John McBride

🌊 | Co-founder, CTO @papercompute | 🎤 Hosting @opensourceready | 🐹 maintaining spf13/cobra

[John McBride @johncodes]

@MelkeyDev how I read this tweet 😂

[IroncladDev @IroncladDev]

--- BEGIN PRIVATE KEY ---

[John McBride @johncodes]

@bdougieYO @Cloudflare

[John McBride @johncodes]

@moschettifran @AIGryffindor Lots of people pointing to this issue/comment re: how they store your keys/privacy transparency in the the ux

https://t.co/MxinWTt5aY

[John McBride @johncodes]

Let’s be clear: AI-assisted cyber attacks are NOT an excuse for pure negligence. OpenCode’s security posture has always been terrible: let us not forget the baffling OpenCode cross-origin RCE vuln from last year that let anyone execute whatever code they wanted on a local OpenCode HTTP server!

I have not recommended OpenCode since then and have watched in horror as the team has ignored open source requests to harden the service and make it more transparent.

Security is very rarely a technical problem: in my experience, it’s almost entirely cultural. You CAN make your services ironclad: you just have to believe in putting the time and energy into actually doing it.

Fool me once, shame on you.
Fool me twice, shame on me.

[John McBride @johncodes]

@AIGryffindor I suppose I will say we don’t know the details yet so maybe there was due diligence on the backends and this was access controls - my point remains: culturally I do not have faith in their product

[John McBride @johncodes]

@AIGryffindor Storing raw end-customer API access keys unencrypted? Sounds pretty negligent to me.

[John McBride @johncodes]

@GergelyOrosz Worth quote tweeting myself here: they were right and Amazon did collapse in the dotcom bubble. If anyone had shorted Amazon in 2000, they would have made alot of money

https://t.co/mZZ1fTuD1k

[John McBride @johncodes]

Amazon did collapse: the stock in the dotcom bubble crashed down to 6$ from 100$. Amazon only survived because Bezos somehow by a miracle found 600m$ in the bond market weeks before things froze up on 2000. Jassy then saved the company with AWS from 2000-2005 by turning it from a low-margin internet company to an actual hyperscaler that could "spin the flywheel".

Let's not do a revisionist history on Amazon: it is a miracle it survived after such a crash.

[John McBride @johncodes]

Here here! I believe we agree: in theory Barrons was right and if they had shorted Amazon in 2000, they would have made alot of money. But it's VERY hard to know if a business with a new tech will work out: even AWS at the time seemed crazy but here we are with public clouds abound.

I think the key is that both OAI and Ant won't be able to sustain ONLY on training/serving SOTA models: they'll have to expand.

[John McBride @johncodes]

Amazon did collapse: the stock in the dotcom bubble crashed down to 6$ from 100$. Amazon only survived because Bezos somehow by a miracle found 600m$ in the bond market weeks before things froze up on 2000. Jassy then saved the company with AWS from 2000-2005 by turning it from a low-margin internet company to an actual hyperscaler that could "spin the flywheel".

Let's not do a revisionist history on Amazon: it is a miracle it survived after such a crash.

[John McBride @johncodes]

Let's imagine the same playbook for Anthropic: they would a) have to go find 100s of billions of dollars to meet their spend commits and b) transition the company in the next few years away from unprofitable training into _something_ that can turn them into a true profit hyperscaler to meet such an evaluation.

[John McBride @johncodes]

Amazon did collapse: the stock in the dotcom bubble crashed down to 6$ from 100$. Amazon only survived because Bezos somehow by a miracle found 600m$ in the bond market weeks before things froze up on 2000. Jassy then saved the company with AWS from 2000-2005 by turning it from a low-margin internet company to an actual hyperscaler that could "spin the flywheel".

Let's not do a revisionist history on Amazon: it is a miracle it survived after such a crash.

[John McBride @johncodes]

@swyxio Boy do I have stories 🙊

[John McBride @johncodes]

You Can See Everything is a masterpiece: a re-reckoning of truth, Silicon Valley’s worst “fail fast” and “fake it till you make it” cultures. It examines the often perverse incentive-through-lines in business, entertainment, media, politics, and everything in between.

The result? You leave questioning everything: questioning if you did in fact see everything.

[brian douglas @bdougieYO]

AI needs new infra