Ant Stanley

Ant Stanley

@iamstan.dev

Tell us a bit about yourself

2.7K followers4.6K following3.3K posts

Ant Stanley
@iamstan.dev

ok.. threw this into the old claudeslop machine and ran some numbers - $131.7B of cash and short-term investments at June 30 - $15B in an undrawn credit facility - cashflow positive ... that's a healthy balance sheet

George Pearkes@peark.es

*ANTHROPIC FILES PUBLICLY FOR US IPO www.sec.gov/Archives/edg...

sec.govsec.gov
View full thread
Ant Stanley
@iamstan.dev

the big BUT, is that they will have no voting rights in Anthropic. Only the founders and the Long Term Benefit Trust can appoint board members

Ant Stanley
@iamstan.dev

Amazon is about to make Scrooge McDuck money on this IPO... They've invested $18B, and that could turn into anywhere between $180B and $390B, depending on the IPO price and if the 12% cap is waived.

Ant Stanley
@iamstan.dev

ok.. threw this into the old claudeslop machine and ran some numbers - $131.7B of cash and short-term investments at June 30 - $15B in an undrawn credit facility - cashflow positive ... that's a healthy balance sheet

George Pearkes@peark.es

*ANTHROPIC FILES PUBLICLY FOR US IPO www.sec.gov/Archives/edg...

sec.govsec.gov
Ant Stanley
@iamstan.dev

y'all... Amazon are about to become the largest single share holder of Anthropic when *some* of their convertible notes convert to shares at IPO. They have a 12% shareholding cap, which means they can't convert their notes to more than 12%. This cap can be waived, and if it is that goes up 19%.

View full thread
Ant Stanley
@iamstan.dev

- TLS write() silently lost 16 KB while another socket on the loop was stalled. - SIGABRT in fetch through an environment proxy with a Bun.file() body. - Different client certs/CAs shared one `https.Agent` socket and session. - Client certificate still sent to a server the client had refused.

View full thread
Ant Stanley
@iamstan.dev

- WebSocket client never called tls.checkServerIdentity; a pin returning Error was ignored. - tls: [...] passed to Bun.listen/Bun.connect produced a plaintext listener, silently. - `https.createServer()` without a usable key/cert answered plain HTTP.

Ant Stanley
@iamstan.dev

- PGSSLMODE=verify-* silently dropped when a TLS_* URL variable was also present. - Revoked client certificates accepted; the mTLS server never saw a CRL. - Use-after-free from destroy() in ALPNCallback. - Heap-use-after-free in the stream TLS engine (ASAN, found by audit).

Ant Stanley
@iamstan.dev

The issues are: - Postgres client never checked the certificate hostname: any valid cert from any CA passed for any host. - NODE_TLS_REJECT_UNAUTHORIZED=0 disabled a server's client-certificate requirement. - secureConnect reported authorized === true for a peer that failed the key proof.

Ant Stanley
@iamstan.dev

And they've just released Bun 1.4.4 to resolve the most important issues.

Ant Stanley@iamstan.dev

Right now Bun / Anthropic are being deeply irresponsible. They've landed fixes on main for the QUIC, eMudhra and TLS validation vulnerabilities, and the Brotli fix is just updating a dependency. They need to ship and fix the worst vulnerabilities now, then ship a follow up with the rest.

Ant Stanley
@iamstan.dev

Right now Bun / Anthropic are being deeply irresponsible. They've landed fixes on main for the QUIC, eMudhra and TLS validation vulnerabilities, and the Brotli fix is just updating a dependency. They need to ship and fix the worst vulnerabilities now, then ship a follow up with the rest.

Ant Stanley@iamstan.dev

The last Bun release was 1.4.3 on 10 October. I used DeepSeek to scan the open PRs and committed PRs since 1.4.3 and found 15 security fixes that are still not shipped. Release gap: github.com/antstanley/b... Full scan results: github.com/antstanley/b...

Ant Stanley
@iamstan.dev

So bun hasn't pushed out a patch in response to the many (many) security vulnerabilities disclosed in the last few days... and it currently has over 5K open pull requests, a large number are security related...

Ant Stanley
@iamstan.dev

Ok ... it's fast. Real world usage from a small task I gave it. Going to try this for writing code for a bit, falling back to Opus 5.5 for reviews.

mr. TIM@timkellogg.me

Mercury 3: dLLMs have arrived, finally Same price as Luna-6, slightly better, but 8x faster text diffusion is here www.inceptionlabs.ai/blog/introdu...

Ant Stanley
@iamstan.dev

Ok ... it's fast. Real world usage from a small task I gave it. Going to try this for writing code for a bit, falling back to Opus 5.5 for reviews.

mr. TIM@timkellogg.me

Mercury 3: dLLMs have arrived, finally Same price as Luna-6, slightly better, but 8x faster text diffusion is here www.inceptionlabs.ai/blog/introdu...

Ant Stanley
@iamstan.dev

My plan to use Mercury 3 to as my primary code implementing agent has been thwarted by Inceptions API rate limits. They're waaay too low for a model this fast.

Ant Stanley
@iamstan.dev

from Reddit ... and yes I know DeepSeek did a thing... but they need to do more!

Ant Stanley@iamstan.dev

Pressure on Anthropic to make a big leap with next iteration of all of their models. Fable is too expensive for most tasks, and Opus 5 is a bust. GPT models are better and faster than their Anthropic equivalents. Open weights models with Opus level performance at 1/100th ramps up the pressure.

Ant Stanley
@iamstan.dev

At 763B parameters, it's more Chonk than Flash these days

Astra ⎔@astrra.space

huggingface.co/deepseek-ai/... happy deepseek day to anyone celebrating

Ant Stanley
@iamstan.dev

question for folks using AI to build software. How often have you had your agent build software for you and you've had to ditch it completely and start again?

Ant Stanley
@iamstan.dev

I feel like Bluesky (the company) doesn't do the basics of growing their audience atproto on the other hand is growing organically and building out an ecosystem that could long outlive Bluesky... which I suppose is the point of atproto... but ... atproto would grow faster if Bluesky was growing.

patak@patak.cat

atproto is doing fine

Ant Stanley
@iamstan.dev

just cut out the painful building trying to find product/market fit dance and go straight to polymarket to speed run your startup dreams

SE Gyges@segyges.bsky.social

startups are powered by some kind of esoteric risk addiction that would be classified alongside gambling addiction if it did not sometimes result in you being so rich that declaring it a mental illness would be controversial

Ant Stanley
@iamstan.dev

So a fun thing is happening to all the ArtCraft projects (The Adobe/MSFT/etc clean room clones). They're attracting a ton of contributors, and are rapidly improving. If you tried any of the apps a few days ago when announced, they're all a lot better today, and will keep improving.

View full thread
Ant Stanley
@iamstan.dev

Large numbers of contributors are flocking to improve these apps... At one level this is analogous to what happened with @npmx.dev earlier this year... but instead of building a better npm, they're building a better suite of enterprise and design apps.

Ant Stanley
@iamstan.dev

So a fun thing is happening to all the ArtCraft projects (The Adobe/MSFT/etc clean room clones). They're attracting a ton of contributors, and are rapidly improving. If you tried any of the apps a few days ago when announced, they're all a lot better today, and will keep improving.

Ant Stanley
@iamstan.dev

The photocraft app (aka the Photoshop clone) is probably going to hit over 2,000 changes in the next day. It was only released 10 days ago. Over 1,000 of the changes released so far are fixes. If it had bugs when you tried it last week, there is a good chance they may be gone.

Ant Stanley
@iamstan.dev

FINALLY. Lambda can process more than one connection at a time. Will be a big performance boost for Lambda with web frameworks. For the SvelteKit fans, just use the SvelteKit Node.js adapter to use this.

Luc van Donkersgoed@lucvandonkersgoed.com

Oooh boy! A completely new Lambda primitive? Lambda Web Functions are full Node servers listening on a port, but with a serverless billing model. I hope I can kill some Fargate containers with this! buff.ly/KFQ8vo7

buff.lyAnnouncing AWS Lambda Web FunctionsAWS Lambda Web Functions enables running standard HTTP web applications on Lambda without code rewrites, with automatic scaling, multi-region…
Ant Stanley
@iamstan.dev

This man killed Chris Hani in the hope it would trigger race riots and cause the South African government to reverse its rolling back of Apartheid. He served 29 years in jail, then deported back to his native Poland, where he is now a darling of the Polish far right and may become an MP?

GroundUp News@groundup.org.za

Janusz Waluś, who murdered Chris Hani in 1993, was deported to Poland in December 2024. He has become a hero of Poland’s far right and football ultras. Read groundup.org.za/article/chri... by Jędrzej Słodkowski

groundup.org.zaChris Hani’s killer could become a Polish MPJanusz Waluś has become a mascot of the far right and has a political base in Poland