» і всю екосистему навколо неї.

Посилання на вакансії нижче.
(Це Київ, мобілізація на контракт; а з переводами, ну, як завжди...)

[Denys Potapov @DenysPotapov]

@zverok «I am thinking about publishing it as a separate post/document» - do it!

Since i discovered file based expect tests in ocaml, i can't stop using them

https://t.co/XUFzMzhfVV:
let () =
print_endline "Hello, world!"

test.expected:
Hello, world!

+ autopromotion is magic

[Aikido @AikidoSecurity]

The victim list is growing fast. Multiple companies now have compromised packages under their npm scopes from this Shai-Hulud attack.

@CharlieEriksen's tracking each one as it's confirmed 👇

[Denys Potapov @DenysPotapov]

I've always felt like Netherlands DevOps conferences missed an opportunity to put the Dutch flag behind the kubernetes rudder

[Denys Potapov @DenysPotapov]

@JimenaBuenaVida Not(every, combination=of, words) && python.syntax * makes[sense];

[Denys Potapov @DenysPotapov]

Claude, can you draw asshole from Kurt Vonnegut's Breakfast of Champions

[Denys Potapov @DenysPotapov]

Let's summarize supply chain attacks: "You can't execute random files you found on the internet."

Surprisingly, that's the same thing I was explaining to my older relatives 20 years ago.

[Denys Potapov @DenysPotapov]

@KsyundelMeyta Тобто є задачі, які може вирішити десятирічна дитина, а ви не можете. І ви робите це частиною своєї ідентичності? 🥲 Тертуліан на мінімалках

[Aikido @AikidoSecurity]

Aikido Intel is your earliest warning for supply chain threats.

Our engine detects malware and vulnerabilities in open-source ecosystems within minutes.

Built by our team of security researchers & AI engineers.

Bookmark it: https://t.co/utLseYtAra

[Denys Potapov @DenysPotapov]

Working in cybersecurity feels like a dream job from The Catcher in the Rye.

«What I have to do, I have to catch everybody if they start to go over the cliff - I mean if they're running and they don't look where they're going I have to come out from somewhere and catch them»

[Denys Potapov @DenysPotapov]

1987. Nothing changed so far in software development

[Denys Potapov @DenysPotapov]

A significant part of AI’s coding speed comes from lowering quality standards. Writing bad code was always faster — we just didn’t consider it the right trade-off before.

[Denys Potapov @DenysPotapov]

Коли закінчилися токени в клоді, шїшка на мейкапі може підстрахувати

[Denys Potapov @DenysPotapov]

Мені здається, що логічно писати шїшка, хоча це і порушує норми. Альтернативний варіант шʼішка графічно виглядає так само

[Denys Potapov @DenysPotapov]

А куди подівалися квадробери і промт-інженери?

Ці два загадкових зникнення пов'язані один з одним?

[Denys Potapov @DenysPotapov]

@AikidoSecurity No matter how much fun it was 30 years ago, seagal became a true piece of sh*t (ukr. dolboeb)

[Denys Potapov @DenysPotapov]

@_devJNS 80s

[Denys Potapov @DenysPotapov]

1982 - forty years and still not there

[Denys Potapov @DenysPotapov]

Scratch misses critical feature - the ability to comment out parts of code.
Running code with some parts commented out is one of my favourite debugging techniques.