Panagiotis Moustafellos

Co-founder & CTO at NOFire AI · Prev Distinguished Engineer / SRE at Elastic

[Panagiotis Moustafellos @pmoust]

At @NOFireAI we 'design for breach'. The AI agent in production is untrusted by default. https://t.co/GO14YBW2em

[Panagiotis Moustafellos @pmoust]

@rakyll Moving to the same direction with Brig
https://t.co/IwVul3YoLo

More to come this week.

[Panagiotis Moustafellos @pmoust]

@hthieblot World of Warcraft, obviously.

[Jeffrey Emanuel @doodlestein]

Everyone who owns hardware with abominable software (like Sonos players) owes a debt of gratitude to Venkatraman Srinivasan and the rest of the eMudhra gang in Bengaluru, Karnataka. Without their gross negligence, it'd be a lot harder to counterfeit certificates and fix the sw🙏

[Panagiotis Moustafellos @pmoust]

@eastdakota I'll join ;>

[NOFire AI @NOFireAI]

We are back in London next week for Observability & SRE in Enterprise?

Join and @spirosoik and @pmoust for a private roundtable about L1/L2/L3 support, coding agents and production reliability.

October 22 · London

[NOFire AI @NOFireAI]

brig v0.4.0 gives new sandboxes their own networks by default on Linux and on macOS.

Run coding agents for different projects on one machine, while keeping their dev servers and test APIs separate.

In this demo, one sandbox tries to reach a web server in the other. The connection times out.

We then start both with --network shared, and the same request works.

You can run unrelated tasks side by side and enable network sharing when agents need to work together.

#OpenSource #Sandboxing

[zymtrace @zymtrace]

@typesafeai achieved 46% higher GPU throughput while training Jev using @zymtrace’s cluster-wide, continuous profiling and agentic optimization platform.

See how they did it in the link below 👇

[Panagiotis Moustafellos @pmoust]

@andrewlamb1111 Let's do this.

[NOFire AI @NOFireAI]

brig v0.4.0 limits where your coding agent can send your code and credentials.

This release brings egress policy enforcement on Linux! If brig cannot enforce the policy, then the run is refused.

Allow the services you need for the job. Then brig enforces your network policy outside the sandbox, so the rules also apply to the scripts and dependencies the agent runs. In this demo, an example domain works. Requests to Github API and a direct connection to 1.1.1.1 are blocked, even from a root shell inside the sandbox.

#OpenSource #Sandboxing

[Darren Shepherd @ibuildthecloud]

Just accept it, AI writes better code than you on average. It's fine.

[Panagiotis Moustafellos @pmoust]

@halvarflake Yeap - should've shorted $BTC as well when I saw that. In SF so many technobros as scared shitless, hah!

[Panagiotis Moustafellos @pmoust]

Use #Brig - https://t.co/FFkc5YZY8t

[Zac @PerceptualPeak]

Opus 5.5 just deleted my entire fucking C drive.

Thank GOD I have daily backups running to my Synology NAS, but holy fucking shit. This is insane. If I didn't have these backups running I'd be thoroughly fucking devastated.

[Panagiotis Moustafellos @pmoust]

For experts, GenAI assisted software development is a superpower. The screenshot shows what happens when Alexey, @ClickHouseDB CTO went all in with it.
You'd rightfully argue commits/time say nothing about all the other metrics. But just check what that expert is doing at CH..

[Panagiotis Moustafellos @pmoust]

@PaulosYibelo Once again, well done mate!

[Panagiotis Moustafellos @pmoust]

@maksympetkus Maksym, we've been taking a look at Multitable for potential use in Ravel https://t.co/bvbtHxtv2S

Would you consider adding a license in the repo impl?
We'd need clear terms for using, modifying, & redistributing the code.

For now, we're following a distinct implementation

[Panagiotis Moustafellos @pmoust]

@QuinnyPig @Cloudflare Ask DHH - he can fix everything.

[Panagiotis Moustafellos @pmoust]

We’d love your feedback, including appsec attacks, threat model questions, and bug reports!

[Panagiotis Moustafellos @pmoust]

Brig v0.3 is out https://t.co/IwVul3XQVQ

Headliner is Linux rootless support.

On Linux #Brig now sets up the whole runtime incl. the VMM & guest kernels.

MacOS already supported an end-to-end experience: upgrade with; brew upgrade --cask brig

[Panagiotis Moustafellos @pmoust]

Also, kudos to Peyton Kennedy of @EndorLabs for responsibly disclosing a CWE-59 symlink path traversal Expl. scenario required an agent planting a symlink dir in a shared volume in guest, and then another run of Brig mounting the planted symlink to get r-w access. Fixed in v0.3

[Panagiotis Moustafellos @pmoust]

@phretor @trailofbits You might want to try https://t.co/xoCpvOT6rL and compare security models (and disk i/o perf ;))