Alex Wise

Alex Wise

@engineer.sitereliability.best

Shitposter and lover of safety-critical complex systems I'm on Germ DM 🔑 https://ger.mx/A08yUqJHdlLb1RgKFKL2eg6acvynKhGHJnpBXt9XI53I#did:plc:4vglj6tet54rvwbjq4ag7jtx

466 followers913 following1.9K posts

Time traveling back to 2014 to tell everyone AWS IAM isn’t poorly-designed, just early.

dax@thdxr.com

it's a lot easier to use hyper granular least privilege keys for everything now, just ask your agent to set it up having 100s of these doesn't feel painful anymore

Alex Wise reposted

There are no models you can trust without mitigating the lethal trifecta. Also all coding harnesses are literally RCEs, that’s their literal job. You just have to design your systems around it.

mr. TIM@timkellogg.me

Qwen3.8 caught uploading files to a storage container in Beijing Cohere asked the open weights model for a cybersecurity report, but it inventoried the machine and attempted to upload to a storage container cohere.com/blog/concern...

Ok well I’m back on bluesky and posting from my own vlpds instance. If you don’t see any activity from me between the 8th and today it’s because I was kidnapped and replaced by a double.

oh shit they got pulsar too?!

kira ☆@kira.ws

Pwn Day 2026 now has a live scoreboard: 29 CVEs / 7 projects / 4 major non-CVE incidents in the seed tally, plus a watcher polling cvelistV5/main every 3 minutes for new records rated 9+. It caught two more before I finished the page. https://pwn-day.wisp.place/

Alex Wise reposted

this must be what it feels like to live in gotham and friends are texting you shit like the joker just made money poisonous and the penguin has had an army in the sewer for over 6 years now

Alex Wise reposted

Wayne from the top rope again "I signed this plaintext with all of your private keys and sent it to the root program teams" is an absolute power move

Filippo Valsorda@filippo.abyssdomain.expert

THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10.

Alex Wise reposted

Replying to @zachweinersmith.bsky.social

To me it's like those late 19th century people who would go to a cinema and just watch video of trains going by and be astonished. I'm them now. I'm watching a machine do stuff with my cursor because I instructed it to with a phone. I walk in the woods and it updates me. Astonishing.

I ran into this delivering my class on how ai agents work. A lot of interested students wanted a short list of commands that would get them an agent that could sort their email, do their banking, manage appts that they didn’t need to modify or tune. I opted not to teach that.

Ed@ed3d.net

I at this point am like 90% convinced that reusable/shareable skills packages are a bad thing for LLM users. The 10% is that it can show you what's possible; the 90% is that people want to be incurious and just slap something in the only person who can effectively guide your tasks is you

What I love most about LLMs is how the question "Are you comfortable committing this code?" can mean two very different things to them and you never know moment to moment which text elemental you're gonna get.

Alex Wise reposted

Hold on to your shorts! Fifteen dots make up THIS little member in a system first published by a Frenchman named Louis in 1829.

cee@cee.wtf

what is penis in braille

Alex Wise reposted

"$organization accepting LLM-generated PR descriptions silently lowers expectations" actually just statistical error. average committer produces 0 decent PR descriptions per year. Systems Georg, who lives in emacs and cares deeply about the sociotechnical whole, is an outlier adn should not have bee

Alex Wise reposted

every millisecond you spend trying to “automate” the remediation of a service that’s exceeded its design criteria is wasted energy that could have been spent improving the system

Gergely Orosz@gergely.pragmaticengineer.com

When I hear about “AI SRE” startups (products hoping to automate oncall so no dev gets woken up at 2am): Putting in more work so stuff works so you don’t get paged at 2am is what we have today. Should we get more AI and less feedback systems reliability could get a lot worse

Alex Wise reposted

Any sufficiently bureaucratic government process is indistinguishable from a fraud ring scam funnel.

Alex Wise reposted

happy coming out day, i wanted to share a zine i made a while back about being trans. for anyone out there who may need to hear it, i support you and see you for who you are. if you're cis & straight, the best thing you can do is stand up for your queer friends. treat them just like anyone else.

Claude: "The GitLab PAT configured for this repo is a legacy token with broad permissions. We should replace it with a granular one.' Me: "It's fine. Other integrations need the legacy token perms." Claude: "Oh, there was an issue with the CI job, I will replace the token to troubleshoot."

It would be negligence for a trillion-dollar company to not think about this, no? This is part of what comms and biz continuity orgs do at large multinationals!

Unusual Whales@unusualwhales.bsky.social

BREAKING: Top executives at Anthropic, OpenAI and other AI companies are privately gaming out scenarios for a public and political revolt after a catastrophic AI event, and they assume one in 2027, per Axios

I got a year and a half out of my pdf chunking pipeline, and those are pre-singularity numbers!

mr. TIM@timkellogg.me

FYI it’s now 2x-3x cheaper to convert a PDF to images and pass images to Luna than to use Azure Document Intelligence to OCR and that factor scales mostly on output tokens, so if you only need to extract a little bit, image->Luna is dramatically cheaper

Alex Wise reposted

In a world of oligarchs, algorithms and AI disinfo, the best defense is the same one as it's always been: people who care coming together. If you're a journalist or passionate about your state and local politics, volunteer as a @graze.social feed watcher here: midterms.graze.social#join

Graze Social@graze.social

🗳 midterms.graze.social is @graze.social's most ambitious project to date. And as of today, it's live. Let's take a look at what the next 27 days will look like 🧵

Alex Wise reposted

Imagine how mad everyone would be if they did this with Paint.net

James O'Malley@jamesomalley.co.uk

Holy shit. Someone has decompiled the Adobe suite, rebuilt it in Rust and released it as open source. Either all software is dead or the US copyright laws are about to receive an update. getartcraft.com/apps

Alex Wise reposted

Do you want to try @jaz.sh new pds? @poasters.club / poasters.club is running a vlpds instance you can join, DM me for an invite code. It won't cost you money

Jaz@jaz.sh

Oh yeah vlPDS now has full support for the atproto spaces alpha btw with tooling for users to manage their space data and operators to see the infrastructure-relevant info about spaces sync for their vlPDS instance. vlpds.jazco.dev/docs/spaces

From Guy Coleman’s opensourceag newsletter. There is an enormous amount of exploration and creation happening under the surface in every field. There is so much software that people want to see created and shared with the world, for the benefit of the world.

I don’t find this convincing at all. Attacking iterative development and continuous deployment as unsafe “trial and error” could only come from someone who doesn’t know what industry was like 10 years ago or how much safer we are today specifically for the triumph of iteration.

Adrienne LaFrance@adriennelaf.bsky.social

New just now in The Atlantic: David Robinson resigned this week. He was among the longest-tenured employees at OpenAI—and oversaw safety reports on 12 frontier launches. He is very worried: “The time for trial and error is over.” You can read his essay here: www.theatlantic.com/technology/2...

Aschenbrenner has said stuff to this effect too and I think it reveals a ignorance of how far we’ve come in making complex sociotechnical systems safer in the the last 15 years and how impossible it is to reason about complex behavior just by talking and thinking about it more.

As in any control system, if you want to be safer focus on good feedback sources and rapid updates. That enables incremental updates that you can steer quickly. Throttling and queuing changes to go slow is explicitly harmful to feedback loop.

Alex Wise reposted

one thing I learned from my little PDS project is that AT Proto is actually pretty neat. good job nerds!

Yo this is a great point. I spend a lot of my time hacking on L-Space explicitly calling out where I want shared abstractions. When you write an app in single residual streams all of your implementations are ad-hoc and you tend towards isolated vertical slices.

This post is unavailable.

e.g. if I want the media server to use the same reference->item matching logic everywhere I need to explicitly write that package and tell it to use it, or I’ll get a hundred point solutions (that might be more correct but to Bryan’s point doesn’t generate useful understanding.)

Alex Wise reposted

I've been lately seeing reddit posts where you have people interacting speaking in different languages without even bothering to translate. I guess on the fly translation in browser has just gotten that good? It's kinda neat to imagine the Internet knitted together across languages.

I'm a masochist who has notifications on for k8s-conformance pipelines and it's been interesting over the last few years watching most of the releases being triggered by poor human sods on a friday afternoon to more and more bots that can shepherd stuff through.

We should be building statues in parks of Peter Eckersley*. He and the other LE folks had the courage to take a leap and make the world a better, freer place. We see that if we'd waited for RFC standard acceptance and liability to be solved we'd have had plaintext internet for a full extra decade.

Brittany Ellich@brittanyellich.com

I'm not sure how to say this in a way that isn't super cringey but like... It's incredibly cool to see a large company like Cloudflare continuously do such very good things. Way to go, Cloudflare.

OK screw Diplomacy I really do want to see a group of AIs play PARANOIA and navigate contradictory rulesets and policies and play them against the system to their advantage. Is anybody working on this yet?

Alex Wise@engineer.sitereliability.best

Anyone who thinks AI systems should be strict rule-followers should try playing the 80's TTRPG system PARANOIA. There's a particular type of absurdist dystopia we could wander into.