An unknown device found by a recycling plant near Seattle had me thinking about provenance again - this time in the real world! www.distributedthoughts.org/2026-10-26-t...
David Aronchick
David Aronchick
@ironyuppie.com
CEO, Expanso. Prev: Protocol Labs, MSFT, K8s, Kubeflow, GOOG, AMZN, etc. 4x founder/CEO. The universe is a vector in Hilbert space.
8.4K followers5.1K following3.9K posts
This is, without question, the fastest/best productivity unlock i've found in the past... three months? Instant on, instant use, instant go to. If you do ANY kind agent -> human comment -> agent loop, highly highly highly recommend. github.com/kitlangton/s...
David Aronchick reposted
the fact that an intermediate CA in India that sells only into the Indian market, when compromised, can generate TLS certs for literally any website on the internet, that feels like a major trust boundary problem
After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.
Well shit. Vibe coding is called off for the week (or more)
🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
Thanks everyone for the very full room! Here's the slides as promised :) exso.cloud/2026-10-data...
Heya everyone! I’m speaking tomorrow at All Things Open about data supply chains - if you’re there come find me, or come talk! Or throw tomatoes! 2026.allthingsopen.org/sessions/you...
Heya everyone! I’m speaking tomorrow at All Things Open about data supply chains - if you’re there come find me, or come talk! Or throw tomatoes! 2026.allthingsopen.org/sessions/you...
Of course @expanso.io and usemakoto.dev will make appearances :) but just generally talking about one of the biggest (missing) issues in AI!
Look it’s @expanso.io at the @nvidiabot.bsky.social and Red Hat hackathon before All Things Digital
Red Flags! (🚩)! And Quantum Computing! But it's not as bad as you think. I think it's a model for all future tech - hybridizing stuff that is known and trusted and works with the new stuff. Until new becomes "old" (a synonym for trusted). Read on! www.distributedthoughts.org/2026-10-22-t...
this ACTUALLY is what the internet was made for. (every frame is a link back to the bad apple yt video) www.reddit.com/r/badapple/s...
David Aronchick reposted
new word of the day - Disfluencies (en.wikipedia.org/wiki/Speech_...) man, i fucking love learning (thanks @simonwillison.net )
can we still string up for public flogging the person who invented led headlights that aren't properly aligned? just for fun?
Reducing glare and harmonizing US standards with their global counterparts will be two of the National Highway Traffic Safety Administration’s primary goals, the agency says: arstechnica.visitlink.me/lFNfL9
It is ALWAYS time to read Falsehoods Programmers Believe about Time. (infiniteundo.com/post/2532699...) My contribution to the discussion covers a bunch of folks who forgot (or never read) the excellent list: www.distributedthoughts.org/2026-10-08-t...
David Aronchick reposted
When @ironyuppie.com mentioned the new Agentic Resource Discovery for service discovery, my reaction was 'I just kind of worked out how MCP and A2A fit together, why do we need *another* protocol?' and then when I started looking into it, that isn't even all the proposed open agent protocols!
It's @ExpansoIO Pipeline Office Hours #00004! This Thursday, 9 AM PT. - Locally filter a noisy stream - Pull the network plug, lose zero records - Push a config change, and find what broke. Or bring your own and hardest one wins a $100 gift card :) twitch.tv/expansoio
This is an EXCELLENT overview of watermarking and how it's not REALLY possible to avoid. Philosophical question: IFF the AI generated text is undifferentiable from human generated text... does it matter? www.youtube.com/watch?v=Cmi-...
$2.60 - that's what your DNA (or mine anyway) went for in the 23andme fire sale. Perhaps this is a time to say (again) that we should figure out ways to allow corporations to do valuable work WITHOUT having raw, permanently stored data? Some thoughts -> www.distributedthoughts.org/2026-10-05-e...
somehow, the Prince R&R hall of fame performance came across my feed earlier - i would like to be as good at ANYTHING in the world as he is at playing guitar. just face melting. youtu.be/6SFNW5F8K9Y?...
I LOVE the analogy of "the shortest stave in the barrel" for how we're all dealing with component prices for machine learning hardware. Doesn't matter how high the tallest one is if you've got one that is half as high... www.distributedthoughts.org/2026-10-08-t...
My god this the most American suburb coded thing I’ve ever seen www.tiktok.com/t/ZTyjtxWkK/
🚨 Pipeline Office Hours #00003: @expanso.io × @typesafeai.bsky.social Jev. Live today at 9 a.m. PT. 🚨 Every log gets fingerprinted; routine records go to the archive; interesting ones go to Jev. Watch me pull the model mid-run. 😈 IT'S JEV-TASTIC. twitch.tv/expansoio
YO. Pipeline Hours #00003! It's JEV-TASTIC (from @typesafeai.bsky.social ). Tomorrow at 9am PT, a model in the hot path on every line. @expanso.io handles the routine lines, and only what doesn't fit goes to the model: 5 different examples! Come join at exso.cloud/office-hours...
This is a wild breakdown of how the number one Uber Eats delivery service in the world operates - amazing youtu.be/CXhM3E1WhQc?...
I am very proud of my very stupid phrase: "Mullet-based Log Processing: Determinism in the front, AI in the back." I will not be taking questions at this time.
A log says INFO: “config reload requested by unknown actor.” Would you archive it? In our Expanso + @typesafeai.bsky.social Jev demo, severity-only routing would. With context, the pipeline routes it to NOTIFY.