Last week I said Iâd work with smaller PRs.
Ihanged my mind,
1. Cognitive load:
Splitting everything and keeping track of what changes what gets messy, fast.
2. Disk space.
With Docker, every PR gets its own container. Tens of GB gone.
Fewer larger PRs, for now.
For 17 years I designed products sitting next to developers.
Two weeks at @cyberwave_com, and yesterday five of my PRs got merged into dev.
First lesson as a designer who ships code: small PRs, often.
My first ones were not small.
1
28
Something unexpected, Iâm directing my agents and giving feedback after looking at the screenshots inside the PRs⊠sometime is faster than logginig in to local host, reach the page, and see the changes.
Not sure this is the best approach.
Anyone designing like that?
1
1
78
Wow, this is the end of an eraâŠ
NVIDIA announces CEO transition. Read the release: nvidianews.nvidia.com/news/nâŠ
38
There are many breathing apps out there, with this one I tried to visualize the exercise a bit differently.
Try it for free
2
96
Domenico Di Donna retweeted
I asked fable 5.2 to invent a new musical form.
Fable 5.2 wrote a symphony thatâs shaped like a training run.
The orchestra starts as random noise, learns the key, pulse, harmony and the melody, then plays music it was never shown.
For 17 years I designed products sitting next to developers.
Two weeks at @cyberwave_com, and yesterday five of my PRs got merged into dev.
First lesson as a designer who ships code: small PRs, often.
My first ones were not small.
đ€Ż
Plot twist on Idol MLX: my tuned flash-attention kernel from M3 Ultra was 3x slower on M5, because it clearly not used the Neural Accelerators đ€Ż
Rewrote it with Metal 4 tensor ops: 50 steps went from 117s to 63s, at 31.5 TFLOPS đ„.
Nanjing Niushoushan Culture Tourist Zone used as test here.
Idol now runs faster on my M5 Max MacBook than on my M3 Ultra đ Can't imagine how fast this is on M5 Ultra.
Anyone willing to try? github.com/ivanfioravanti/idâŠ
2
77
Interesting! I wonder if an agent like this could act as a QA layer for robotics sims, e.g. exploring scenarios in MuJoCo
We're open-sourcing Autopilot.
A self-improving agent that plays your game and finds bugs. Unity, Godot and Unreal.
â 43% more accurate
â Almost 2X faster
â Beats Claude Code at playtesting
Itâs Computer Use for games â closing the agentic loop and solving the most tedious part of game dev.
Stop being your agentâs tester. Free trial + GitHub below.
52
Domenico Di Donna retweeted
Replying to @kimmonismus
I do wonder how that will work⊠they seems all vague statements, without an actual scenarios described.
Itâs also impossible (for me) to trust those statements coming from those who have ridiculous amount of money⊠the only scenario that UBI pictures in my mind are the ones of communism countries⊠and we all know how well those worked⊠or maybe will be the oligarchy of the AI owners.
Either way, Iâm not optimistic on the outcome. (And Iâm an optimist)
Then bending spoons acquires a software company that has too many employees, optimizes for revenue, because well isnât charity, itâs a business, and everyone point fingers⊠sure all those must be entrepreneurs, they speak from experience.
(Yeah the tweet was out of touch, I agree, but thatâs not my point)
Anthropic: $2 trillion valuation. $65 billion in revenue.
~5,000 employees.
Pinterest: 5,265 employees. Pictures for housewives.
DocuSign: 7,044 employees. Signs PDFs.
Zoom: 7,438 employees. Video calls.
4
185
Meet Breath Cycle, the iPhone app I built for moments when your head feels full.
Follow the particles. Feel the rhythm. Take a breath.
âJust Breatheâ is free, works offline, and needs no account.
Breathcycle.app
2
6
222
Domenico Di Donna retweeted
We used to buy things made one at a time.
Mass production made products cheaper and more accessible, but largely identical.
What if the future takes us back to a world where everything is one-of-one?
Autumn Moon is a limited drop in collaboration with @kelin_online & @angelaloh09 built on that idea.
Shape your lamp at joshpuckett.me/autumn-moon
Damn, PHP might not affect recent codebases, but PythonâŠ
đšđšđš ALERTE SĂCURITĂ MAXIMALE ! Python est compromis.
đž Mettez immĂ©diatement pip Ă la version 26.2.2 ou plus.
đž Dans chaque projet Python (chaque venv) : python -m pip install --upgrade pip
đž uv : uv self update (0.13.4 ou plus)
đž Mettez aussi Ă jour les certificats du systĂšme (apt / dnf upgrade ca-certificates) et vos images Docker
pip install est compromis.
L'autoritĂ© indienne eMudhra (emSign), qui signe les « passeports » prouvant qu'un site est bien celui qu'il prĂ©tend ĂȘtre, utilisait des clĂ©s secrĂštes ridiculement faibles : 8 clĂ©s, toutes infĂ©rieures Ă 256. L'une valait 4. Autrement dit, n'importe qui peut fabriquer un faux passeport valide pour n'importe quel site.
Le risque pour Python : quelqu'un sur ton rĂ©seau (wifi public, FAI, Ătat) se fait passer pour pypi.org, et ton « pip install » tĂ©lĂ©charge un paquet piĂ©gĂ© sans aucune alerte. Aucune attaque n'a Ă©tĂ© signalĂ©e pour l'instant, mais c'est trivial Ă faire.
Un paquet piégé peut installer n'importe quoi. Porte dérobée, virus, vol d'informations en tout genre.
La situation est terrifiante !
Rien que dans l'écosystÚme Python, chaque installation de CPython, chaque venv, uv, tout est exposé.
Et je ne vous parle mĂȘme pas de npm, pnpm, yarn, Go, Rust.
Ma stratégie de sécurité 2026 : rester chez moi et ne me connecter à Internet que depuis un FAI de confiance.
C'est quand il y a de la mer qu'on reconnaĂźt les vrais marins...
Readers added context they thought people might want to know
Ce n'est pas un bug Python mais une vulnérabilité des clés privées faibles des certificats intermédiaires eMudhra/emSign (d<256 dont une valant 4), exposant les bundles certifi/pip à des MITM TLS potentiels jusqu'aux mises à jour.
discuss.python.org/t/information-âŠ
emudhra.we-have-a-problem.com
scotthelme.co.uk/eight-bits-of-âŠ
github.com/advisories/GHSâŠ
90
Domenico Di Donna retweeted
Watch the full demo: youtube.com/watch?v=VvJai6HGâŠ












