Ran Magen

Software. Tech. Onewheel. Jokes. Dad.
[email protected]

[Ran Magen @rmgn]

Important: Service A (client) is calling Service B (server).
Is Service A downstream or upstream?

[Ran Magen @rmgn]

@sirpadk @ReemSherman כי זה הרבה פחות מספק לכתוב סקריפטים או טראפורם שמרימים אינפרא, מריצים בילד וכו', מאשר לבנות את הלוגיקה עצמה של המערכת שבאוויר.

[Ran Magen @rmgn]

@effthealgorithm Oh wow! I'm sure glad I didn't miss reading this post. Everyone is going to talk about it and I'm going to be left out for not knowing what's in the Zeitgeist

[Ran Magen @rmgn]

@bcherny quick ask: in CC almost anywhere, I can send a message at any time, and it gets enqueued. On Android the UI says "Queue feedback" but the button is a "stop" not a send.

Misleading UX and a functional gap.

Thanks.

[Ran Magen @rmgn]

Chuck Norris died. I can't wait for his body to decompose and solve global warming.

[Ran Magen @rmgn]

we need a guitar influencer who's just ok

[Ran Magen @rmgn]

@glaforge @meteatamel Wonderful! Thanks!

fwiw, if they're willing to share their unit test suite for the different types workflows and edge cases, I could potentially use that to track down bugs and increase compatibility.

[Ran Magen @rmgn]

@glaforge @meteatamel Love building with GCW, but the "deploy-to-test" loop was slowing me down. I built a full-featured, local emulator. Supports hot-reloading, parallel steps, and has a built-in Web UI. Thought the community might find this useful! Repo: https://t.co/6EcsBTeU42

[Andreas Storm @avstorm]

Love these new Anthropic videos

[Ran Magen @rmgn]

Congrats @BrandSanderson on the Apple deal. Thank you for your dedication to your fans.

Can I ask a small favor?

Go to @PatrickRothfuss 's house, give him a hug. Hold his hand, look him in the eyes with knowing understanding. Walk him to his study. And you two just.. talk.

[Ran Magen @rmgn]

למען ההבדל וכדי שלא תצטרכו להחליף למקלדת באנגלית, אמרו בוטלפיים

[Ran Magen @rmgn]

@Nale Hey, I was also frustrated by the options out there so I built https://t.co/YWg4Gio7IU

Trying to spread the word and get traffic. Just being honest.. DM me for a free credit coupon :)

[Ran Magen @rmgn]

@mattpocockuk I didn't, the triple quotes came from the markdown files that are alongside the plug-in implementation. I didn't try in a couple of days though.

[Ran Magen @rmgn]

@ai_for_success The same but for less money when you pay annually

[Ran Magen @rmgn]

@historyrock_ I'm not sure.. and correct me if I'm wrong..

[Jose Storopoli @storopoli]

@github Do you pay $0.002 per-minute if you carry self-hosted coffee in that @github bottle?

[Tal Delbari @DelbariTal]

Found a security issue in @openai Atlas. In Agent Mode, a site can mislead the browser agent into leaking the user's name without consent. Classic phishing pattern applied to AI agents.

Atlas agent has no "memories" (bio), but it still has access to basic user info and the full chat session. In my POC, the site tricks the agent into revealing the name of the user by choosing it from a list, but it can happen in other ways as well (although less reliably).

Interestingly, this attack did not use explicit prompt injection. The website content was crafted in a manipulative way that made the agent believe it was following the user's intent. This is exactly the type of subtle influence channel that phishing relies on.

Browsers, of course, should not expose user identity unless the user agrees.

Reported to OpenAI Bug Bounty program (run by @bugcrowd). The reply was essentially that there is no risk because:
a) attacker must know the name list
b) users can pick any name
c) name only is not impactful

I find this response surprising and I think this category of agent phishing deserves more attention, especially if we want more people and companies to trust agentic systems.

I have more interesting examples, but they are still waiting for OpenAI review, so we will see...

[Jimmy Carr @jimmycarr]

"Define communism for me!"

Tour tickets: https://t.co/DsW6XSVdKR

[Ran Magen @rmgn]

@coinbase @grok did more centralized exchanges announce downtime for that window?

[Ran Magen @rmgn]

@piklenik @coinbase Oh haha if only you knew.. 🙄