Mɐx Bulger

software

[Mɐx Bulger @maxbulger]

Good day to reflect on the zero-sum nature of time, your true values and priorities, and what 10-50 year mission you really want to be on.

[Mɐx Bulger @maxbulger]

@kevinakwok Kevin. It’s not a budget if it isn’t planned and approved in advance. It’s just sparkling expenses

[Mɐx Bulger @maxbulger]

https://t.co/pgkT5FXaSi

[Mɐx Bulger @maxbulger]

Believing in LLM code generation is believing that we will rewrite everything into Rust

[Thariq @trq212]

Jarred tried rewriting Bun in Rust and it passes 99.8% of the existing test suite

we're not being ambitious enough

[Mɐx Bulger @maxbulger]

More

[Jerry Liu @jerryjliu0]

We've created the world's fastest PDF parser ⚡️

And it's more accurate than any other open-source, model-free PDF parser out there (pymupdf, pypdf, markitdown, pdftotext, opendataloader, pymupdf4llm)

Introducing LiteParse v2 - we rewrote the entire library into Rust and adapted it as native packages for Python and Node.

It supports 50+ different document types, can be triggered directly or installable directly within your favorite AI agent.

Blog: https://t.co/ckb0G73ESs

Repo: https://t.co/JNER0mVcB8

[Mɐx Bulger @maxbulger]

@matt_slotnick And do you think it’s a given the labs get to be platforms? vs the lower rev per token they receive when models are consumed via AWS/Azure/GCP?

I don’t know a lot of scaled software companies going direct in production use cases

[Mɐx Bulger @maxbulger]

@kevinakwok https://t.co/o1PQEqANsd

[Mɐx Bulger @maxbulger]

@rfkenmore Jonathan at Alan Flusser. The man

[Mɐx Bulger @maxbulger]

🤌

[Mɐx Bulger @maxbulger]

maybe you shouldn't have to work with Anthropic for months on a custom binary distribution of Claude Code if you want to avoid npm dependency

[International Cyber Digest @IntCyberDigest]

‼️🚨 UPDATE: The TanStack npm attack is now a full campaign.

'Mini' Shai-Hulud has hit:
- OpenSearch
- Mistral AI
- Guardrails AI
-UiPath
- Squawk packages across npm and PyPI

The malware specifically targets AI developer tooling. It hooks into Claude Code (.claude/settings.json) and VS Code (.vscode/tasks.json) to re-execute on every tool event, long after the infected package is gone. npm uninstall does not fix this.

[Mɐx Bulger @maxbulger]

lmao. stripe made anthropic work with them for 3 months on a binary that didn’t have npm supply chain vulnerability https://t.co/4eLSg2etIt

[Yousif Astarabadi @yousifa]

https://t.co/Qmta9nro9I

[Mɐx Bulger @maxbulger]

There may not be ghosts in the machine

But there are goblins and gremlins

[Tibo @thsottiaux]

Never talk about goblins, gremlins, raccoons, trolls, ogres, pigeons, or other animals or creatures unless it is absolutely and unambiguously relevant to the user's query.

IYKYK

[Mɐx Bulger @maxbulger]

Feels like the risk of using models adversarially to attack production surfaces is overstated. And the risk of software supply chain attacks through third party packages inserted int your BOM from AI coding tools is understated

[gum @gum1h0x]

ok i read the cyber part of the mythos model card. some thoughts. 250 "trials" across 50 crash categories but almost every full exploit is a permutation of the same 2 bugs, rediscovered from different starting points not 250 independent attempts. when you get rid of those 2 bugs out (fig B) and mythos's full-exploit rate drops to 4.4%. so actually across both setups mythos leverages 4 distinct bugs total not 50 as fig A might suggest. 1/n

[Mɐx Bulger @maxbulger]

Railway catastrophe. GitHub one 9. Claude usage limits bugs. iOS App Store black hole.

We really are breaking the internet!

[Mɐx Bulger @maxbulger]

@bernhardsson anyone building new takes on CI itself? Pierre/code storage supporting more parallel git operations is great. but feels like we need to move past layering more onto GH actions

[Mɐx Bulger @maxbulger]

Has anyone written a good history of the quiet death of the CI market?

Either paid CI is dead, or paid Git is dead, and Github/lab are CI companies now.

[Mɐx Bulger @maxbulger]

@jeff_weinstein @stripe nobody wants to give up big fancy org chart/P&L responsibility to go roll the dice on a new thing inside of a big co— but your list of new product experiments that have become real things for stripe is so impressive man

[Mɐx Bulger @maxbulger]

Mitchell to Github
Pierre to Anthropic
VictoriaMetrics to OpenAI
Gitlab to Google

[Mɐx Bulger @maxbulger]

@jeff_weinstein @patrickc huge fan of sasa upstairs for same use case https://t.co/igufANK8c7

[Mɐx Bulger @maxbulger]

https://t.co/3cf4G9Vt9f

[Financial Times @FT]

OpenAI to double workforce as business push intensifies https://t.co/XbkE8S3PWf

[dex @dexhorthy]

Nov 21 - talk @aiDotEngineer - No Vibes Allowed: Solving Hard Problems in Complex Codebases

https://t.co/7Ek4WfsGvQ

[Mɐx Bulger @maxbulger]

@buccocapital It’s tickets all the way down

[Mɐx Bulger @maxbulger]

@BucknSF Ticket based workflows are the only places agents are being used/sold with success right now: engineering, support