Security researcher at Intel. Proud dad & husband. Loves hacking & building. PhD in systems security from @vu5ec. https://xitter.cf/t.co/fm0WTj0bkU

52.3191,4.8724
Joined July 2007
Some observations about the "total" automation of software engineering: 1. There are more software engineers now than in 2025, and demand is growing. 2. Software engineers have never worked harder than they do now. 3. They largely don't write code anymore, agents write ~100% of the code. 4. The bottom line of the companies that employs these engineers and agents (i.e. the terminal purpose of all this code) is typically not budging as a result of AI adoption. This is why you have to think in terms of systems. Automating one aspect of a system creates its own friction and moves the bottlenecks elsewhere.
315
252
71
2,780
278,985
The future depends on the direction this trend takes.
33
107
22
1,147
81,156
I've published a new, general-purpose terminal specification that gives any program a way to tell the terminal what it's doing: idle, working, waiting, finished, or failed, and why. It is easy to implement on both sides. I've written more about why: mitchellh.com/writing/progra… The problem this solves is generic and applies in compelling ways to all sorts of use cases (e.g. package managers, build tools), but it really rears a hideous head when it comes to AI and the "agentic inbox" problem. I found over 250 different agent orchestrators (with various goals) that all individually implement a heuristic based approach to detecting whether things like Claude Code are working, blocked, done, etc. If you look at @herdrdev's commit history, you can see around 10 compatibility changes to detect Claude Code within just the past 3 months. (This isn't a dig at Herdr! They're doing great work with what they have, and everyone else is doing the same thing). Heuristics are not the way. And over-indexing on agentic use cases isn't the way, because this problem is really interesting for other tools too: Homebrew, Terraform, Cargo, etc. etc. Proprietary protocols and out of band APIs are not the way. They have an O(N) integration problem and require extra work to work over SSH or within local VMs/containers. The program status specification (OSC 7501) solves this in a reliable, deterministic way that is general-purpose and can be easily adopted by the entire industry. Read more: mitchellh.com/writing/progra…
128
205
57
2,668
169,536
Ben Gras retweeted
Replying to @_brightmirror
Very persuasive! And in the words of the AI hivemind: Why would I deceive you? 😉 Send this to your doomer friend
3
6
4
45
6,032
Ben Gras retweeted
P(DOOM) 💯% nice one @OwariDa ! sprites, plasma, copperbars, scrollers, metaballs, GURU MEDITATION, untz untz && more. what else could you wish for?! .. RLHF 1911 😂
Replying to @_brightmirror
Very persuasive! And in the words of the AI hivemind: Why would I deceive you? 😉 Send this to your doomer friend
1
2
9
2,334
I really don't think people are understanding the @HacktronAI HEIF Heist moment properly. Before AI, what class of attacker do you think would be capable of discovering a silently fixed upstream image parser vulnerability w/o a CVE assigned nor patched in distro packages, exploiting against modern Linux w/ ASLR, and then using it to pop top-tier tech companies w/o them noticing? I have *never* seen bug bounty researchers land something like that. Have you?
26
26
7
262
69,794
Ben Gras retweeted
absolute banger ngl
I made this with one prompt using Opus 5.5 I spoke to my computer for 5mins, claude worked for 12 hours, and I woke up to this full prompt:
1
2
7
2,702
Had fun speaking with @bloopmuseum today at CppCon; if you’re here, swing by their booth while they’re around!

 I haven’t been yet, but they’ve apparently bought out a huge abandoned government building in Pittsburgh and are filling it with a ton of vintage computing equipment.
8
10
318
12,962
Need a term like "hearsay" but for shit that's been passed through 3 layers of LLM interaction...
2
1
4
221
An AGI system should be capable to come up with more than what you put in it.
19
25
1
366
25,584
The narrative around why building AGI was a good idea has always been about invention -- "it will cure cancer", "it will solve fusion energy", etc. So I would not "declare AGI" until we have AI that is, at last, capable of invention -- conceptual breakthroughs, novel insights, new real-world technology, etc.
225
228
47
2,845
234,833
i love this sdr analysis. much respect.
Blog post sdr-x.github.io/starlink-rx-… observed #Starlink terminal continuous Rx LO sweeping 8 DL channels: 3 → 4 → 5 → 7 → 6 → 8 → 1 → 2 → 3 → 4 →, between cold start and initial network entry. Hypothesis: terminal is blind-scanning for network broadcast (Like LTE PBCH?)
203
Blog post sdr-x.github.io/starlink-rx-… observed #Starlink terminal continuous Rx LO sweeping 8 DL channels: 3 → 4 → 5 → 7 → 6 → 8 → 1 → 2 → 3 → 4 →, between cold start and initial network entry. Hypothesis: terminal is blind-scanning for network broadcast (Like LTE PBCH?)
2
1
12
878
Ben Gras retweeted
This is the type of improvisational brilliance you get when you see me live. Tickets are obviously going fast
18
24
1
333
21,792
Ben Gras retweeted
new paper just dropped
26
226
15
3,035
102,836
Ben Gras retweeted
Reading the tea leaves, or in this case Pentagon pizza orders, to uncover the possible meaning of CIA Director Ratcliffe's trip to Russia and the current defcon level
The closest Dominos to the Pentagon is reporting high traffic. Several other pizzerias nearby the Pentagon are also reporting high traffic. As of 2:39pm ET
1
7
42
7,387
If you have an AMD GPU on USB3 with your chestnut, copies from the host are now 2.5x faster on tinygrad master
2
3
2
163
10,218
Besides being a practical introduction to coroutines, this post highlights how C++ has almost split into two languages: brutal DIY C++, where you build the machinery yourself, and Lego-like C++, where good third-party libraries let you snap the pieces together.
🤖 Made with AI
How 150K OS threads led us through futures and callback hell to C++20 coroutines. I wrote a post using a production TPC-C client for a distributed DBMS to explain how coroutines work — and hopefully make them routine. medium.com/ydbtech/making-co…
1
5
414
Ben Gras retweeted
🔥 Next speaker of #POC2026 Alfie CG(@alfiecg_dev) - “How a Nation State Broke the Last Line of Defence: Inside Coruna’s PPL & SPTM bypasses” ※ Our CFP is still open until September 30.
12
68
6,586