Pedro Vezza

Pedro Vezza

@pedro.vza.net

Tech, urbanism, politics, metal machining geek on my spare time. He/they.

741 followers466 following1.3K posts

I was a poll worker in Brazil’s election. It was fascinating to see that out of the 190 people who came to vote in my section 80 didn’t vote in the first round and must have realized “Oh shit this is for real”.

one dozen bats at a keyboard@panasonicdx4500.bsky.social

Brazil’s results tonight are a big endorsement for the idea that every country should have a second “are you you sure about that” election a couple weeks after the first one for the important stuff

Also special thanks to those who traveled from WA, OR or AK to come vote in San Francisco. Your effort is not lost on me.

Pedro Vezza reposted

It happened. So less than 24 hours.

Barry Dorrans@blowdart.me

How long before some poor banking infosec person emails me asking for an official statement that .net is not vulnerable to the php exploit because their auditors need an official response?

killapikeys.fyi I really need to find some time to remove that vibe coded design but the point still stands. Use workload identity federation (which Anthropic and OpenAI support, BTW) or TPM bound keys for the love of everything that is good.

killapikeys.fyiKill API KeysStop passing around API keys. They are the shared passwords of the machine world.
dax@thdxr.com

the railway breach seems to be another case of grabbing anthropic / openai keys the issue here is tokens are basically cash, you can immediately sell them on the black market where there's a ton of demand particularly from distillers with deep pockets 1/2

I learned how to program on the LAMP stack so I owe a lot to PHP in particular. It's time. Please, enjoy your retirement buddy!

Now that the PHP patch is out I can finally build out my dream BlueSky client. - php - jquery - bootstrap 3

Dear investors, don't worry. Externalized costs of this fuck up are not in our balance sheet!

This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca

If there's some silver lining to today's eMudhra incident is that tinkerers across the world are able now to bring life back to old hardware via MitM'd updates.

Pedro Vezza reposted

lots of jokes today about a private key of "4", for some reason but I'm sure that's not anything that actually happened in real life [touching earpiece] I'm just now being informed—

Correction: Firefox is patched. Windows is not yet on my machine. Ha!

Pedro Vezza@pedro.vza.net

Shout out to the defenders quietly keeping the tech world turning. I checked my Windows PC and iPhone and both are already patched.

Shout out to the defenders quietly keeping the tech world turning. I checked my Windows PC and iPhone and both are already patched.

Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

Pedro Vezza reposted

99% of atmosphere apps have a sign in flow that gives zero indication to users that they’re about to be redirected to a totally different website with a screen they’ve likely never seen before i think it’s going to be crucial to set expectations properly at the point of redirection

dame@dame.is

calling all the "sign in with Atmosphere" freaks, check out @anisota.net's new login experience and tell me what you think — this isn't a flow or pattern i'd recommend for every app, but it is an example of an opinionated one for just this app! video attached, or try it for yourself: anisota.net

Pedro Vezza reposted

i remember early in my career wondering why most people missed out on building early internet companies but i look around now and i get it so many people fiddling around with "my custom agent setup" and so few using this miracle of a tool to actually do anything

YouTube's comment section used to be a hate filled toxic dumpster fire just 6 years ago. I don't know what they did but improved it dramatically somehow. I hope Bluesky will go through the same evolution. www.nature.com/articles/s41...

nature.comAngry by design: toxic communication and technical architectures - Humanities and Social Sciences CommunicationsHumanities and Social Sciences Communications - Angry by design: toxic communication and technical architectures
lauren@lauren.rotatingsandwiches.com

twitter is a nicer and friendlier place than bluesky: false bluesky has some of the most aggressively hectoring, pedantic weirdos on the entire internet: true

This one of those statements that make me torn. I 100% agree with the spirit and think that tech bro culture is much to blame for the anti AI backlash. At the same time, I admit that if I were the one developing GPT-3, I would also be against releasing it thinking it was too dangerous to give away.

Grace@gracekind.net

AI is only dangerous if people are incentivized to move as quickly as possible without regard for externalities

Pedro Vezza reposted

oh yeah and it shows miss bellums full head

Astralite@astralite1.bsky.social

The PPG pitch bible was in one of these leaks and it basically says without Blossom the Powerpuff Girls would be worthless as superheroes

O Teorema do Pombal é engraçado porque é ensinado no primeiro semestre de Computação, quando os alunos acabaram de sair do vestibular e ficam achando que foi o Marquês de Pombal que tem algo a ver com o teorema.

TallFroGuy - Shape Decider@tallfroguy.bsky.social

(The top left hole has two pigeons) #critterposting

Pedro Vezza reposted

much respect for Professor Tao, but there are so so so many medical therapies that work without anyone really understanding how or why they work one of the great things about science is that we can use empirical knowledge in practice far ahead of when theoretical frameworks catch up to refine it

When Sam says dot is proactive he's not joking. I never mentioned anything about my work on GitHub and yet it was monitoring my open PRs and caught an integration error where two CAD parts were claiming the same IDs before merge. Crazy stuff.

I mean, props to them for the honesty of sending an email warning me of the overage fee. Very likely it would have not even realized from my credit card statement.

Things don't always go as planned. Opus 5.5 main agent coordinating 2 Sol 6.1 xhigh and they coordinating 5 subsub agents each. They spun for 24h writing certificates, cross checking calculations in loop. I am adding a stall notification to omp as first step to improve. github.com/can1357/oh-m...

Pedro Vezza reposted

With all of the Starbucks locations closing, the only places you can get espresso in Uptown these days are Caffe Ladro, Orange Goose Coffee, Nielsen's, Sugar Bakery, Caffe Zingaro, Caffe Vita, the Grounds Keeper, Ceres Roasting, Konvene Coffee, Cafe Hagen, Citizen Collective, Turtle Coffee...

At a low level, my agents keep a detailed git history as they go. This ensures false starts and changed decisions are captured. At a medium level, I dream of software journalism, like LWN. At a high level, have software historians write books like Understanding the Linux Kernel or Windows Internals.

dax@thdxr.com

any additional document also doesn't feel like it solves the problem because it's yet another thing that can drift where is the source of truth for how your software is supposed to work? 4/4

Pedro Vezza reposted

This was LITERALLY the exact scenario that "Biological War: A Scenario" started with If things unfold like the scenario, 6 days from now civilization will collapse, the president will be in a bunker, and billions will die.

RT @AnnieJacobsen: 🚨Breaking. There's been a pneumonic plague outbreak at a BSL-3 lab in Siberia, Russia.🚨 "Nearly 200 People Under Observation After Irkutsk Lab Worker Dies From Plague" - Moscow Times

Pedro Vezza reposted

advice for junior developers: you are no longer a developer you are a builder you are a solution provider enter every room and make things happen learn when no one is watching create because you can fix problems because they offend you bend the world to your will and take credit

elynxabeth holmes ⎔@freyja-lynx.dev

advice for junior developers: run

Chesterton's Fence for the AI age

gabby@fullmoon.id

one trick i've learned is that if the bot hallucinates the existence of a feature it's often a good idea to build that feature