📊 Elite Batter Index (EBI) - Top Consistent Performers Ahead of the IPL Auction! 📊
With the IPL auction around the corner, understanding consistency and impact is crucial. Introducing the Elite Batter Index (EBI)
When I built menugen ~1 year ago, I observed that the hardest part by far was not the code itself, it was the plethora of services you have to assemble like IKEA furniture to make it real, the DevOps: services, payments, auth, database, security, domain names, etc...
I am really looking forward to a day where I could simply tell my agent: "build menugen" (referencing the post) and it would just work. The whole thing up to the deployed web page. The agent would have to browse a number of services, read the docs, get all the api keys, make everything work, debug it in dev, and deploy to prod. This is the actually hard part, not the code itself. Or rather, the better way to think about it is that the entire DevOps lifecycle has to become code, in addition to the necessary sensors/actuators of the CLIs/APIs with agent-native ergonomics. And there should be no need to visit web pages, click buttons, or anything like that for the human.
It's easy to state, it's now just barely technically possible and expected to work maybe, but it definitely requires from-scratch re-design, work and thought. Very exciting direction!
Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
🙀This is Insane: You can run Claude Code completely free now.
No API bills.
No rate limits.
No data leaving your device.
Just Claude Code running locally fast, private, and 100% yours. Here’s how to set up Claude Code on your own machine (free + fully private)
For guide: Local AI Coding Setup: Free Claude-Like Agent (Ollama + VS Code)
How to get:
Follow me MUST (so I can dm you)
Like + RT
Comment "Code"
5⃣0⃣9⃣ Intl matches
2⃣4⃣,2⃣0⃣8⃣ Intl runs
4️⃣8️⃣ Intl centuries
Winning Head Coach of ICC Men's T20 World Cup 2⃣0⃣2⃣4⃣ 🏆
Here's wishing #TeamIndia great Rahul Dravid, a very Happy Birthday 🎂🥳
Tilak can be tied up by an SLA bowling round the wicket. His front foot gets in the way; he taps the ball from the stumps. His left-handedness is actually detrimental to him. He is slotted next to SKY - Ind might have an issue vs spin in the middle overs if the openers get out.
India's W/L since 2020 is 3.192 over 118 games.
This should definitely put them in the greatest T20 side ever conversations especially with a T20 WC and two 250+ totals in 2024.
Incredible decade across formats for Indian cricket.
📊 Elite Batter Index (EBI) - Top Consistent Performers Ahead of the IPL Auction! 📊
With the IPL auction around the corner, understanding consistency and impact is crucial. Introducing the Elite Batter Index (EBI)
Here's a look at some of the top performers by EBI, including names like Rajat Patidar, Devon Conway, and Sai Sudharsan. These players have demonstrated the ability to contribute reliably, making them potentially high-impact in the upcoming IPL.
#CricketAnalytics#IPL#IPLAuction