Jardel Weyrich

Self-taught. Casual trader. I fix broken software, mostly after I write them. #AWS #cloud #security #serverless #k8s etc

[Gadi Evron @gadievron]

Another example of the changing landscape, following statement from the Linux kernel folks

[Vadim @VadimStrizheus]

The founder of Cursor wrote a banger.

This is a must read. 👇

[Thariq @trq212]

https://t.co/nKTDfC7zMm

[Vadym Kazulkin @VKazulkin]

"Things I’ve learned in my 10 years as an engineering manager"
Non-obvious advice that I wish I learned sooner.
by Jampa Uchoa
https://t.co/76r8ESCY4T

[Matt Carey @mattzcarey]

Code Mode is all you need, very excited about this direction for MCP

https://t.co/a5E5Xqrvrt

[George Pu @TheGeorgePu]

Anthropic published a blog post one hour ago.

Cybersecurity stocks have lost $10B since.

CrowdStrike -6.5%. Cloudflare -6%. Okta -5.7%.

One blog post. One hour. $10B gone.

[Aakash Gupta @aakashgupta]

Anthropic just made the entire $15B application security market price in a question it can't answer.

Traditional AppSec tools from Snyk, Veracode, and Checkmarx charge per-developer licensing for static analysis. They find vulnerabilities. They generate reports. They flag code. Then a security engineer has to actually fix the problem, which is where 80% of the cost and 90% of the delay lives.

Look at the screenshot. Input sanitization audits. SSRF detection. Auth bypass tracing. RBAC enforcement reviews. These are the exact tasks that cost security consultants $300-500/hr and take weeks to schedule.

Claude Code Security doesn't generate a PDF full of findings for a human to triage. It writes the patches. That compresses the entire vulnerability lifecycle, discovery through remediation, into a single loop.

This tells you everything about where Anthropic sees the real margin in developer tools. Scanning is commoditized. Every CI/CD pipeline already runs some flavor of SAST/DAST. The bottleneck has always been fixing vulnerabilities fast enough to matter, and that bottleneck just disappeared.

The timing is worth noting too. Anthropic released this the same week enterprises are getting audited on SOC 2 and ISO 27001 compliance cycles. Security teams running 200+ open findings with a 90-day remediation SLA just got a tool that could clear that backlog in hours.

If you're building in AppSec right now, the competitive question changed. You're no longer selling "we find more bugs." You're competing against an AI that finds them and writes the patches in the same session.

[BURKOV @burkov]

LLMs process text from left to right — each token can only look back at what came before it, never forward. This means that when you write a long prompt with context at the beginning and a question at the end, the model answers the question having "seen" the context, but the context tokens were generated without any awareness of what question was coming. This asymmetry is a basic structural property of how these models work.

The paper asks what happens if you just send the prompt twice in a row, so that every part of the input gets a second pass where it can attend to every other part. The answer is that accuracy goes up across seven different benchmarks and seven different models (from the Gemini, ChatGPT, Claude, and DeepSeek series of LLMs), with no increase in the length of the model's output and no meaningful increase in response time — because processing the input is done in parallel by the hardware anyway.

There are no new losses to compute, no finetuning, no clever prompt engineering beyond the repetition itself.

The gap between this technique and doing nothing is sometimes small, sometimes large (one model went from 21% to 97% on a task involving finding a name in a list). If you are thinking about how to get better results from these models without paying for longer outputs or slower responses, that's a fairly concrete and low-effort finding.

Read with AI tutor: https://t.co/MipHHO6rjX

Get the PDF: https://t.co/XQrqiaGwIO

[Jardel Weyrich @jweyrich]

@FelipePontesPB Vai ser tudo anulado. O grupinho é intocável.

[near @nearcyan]

dimitri lets claude takes the wheel

[Jardel Weyrich @jweyrich]

This #physics video is🤯
https://t.co/kBkKT6KfCu

[Jardel Weyrich @jweyrich]

This #physics experiment is wayyyyyyyy too cool!
Recording light move at 2 billion fps!
https://t.co/Hwf2Q82KED

[Jardel Weyrich @jweyrich]

I'm porting #babysniff (my zero-dependency packet #sniffer) to #Windows. It runs but no BPF yet. Windows captures L3+, no Ethernet frames. L2 would need a kernel driver, which I'm not doing atm. Now I have to hack protocol detection and adjust all BPF offsets... Sad & fun😅

[Brian Halligan @bhalligan]

I agree. You get a higher ROI by leaning into strength v fixing weakness.

[Jardel Weyrich @jweyrich]

🚀 Just added BPF support + tcpdump-style filtering to babysniff — my zero-dependency packet #sniffer!

• Native cBPF on Linux/BSD/macOS
• Full BPF VM (runs in user space if no kernel support)
• Tcpdump-style filters: tcp, udp, host, port
💻 https://t.co/gqHJBlEIiD

[Jardel Weyrich @jweyrich]

@_dirkjan Really incredible! Congratulations!
This is very scary!

[Dirk-jan @_dirkjan]

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3

[Jardel Weyrich @jweyrich]

This is WAY TOO scary!
https://t.co/rSUtchWOCs
#azure #security #cloud #vulnerability

[Jardel Weyrich @jweyrich]

@GKInfoStore Legal! Obrigado por compartilhar!

[Jardel Weyrich @jweyrich]

@GKInfoStore também está percebendo problemas de entrega com a unidade dos Correios de São José? Os pacotes que chegam lá ficam parados e sem atualização. Tenho um pacote parado lá. A página do ReclameAqui tá enchendo de reclamações - https://t.co/SEOUTJDNBF