Scott Francis Winder

A deterministic guy caught in a stochastic world.
Recently returned to X.
CS/AI/Media. Co-host: @hackedpodcast. Principal: @andstones. Creator: @formalangdev

[Scott Francis Winder @SFWinder]

@perplexity_ai is again showing they are the company that fully understands that the models are simply a foundational component to building effective AI systems.

https://t.co/8yPaZyewtr

[Perplexity @perplexity_ai]

Today we're open-sourcing Bumblebee, a read-only scanner for macOS and Linux.

It checks developer machines for risky packages, extensions, and AI tool configs.

Connected to Computer, it can trigger deeper scans whenever a new supply-chain risk emerges.

https://t.co/FOaWnF1yQy

[Scott Francis Winder @SFWinder]

Was just thinking about hiring today.

Education is a self funded supplement for experience. Experience is often more valuable in a practical position. Education might be more valuable in a theoretical position.

Either way, experience is valuable so there is more lost in doing nothing than in failure.

[Scott Francis Winder @SFWinder]

This is so bad. Supply chain cred exfil is the new credit card skimming.

[International Cyber Digest @IntCyberDigest]

‼️🚨 UPDATE: The TanStack npm attack is now a full campaign.

'Mini' Shai-Hulud has hit:
- OpenSearch
- Mistral AI
- Guardrails AI
-UiPath
- Squawk packages across npm and PyPI

The malware specifically targets AI developer tooling. It hooks into Claude Code (.claude/settings.json) and VS Code (.vscode/tasks.json) to re-execute on every tool event, long after the infected package is gone. npm uninstall does not fix this.

[Scott Francis Winder @SFWinder]

@fortelabs https://t.co/k6ZGzc9OQh

I built this primarily as a spacebar to preview renderer for macOS but it has a simple preview/edit interface.

[Scott Francis Winder @SFWinder]

I got tired of AI tools spitting out .md files my Mac refuses to preview. So we built miniMD. Spacebar previews for markdown, plus a tiny editor and PDF export. Native Swift, zero dependencies.

https://t.co/SNon3aM4RW

[Scott Francis Winder @SFWinder]

The harness is the future.

[Scott Francis Winder @SFWinder]

@garrytan @conductor_build Checked out @conductor_build, loving it so far. Great reco.

[Scott Francis Winder @SFWinder]

I live in a world where the people who actually know how to use AI are becoming the magicians of the white-collar world.

[Scott Francis Winder @SFWinder]

Everyone seems to be working on seamless multi-agent collaboration and forgetting that garbage-in begets garbage-out.

[Scott Francis Winder @SFWinder]

How can I block all the former nft and web 3 grifters who have bulk shifted to “autonomous agentic orchestration”?

If I see another post telling me about zero employee billion dollar companies, I might just leave X again for another seven years.

[Scott Francis Winder @SFWinder]

Wow, just peeked at my GitHub insights. Loom has had 2300 clones in the last two weeks. Reminder that this is still pre-alpha software.

https://t.co/FapLCyWmmo

[Scott Francis Winder @SFWinder]

@svpino 100% agree. I’ve been saying agents are the fruit flies of the tech world: a 20-second memory with a 180 IQ. You get moments of brilliance, followed immediately by senility.

I’ve been building myself a harness to combat it and it’s been working much better.

[Scott Francis Winder @SFWinder]

This.

[Santiago @svpino]

People are lying to you. These agents don't work as they promised.

[Scott Francis Winder @SFWinder]

@karpathy Just read an article about your March of nines. Could agree more. LLMs have a tendency to frustrate me so I’ve been building a little system for myself to make them a bit more accountable.

https://t.co/FapLCyWmmo

[Scott Francis Winder @SFWinder]

@fabienpenso @theo @zeddotdev March 4th, first commit. This vibe-coded community is wild. You couldn’t have opened this app enough in 3 days to know where 1/100th of the issues exist.

[Scott Francis Winder @SFWinder]

A hot take for CISO’s:

All links should be pruned from emails and presented in plain text.

Yes, it will be a headache. Yes, it will be annoying. Yes, it will remove a load of threats from the game board.

[Scott Francis Winder @SFWinder]

@freekmurze Ghostty + oh my zsh + spaceship.

I used term forever, had it so dialed. I’m still not used to the quick terminal not allowing tabs so I might implement it myself.

[Scott Francis Winder @SFWinder]

Loom is now version 0.2.0.

Loom is a local-ready harness stack built to solve complex tasks. Problem decomposition, verified harness execution, and structured state rather than chat history.

https://t.co/FapLCyWmmo