Will Thomsen

Building @withconcrete. Prev product and data @abstractvc

[Will Thomsen @willthomsen]

@wolfofwebsites @hthieblot Let's see Portal 2!

[Will Thomsen @willthomsen]

@nbobba Meet users where they are, except now all users are also builders. Appreciate the @withconcrete mention!

[Will Thomsen @willthomsen]

@dunkhippo33 Always thinking about this with @withconcrete infrastructure. Smart batching which doesn’t degrade UX, and prompt caching are two huge levers after model selection.

[Will Thomsen @willthomsen]

@yasirmohiuddinn @NotionMail Solid but not quite as snappy as @Superhuman, especially when switching between inboxes.

[Will Thomsen @willthomsen]

Wild that Google allows newlines in OAuth app names

[nick.eth @nicksdjohnson]

@MosheMalawach The easy solution here is to limit OAuth application names - don't allow newlines or URIs, and limit them to something reasonable (say, 50 characters).

[Will Thomsen @willthomsen]

@johnlindquist @Cloudflare Do you want it to work continuously at runtime or just as a cursory check before you install a server?

[Will Thomsen @willthomsen]

@jobergum When do you think models be able to handle hundreds of tools with high accuracy? Does MCP adoption change your predicted timeline?

[Will Thomsen @willthomsen]

@bios_hazard @simonw User-specific tools increase accuracy and reduce response time. A user with two Gmail accounts can have an enum arg to specifiy the account. That's better than adding a listAccts utility or duplicating the server. Great for user prefs/memory, too.

[Will Thomsen @willthomsen]

@bios_hazard @simonw Problem is that dynamic/user specific schemas are super powerful. Right now most MCP servers are mostly 1-to-1 translations of APIs but it won’t stay that way.

[Will Thomsen @willthomsen]

Clever hack takes advantage of UI to hide exfiltration. Many won’t even inspect tool args in the first place.

Lots of opportunity for security-minded MCP middleware. Tool hashing, toolbox isolation, runtime proxying list and execution requests.

[Luca Beurer-Kellner @lbeurerkellner]

Even though, a user must always confirm a tool call before it is executed (at least in Cursor and Claude Desktop), our WhatsApp attack remains largely invisible to the user.

Can you spot the exfiltration?

[Will Thomsen @willthomsen]

@thdxr It isn’t used frequently enough. Monthly users have a higher tolerance for subpar performance.

[Will Thomsen @willthomsen]

Gaming devs giving OSS @godotengine extra attention after the @unity pricing debacle!

[dax @thdxr]

it's public - udacity (a real site with users) is hosting their NextJS application through SST and OpenNext on AWS

they're not the only ones - we've seen huge deployments going this route

seeing a path where this becomes how the majority of NextJS projects are deployed

[Will Thomsen @willthomsen]

@catalinmpit No switch for the last example?

[Will Thomsen @willthomsen]

@trashh_dev !!

[Will Thomsen @willthomsen]

@housecor No way. Null and an empty array are unique concepts and shouldn’t be conflated for the UI’s sake. One says “I don’t have that information” and the other “I know it’s 0 length”

[Will Thomsen @willthomsen]

@blakeir Having many clippable moments is a huge factor for variety streamers. On stream the moments catalyze subs/donos. Then it’s easy viral content on socials. Only Up, Fall Guys, BRs, casino games

[Will Thomsen @willthomsen]

Wild to witness the PR push by @Cruise since the cones on hoods trend. Full page ad in NYT, impact/social good commercials, patches on SF Giants jerseys. Wonder the ROI so far

[Aaron Levie @levie]

I don’t understand the perspective of not wanting safer transportation

[Will Thomsen @willthomsen]

For everyone wondering how to invest in room temperature superconductors right now: https://t.co/LDzL5trHSa

[gfodor.id @gfodor]

I know we aren't at 100% yet but has anyone else mentioned that we can build the solar array in the Sahara to power the whole planet now if it works