Remember when ChatGPT launched and everyone thought it meant the end of certain industries/professions, and yet that never happened?
The same is true today for doomer predictions about cybersecurity attacks. Models being good at cyber doesn’t mean everyone gets hacked.
As everyone watches the SpaceX IPO today, its worth remembering this advice from Buffett
"The idea that a newly issued security (IPO)—brought to market at a time of the seller's choosing and surrounded by massive hype—is the single best bargain among thousands of global businesses is absolute nonsense.
When an offering carries a ridiculous 7% commission just to incentivize salespeople, it simply cannot be the most attractive investment available.
While people easily get caught up in the excitement of a new launch, look at the reality: you have thousands of existing public companies whose prices are set by a natural auction market, free from aggressive promotion or hidden fees.
It makes no sense to buy a security precisely when an insider decides the timing is perfect to sell. Frankly, it isn't worth spending five seconds thinking about IPOs."
- Warren Buffett
We tore down the "assembled in America" Trump phone, X-rayed it, and conducted a technical analysis.
It is nearly identical to the HTC U24 Pro, which is made by a Taiwanese company with Chinese parts.
Read the full analysis here:
https://t.co/YJyk8nG6Qg
Welp, that happened faster than I predicted. Thought it would be end of 2027, then early 2027, but agentic traffic growing so fast that bots have now passed human traffic online for the first time in the Internet's history. https://t.co/2zX5bHdhsa
I don’t know what happened between Microsoft and #NightmareEclipse behind closed doors
Maybe Nightmare Eclipse was unreasonable. Maybe Microsoft was. Maybe both.
But I think Microsoft badly misjudged this situation.
When you’re the largest software vendor on the planet, you don’t get to behave like an angry individual in an internet argument.
You have to be the adult in the room.
Deleting repositories, talking about criminal investigations and turning the whole thing into a public fight was a mistake. The damage from that goes far beyond this one researcher.
What surprised me most is how quickly people started sharing their own MSRC stories afterwards.
- Months without responses
- “Working as intended”
- Bounty disputes
- Reports that went nowhere
People don’t suddenly start telling those stories for no reason. I think Microsoft broke a lot of porcelain here.
And for what exactly?
I don’t see much upside.
I talked about this on the standup podcast yesterday, but I'll reiterate here: if you're losing sleep because you need to keep feeding the agents STOP, I promise it's not worth it. You got caught in a [prompt -> reward] dopamine cycle and you're addicted to the feeling of the token slot machine. It's not your fault, but you need to escape before it grinds you into a pulp and you can't look at a computer for a month (this was me). If you can break out of it and spend some more time offline, or find other healthy sources of dopamine in hobbies/etc, you'll start to realize just how warped your perception was and that the thing you were chasing wasn't actually productive.
Entra App Proxy continues to be one of the biggest hidden gems of Entra P1
For over a decade, we've been able to stop exposing risky apps to the Internet by routing through agents with outbound connections to Azure
I don't care what vendor you use, just get it off the Internet
@kellabyte This was exactly my thoughts - I want to hear about how they are fixing the root issue, not creating hacks to make them less noticeable
https://t.co/w1d1wlKa64
I think many executives currently look at AI-generated software and think:
"Wow. It's already 90% there."
What they often underestimate is that the remaining 10% is not 10% of the work.
A senior developer reviewing a 5,000-line AI-generated pull request often has to spend hours just understanding the architectural choices, hidden assumptions and how all the pieces fit together.
At that point you're no longer "adding a few fixes".
You're reverse-engineering a codebase that appeared out of nowhere in five minutes.
And many senior developers absolutely hate that kind of work.
Most don't want to become full-time reviewers of machine-generated spaghetti while spending their days writing specifications and documentation for an AI instead of building software themselves.
AI is extremely good at creating the impression that we're "almost there".
But "almost there" can still hide enormous amounts of engineering, maintenance and human responsibility underneath.
Ok, I've had enough of this.
I'm relieved that I never actually adopted RSC and at this point I'm convinced I never will. I'm now firmly in the camp of "RSC was a bad idea."
The problems weren't made up. But this solution is not good.
There’s something ominous about the speed with which the entire world has marched to require identification on platforms and, as I expected, begin the process of banning anonymous VPNs.
The Kickstarter ploy here is what's gross. Last year at a Formnext party, a Chinese founder was bragging after a few drinks that he got his factory and land free from the government, I just checked, of course they ran a KS too 🤦
The playbook is simple: wait until the new tech has all the dead ends solved, start a company, take the subsidies and tax breaks, and milk the Western community.
The new Creality IPO paperwork is a rare glimpse into how this works, if anyone wants to dig. But it is very surface level. For deeper research into this topic you'll need a Chinese phone, bank account, etc to access most of the source. Because of course - no one can fact check this way or if local, get into trouble 😬 (My father couldn't even study before '89, the communists took our family's property two generations earlier.) Since I started saying publicly that we're researching this, a lot of previously public documents have quietly disappeared 🤔
The CCP state support worked too well. In the last 6 years the desktop market got wiped, 95% China, the remaining 5% is Prusa. The billions being dumped into it are not just for the benefit of the Western consumer. I should do a longer write up after Makerfaire Prague!
BTW It would be too funny if these are the guys we caught in our locked private room checking the CORE One INDX prototype the night before the Formnext reveal 🤣
It's fun to see people discovering Microsoft's amazing deal with GitHub Copilot that many of us have been enjoying for the last year plus...
Sad to see it come to an end next month when Microsoft switches to counting token usage vs counting requests.