The industry has gone completely nuts.
Use tokens to generate AI code and documentation slop. Then use even more tokens to understand and review that slop.
Then judge engineers by token usage instead of how empathetic and clear their docs and code actually are, and completely neglect human comprehension.
Utter nonsense.
New GCC/ Software offices and expansion of existing facilities in Pune in last month. It was significant month for #Pune, multiple big Companies like Accenture, BP , Northern Trust, Citibank expanded and new GCC like Mizuho , Boston Scientific, Wolters Kluwer opened new offices.
https://t.co/BcmRKFVlCA
We were the media partners for Hyrox Bengaluru. Spent 2 days filming it with a 30-member crew.
Calling it “validation” misses the point entirely.
Here’s what we actually saw:
- We captured a marriage proposal on the race floor.
- Athletes finishing together with tears
- First-timers who trained 6 months for this one day.
- Couples racing together.
- Colleagues showing up in matching kits.
- Coaches running alongside clients they’d trained for half a year.
- People with disabilities finishing the race while the whole venue stopped to cheer them on.
₹9K isn’t for the race alone. It’s for the experience.
For decades, sport in India meant sitting on a couch watching cricket. Someone else playing, someone else winning. At Hyrox, you’re the one on the floor. The 9,000 people paying ₹9K to participate tells you exactly how starved this country was for it.
If fitness becomes the new status signal, that’s a massive win for society. We’ve spent decades flexing cars, watches, handbags. If the new flex is - I trained 6 months to finish a Hyrox. I feel that’s the healthiest status game this country has ever played.
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
When I was consulting for @HBO Silicon Valley, zero-loss compression was the holy grail Richard Hendricks chases that perfect middle-out algo could shrink everything w/out breaking a single bit.
Google just did something even more practical for the AI era: TurboQuant compresses LLM key-value caches down to 3 bits per value using random orthogonal rotation + PolarQuant scalar quantization & optional 1-bit QJL residual correction.
=>> 6× memory reduction, up to 8× faster attention (on H100), & 0 degradation on LongBench, Needle-in-a-Haystack, and RULER for models like Gemma. No retraining, no calibration needed.
Fiction just got out-engineered by reality. 😅💚💚
Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Anthropic CTO Rahul Patil gave a (real) dev talk at SPC India in BLR earlier today to a room packed with over 150 devs & technical founders:
(1) His motivation to join Anthropic:
While he was CTO at Stripe he did an "Engineer-cation" i.e. a solo-trip where he spend time coding; this was where he realized the power of the AI exponential curve - he wanted to be part of building the next gen infrastructure.
(2) The technical founder edge
For him, Sam McCandlish (one of Anthropic's founders) was the key reason to join - Sam even today is a top 5 contributor to Anthropic's code base.
(3) Scaling Laws still have room to run
His view was that scaling laws should hold up for the next ~2 years at least; he doesn't see any immediate evidence to the contrary
(4) Investment in DC Infra
He is personally spending time on new data center infrastructure (Anthropic has committed $50bn in CAPEX spending). This is Rahul's strength given his past experience at Oracle Cloud.
(5) Why training data matters?
His words were: "If you feed entertainment content to bot - it will become a people pleaser." Therefore, Anthropic's training set is heavy biased towards data from productive tasks (which is how they have positioned CoWork & Claude)
The audience had several graduates from PES University who were overjoyed to see Rahul on stage & hear about his journey :)
Like he said earlier yesterday: "India makes the impossible, possible"
I'm joining @OpenAI to bring agents to everyone. @OpenClaw is becoming a foundation: open, independent, and just getting started.🦞
https://t.co/XOc7X4jOxq
indian wedding buffet is a scam. i always leave regretting something. so i built BuffetGPT 😠
an ai agent that scans entire buffet and gives you a game plan.
it uses computer vision to detect every dish, then optimizes what to eat, what to skip, and how much based on actual stomach volume physics.
its' pretty early, tested alpha at a friend's wedding. decent results.
tbh, this is what my cs degree was for.
In the event that Pakistan lose to the Dutch, that will be the first time a team has ever been knocked out of a World Cup in the first three hours of the tournament.
Anthropic had 16 AI agents build a C compiler from scratch. 100k lines, compiles the Linux kernel, $20k, 2 weeks.
To put that in perspective GCC took thousands of engineers over 37 years to build. (Granted from 1987 - however) One researcher and 16 AI agents just built a compiler that passes 99% of GCC's own torture test suite, compiles FFmpeg, Redis, PostgreSQL, QEMU and runs Doom.
They say they "(mostly) walked away." But that "mostly" is doing heavy lifting.
No human wrote code but the researcher constantly redesigned tests, built CI pipelines when agents broke each other's work, and created workarounds when all 16 agents got stuck on the same bug.
The human role didn't disappear. It shifted from writing code to engineering the environment that lets AI write code.
I don’t know how you could make the point AI is hitting a wall.
It's a weird time. I am filled with wonder and also a profound sadness.
I spent a lot of time over the weekend writing code with Claude. And it was very clear that we will never ever write code by hand again. It doesn't make any sense to do so.
Something I was very good at is now free and abundant. I am happy...but disoriented.
At the same time, something I spent my early career building (social networks) was being created by lobster-agents. It's all a bit silly...but if you zoom out, it's kind of indistinguishable from humans on the larger internet.
So both the form and function of my early career are now produced by AI.
I am happy but also sad and confused.
If anything, this whole period is showing me what it is like to be human again.