🗿Patrick McCanna🗿

Security! “The only sure safeguard against the vagueness of theory is constant practise” -George Jack’s Wood-carving design and workmanship

[🗿Patrick McCanna🗿 @PatrickMcCanna]

If you wait long enough, someone will rip your high school punk band’s 7-inch and upload it to YouTube!

https://t.co/rzYOlbYUvl

[sdmat @sdmat123]

Anthropic

[🗿Patrick McCanna🗿 @PatrickMcCanna]

My experience embracing agentic development

[TB1™️ 🇺🇲 @TB1Kinobe]

This should be the average American home

[🗿Patrick McCanna🗿 @PatrickMcCanna]

It’s only scary while we wait for the next deepseek and qwen releases.

They’re constraining & monitoring initial access for model distillation traffic right now.

[Péter Szilágyi @peter_szilagyi]

The scary part about Anthorpic's Fable nerf is not that it refuses to answer biology or cryptography. It's that it foreshadows what's coming. A world where a couple companies decide what you can and cannot do. They're building a new ruling class and you're not in it...

[🗿Patrick McCanna🗿 @PatrickMcCanna]

I think this strategy should evolve. I should be able to point to a git repository with negotiation strategies for both prompts- and then settle on something standardized for all future sessions.

Anyone dabbling here?

[🗿Patrick McCanna🗿 @PatrickMcCanna]

I’m surprised that we don’t hear more about the art of agent handoff prompt creation.

I’ve developed patterns for handoffs from a web session and into an active Claude code session. 1/n

[🗿Patrick McCanna🗿 @PatrickMcCanna]

I ask ContextInstance to include a negotiation strategy in the handoff prompt. It should tell PrvRunningInstance how to generate a response that can be copied to ContextInstance and facilitate a change in the handoff prompt.

[🗿Patrick McCanna🗿 @PatrickMcCanna]

You wrote a loop?
Ok, boomer.
👌🏻

[Sam Lambert @samlambert]

I built a looping agent:

*/5 * * * * cursor agent -p "do stuff"

[Jeff Geerling @geerlingguy]

Today I disabled IPv6 on my home router entirely. There are (sadly) too many devices and services with obscure bugs when it's enabled, and I'm tired of playing whack-a-mole sysadmin just to keep a full IPv6 stack.

I'm not sure we'll ever see full IPv6 adoption.

[🗿Patrick McCanna🗿 @PatrickMcCanna]

We’re going to go through a weird period.

[Alex Zajac (🍔,🧠) @itsalexzajac]

A developer posted this on Reddit, and I haven't stopped thinking about it.

[Alex Zajac (🍔,🧠) @itsalexzajac]

A developer posted this on Reddit, and I haven't stopped thinking about it.

[Perry E. Metzger @perrymetzger]

I have said this before, but to those of us using AI systems to get lots of work done reliably and quickly, the people who post online about how AIs still hallucinate constantly, about how they can’t write code, etc., seem equivalent to people trying to convince you that the car you drive to work every day doesn’t exist.

You tell them things like “but I drive a car. I paid money for it. I buy gasoline for it. I could not possibly be working twenty miles away from home if I didn’t have the car?” and they reply that you are imagining having a car, or that you’re lying because you work for a car company.

It is as though these people live in a completely different reality.

[🗿Patrick McCanna🗿 @PatrickMcCanna]

There is no legacy in corporate cybersecurity. They should retire the brand “MSRC.” The current staff dishonors the history of that org. 🙄

[International Cyber Digest @IntCyberDigest]

‼️ The alienation continues: more security researchers are sticking up the middle finger after feeling squeezed by Microsoft and GitHub. MSRC emailed Black Hat USA 2026 presenters asking which MSRC cases, VULN-IDs, or CVEs their talks would cover. GitHub told a researcher to delete his public PoC repos and flagged his accounts under ToS.

[🗿Patrick McCanna🗿 @PatrickMcCanna]

Well this is a new one for me.

[slash1s @slash1sol]

A LINUX KERNEL DEVELOPER PROVED THE THING YOU PUSH CODE TO IS SECRETLY A DATABASE THAT CAN VERSION ALMOST ANYTHING AND THAT MOST DEVS HAVE ONLY EVER TOUCHED A TENTH OF IT

42 minutes from Josh Triplett -- a longtime Linux kernel and Debian developer -- showing that Git is a general-purpose, tamper-evident versioning engine that just happens to be famous for code.

-> The moment it clicks, Git stops being "Where my code lives" and becomes what it really is underneath: a content-addressable store that can version almost anything -- your configs, your notes, your servers' state, entire datasets.

People run whole wikis on it. They version their entire machine's configuration with it. They ship websites by pushing to it. They track data too big to email. None of it is a hack -- it's the same handful of objects you already use for code, pointed somewhere new.

Treating Git as a code-only tool was never the ceiling -> it's a versioning engine for anything, and the people who see that automate what the rest of the team still does by hand. And as AI agents start spitting out not just code but configs, docs and data, the one system that can version and audit all of it at once is already sitting on your machine.

You learned five commands to survive. This is the talk that shows you were standing on top of a database the whole time.

It changes what you think the tool is even for.

Bookmark & Watch it today ↓

[MERICA MEMED @Mericamemed]

“Outdated business built a bot, A-I-A-I-O(bsolete).” 🐄🐖🐓🚜🤖

[🗿Patrick McCanna🗿 @PatrickMcCanna]

🤘🤘🤘🤘🤘🤘🤘🤘🤘

[dax @thdxr]

someone made a fork of opencode that routes through the unsecured ai endpoints from chipotle