Naranjú

Un programador interactuando con la realidad. Realidad 1 Yo 0. Tweets are my own.

[Naranjú @yuudj]

Vienen hora pico a entrenar y no te comparten los bancos.

[Luis Bremer @luisbremer]

La pianista argentina Martha Argerich apoya a Marcha de las Universidades

[Nico @nicos_ai]

🚨Google lanzó CodeWiki y convierte código imposible en explicaciones simples.

Pegas cualquier repositorio y la IA lo convierte automáticamente en una documentación interactiva.

No solo resume el código:

• Genera diagramas automáticamente
• Explica cómo funciona cada parte
• Crea tutoriales paso a paso
• Detecta arquitectura y dependencias
• Y hasta monta un chatbot que entiende tu código completo

Básicamente:
convierte proyectos imposibles de entender en algo que cualquier desarrollador puede navegar en minutos.

Enlace abajo👇

[Lucax ✨ @pibesdesistemas]

😨

[The Hacker News @TheHackersNews]

⚠️ A new #Linux flaw mirrors Dirty Pipe—but adds cross-container impact.

“Copy Fail” (CVE-2026-31431) lets any local user overwrite cached system files and run them as root. No race condition.

Works across major Linux distros since 2017.

🔗 Read → https://t.co/HW10RL1A0o

[David Fowler @davidfowl]

There's a really high cost of duplicating code and we're all relearning that everyday with these coding agents. Until they get better at generating reusable code, bugs will run rampant. You can't "abstract it away" with more agents. You just get crappy software....

[El Campito Refugio @elcampito]

❤️‍🩹 Con casi 10 años de refugio, busca un hogar donde la amen para siempre, donde nunca le falte un mimito que hoy solo tiene en las visitas cada 2 o 4 semanas 💔
Ella merece todo el amor del mundo! Necesita ser hija única 🙏🏻

Enamorate de Ludmi👉 [email protected]

[Chamaco 🇦🇷 @elchamaco_1]

Jajajaja todas emprendedoras ninguna curandera

[Guillermo del Toro @RealGDT]

One of the best days of my life… Pappy McPoyle brings me joy! And Danny is pure life!

[Greenpeace Argentina @GreenpeaceArg]

AHORA
Diputados: no traicionen a los argentinos

¡La Ley de Glaciares no se toca!

[Julia Strada @Juli_Strada]

Argentinas 🇦🇷

Enorme reconocimiento en este nuevo 2 de abril a los ex combatientes que dejaron todo para defender nuestras Islas Malvinas.

Gloria y honor.

[Iván Schargrodsky @ischargro]

Hace 44 años empezaba la guerra con Gran Bretaña por las islas Malvinas. Hoy no sólo recordamos a los argentinos caídos en combate sino a quienes sobrevivieron y fueron injustamente olvidados y marginados. Seguimos reclamando la soberanía sobre lo que fue, es y será territorio de nuestra Patria.

[Dominic Elm @elmd_]

https://t.co/FY3W60irr0

[Naranjú @yuudj]

@MeteoFedex Fede que onda la ola polar que se pronostica para el domingo? Es posta o es humo?

[positive side of X 🌞 @positivityofx]

What a great idea!

[Naranjú @yuudj]

Línea D #subte con demoras por formación con problemas mecánicos en la estación Callao. Shit...

[Dr Milan Milanović @milan_milanovic]

APIs are still the thing

[Milan Jovanović @mjovanovictech]

I recently talked about AI and ownership.

It wasn't Claude's fault...

[Guillermo Rauch @rauchg]

A Vercel user reported an issue that sounded extremely scary. An unknown GitHub OSS codebase being deployed to their team.

We, of course, took the report extremely seriously and began an investigation. Security and infra engineering engaged.

Turns out Opus 4.6 *hallucinated a public repository ID* and used our API to deploy it. Luckily for this user, the repository was harmless and random. The JSON payload looked like this:

"𝚐𝚒𝚝𝚂𝚘𝚞𝚛𝚌𝚎": {
"𝚝𝚢𝚙𝚎": "𝚐𝚒𝚝𝚑𝚞𝚋",
"𝚛𝚎𝚙𝚘𝙸𝚍": "𝟿𝟷𝟹𝟿𝟹𝟿𝟺𝟶𝟷", // ⚠️ 𝚑𝚊𝚕𝚕𝚞𝚌𝚒𝚗𝚊𝚝𝚎𝚍
"𝚛𝚎𝚏": "𝚖𝚊𝚒𝚗"
}

When the user asked the agent to explain the failure, it confessed:

The agent never looked up the GitHub repo ID via the GitHub API. There are zero GitHub API calls in the session before the first rogue deployment.

The number 913939401 appears for the first time at line 877 — the agent fabricated it entirely.

The agent knew the correct project ID (prj_▒▒▒▒▒▒) and project name (▒▒▒▒▒▒) but invented a plausible-looking numeric repo ID rather than looking it up.

Some takeaways:
▪️ Even the smartest models have bizarre failure modes that are very different from ours. Humans make lots of mistakes, but certainly not make up a random repo id.
▪️ Powerful APIs create additional risks for agents. The API exist to import and deploy legitimate code, but not if the agent decides to hallucinate what code to deploy!
▪️ Thus, it's likely the agent would have had better results had it not decided to use the API and stuck with CLI or MCP.

This reinforces our commitment to make Vercel the most secure platform for agentic engineering. Through deeper integrations with tools like Claude Code and additional guardrails, we're confident security and privacy will be upheld.

Note: the repo id above is randomized for privacy reasons.

[Paul Schleifer @PaulSchleifer]

How to spot AI.