David Aronchick

David Aronchick

@ironyuppie.com

CEO, Expanso. Prev: Protocol Labs, MSFT, K8s, Kubeflow, GOOG, AMZN, etc. 4x founder/CEO. The universe is a vector in Hilbert space.

8.4K followers5.1K following3.9K posts

1) wash your hands for 15 seconds 2) stay 6 feet apart 3) stay inside unless you’re a critical worker 4) &tc &tc &tc Feels like March 2020 but for cybersecurity

This is, without question, the fastest/best productivity unlock i've found in the past... three months? Instant on, instant use, instant go to. If you do ANY kind agent -> human comment -> agent loop, highly highly highly recommend. github.com/kitlangton/s...

github.comGitHub - kitlangton/scrawl: Show an agent a problem: mark up, record, sendShow an agent a problem: mark up, record, send. Contribute to kitlangton/scrawl development by creating an account on GitHub.

is there any greater betral than leaving your phone/device/computer plugged in all night, only to discover something in the chain failed and you wake up with no power?

David Aronchick reposted

the fact that an intermediate CA in India that sells only into the Indian market, when compromised, can generate TLS certs for literally any website on the internet, that feels like a major trust boundary problem

Filippo Valsorda@filippo.abyssdomain.expert

After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.

Well shit. Vibe coding is called off for the week (or more)

Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

yo, i'm gonna try something. i will give you an architecture that cuts your Splunk, Datadog, or SIEM bill by 20% in a month without losing a byte, or I'll give you $100. That simple. Yes I'm serious. DMs open.

Red Flags! (🚩)! And Quantum Computing! But it's not as bad as you think. I think it's a model for all future tech - hybridizing stuff that is known and trusted and works with the new stuff. Until new becomes "old" (a synonym for trusted). Read on! www.distributedthoughts.org/2026-10-22-t...

distributedthoughts.orgThe ChaperoneCleveland Clinic, RIKEN, and IBM simulated a 12,635-atom protein–ligand system using quantum processors inside a classical workflow. So, while we're making progress, is this going to be better than th...

Ah yes, the yearly ritual of getting a replacement credit card in the mail, updating my 1Password with the new CCV and expiration date, and then throwing it in a drawer never to see it again.

can we still string up for public flogging the person who invented led headlights that aren't properly aligned? just for fun?

Ars Technica@arstechnica.com

Reducing glare and harmonizing US standards with their global counterparts will be two of the National Highway Traffic Safety Administration’s primary goals, the agency says: arstechnica.visitlink.me/lFNfL9

YO. Come stump me!

Expanso@expanso.io

Live in ONE HOUR at 9 AM PT. Three demos, twelve edge nodes: - Filter a noisy log stream at the source - Cut the connection for 12 seconds, then watch the buffer replay - Push one update to ten turbines and identify the one reporting faults www.twitch.tv/expansoio

David Aronchick reposted

When @ironyuppie.com mentioned the new Agentic Resource Discovery for service discovery, my reaction was 'I just kind of worked out how MCP and A2A fit together, why do we need *another* protocol?' and then when I started looking into it, that isn't even all the proposed open agent protocols!

thestack.technologyThe protocol proliferation problem: Making sense of the open agent stackBetween MCP, A2A, and ARD, WTF: How should companies think about the protocols at the heart of agentic AI?

When I get an email for renewal on some of my old domains, I realize I can be kind of ephemeral sometimes that can lead to decisions that I later question. This is not one of those times.

It's @ExpansoIO Pipeline Office Hours #00004! This Thursday, 9 AM PT. - Locally filter a noisy stream - Pull the network plug, lose zero records - Push a config change, and find what broke. Or bring your own and hardest one wins a $100 gift card :) twitch.tv/expansoio

twitch.tvExpansoIO - TwitchLive coding real data pipelines with David Aronchick. Watch the source, processor, Cloud execution, and delivered output. Built with Expanso. — ExpansoIO streams live on Twitch! Check out their videos...

$2.60 - that's what your DNA (or mine anyway) went for in the 23andme fire sale. Perhaps this is a time to say (again) that we should figure out ways to allow corporations to do valuable work WITHOUT having raw, permanently stored data? Some thoughts -> www.distributedthoughts.org/2026-10-05-e...

distributedthoughts.orgEstate SaleMore than forty attorneys general settled in July with what's left of 23andMe: $150 million in allowed claims, $18 million paid, about $2.60 a genome. Add the consumer class action and a bankruptcy co...

I LOVE the analogy of "the shortest stave in the barrel" for how we're all dealing with component prices for machine learning hardware. Doesn't matter how high the tallest one is if you've got one that is half as high... www.distributedthoughts.org/2026-10-08-t...

distributedthoughts.orgThe Shortest StaveHBM will eat about 22% of the world's DRAM wafers by year-end, up from 18% a year earlier, and DRAM contract prices have roughly tripled in six months. The AI industry spent two years solving for GPUs...

JFC. When I want information on something, especially from an agent, if it FUCKING POINTS ME TO THE HELP PAGE just know i am silently screaming.

Oh no I have found an absolutely amazing grilled shwarma wrap place 20 min from my house and now that’s all I can think about for every meal

I just went through the partner program for a site where each page - a single query as near as I could tell - took 10+ seconds to open. My god man this makes you look so bad.

Going live right now!

David Aronchick@ironyuppie.com

🚨 Pipeline Office Hours #00003: @expanso.io × @typesafeai.bsky.social Jev. Live today at 9 a.m. PT. 🚨 Every log gets fingerprinted; routine records go to the archive; interesting ones go to Jev. Watch me pull the model mid-run. 😈 IT'S JEV-TASTIC. twitch.tv/expansoio

🚨 Pipeline Office Hours #00003: @expanso.io × @typesafeai.bsky.social Jev. Live today at 9 a.m. PT. 🚨 Every log gets fingerprinted; routine records go to the archive; interesting ones go to Jev. Watch me pull the model mid-run. 😈 IT'S JEV-TASTIC. twitch.tv/expansoio

twitch.tvExpansoIO - TwitchLive coding real data pipelines with David Aronchick. Watch the source, processor, Cloud execution, and delivered output. Built with Expanso. — ExpansoIO streams live on Twitch! Check out their videos...

I know it's great to hate on AI, but being able to say, "This table needs locking down, or "my Mac is running badly," or "VS Code keeps giving me this error." is incredible. These would have taken me potentially days to understand and debug. AI just does it for me, with full audit log.

I am very proud of my very stupid phrase: "Mullet-based Log Processing: Determinism in the front, AI in the back." I will not be taking questions at this time.

Expanso@expanso.io

A log says INFO: “config reload requested by unknown actor.” Would you archive it? In our Expanso + @typesafeai.bsky.social Jev demo, severity-only routing would. With context, the pipeline routes it to NOTIFY.