Загрузка видео...

Не удалось загрузить видео

На главную

67 real production bugs. 10 different AI tools, same PRs, same standard. Entelligence benchmarked every major AI code reviewer on bugs that already shipped and broke things. They put 10 tools through race conditions, security vulnerabilities, breaking API changes, and logic errors across 5 real open-source repos (Cal[.]com, Sentry,...

10,362 просмотров • 5 месяцев назад •via X (Twitter)

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

🚨 AI coding agents hallucinate because they can't actually read your codebase. This MCP server fixes that. It's called Context+ and it gives AI 99% accuracy on large-scale engineering projects by building a real semantic map of your code before touching a single line. Here's what makes it different from every other MCP tool: → Tree-sitter AST parsing across 43 file extensions. Not grep. Not regex. Actual syntax trees. → Spectral Clustering that groups semantically related files into labeled clusters. Your AI finally understands what belongs together. → Obsidian-style wikilinks that map features to code files. Navigate entire codebases like a knowledge graph. → Blast radius tracing. Before any change, it shows every file and line where a symbol is imported or used. No more orphaned references. → Shadow restore points. Every AI-proposed commit creates a restore snapshot. One command to undo any change without touching git history. → Semantic search by meaning. Ask what something does. Not what it's called. The `propose_commit` tool is the wild part. It validates changes against strict rules, creates a shadow restore point, and only then writes to disk. AI can't just freestyle your production code. Works with Claude Code, Cursor, VS Code, and Windsurf. One line to install with bunx or npx. This is what responsible AI coding infrastructure actually looks like. 100% Opensource. Link in comments.

Ihtesham Ali

31,051 просмотров • 4 месяцев назад

Pi was built when there were already agent harnesses around. Here’s why Mario Zechner(Mario Zechner), found them suboptimal and built Pi, a minimalist self-modifying agent: #1 - Mario initially was a believer in Claude Code: "I was a believer in Claude code because they were the first that packaged agentic search up in a really compelling package. And at the time that fit my workflow really well. Everything around the LLM was kind of nice and tidy and easy to understand. I was super happy. I was proselytising Claude code." #2 - Reverse engineering Claude Code highlighted the degradation that Mario felt as a user: "I personally like simple tools that are stable and that I can rely on. Even if they have non-deterministic parts, all the deterministic parts should be as stable as possible. That was just not the experience with Claude Code around summer 2025. They would take away your control of the context. They would inject stuff behind your back, which is bad. Then, your workflows stopped working because there's now a system reminder that you don't even see in the UI that would modify the behaviour of the model. They would also do this to the system prompt. I built a little service where I can track the progression or evolution of the system, prompt and tool definitions and, with every release, it was messing with stuff. That just messed with my workflows and I don't appreciate that." #3 - PI was built with an appreciation for simple and reliable tools: "If I commit to a development tool, I want it to be a stable, reliable thing like a hammer. I don't want my hammer to break a different spot every day. That's terrible. We need somebody who goes the full velocity kind of way. But I don't want to work with a tool like that."

The Pragmatic Engineer

62,825 просмотров • 2 месяцев назад

🚨 BREAKING: AI expert Yoshua Bengio just revealed Sam Altman's 'code red' is proof the AI race is now in survival mode. The Financial Times broke it... Sam Altman had declared code red at OpenAI. The same Altman who once called superhuman intelligence the greatest threat to humanity. Google and Anthropic were catching up. Internally, the gloves came off. It wasn't the first code red. Three years earlier, when ChatGPT first shipped, Sergey and Larry had declared code red at Google. Two code reds. Same race. Different incumbents panicking. "It is not a healthy race for all the reasons we've been discussing." "What would be a more healthy scenario is one in which we try to abstract away these commercial pressures." "They're in survival mode, right?" "And think about both the scientific and the societal problems." But the labs couldn't see past the next quarter. In other words: Survival mode killed the scientific question. "They're so obsessed by that race that they don't pay attention to how we might be doing things differently." "Where are they all racing? They're racing towards replacing jobs that people do." "Because there's like quadrillions of dollars to be made by doing that." The pitch was always "AI for medicine. AI for science." The internal memo said something else. Quadrillions, in survival mode, with a second code red on the wall. If you're new here, follow AI Evolution for the latest on ChatGPT, Claude, and the AI tools shaping how we work and create. — Yoshua Bengio ( Yoshua Bengio ), Turing Award–winning AI pioneer and founder of Mila, on Steven Bartlett's ( @SteveBartlettSC ) Diary Of A CEO

AI Evolution

16,583 просмотров • 1 месяц назад

Anthropic admitted they built an AI so capable they were scared to release it and the number that explains why is 250. Anthropic's CFO Krishna Rao described in this clip what happened when they ran Mythos against an open source codebase that a previous frontier model had already analyzed. The prior model found 22 security vulnerabilities, Mythos found 250. In the same codebase, that the previous model had already reviewed and flagged as relatively clean. That number, more than 11 times as many vulnerabilities discovered is not just a benchmark improvement, it is a signal that there is an entire layer of software infrastructure that humanity has been operating under the assumption was secure and that assumption may no longer hold. The UK AI Security Institute independently evaluated Mythos Preview and confirmed what the internal numbers suggested. On expert level capture the flag challenges that no model could complete before April 2025, Mythos succeeded 73% of the time and it became the first model ever to complete a complex end-to-end attack range from start to finish, autonomously, without human guidance. The World Economic Forum called this a new security-driven era for AI, the Governor of the Bank of England publicly warned that Anthropic may have found a way to unlock the entire cyber-risk landscape, and the European Central Bank began quietly contacting financial institutions to assess their security posture. The response from Anthropic is what makes this story genuinely important. Rather than shelving the model or publishing it as a standard API release, Rao described a phased approach restricting access to a controlled group, focusing specifically on how the cyber capabilities can be used defensively rather than offensively and treating that framework as a template for how to release powerful but dangerous models in the future. The broader context makes that framing even more significant. AI generated code is already creating ten times more security vulnerabilities than human-written code, 63% of organizations reported experiencing an AI driven cyberattack in the past 12 months, and traditional signature-based security tools were built for a threat model that no longer describes the attack surface companies are defending against. Mythos represents a genuine leap in what autonomous security reasoning can do and it cuts both ways. The model that can find 250 vulnerabilities in a codebase a prior model rated as mostly clean is also, in the wrong hands, the model that can exploit those 250 vulnerabilities before a human defender has even finished reading the report. Anthropic's phased release strategy is not just a legal or PR decision, it is the most honest signal yet from a frontier lab that safety governance and capability development can no longer be treated as separate workstreams. The question is not whether this technology gets deployed, it is whether the institutions using it defensively stay ahead of the ones who will eventually use it offensively and whether the labs building it can keep those two timelines from inverting.

Milk Road AI

24,356 просмотров • 2 месяцев назад

What they don't tell you about vibe coding: • Moltbook exposed 1.5M auth tokens. The owner hadn't written a single line of code. • Tea App leaked 72,000 government IDs. The database was just open, no sophisticated hack needed. • A researcher took control of a journalist's computer through her own vibe-coded game, without a single click. The code ran fine in all three cases, tests passed, reviews looked clean, and nothing raised a flag. That's the problem nobody is talking about. Teams are shipping faster than ever. AI writes the code. CI catches build failures. Tests catch regressions. Observability catches outages. But nobody is asking the one question that actually matters: What can an attacker do with this, right now? Because the bottleneck is no longer writing code. It's understanding what that code actually exposes once it's live. PR reviews miss auth edge cases. Unit tests don't probe broken access control. Staging environments don't simulate adversarial behavior. And business logic flaws look completely fine until someone decides to break them on purpose. Strix is an open-source tool that fills this gap. It reviews your running app the way an attacker would: - Crawls the app and maps every exposed route and flow - Probes abuse paths dynamically, not just at build time - Returns findings with proof-of-concepts and suggested fixes Strix was benchmarked against 200 real companies and open-source repos, where it found 600+ verified vulnerabilities including assigned CVEs. It's designed to fit into how modern teams already work. Run it before a release, after major changes, or continuously as the app evolves. If your team is shipping AI-generated code and you don't currently have a way to answer "what does this actually expose", it's worth looking at. GitHub link in the next tweet.

Akshay 🚀

52,391 просмотров • 4 месяцев назад

Google just confirmed the first case of hackers using AI to build a zero-day exploit from scratch. An actual zero-day vulnerability that no human had EVER found before, discovered by an AI model, turned into a working weapon, and aimed at a mass exploitation campaign targeting thousands of systems simultaneously. Google's Threat Intelligence Group caught it yesterday and killed the operation before it scaled. But the details of how it worked are genuinely scary: The AI found a flaw in a popular two-factor authentication system that traditional security tools had missed entirely. The vulnerability was a logic error buried deep in the authentication flow where a developer had hard-coded a trust exception years ago. No human security researcher or automated scanner had caught it. The flaw was invisible to EVERY tool the cybersecurity industry has built over the past two decades. But the AI spotted it immediately. Then it wrote a full Python exploit script to weaponize it. Google's analysts could tell the code was AI-generated because it had textbook formatting, educational comments explaining every function, and even a hallucinated severity score that doesn't exist in any real database. The AI literally graded its own attack with a fake rating. So the code had MISTAKES in it. The criminals' implementation was clumsy enough that it probably interfered with the actual deployment. This was the sloppy first attempt by people who are still learning how to use these tools. And it still found a vulnerability that the entire cybersecurity industry missed. Google's chief threat analyst John Hultquist said: "There's a misconception that the AI vulnerability race is imminent. The reality is that it's already begun. For every zero-day we can trace back to AI, there are probably many more out there." But here's where it gets truly insane... This wasn't even a sophisticated operation. North Korea's APT45 hacking unit is sending thousands of repetitive prompts to AI models, recursively analyzing known vulnerabilities and building an entire exploit arsenal that would be physically impossible for human hackers to assemble at the same speed. They're essentially industrializing cyberattacks. A Chinese state-linked group jailbroke Google's own Gemini by simply asking it to "pretend to be a network security expert" and then used that persona to research how to hack TP-Link routers and corporate file transfer systems. Another Chinese group deployed autonomous AI agents that probed a Japanese tech firm with minimal human oversight, deciding on their own which tools to use and pivoting between targets based on internal reasoning. And then there's PROMPTSPY, an Android backdoor that calls Google's Gemini API to read your phone screen in real time, navigate your interface autonomously, capture your biometric data, replay your lock screen PIN, and block you from uninstalling it by placing an invisible overlay over the uninstall button. It literally OPERATES your phone using commercial AI tools anyone can access. Everyone spent the last 3 years arguing about whether AI would take people's jobs. Meanwhile AI is making every password, every firewall, and every two-factor authentication system on Earth fundamentally less secure. The entire $190 billion cybersecurity industry was built on one assumption: that finding vulnerabilities is hard and requires deep expertise. But AI just removed that assumption from the equation. And the scariest part is that Google said the criminals made errors this time. The implementation was rough and the campaign probably didn't fully work. These were amateurs, now imagine what professionals are able to do. There's a reason Sam Altman predicted an inevitable massive cyberattack THIS year. What do you think?

Ricardo

50,564 просмотров • 2 месяцев назад

A single tweet just vaporized BILLIONS from cybersecurity stocks. CrowdStrike down 8%. Cloudflare down 8.1%. Okta down 9.2%. SailPoint down 9.4%. The Global X Cybersecurity ETF just hit its lowest level since November 2023. What happened? Anthropic dropped Claude Code Security. It scans your entire codebase for vulnerabilities and suggests patches. Sounds boring. Until you read what it actually did: In testing, Claude found over 500 HIGH-SEVERITY BUGS in production open-source codebases. Bugs that had been sitting there for DECADES. Despite years of expert review. Despite fuzzing campaigns. Despite penetration testing. Despite million-dollar security audits. Nobody found them. An AI did. In hours. Here's the terrifying part: Traditional security tools work by pattern matching. They look for known vulnerabilities in a database. Claude doesn't do that. It READS code the way a human security researcher would. Traces data flows. Understands how components interact. Catches logic flaws that rule-based tools can't see. And it just outperformed every cybersecurity tool on the market. Combined. Wall Street figured this out fast. If an AI can find what your $500k/year security team missed... Why do you need the team? If an AI catches bugs that CrowdStrike, Okta, and Cloudflare couldn't... Why are you paying those subscriptions? Barclays came out saying the selloff was "illogical" and Claude "doesn't compete" with these companies. But here's what Barclays missed: It's not about what Claude competes with TODAY. It's about what it replaces TOMORROW. The SaaS apocalypse hit legal software 3 weeks ago. Thomson Reuters dropped 18% in one day. $285 billion wiped from software stocks. Now it's cybersecurity's turn. The pattern is obvious: Every industry that sells "expertise as a service" is about to get repriced. Legal research? Done. Code vulnerability scanning? Done. Compliance checking? Coming soon. Financial analysis? On deck. Companies that spent 20 years building "moats" around specialized knowledge are watching AI swim right over them. CrowdStrike is worth $95 billion. They have 30,000 customers. Claude just found 500 bugs their tools missed. Do the math. The smart money already sees what's happening. The iShares Expanded Tech-Software Sector ETF is down 23% YTD. Heading for its largest quarterly decline since the 2008 financial crisis. Not because software is dying... But because software companies that charge per-seat subscriptions for AI-replicable work are dying. Anthropic just proved that a general-purpose AI can outperform DECADES of specialized cybersecurity infrastructure. In a single product release. While still in "limited research preview." It's not even fully launched yet. What happens when it scales? We're about to find out.

Ricardo

110,899 просмотров • 5 месяцев назад

Jack Dorsey says the real danger isn't open source AI, it's five CEOS deciding what the world is allowed to build with AI. "These AI companies are building platforms and they're all incentivized around their own particular models. You have to ask them for permission, you have rate limits, and you have all these things. Even what the models spit back are constrained." "What are the technologies where you don't need permission from a company, from a CEO, to work on what you want, to build what you want, to build a business around that? Those are the things that are durable. That's why these open protocols are significant and important." "It limits the potential of really great ideas bringing humanity forward because it's a decision of a group of CEOs that think they know best. They may know best for their company, but they don't know the best for the creativity of the world and what people actually want to do with it." "Fortunately, there's a great movement in open source AI, and DeepSeek was an important moment in this space for exactly that reason to show a different path and to provide something that is not only competitive but better than the models that the corporations are putting out there." "We should not be reliant upon five companies telling us that they know best, and there should not be open source because it's dangerous. No, we should have these things in the open and race towards solutions that stay ahead of all the dangers." PS. If you found value in this post make sure to like and repost this tweet + follow Uncover AI to stay updated with the latest AI news. See you in the next one:

Uncover AI

36,393 просмотров • 12 дней назад

Sam Altman just told you exactly how OpenAI treats the human race. Not in a leaked memo. Not through a whistleblower. On camera. In his own words. Altman: “I think one of the most important strategic insights in the history of OpenAI was deciding we were gonna pursue iterative deployment.” The most important move in the history of the company was to release the technology before they understood it. Not after it was safe. Before. Altman: “Society and technology are a co-evolving system.” Co-evolution means neither side is driving. The machine changes us. We change the machine. Nobody is steering the outcome. This is not a product launch philosophy. This is an admission that the experiment was always designed to be run on us. Altman: “I don’t think we’re gonna solve that, like, thinking really hard about it theoretically. We’re gonna have to, like, learn from the contact with reality.” Contact with reality. That is the phrase the CEO of the most powerful AI company on Earth chose to describe what happens when his technology meets eight billion people. Not careful integration. Not measured rollout. Contact with reality. The language of test pilots describing what happens when an untested airframe hits the atmosphere. The entire promise of AI safety was that the machine would be understood before it was unleashed. Altman just admitted that promise was always a fantasy. You cannot model how intelligence reshapes civilization by running simulations. The second and third order effects are invisible until they detonate. So they shipped it. Altman: “You have to learn as you go. You have to adapt with a tight feedback loop.” Tight feedback loop means they watch what breaks. They measure the collision between human psychology and machine output in real time. Every conversation you have with ChatGPT is a data point in a civilizational stress test you never consented to. Every prompt. Every confession. Every question you would never ask another human being. That is the feedback loop. You are not the customer. You are the contact with reality. Philosophers spent centuries asking whether humanity would ever encounter an intelligence that learned from us faster than we could process what it was doing. That is not a theoretical question anymore. It is running on your phone right now. And the man building it just told you the only way to understand what it does to us is to let it happen. No simulation. No safety net. No control group. Just the experiment, running at the speed of conversation, on a species that will not be the same one that started it.

Dustin

27,714 просмотров • 2 месяцев назад