alias

Founder @ alias-research | cargo-rail | rscrypto | privacy advocate | Member @ Zed Guild 🦀

[alias @loadingalias]

May the bridges we burn light the way.

[alias @loadingalias]

I don’t really believe in coincidence when it hits over and over and over.

There is something going on with these vulnerabilities.

I’m starting to feel like it’s not the thing we should be worried about, but rather a distraction to the thing we should be worried about.

[alias @loadingalias]

@OmegaNekoSimp I just saw that Railway was hit, too.

[alias @loadingalias]

@dejavucoder I genuinely think it’s fucking nonsensical.

[Doug Colkitt @0xdoug]

The obvious lesson is CA certificates need to leave the Stone Age and move to threshold ECDSA signatures. The root programs need a blanket policy of only accepting certs with secret sharing between multiple independent HSMs.

Crypto custodians figured this out years ago. When you have really important private keys that require resistance to nation state actors, the only solution is combining multiple independent sources of entropy

[alias @loadingalias]

What is the best data room tooling? Are we building this ourselves? No way, right?

[alias @loadingalias]

@ColinGardiner I don’t know what the right answer is… but if I’m that VC - I immediately sit down with said founder and tell him exactly the truth.

If he can’t figure it out; I start building the avengers.

[alias @loadingalias]

@samlambert Weak. So weak.

[alias @loadingalias]

@ohryansbelt I don’t think so, but if they do… Vercel is about to get WAY more efficient.

[alias @loadingalias]

@rustaceans_rs I don’t think another team could have pulled in off, honestly. The @voidzerodev developers are in another class entirely. I’ve followed their work for years and they’re just insanely talented.

Elegant is the word that comes to mind, I guess?

[alias @loadingalias]

@dummerspast39 I kept expecting this massive xAI jump.

[alias @loadingalias]

@DeGatchi Damn. You’re going to have a blast. It’s fucking stunning there. Enjoy the trip, bro.

[tison @tison1096]

1. What does "Code Is Cheap" mean? How does it interact with open-source projects?

2. When code is cheap, is open-source (collaboration) still necessary?

3. What can we do to better maintain open-source projects today? https://t.co/zRoTl9778w

[alias @loadingalias]

There are ≈3.1 million roots spread across ≈350k crates to test against on https://t.co/AqiZCrVJ9D. It’s an absolute gift to Rust tooling development.

[alias @loadingalias]

I think like 90%, conservatively, of the companies that exist in tech today are dog shit and will die in the next few years.

[Cindy Sridharan @copyconstruct]

Unfinished coding side projects are now way easier to complete than unfinished blog posts.

I’m perfectly OK with AI writing my code, even the docs.

But I flinch at the idea of AI writing my blog posts, which feels like an egregious violation of a fundamental ethnical contract.

[staysaasy @staysaasy]

Every single Eng leader out there is iterating on some kind of PR autoapprover, coding automations, AI cost optimization, and model switching/eval stuff.

Just a million people doing the same thing.

[alias @loadingalias]

@Cyberlane @Cloudflare In all my time developing I’ve never heard anyone complain of Cloudflare’s pricing model or tooling.

[alias @loadingalias]

@GeoffreyHuntley Hey, use TrailofBits skills. It will catch the extras. They’re really quite good.

[alias @loadingalias]

@GeoffreyHuntley @AntithesisHQ Agh, enjoy! Antithesis testing is quite the ride. They have done such a wonderful job over there.

[alias @loadingalias]

@jezell @criccomini This is probably one of the best stacks today for the workloads that fit well.