Muyukani Kizito

Village nerd with some tools • Founder @prescottdata • Author • Creator of @TurnLang

[Muyukani Kizito @askmuyukani]

I experienced good AI magic from @Grok. My starlink internet was spotty for days, I went to raise a ticket, Grok answered, did troubleshooting of my starlink kit, found it was defective, placed an order for a new kit and helped escalate an application for a 1 month waiver. Today, the new kit arrived. @starlink @xai great work

[Celestino(e) M. K @_celestino127]

Love seeing Kenyan builders on my TL, very underrated, this work is very important. Won't even try using Google's products. Better support a Kenyan startup.

[Sangalo @sangalo__]

https://t.co/4r4NBIoc5N

[Immanuel @immanuel_vibe]

your default EKS/GKE cluster can be compromised in 5 minutes. standard RBAC won't save you. here's the exact YAML you need

these are real, insanely common in prod clusters shipped with defaults

▶ vuln #1 — automountServiceAccountToken: true (default)
every pod gets a token by default. attacker lands in your pod → reads the token → calls kube API as that SA. gg.

apiVersion: v1
kind: ServiceAccount
metadata:
name: my-app
automountServiceAccountToken: false # add this. just do it.

and per-pod:
spec:
automountServiceAccountToken: false

▶ vuln #2 — no NetworkPolicy = flat network
by default every pod talks to every pod. one compromised sidecar, and ur entire cluster namespace is cooked.

apiVersion: https://t.co/PLmCQOf2ZG
kind: NetworkPolicy
metadata:
name: default-deny-all
namespace: production
spec:
podSelector: {}
policyTypes:
- Ingress
- Egress

▶ vuln #3 — containers running as root
shocking how many prod workloads still do this. container escape → root on the node. beautiful for attacker, not for you.

securityContext:
runAsNonRoot: true
runAsUser: 1000
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop: ["ALL"]

slap these 3 on every workload before you ship. not optional. not "we'll do it later". now.

RBAC is table stakes. these are the actual foot-guns that get real clusters pwned daily.

copy → paste → never get paged at 3am for this. you're welcome

#kubernetes #k8s #devsecops #EKS #GKE #cloudnative #infosec

[Muyukani Kizito @askmuyukani]

@sukh_saroy Have fun taking that to production

[Muyukani Kizito @askmuyukani]

@awsdevelopers Click click click to provision infra is sweating atm 😄

[Muyukani Kizito @askmuyukani]

Been a good day staying away from the TL
Resumption on April 2nd

[Muyukani Kizito @askmuyukani]

@aminkarbasi @GoogleResearch Thank you for your service, this is actually needle moving

[Google Research @GoogleResearch]

Introducing TurboQuant: Our new compression algorithm that reduces LLM key-value cache memory by at least 6x and delivers up to 8x speedup, all with zero accuracy loss, redefining AI efficiency. Read the blog to learn how it achieves these results: https://t.co/CDSQ8HpZoc

[Muyukani Kizito @askmuyukani]

@cursor_ai Actually I love how Cursor has reacted to this whole Kimi situation, the world needs good (AI) companies of good people

[Muyukani Kizito @askmuyukani]

@iiamkrshn Cold

[Muyukani Kizito @askmuyukani]

It's been a busy month here at @prescottdata (important announcements coming soon), so I got a little bit pulled away from writing at the Dojo.

However, I still managed to share this architecture pattern for horizontal scaling of agentic systems in production. I coined it "The Hydra Pattern". If you are familiar with MapReduce this won't feel so foreign.

Go check it out: https://t.co/MZrYuRrKd3

[Muyukani Kizito @askmuyukani]

@garrytan Garry from Temu 😂😂

[Muyukani Kizito @askmuyukani]

I am calling this NetZero, AI offset
Who’s gonna create a carbon credits kimda marketplace for this 🤷🏿‍♂️

[Tuki @TukiFromKL]

🚨 Do you understand what just happened at OpenAI..

on January 26.. Sam Altman told his own employees "we are planning to dramatically slow down hiring.. we think we'll be able to do so much more with fewer people"..

that was 54 days ago..

today OpenAI announced they're nearly doubling their workforce.. 4,500 to 8,000.. by end of year..

the same man telling you that AI replaces workers.. just announced hiring 3,500 more humans because AI couldn't replace his..

so either the AI isn't good enough to do the work.. or Anthropic scared them so bad they threw the whole playbook out the window..

both answers are embarrassing.. but only one of them is true.. and Sam knows which one.

[Tuki @TukiFromKL]

🚨 Do you understand what just happened at OpenAI..

on January 26.. Sam Altman told his own employees "we are planning to dramatically slow down hiring.. we think we'll be able to do so much more with fewer people"..

that was 54 days ago..

today OpenAI announced they're nearly doubling their workforce.. 4,500 to 8,000.. by end of year..

the same man telling you that AI replaces workers.. just announced hiring 3,500 more humans because AI couldn't replace his..

so either the AI isn't good enough to do the work.. or Anthropic scared them so bad they threw the whole playbook out the window..

both answers are embarrassing.. but only one of them is true.. and Sam knows which one.

[sush @2sush]

Bad grammar is thhe new proof of being human

[Muyukani Kizito @askmuyukani]

It is a dogfooding weekend. We released some OSS projects early in the month, I want to try Garry’s “god mode” without the 10k LOC a day though

[Muyukani Kizito @askmuyukani]

@leerob OSS way, love it Lee and congrats on the launch