Mike Grouchy

Dad x 2, code, basketball and home automation nerd, still learning things. CEO of @PageCloud. Also working on @hoopsmachine/ prev: co-founder of @pycoders.

[Mike Grouchy @mgrouchy]

https://t.co/gcWX2XPLKS

[Mike Grouchy @mgrouchy]

shots fired at apple silicon

[MTS @MTSlive]

SITUATION DETECTED: Nvidia has announced RTX Spark, its first consumer chip for Windows laptops and desktops.

The ARM-based superchip combines a 20-core Grace CPU, Blackwell GPU, and 128GB unified memory in a single package. Coming Fall 2026.

[Mike Grouchy @mgrouchy]

@buildwithparas I write the plan as a file, then I have it move it to a gitignored plan directory on execution.

[Mike Grouchy @mgrouchy]

new favourite claude code/hunk (hack) is getting the agent to write plan markdown files to the filesystem so they show up in a hunk diff and then I can spend time commenting on the plans in hunk and have the agent process my comments to refine the plan, rinse and repeat until satisfied /cc @bentlegen

[Mike Grouchy @mgrouchy]

@bentlegen Honestly, commenting on code/docs/etc and having the AI process my comments it is my #1 usage.

[Mike Grouchy @mgrouchy]

hunk ( https://t.co/WkpPZPir6t ) has now become an ever-present part of my coding workflow.

Cmux with splits with claude codex/codex/filesystem on one side, hunk in watch mode on the other side. Honestly built 2 iterations of a tauri desktop app for this but in actual use, hunk is just so much better.

[sophie @netcapgirl]

this is KD joining the warriors for people who know linear algebra

[Mike Grouchy @mgrouchy]

@sunglassesface @CloudflareDev This sucks, I fucked up and spent 500, lucky I caught it because if I didn’t catch the bug, and it ran for more than like 24 hours I would have spent like 20k. So only a little painful.

[Mike Grouchy @mgrouchy]

why does the AI make everything look like dogshit?

[Sony | Xperia @sonyxperia]

The new AI Camera Assistant* with Xperia Intelligence brings stories to life. Using subject, scene and weather, it suggests expressive options with adjustments of colour, exposure, bokeh, and lens for breathtaking photos*.

https://t.co/zgSQ9MLWFP

#SonyXperia #Xperia1VIII

[Catherine Yeo @catherinehyeo]

Love seeing Naomi Osaka honor the CLRS Algorithms textbook at this year's Met Gala

[Mike Grouchy @mgrouchy]

At least its fixed now ;/ oof.

[Mike Grouchy @mgrouchy]

I was wrong, I am a bozo > 500$ @cloudflare bill , heading for the most expensive non-moneymaking side project ever.

[Mike Grouchy @mgrouchy]

whelp, working on @hoopsmachine and made a goof parsing the kimi response using @cloudflare ai vs gemini (which i was using before). Ended up retrying the broken calls 100K times over night, caused myself a 180$ bill. Wish I could blame this one on the AI!

[Mike Grouchy @mgrouchy]

whelp, working on @hoopsmachine and made a goof parsing the kimi response using @cloudflare ai vs gemini (which i was using before). Ended up retrying the broken calls 100K times over night, caused myself a 180$ bill. Wish I could blame this one on the AI!

[Mike Grouchy @mgrouchy]

Its coming together

https://t.co/ymQsZGQJGh

[Mike Grouchy @mgrouchy]

been using pi to do some work and take pi-autoresearch for a spin. Am I dropping claude-code for a codex only subscription?

[Mike Grouchy @mgrouchy]

what a fucking nightmare. Garbage software, but insanely huge install base.

[International Cyber Digest @IntCyberDigest]

🚨 BREAKING: cPanel and WHM, the control panels behind an estimated 70+ million websites, have a critical security flaw that lets anyone become root admin without a password. CVE-2026-41940 affects every supported version. It’s already being exploited in the wild.

watchTowr Labs published the full attack today, after the hosting company KnownHost confirmed the bug was already being used to break into a significant chunk of the internet.

If you've never heard of cPanel: it's the dashboard that hosting providers and millions of website owners use to manage their servers, domains, email accounts, databases, and SSL certificates. WHM is the admin version that controls the entire server. If someone gets root access to WHM, they get the keys to the kingdom and to every apartment inside it.

How the attack works, in plain English:

🔴 Step 1: The attacker sends a deliberately wrong login. cPanel still creates a temporary "you tried to log in" record on disk and gives the attacker a cookie tied to it.
🔴 Step 2: The attacker tweaks the cookie to disable cPanel's password encryption. Normally cPanel encrypts the password field on disk. With one small change to the cookie, cPanel just stores it as plain text instead.
🔴 Step 3: The attacker sends a fake login attempt where the password field secretly contains hidden line breaks. cPanel does not strip these line breaks out, so they get written straight to the session file. Each line break creates a brand new fake record. The attacker uses this to inject lines that say "this user is root" and "this user already authenticated successfully."
🔴 Step 4: The attacker visits one more random page on the site to nudge cPanel into re-reading the file. cPanel then promotes the injected fake lines into its main session memory.
🔴 Step 5: On the next request, cPanel sees a flag that says "this user already passed the password check." cPanel trusts that flag, skips checking the actual password, and lets the attacker in as root.

From start to finish, the attack takes a handful of HTTP requests.

If you run cPanel or WHM, the patched versions are:

🔴 cPanel/WHM 110.0.x → 11.110.0.97
🔴 cPanel/WHM 118.0.x → 11.118.0.63
🔴 cPanel/WHM 126.0.x → 11.126.0.54
🔴 cPanel/WHM 132.0.x → 11.132.0.29
🔴 cPanel/WHM 134.0.x → 11.134.0.20
🔴 cPanel/WHM 136.0.x → 11.136.0.5

If your version is older than these, assume someone has already broken in and act accordingly. Patch right now, then rotate every password and key the server touched: root passwords, API tokens, SSL private keys, SSH keys, mail passwords, and database passwords.

[Mike Grouchy @mgrouchy]

Are we too AI pilled now to get something better than github? I know @pierrecomputer has been releasing diffs and a tree view and storage, please just make a github competitor, where the company building it collectively gives a shit. Clearly not whats going on at $MSFT right now.

[Mike Grouchy @mgrouchy]

I very dumbly now see that this does have the thing that I want just no specific UI to do it 🤔

[Mike Grouchy @mgrouchy]

hunk by @bentlegen is cool, anyone write anything like hunk that lets me annotate the diff instead of the AI - so I can feed the comments back to agent.

Having agents process human review comments is a nice workflow, would like to skip the noisy github pr -> harness workflow.

[Mike Grouchy @mgrouchy]

Before I write this myself I guess ;/

[Mike Grouchy @mgrouchy]

@GergelyOrosz your product obviously shouldn't be turning previously deterministic functions into AI calls (even if those AI calls are tool calls to deterministic functions). Too slow.