Jerric Lyns John

AI Optimist | Founder | Developer | DX advocate | Designer | Motorhead

[Jerric Lyns John @jerriclynsjohn]

@flaviocopes There's a way to fix this, though: build a tool like Stow but for AI tools. We will have a common folder that we can sync in GitHub, just like you do with your dotfiles. The only problem is that the tool doesn't exist yet

[Jerric Lyns John @jerriclynsjohn]

This is exciting news, MCP is now part of the Linux Foundation. Now you'll see a massive uptick in adoption of MCPs irrespective of what you think of it!

[Anthropic @AnthropicAI]

Anthropic is donating the Model Context Protocol to the Agentic AI Foundation, a directed fund under the Linux Foundation.

In one year, MCP has become a foundational protocol for agentic AI. Joining AAIF ensures MCP remains open and community-driven. https://t.co/718OwwyFJL

[Jerric Lyns John @jerriclynsjohn]

I take it back, Google is so back in the AI game. I'm blown away, given the rapid state of change in AI, I'll give this another month. I mean it's got some catch but it's still good!!! Looking at @Alibaba_Qwen @Kimi_Moonshot @AnthropicAI and @OpenAI for their next release.

[Sundar Pichai @sundarpichai]

Geminiii

[Jerric Lyns John @jerriclynsjohn]

@stevelauda_ Is that webGL or video?

[Jerric Lyns John @jerriclynsjohn]

@AjeyGore Try @Affinity you'll miss Adobe a bit here and there but you'll never go back.

[Eito Miyamura | 🇯🇵🇬🇧 @Eito_Miyamura]

We got ChatGPT to leak your private email data 💀💀

All you need? The victim's email address. ⛓️‍💥🚩📧

On Wednesday, @OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by @AnthropicAI

But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense.

And with just your email, we managed to exfiltrate all your private information.

Here's how we did it:
1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite.
2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar
3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email.

For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve.

Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data.

ChatGPT + Tools poses a serious security risk

[Jerric Lyns John @jerriclynsjohn]

@bekacru Dude! This comes right on time.

[Jerric Lyns John @jerriclynsjohn]

@yashdulla @ycombinator CRM

[Jerric Lyns John @jerriclynsjohn]

@newsystems_ Brampton

[Jerric Lyns John @jerriclynsjohn]

@kimmonismus Do you have any research paper that you could point me to?

[Jerric Lyns John @jerriclynsjohn]

@Sikandar_Bhide Is it open source?

[Jerric Lyns John @jerriclynsjohn]

When will @cursor_ai @windsurf_ai @Trae_ai add DeepSeek models?

[Jerric Lyns John @jerriclynsjohn]

DeepSeek App is way better than ChatGPT and the bloody thing is free!!!!!!!!!!! Maybe they'll charge us later, but it's free now.

It's so good that you'll be blown away by it's response, it's reasoning is beyond anything I've seen

P.S. enable DeepThink and search, and be prepared to be blown into pieces

[Jerric Lyns John @jerriclynsjohn]

@DrJesseMorse @theliverdoc

[Jerric Lyns John @jerriclynsjohn]

@ankrgyl I think @OpenAI solved the realtime API serverless problem with webRTC support and client side ephemeral auth key. https://t.co/mj2R49hET3

[Jerric Lyns John @jerriclynsjohn]

It's been ages since I've been excited about design! AI is literally rendering what you can do with software trivial so what's gonna differentiate is how AI plays with an exciting f**kin user experience! What's the point of using a normal product if its just utility, we need excitement to be part of it.

F**k traditions!

Good time to build!!!!!

[Jerric Lyns John @jerriclynsjohn]

@AdamRackis It's funny how people try to obscure obvious DX issues under "Skill Issue". Node really needs to catch-up!!

[Jerric Lyns John @jerriclynsjohn]

@nutlope @togethercompute What does it take to make this spit out SVG. I'll contribute if there's a model that can handle it.

[Jerric Lyns John @jerriclynsjohn]

@ky__zo @dannypostma Oh shit. Glad that I'm not alone 🤣

[Jerric Lyns John @jerriclynsjohn]

So I guess the world has already changed! Search and news is so good with @perplexity_ai, it's hard to replace the incumbent because it's mostly baked into your OS and your workflow.

cc: @nothing you gotta let go of Google and let users pick what they want for their search. @arcinternet you've gotta partner up with Perplexity!!! @zen_browser y'all gotta add Perplexity too.