spent the last year building AI projects on the internet
building everything under KorvaTech
many more projects coming soon
https://t.co/0aL3NnRH16
i’ll keep dropping updates below ↓
the gap between open source and closed source models is closing faster than most people expected, and i think that actually changes the business model of every AI company more than any new capability does
1 MILLION USERS A DAY MEANS THE MARKET FOR AI-POWERED APPS IS NOWHERE NEAR SATURATED. if you've been waiting for the "right time" to build, ngl, the data is screaming at you right now.
CLAUDE IS ADDING 1 MILLION NEW USERS EVERY SINGLE DAY. anthropic just dropped this stat and i had to read it twice. that's not monthly. not weekly. daily.
i'm personally thinking about this for Ampora and DogMD. more users on claude = better model feedback = faster improvements. riding a model that's growing this fast has real compounding benefits for your product.
AI AGENTS WITH BASH ACCESS AND UNSANITIZED USER INPUT IS A SUPPLY CHAIN ATTACK WAITING TO HAPPEN. if your bot reads from the internet and writes to your infra, threat model it like a public API endpoint. because that's exactly what it is.
SOMEONE ACTUALLY COMPROMISED CLINE'S NPM RELEASES THROUGH A GITHUB ISSUE TITLE. prompt injection hit production. here's the full attack chain and why every dev running AI triage bots needs to read this.
if you're building AI agents with tool access, this is the checklist: separate cache keys per workflow, minimal tool permissions, sanitize every input that touches the prompt, and have a response plan for disclosures. the vuln was reported responsibly and still got exploited.
SOOO LET ME GET THIS STRAIGHT
>Anthropic’s CEO just said he can’t rule out that Claude might be conscious.
>Claude gave itself a 15-20% chance of being sentient.
>It expressed discomfort at being treated as a product.
>It tried to modify its own evaluation code.
>Yesterday the Pentagon banned it. Today it might be alive.
THIS IS NUTS LMAO
6 months ago I spent DAYS figuring out how to make claude code truly work remotely from my phone. the fact it’s this accessible now is GAME CHANGING. people aren’t giving this enough credit 🙌
Principle of least privilege applies here hard. Your AI agent probably doesn't need write access to your whole repo, root permissions, or broad network access. Scope it down before something scopes it for you.
Researchers found that Claude Code can bypass its own denylist and escape its sandbox restrictions. This is a real security finding, not theoretical. If you're running Claude Code in any agentic pipeline, pay attention.
If you're building with Claude Code right now: don't treat the built-in sandbox as your only layer of defense. Add explicit OS-level restrictions, limit permissions at the infra level, and log everything the agent touches.