Loading video...

Video Failed to Load

Go Home

‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017. Website: Write-up: GitHub: It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice())...

446,007 views • 5 months ago •via X (Twitter)

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Seems like Visual Studio Code is starting to tell you: your agent primitives need to move. There is now a new migration banner in the Chat panel, and it is part of a much bigger change happening under the hood: the move from the old Local harness to the new Agent Host architecture built around AHP. This is not just about moving where an agent runs. The old model was very VS Code-centric: prompts, custom agents, instructions and skills could live in VS Code-specific locations and the agent runtime lived inside the extension host. The new Agent Host separates the agent runtime from the editor. Sessions can keep running when the window closes, be shared across VS Code windows, run remotely, and support different harnesses such as Copilot, CLI and Copilot Desktop App through a common session layer. And that means some of our primitives need to move too. Prompt files are being deprecated for Agent Host and migrated to Skills. User-level agents and instructions that lived in VS Code profile storage need to move to harness-supported locations. Even the old location settings are being deprecated. The new migration experience can detect these things and guide you through moving or converting them, while keeping the originals unless you explicitly remove them. The new banner is basically the first visible sign that this migration is becoming a real product workflow. Basically telling us - it's time to move on!!!! If you have accumulated a lot of prompts, custom agents, instructions and skills over the last year, now is probably a good time to understand where they actually live and which harness owns them. To summarize the shift - it isn't just: VS Code Chat → Agent Host It is: VS Code-specific primitives → harness-native primitives. And I think this is going to become increasingly important as agents stop being features inside an IDE and become runtimes that multiple clients can connect to. Go run your migrations now 🏃‍♀️

Oren Melamed

29,753 views • 8 days ago

I just built a Claude Code skill that scores whether your landing page actually keeps your Meta ad's promise 🤯 Drop in your ad and the page it points to. It reads both, scores the "ad scent" from click to page, and finds the exact line where the page breaks the promise that won the click. All inside Claude Code. Perfect for DTC brands and media buyers who pour everything into the ad and the CPA but never grade the seam in between. If you're scaling spend on a winning ad, the click is landing on a page that opens with something slightly different, the ad promised 50% off and the page shows full price, the ad hooked "for oily skin" and the page is a generic homepage, and nothing looks broken, but the visitor feels it and bounces... That gap has a name in conversion work: message match. And you already paid for the click you're losing. Here's what it does: → Drop in your ad (headline, copy, offer, CTA) and the landing-page URL → It fetches the live page and reads what's actually above the fold → Grades 7 continuity dimensions: promise, offer, angle, CTA, audience, proof, visual → Shows your ad's words next to your page's words, so every gap is right there → Rewrites your hero headline so the page keeps the ad's promise → Renders a dashboard with a Match Score out of 100 No guessing why the click bounced. No blaming the creative for a page problem. No buying more traffic to fix a copy problem. What you get: → A Match Score on every ad-to-page pair before you scale → The ad-side vs page-side quotes, side by side, for every leak → A hero rewrite you can paste straight onto the page → A dashboard you can hand to your team or client I'm giving away the full skill completely for free. Built 100% in Claude Code. No API keys. Want the skill? > Like this post > Comment "MATCH" And I'll send it over (must be following so I can DM)

Mike Futia

10,871 views • 2 months ago

A good technical LLM interview question: Your RAG chatbot is working as expected locally. You deploy it behind a load balancer with 3 replicas. Users report that it forgets what they just asked, and answers get worse with each restart. Why did this happen? (answer below) A local setup has one process that owns everything. - The vector index is a variable in memory. - Conversation history is a Python list. - The documents are on local disk. You never treat any of them as infrastructure, because restarting rebuilds all three in seconds and there is only ever one copy. The setup does not carry over to production directly. The vector index might disappear on restart, so the app re-embeds everything on boot and serves empty results until it finishes. Conversation history may belong to one replica, so a follow-up routed elsewhere has no memory of the previous turn. Documents could be on whichever container ingested them, so the three replicas hold three different corpora. None of this is evident with one user and one process. So the actual work in shipping RAG is not just the retrieval logic, but also storing the vector index, the conversation history, and the documents outside the app, where every replica reads and writes the same copy. Which comes down to three requirements: > The vector store needs persistence and has to be reachable from every replica. pgvector inside Postgres keeps embeddings next to the rest of the data instead of adding another system to operate. > Conversation state has to be checkpointed outside the app. LangGraph writes its state to Postgres, so any replica can pick up a thread mid-conversation. > Docs need shared object storage, so ingestion happens once instead of once per replica. If you get those three right, the retrieval logic you wrote in the notebook works unchanged. To learn how all of it is wired together, Akamai's GitHub has a working reference implementation. - rag-langgraph-k8s-quickstart is an airline policy Q&A assistant built with FastAPI, LangChain, and LangGraph. Terraform provisions the LKE cluster, a Postgres instance with pgvector for embeddings, a second Postgres for LangGraph checkpointing, and an object storage bucket for the policy documents, in one apply. - akamai-workshop-ai-inference covers the next step, running the model yourself instead of calling an API, with prefill and decode, KV cache tradeoffs, and continuous batching under real concurrency. Both are available on Akamai's new Developer Hub, alongside their tutorials and code samples. It also links to Edge Case, their Discord, where four developer advocates architect and deploy a production app live every other Wednesday. If you create a new Akamai Cloud account, you can also get $300 in credits for joining. Join here: That said, this post assumes the retrieval logic was right to begin with, and that is doing a lot of work. Most RAG systems fail earlier, at the point where a chunk gets treated as a self-contained unit of meaning. I wrote about the two skills that fix that gap, and why the chunk is usually the wrong thing to embed. Read it below. Thanks to Akamai Cloud for partnering today!

Akshay 🚀

31,971 views • 1 month ago

Claude Design + Shopify is f*cking ridiculous 🤯 You can now publish pages from Claude Design → Claude Code → Shopify. Built 100% with Claude Design, Claude Code, and the Shopify CLI. Perfect for DTC brands and agencies who want to skip the design → dev handoff entirely. Here's how it works: → Design any landing page in Claude Design → Export as a zip and drop it into Claude Code → Install the Shopify + Shopify AI Toolkit plugins → Prompt Claude to convert the HTML into a Shopify page template + push to live theme → Claude uploads the images, deploys the files, and creates a published page No more handing designs off to a dev and waiting 2 weeks for a Shopify page. What you get: - A workflow that turns any Claude Design page into a real Shopify page template - Editable sections so your marketing team can swap copy, images, and CTAs without code - Images uploaded straight to Shopify Files automatically - A files-only deploy that only touches what's new in your live theme - A repeatable pipeline you can use every time you design a new landing page This is essentially the design-to-deploy pipeline brands have been waiting for. I put together a step-by-step playbook for going from Claude Design → published Shopify page. Every install, every plugin, every command, and the exact prompt that runs the whole thing. Want the playbook for free? > Like this post > Comment "SHOP" And I'll send it over (must be following so I can DM)

Mike Futia

59,402 views • 4 months ago

I just built a Claude Code skill that scores whether your landing page actually keeps your ad's promise 🤯 Drop in your ad and the page it points to. It reads both, scores the "ad scent" from click to page, and finds the exact line where the page breaks the promise that won the click. All inside Claude Code. Perfect for DTC brands and media buyers who pour everything into the ad and the CPA but never grade the seam in between. If you're scaling spend on a winning ad, the click is landing on a page that opens with something slightly different, the ad promised 50% off and the page shows full price, the ad hooked "for oily skin" and the page is a generic homepage, and nothing looks broken, but the visitor feels it and bounces... That gap has a name in conversion work: message match. And you already paid for the click you're losing. Here's what it does: → Drop in your ad (headline, copy, offer, CTA) and the landing-page URL → It fetches the live page and reads what's actually above the fold → Grades 7 continuity dimensions: promise, offer, angle, CTA, audience, proof, visual → Shows your ad's words next to your page's words, so every gap is right there → Rewrites your hero headline so the page keeps the ad's promise → Renders a dashboard with a Match Score out of 100 No guessing why the click bounced. No blaming the creative for a page problem. No buying more traffic to fix a copy problem. What you get: → A Match Score on every ad-to-page pair before you scale → The ad-side vs page-side quotes, side by side, for every leak → A hero rewrite you can paste straight onto the page → A dashboard you can hand to your team or client The honest part: message match is one lever on conversion, not the whole funnel. But it's the cheapest one to fix. You're not buying more clicks. You're keeping the clicks you already bought. Built 100% in Claude Code. No API keys. Want the skill? > Like this post > Comment "MATCH" And I'll send it over (must be following so I can DM)

Mike Futia

10,267 views • 2 months ago

i'm not fine after reading this a guy with a laptop got his own silicon chip manufactured with software Google gave away. the commercial version of that software rents for up to $1,000,000 a year. he never signed a vendor contract and never paid for a seat. he wrote the logic, pushed it to GitHub, and nine months later a wafer came out of a fab. getting silicon with your name in it used to take a company. now it takes nine months. his slot was 160 by 100 microns: about 1,000 logic gates, 8 inputs, 8 outputs, clocked past 50 MHz. more than 600 designs have already come back this way. this is the open silicon stack. Google and SkyWater published a complete 130nm manufacturing process, DARPA funded the software that turns code into a fab-ready file, and all of it sits in public repositories. turns out the whole flow fits in a git push: - write the logic in Verilog, or drag gates around in a browser if you have never done this - push to GitHub, an action runs synthesis, placement, routing and sign-off on the commit - OpenROAD finishes place-and-route with no human in the loop, code to fab file inside 24 hours - SKY130 carries the fab's real design rules, so passing the checks means it is manufacturable - a few hundred designs share one wafer, which is the only reason a person can afford the masks nobody puts this part in the thread: 130nm is roughly where the industry stood in 2001, and you wait six to nine months for silicon. this does not get you a GPU. it gets you a real object with your logic inside it. bookmark this. the video is one of those designs opened layer by layer, and every rectangle in it exists in the file that was sent to the fab.

Argona

150,798 views • 2 months ago

Stanford researchers did it again. They just built the agent-native version of Git. When an agent works on a longer task, the run builds up a lot of state. This includes files edited/created, a dev server, a database, installed packages, KV cache, etc. Say the agent is at step 10 and makes a mistake, maybe it misreads a traceback and rewrites a file that was actually fine. The tests start failing, and the run goes off track, although everything through step eight was correct. By default, the agent just tries to fix it, which creates more edits and tool calls. This burns more tokens and grows the context. The other options are a person stepping in to redirect it or restarting the whole run from step one. That's wasteful, because it pays for every model/tool call again and re-prefills the context. Moreover, since an agent's run is non-deterministic, it doesn't reproduce the same early steps anyway. The reason it's hard to just jump back exactly to a previous correct step and resume from there is that the trajectory is only a message log. It records what the agent said and which tools it called, but not the live state underneath. That state includes things like memory, open file handles, child processes, installed packages, /tmp, and KV cache. None of that is in the log. Git can version the files, but it doesn't snapshot the running process or the KV cache. Checking out step eight moves the files back, but the process is still sitting in step-ten memory with a cold cache. Shepherd is a runtime layer by Stanford that records the run as a trace of typed events rather than a flat log. Each agent-environment interaction becomes a commit, similar to Git, but it tracks the live run. Its commit includes the agent process and the filesystem together, copy-on-write, so a branch carries the actual state and not just the files. Going back to a previous step is then a single call that forks from that commit and continues from the exact state. The copy-on-write fork is roughly five times faster than docker commit, and because the prompt prefix through step eight is unchanged, the KV cache is reused over 95% on replay, so early steps aren't reprocessed again. Once the run can be forked, a meta-agent can sit on top and operate it. It watches the trace and reverts as soon as it looks wrong, before the bad write is committed. In practice, it's just Python calling fork, replay, and revert on the trace, rather than a separate control plane wired into the harness. Not everything is reversible though. Files and sandbox changes undo themselves, but a database write has no automatic undo, so it needs a matching undo step set up in advance. Something external, like a sent email or a real charge, can't be undone, so the supervisor's job there is to catch it before it fires. They tested this on a few public benchmarks. On CooperBench, where two agents work on the same codebase, adding a live supervisor took the pair-coding pass rate from 28.8% to 54.7%. It's still early and labeled alpha. The benefit mostly shows up when a run gets branched a lot over a heavy sandbox state, which is exactly where restarting wastes the most tokens and time. If Git was made to make file changes reversible, Shepherd is trying to do the same thing for a live agent run. Shepherd Repo: (don't forget to star it ⭐ ) That said, Shepherd reverts a bad step inside a run. The harness around it, the prompts, tools, and checks the supervisor relies on, still drifts across runs as models and dependencies change. Akshay wrote about making that harness repair itself, where a failing trace gets diagnosed, the fix is verified against the exact input that failed, and the failure is locked as a regression test so it can't recur. Read it below.

Avi Chawla

441,974 views • 3 months ago

🧃 Introducing stereOS: a Linux based operating system hardened and purpose built for AI agents. It's clear that agents need an ACTUAL operating system (not what people are calling an "OS") to witness the full breadth and depth of their capabilities while mitigating the blast radius of autonomous, untrusted actors. But there are so many problems with AI sandboxes today: * Going out to the apple store and buying a mac mini will never scale and is way too expensive (obviously) * Running in Docker is too restrictive (agents can't stand up their own container infrastructure, no sub virtualization, docker-in-docker is very broken) * Firecracker strips all the hardware so GPU PCIe passthrough, secure boot, FIPs, etc. is out of the question. * Native VMs are too fat and the overhead of 1 agent per VM is too much. stereOS takes a different approach: it's a full NixOS system that you boot and then kick off agent sandboxes inside with gVisor + /nix/store namespace mounting. Each agent gets their own kernel and the /nix/store is read only by nature. Even if the agent was somehow able to escape the gVisor virtual kernel, they'd land on the NixOS system as the "agent" user! Not your actual hardware!! If you want to take a defense-in-depth approach, we support "native" agents that run at the system level kicked off by our `agentd` utility. These agents, on their own, can manage and kick off other sub agents using the internal sandboxing mechanisms. Today, we're open sourcing all of this: * stereOS: our purpose built Linux OS - * masterblaster: client utility to launch, manage, and orchestrate agents - * stereosd: the stereOS system control plane daemon - * agentd: the stereOS system agent management daemon - Give it a try, throw us a star, and let me know what you think 🧃⭐️

John McBride

150,844 views • 7 months ago