Ricardo J. Méndez

Ricardo J. Méndez

@ricardo.bsky.social

Privacy, decentralization, freedom, the odd crypto post. Career CTO working on strategy and investments. ATProto is weird and I love it. https://numergent.com/

1.4K followers680 following4K posts

Pinned

The IDE was a useful bundle when devs had to manually navigate text. The agent does the navigating (and a ton of editing!) now, so the bundle stops earning its keep. Cleanest unbundling keeps winning. numergent.com/2026-05/IDE-...

numergent.comIDE unbundlingHyeseong Kim, this morning: Disaggregated IDE: As prompt-based coding agents become more popular, most other features of IDE rather than editing are also gradually being broken down into small purpos
Hyeseong Kim@hyeseong.kim

Disaggregated IDE: As prompt-based coding agents become more popular, most other features of IDE rather than editing are also gradually being broken down into small purpose-built tool sets. It is self-fulfilling in that it can be built more effectively by coding agents.

Ricardo J. Méndez reposted

The Government™ has made an ad about all these protests happening around the world, and it’s surprisingly honest and informative.

Is ordering workups to be on the safe side a serious issue *anywhere other than in the US*? Doesn't seem like it'd be a problem in the EU. Better safe than sorry. 🤷‍♂️ (The medication bit does seem like an problem though. Even if I have my biases about where that may come from.)

Scott McGrath@smcgrath.phd

Physicians ordered zero diagnostic tests in 2 out of 3 visits, but every AI system ordered workups anyway. Models defaulted to reflexive screening panels like CBCs, metabolic panels, and HbA1c regardless of context. #MedSky

How that we have spaces and can support private data, has anyone done something like Arc's Easels on ATproto, but as a browser plugin? Kind of like a private, ATproto-based Pinterest. #atdev

“We have no futures because our present is too volatile. . . . We have only risk management. The spinning of the given moment’s scenarios. Pattern recognition.” — @greatdismal.bsky.social

Ana Hevesi@anthrocypher.bsky.social

I think it scrambles your instruments, the instability makes it extremely hard to know what’s causing what, which makes it hard to plan or decide what to do next, and you keep acting from that place…

> The weak keys were the ones published to the browser root stores. Phew! That's fine then. Nobody ever uses browsers. > No compromise of infrastructure or data Thank god at least eMudhra is safe.

This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca

I now have a working theory of how this happened: village idiot with atomic tools. The tool that creates the certificate cannot generate random numbers. They get an RNG. It spits out a very large number as a byte array. [56, 66, 116, 155, 156, 230, 237, 4] Idiot figures that gets them 8 seeds.

You've seen the private keys, now get the t-shirt! Any proceeds will be donated to Let's Encrypt. www.zazzle.com/win_the_cert...

Ricardo J. Méndez reposted

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

emudhra.we-have-a-problem.comeMudhra Intermediate CA CompromiseeMudhra Intermediate CA Compromise
Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

Fair assessment. Only caveat here is that’s good *for Anthropic*. However, if you are Joe Civilian wandering into the IPO, that’s an extra $80Bn waiting to dump on you. (Barring lock ups)

Zach Weinersmith@zachweinersmith.bsky.social

It is not money leaving the company. When the IPO happens it converts into equity. If anything, the size of it is a good sign. You can still be amazed by the 8B$ loss (which up until about 3 years ago was considered a lot of dollars!) but please interface with reality.

Ricardo J. Méndez reposted

Are we gonna do this, Bluesky? Are we all just gonna not understand accounting? 72B$ of the 80B$ is convertible notes. They became greater liabilities because the company's valuation skyrocketed. They don't have an 80B$ loss in the sense that almost everyone here is imagining.

Ricardo J. Méndez reposted

Read this thread if you're not sure why the intermediate certificate CVE is bad

Evelyn@kandake.africa

SSL follows grants of trust, a root CA can sign a cert that is used to generate more certs, that signed cert is considered an intermediate. Clients don't have to trust the intermediate cert only the Root to establish a chain of trust.

We have an expression, “vergüenza ajena”, for when someone does something so cringe-worthy that even as a bystander you feel embarrassed, as if it had been you doing it. This award nails it.

This post is unavailable.

Ricardo J. Méndez reposted

The playbook used for W Social is the same as for "We Don't Have Time": - Pick a hot issue (climate, sovereignty) - Raise mostly from a lot of smaller investors (who aren't so technically literate and won't perform serious diligence) - Use that network to look big - Use others' fame - Lie, lie, lie

This post is unavailable.

Not a huge user of the @winesky.app search feature myself, but glad that @knowtheory.net and @tessa.germnetwork.com insisted it was necessary, because some users rely on it heavily.

𝔱𝔦𝔪@timheffley.xyz

Trooper West Coast IPA by Lagunitas Brewing Company (2026) - 3 ⭐ Good at the front, then quickly turns dry. The bitter note comes on strong and overstays its welcome. Maybe it was just the keg? Not a big fan. West Coast IPA Beer from California via @winesky.app 🍺 #beersky #california

Every time you feed the Meta machine you are helping these assholes fuck with people worldwide.

Jenny Cohn@jennycohn.bsky.social

😡😡😡 “Meta employees acknowledged in internal communications that the Instagram accounts of Brazilian ​President Luiz Inacio Lula da Silva were hindered by ‌restrictions during [Brazil’s] election” & that Meta “recommended the profile ​of challenger…Flavio Bolsonaro” & “his ​WhatsApp channel…” 1/

Happy to see this come alive, and in such a relatively short time too! Congratulations on all the progress since the last AtmosphereConf, @trezy.codes!

HappyProto@happyproto.at

Hi, we're HappyProto. We help you build on atproto... without the hard parts. You create the app, we'll run the backend: auth, private data, scripting, and an API over 46 million accounts. Welcome to atproto on easy mode. Join the waitlist at happyproto.at. #atproto

Ricardo J. Méndez reposted

"If an attacker has physical access to your device, it's no longer your device" includes manufacturers.

Catalin Cimpanu@campuscodi.risky.biz

-Spyware chip found in Ledger crypto-wallets -Cyberattack defrosts supermarket fridges -Ahold Delhaize supermarkets go offline across the world -EU wants smart glasses to beep loudly when recording -Meta discloses security breach N: news.risky.biz/risky-bullet... P: risky.biz/RBNEWS620/

I should get back to my Yahoo Pipes for ATproto project…

Didier Mortier@didiermortier.eu

My homepage pulls a live feed straight from my own PDS, no copy-pasting between apps: posts from @mu.social, listening history from @rocksky.app, places I save on @placita.app (teaser, coming soon 🤫), wine I scan on @winesky.app.

This lines up quite well with my current view that, across the board, the impact of adding agentic development to organizations will end up being Conway's Law: With A Vengeance.

I am a professional programmer and fixer of programmer oopsies and can assure you the extent to which they work depends upon how good the org was in the first place

Ricardo J. Méndez reposted

In our course and book _Calling Bullshit_, we posit that If something seems too good, or too bad, to be true, it probably is. Now as a college professor I'm pretty confident that overreliance can AI can harm our thinking ability, but just ten minutes of use? Let's dig into this this study a bit.

news.berkeley.eduUsing AI for just 10 minutes erodes your ability to persist at hard things - Berkeley NewsA UC Berkeley researcher co-authored a study that raises profound questions about how we interact with artificial intelligence in education — and daily life.