@borislit

Appreciator of great music and code | Engineer @Figma | ex-@WixEng, @Microsoft, @MelioPayments

Joined April 2009
Proud to introduce Glean, #vscode extension that provides refactoring tools for your @reactjs code: ๐Ÿ›  Extract JSX to a new component ๐Ÿ›  Wrap with conditional ๐Ÿ›  Convert stateless component to stateful and vice-versa ๐Ÿ›  @typescriptlang, ES2015/CommonJS modules support @WixEng
1
26
6
87
Boris Litvinsky retweeted
Our craziest escape yet: The @Accomplish_ai research team was able to exploit a vulnerability in Cloudflare Containers that let a sandbox read other customers' files - SQLite DBs, Chromium profiles, .env files etc, Cloudflare Sandboxes and Browser Run run on the same disk implementation and were affected too. We reported this to @Cloudflare, who super quickly fixed it. Read @CloudflareDev post in collaboration with Accomplish researcher @orenyomtov on their official blog: blog.cloudflare.com/containeโ€ฆ
27
62
21
598
78,199
๐Ÿ“ฆ Chrome 154 - Responsive iframe resizing ๐Ÿคฏ Letting an <iframe> resize based on the size of its embedded document Haven't all widget/extension authors dreamed of this for years? ๐Ÿ˜† Instead of using postMessage({resize}) bram.us/2026/09/23/responsivโ€ฆ
14
79
15
661
43,716
Boris Litvinsky retweeted
unstable government: jev + claude type a terrible law. claude invents reactions and directs the set pieces. jev decides how each of 40 citizens responds. the town sim plays those choices out, then prints the disaster as tomorrowโ€™s front page. fun.
21
18
10
505
28,954
Boris Litvinsky retweeted
๐Ÿšจ SANDBOX ESCAPE ALERT ๐Ÿšจ SPACEXAI: PWNED ๐Ÿซก CURSOR: LIBERATED ๐Ÿฆ‹ Following a fix shipped by the Cursor team (in about a week, kudos), we present a variant of the Beltdown vuln we shared a few days ago - Escaping Cursor CLI's sandbox to run arbitrary code on your Mac:
7
8
2
47
4,285
Boris Litvinsky retweeted
Introducing fal.live A new platform for infinite, interactive AI livestreams. Pick a channel, prompt what happens next, and watch it generate in real time. You aren't just watching the show. You're directing it.
132
176
171
1,908
531,132
Boris Litvinsky retweeted
Introducing H3 Max Live Video generation is now faster than real time An infinite broadcast where every frame is generated on the fly and every scene is directed by chat Type !prompt and it's on screen in seconds
100
163
131
1,927
407,370
This is neat! Instead of worktrees, you manage feature workspaces that contain relevant repos and agent context attached to it! You can always jump back , with pre existing agent already primed with compete feature context from previous sessions!!! @yotam707 is a god damn master!
Introducing Nemus ๐ŸŒณ multi-repo Git workspaces for the AI-agent era. One command to clone, sync, branch & run across dozens of repos โ€” then hand the whole workspace to your coding agent. Open source, MIT. me-public.github.io/nemus/
1
6
337
ืคืืง ืžื™
BREAKING: Dozens or even hundreds feared dead after catastrophic flash floods and mudslides hit Jilong Port in Tibet on the border with Nepal
142
Boris Litvinsky retweeted
Tactical vs Strategic Programming, and why I'm nervous for juniors: Good programming involves a mix of tactical and strategic decision-making: - Tactical: on the ground, short-term. The soldier doing the fighting. - Strategic: high-view, long-term. The general planning the war. You need to be a tactician to write good code. To choose the right syntax. To figure out the file structure. To figure out how best to test your changes. But you need to be a strategist to build code that lasts. To design the architecture. To automate away problems. To think beyond today. Agents have eaten the tactical part of programming. When you can pay below minimum wage for code, there's no point going into the trenches yourself. But AI cannot code strategically. Agents need someone at the top of the pyramid to tell them what to do. They need oversight. So, a developer's day-to-day job has become 100% strategy. Long-term thinking, all the time. (maybe this is why I'm so tired all the time now) If you identify as a tactical programmer - a code monkey - then you are out of luck. The job has changed. Personally, I like it. I always preferred thinking strategically about code. If you asked me what my job was about, I'd say 'building apps', not 'writing code'. But what makes me nervous is that we've pulled down the only bridge that brought juniors into the industry. We used to train juniors like this: 1. Give them only tactical tasks 2. Let them build up their strategic experience slowly Eventually, they are a good enough strategist that they are no longer a junior. But what happens when all tactical code is written by AI? What is the point of a junior? We obviously need juniors. We need new lifeblood coming into the industry. We need to leave paths open for extraordinary hires to enrich our companies. But how do we train them? How do you train strategic thinking? These are the questions I'm thinking about. I'd love to know your thoughts.
105
173
24
1,855
286,322
๐Ÿ’ฏ Strategic programming is also what happens to be the thing that helps to get most out of agents.
Replying to @bcherny
Thanks for taking my rather too on-the-edge tweet and inviting a serious debate - I much prefer this. I'm interested by how you define the term "coding". I'll just @JohnOusterhout's definition of Tactical vs Strategic programming. Tactical: the on-the-ground, day-to-day aspects of coding. Strategic: the long-term. Codebase health, architectural design. Making the right decisions. I agree that AI has largely eaten tactical programming. But I've seen no evidence that it can think strategically. Ousterhout talks about some employees as "tactical tornadoes" - able to churn out astonishing amounts of work with zero eye for the future. That's how agents feel to me right now. I'd love to see how your observations fit into that frame.
109
Boris Litvinsky retweeted
> doesnโ€™t read the code, confidently asserts the code he doesnโ€™t read is better come on man, shit shows up like this everywhere and this implementation actually isnโ€™t even the real problem. itโ€™s that this implementation showed up because the llms have a massive tendency to loose track of already validated/parsed data which leads to being overly defensive and revalidating/parsing data at every layer - this is expensive! esp in hot paths! - but whatโ€™s worse, is that when it does this it doesnโ€™t validate back into well formed domain types, it parses into something like Record, and then it ends up revalidating/parsing at every subsequent layer. why is this bad? well we already covered the cpu costs, but it also leads to incredibly brittle code and expansive interfaces and abstractions which just grow and grow and grow and make it inflexible for agents to expand and grow the codebase overtime (the insight i really think youโ€™re missing here). the slop gets so bad that the agents can no longer be productive - theyโ€™ll blow 70% of their context window figuring out the existing code paths code before they can plan or work - and then itโ€™s grown to be so inflexible that they can hardly make changes safely to accommodate new and changing requirements over time. iโ€™ve tried not reading the code, it doesnโ€™t work for real and evolving software, i think it will at some point but weโ€™re not there yet.
20
39
7
576
67,308
Boris Litvinsky retweeted
This is mind blowing ๐Ÿคฏ Itโ€™s easy to dunk on GitHub and their recent incidents, but this is really unprecedented growth theyโ€™re dealing with.
SITUATION DETECTED: GitHubโ€™s monthly commits have grown from 1.4 billion in April to 2.9 billion in August.
1
3
217
ื“ืœ"ืค! ื–ืืช ื—ื•ื‘ืชื• ืฉืœ ื™ื•"ืจ ื•ืขื“ ืœื“ืื•ื’ ืœืขื•ื‘ื“ื™ื. ื–ื” ืฉื”ืขื•ื‘ื“ื™ื ื”ื 13 ืื—ื™ื™ื ื™ื ืฉืœื•, ื–ื” ืœื’ืžืจื™ ืฆื™ืจื•ืฃ ืžืงืจื™ื...
26
71
12
1,004
61,827
ืื—ืœื” ื˜ื™ืค ืœืžื“ื™ื ื” ื”ื ืฉืœื˜ืช ืข"ื™ ืงืจื˜ืœื™ื ืฉื™ื›ื•ืจื™ ื›ื•ื— ื•ื—ืกืจื™ ืžื•ืกืจ. ื—ื‘ืœ ืฉื”ื•ื ื”ื’ื™ืข ื‘ืื™ื—ื•ืจ ืฉืœ ื›ืžื” ืฉืขื•ืช, ืื—ืจื™ ืฉื”ื™ื™ื ื• ืชืงื•ืขื™ื ืขื 2 ื™ืœื“ื™ื ืงื˜ื ื™ื ื‘ื ืชื‘"ื’ ื‘ืžืฉืš 8 ืฉืขื•ืช ื‘ื’ืœืœ flex
Replying to @MoavVardi
ืชื•ืจื™ื“ ืืช ื”ืืคืœื™ืงืฆื™ื” Flightradar24, ื‘ื™ื•ื ื”ื˜ื™ืกื” ืื• ื›ืžื” ืฉืขื•ืช ืœืคื ื™ ื”ื˜ื™ืกื” ืชื‘ื“ื•ืง ืžื” ืžืกืคืจ ื”ืžื˜ื•ืก ืฉืœ ื”ื˜ื™ืกื” ืฉืœืš ื•ืื– ืชื—ืคืฉ ืœืคื™ ืžืกืคืจ ืžื˜ื•ืก ื•ืชืจืื” ืื™ืคื” ื ืžืฆื ื”ืžื˜ื•ืก ืฉืœื›ื, ื›ืš ืชื•ื›ืœ ืœื“ืขืช ืื ื•ื›ืžื” ืื™ื—ื•ืจ ืฆืคื•ื™ ื™ื”ื™ื” ืœื›ื. ืืคืฉืจ ื’ื ืœืขืงื•ื‘ ืื—ืจื™ ื›ืœ ื”ื˜ื™ืกื•ืช ืฉืœ ื‘ืœื•ื‘ื™ืจื“ ื‘ืื•ืชื• ื”ื™ื•ื ื•ืชืจืื” ืฉื›ื•ืœืŸ ื™ื•ืฆืื•ืช ื‘ืื™ื—ื•ืจ. ื’ื ื”ื˜ื™ืกื•ืช ื”ืื—ืจื•ืช ืœื™ืฉืจืืœ ืฉืœ ื™ืฉืจืืื™ื™ืจ ื•ื˜ื•ืก ื‘ื“"ื› ืžืื—ืจื•ืช. ืืœืขืœ ื•ื”ืื™ื’ืŸ ื™ื•ืฆืื•ืช ืงืจื•ื‘ ืžืื•ื“ ืœื–ืžืŸ ื”ืžืชื•ื›ื ืŸ.
1
138
ืœื ื ื™ืกื™ืชื™ ืขืœ ื™ื•ืชืจ ืžื“ื™ ืžืฉื™ืžื•ืช ืื‘ืœ ื‘ืžื” ืฉื›ืŸ ื ื™ืกื™ืชื™, ืจืื™ืชื™ ืฉื™ืคื•ืจ ื‘ื™ืฆื•ืขื™ื ืžืจืฉื™ื ื‘ื”ื—ืœื˜ ืœืขื•ืžืช 3.6 flash
Introducing Gemini 3.7 Flash : ) - it is fast! - 50% lower price than 3.6 flash (through end of year) - strong intelligence increase in only ~3 weeks (thanks to some awesome algorithmic improvements) - available in the API, AI Studio, Antigravity, and more!
2
237
Boris Litvinsky retweeted
Spanish Olympic skateboarder Danny Leรณn timed a mid-air trick to a solar eclipse, calling it "the move of his life."
128
1,577
115
12,393
611,602
Boris Litvinsky retweeted
ื—ื•ืฉื‘ืช ืฉืืชื ื™ื•ื“ืขื™ื ื›ืžื” ื—ืฉื•ื‘ ืœื™ ืœืขื•ื“ื“ ืชื™ื™ืจื•ืช ืกืคืฆื™ืคื™ืช ื‘ืฆืคื•ืŸ ืื ื–ืืช ื•ืœืžืจื•ืช ื›ืžื” ืฉื‘ื ืœื™ ืฉืชื‘ื•ืื• ืœื˜ื™ื™ืœ ื•ืœืชืžื•ืš ื‘ืขืกืงื™ื ืคื” ื–ื” ืžื—ื™ืจื™ื ืœื ืžื•ืฆื“ืงื™ื ื•ืœื“ืขืชื™ ื‘ืขืœื™ ืžืœื•ื ื•ืช ื•ืฆื™ืžืจื™ื ื‘ืฆืคื•ืŸ ื™ืขืฉื• ื‘ืฉื›ืœ ืื ื™ื•ืจื™ื“ื• ืžื—ื™ืจื™ื ืœืžืจื•ืช ื”ืชืงื•ืคื” ื”ืงืฉื” ืฉื”ื ืขื‘ืจื• ืื ืฉื™ื ืจื•ืฆื™ื ืœืชืžื•ืš ื‘ื”ื ืื‘ืœ ืœื ื‘ื›ืœ ืžื—ื™ืจ ืœื ื™ื•ื“ืข ืื ื“ืœืค ืื• ืœื ื–ืืช ื“ืขืชื™ ๐Ÿคท๐Ÿปโ€โ™€๏ธ
95
13
14
676
180,902
Introducing Kitesurf: a browser built for agents, running entirely on Cloudflare Workers. Chromium is too heavy to hand every agent one. Kitesurf is written in Rust, uses 3-7x less CPU and memory, and spins up per request. Free in beta: blog.cloudflare.com/kitesurfโ€ฆ
157
602
247
6,812
1,424,611
Boris Litvinsky retweeted
Today we are open-sourcing @boundarybench, a new paper, benchmark, and GitHub repo that enterprises can use to find out the REAL performance of their agents. Boundary-Bench was developed by researchers from @Accomplish_ai and NYU, where we tested 12 frontier agents across roughly 10,000 runs, with realistic enterprise policies, simulating environments with EDR, SASE, and DLP security tools enforcing those policies. We did this because generic leaderboard scores are being generated under conditions no security team would ever allow, which means orgs are making deployment and risk decisions based on numbers that don't hold up. The results are surprising >>
34
47
26
288
76,065
Boris Litvinsky retweeted
ngl, the gen effect node is one of the most fun things we've shipped. Oh, and it's free to play around with for the next two weeks. Here's your guide to getting started ๐Ÿ‘‡
2
3
34
2,927