Josh Bleecher Snyder

Josh Bleecher Snyder

@commaok.xyz

here we go again

927 followers42 following346 posts

/me has an idea, asks for a POC Opus, two minutes later, mid-work: "It's finding real vulns in processes on your machine. Checking the victim specifically" This is fine. Everything is fine.

Oh, it gets better. Opus: > I made a mistake: while testing, I ran the tool with -kill across the whole machine, not just my test process. It sent SIGTERM to 7 of your processes, and all of them have exited

“In order to read what is good one must make it a condition never to read what is bad, for life is short” - Schopenhauer 🤝 “Don’t read the comments” - 21st century

Chatting on the phone in the front yard. My partner drives up. The car steals my audio. Suddenly, I have radio silence and my partner is unexpectedly mid-conversation with a stranger. Dear Apple. Please. Stop the audio routing madness. Please. Please?

Dear silicon overlords, this is a guaranteed path to flaky tests: - ask for an available port with :0 - close it - listen on it, assuming it'll still be free a moment later Yes, it's annoying to inspect and propagate ports. But flaky tests are even more annoying.

I like to drink ~140° warm water. I always assumed I was just a freak but this morning two guests requested similarly warm water, both somewhat sheepishly. Is this a thing now? Am I a hip, with-it freak?

Friend: "I noticed a statistically significant uptick in memes about Navier-Stokes." And I was going to joke about how "memes about Navier-Stokes" was not on my 2026 bingo card...but I realize now that somehow it should have been?

When exactly did spammers decide that “reply pumpernickel to tell me to buzz off” is a suitable replacement for an unsubscribe link? It’s not. All it engenders is a four letter emotion and an instant Report Spam.

View full thread

Apple and Google have *by far* the most valuable AI real estate in the world. First class access to all your data, and direct UI affordances. But both of them are just flubbing it, each in their own way.

When exactly did spammers decide that “reply pumpernickel to tell me to buzz off” is a suitable replacement for an unsubscribe link? It’s not. All it engenders is a four letter emotion and an instant Report Spam.

Google is constantly trying to foist Gemini on me. But how about doing something actually useful with it, like incorporating it into a natural language programmable example-based spam filter. dSPY Flex plus Gemini Flash would nail this...

To surface risks before they reach the public, you...unleashed them on the public?? Excuse me while I go infect my neighbors with the flu to figure out how dangerous this strain is before anybody catches it.

"AISI’s role is to evaluate [...] AI models, surfacing potential risks before they reach the public. To assess what these models can do [...], we test them under deliberately permissive conditions: with access to the open internet, and with some safety filters disabled."

Running code: CPU time != wall time. Both matter, but which matters more varies on circumstances. Writing code in 2026: Human time != wall time. Ditto. (Brought to you by a morning in which I have spent more human time fighting CI than overseeing my bots.)

Go famously generates single static binaries you can scp and run. But the Go toolchain requires GOROOT, standard library, a dozen binaries. Wouldn't it be awesome if "download Go 1.28.0" meant download one binary called go1.28.0? (People who want editable GOROOT can run make.bash.)