
Building @zerocool_ai 🥶 CTO @round_ai_media 👁️ LSR @Spearbit 🧐 Resident @yAuditDAO 🤓 ETHSecurity Badge #51 @thedaofund 📛
Joined October 2020
- Tweets6.5K
- Following1.1K
- Followers10.4K
- Likes24.9K
devtooligan retweeted
no comments, no deps, no docs, no tests (except e2e ones), no PRs, very little CI, a lot of CD - this might be the uncomfortable future we're headed to
devtooligan retweeted
Replying to @Gossip_Goblin
Soon the world will understand Hollywood was filled with slightly above average creators who merely had a stranglehold on the means of production.
devtooligan retweeted
me: implement this feature
codex: done
me: are there any bugs in this feature you just implemented?
codex: what are you, a criminal?
devtooligan retweeted
We deleted 800k lines of unit tests from the @sazabi monorepo earlier this week.
Three hypotheses:
1- Unit tests "lock-in" slop code by making it hard to change or remove
2- Unit tests slow down dev cycles by making your agent do more work locally and by increasing CI times
3- Unit tests waste money by making your agent generate more tokens and by adding useless CI runs
Will report back soon with the results!
devtooligan retweeted
🎉 yBorg acceptances go out today. Check your email! 📬
Huge applicant pool, so we had to make some tough calls.
Didn't get in or want to follow along from home? We'll post all speaker sessions and course materials here on X as we go. 🧠
Follow + turn on notifications 🔔
AI auditing is essentially using stronger models to guess where the vulnerabilities are.
All your harness work just allocates a finite reasoning budget more efficiently, brute-forcing a smaller search space.
Ultimately, it’s a finite monkey: limited budget, better guesses, more targeted brute force.
devtooligan retweeted
yBorg applications close tonight!
We've got a pretty stacked lineup for speaker workshops
xitter.cf/yAuditDAO/status/21020…
Replying to @yAuditDAO
Details:
- We'll be building harnesses and ai tooling which will be used on live audits
- The program is 100% free
- Kicks off next week on September 28
- Lasts for 4 weeks
Here's the application:
forms.gle/K4EnfzPUcToFxN8k8
devtooligan retweeted
Day 18/30
If security is everyone's job at your startup, it's nobody's job.
Even small teams must identify a security lead, otherwise no one will take responsibility for making security decisions across the team. Do not rely on hope, because hope is not a strategy 🧵
devtooligan retweeted
was showing my normie friends codex and how you can just make whatever you want and they literally didn’t give a fuck
devtooligan retweeted
FREQUENCIES | AI Sci-Fi Short Film | Higgsfield Global Film Festival 2026
On a highly evolved alien planet where off-world media is forbidden, a communications worker becomes obsessed with humanity’s music.
Our official submission @higgsfield
THEY ARE GOING TO PUT THE APOCALYPSE ON UNISWAP
they already did the hard part. they invented a unit of extinction risk and started calculating how much their equity could buy.
“my donations might shave off a handful of microdooms”
brother that is a quote. you are quoting the extinction/equity pair. you don’t need a new philosophy. you need a liquidity pool.
introducing microdoom
fully collateralized by everyone you have ever loved.
Anthropic trains a new model. the safety team estimates it adds 4.6 microdooms. to offset this, Anthropic buys credits from an alignment nonprofit. the nonprofit funds interpretability research. the researchers spend the grant on Anthropic API credits.
closed-loop doom economy
someone calls this circular.
they receive a 9,000-word explanation of additionality.
then comes staked microdoom. 7.4% APY denominated in avoided catastrophe.
“where does the yield come from”
“you’re confusing realized impact with counterfactual impact”
“can i withdraw”
“relative to which baseline”
naturally the independent oracle is a multisig of seven epistemically independent people from the same group house. transactions execute when four of them say “this updates me.”
it depegs after two of them read different blog posts.
there is now a LessWrong post titled “Short Vol, Long the Lightcone: Preliminary Considerations for Existential Basis Trades.”
someone comments that the model ignores acausal arbitrage.
the author replies “good catch” and increases the leverage.
a faction forks the protocol into nanoHELL, for s-risk maximalists who believe extinction is insufficiently bearish.
Binance lists both.
BUT THERE IS A SETTLEMENT PROBLEM
if doom happens, the winning traders are dead. so is the oracle. nobody can collect.
a quant points out that this eliminates sell pressure.
the token pumps.
a governance proposal suggests paying claims to a successor AI acting as humanity’s legal estate. someone objects that this gives the successor AI a financial incentive to kill us.
the objection receives a retroactive impact grant.
paid in microdoom.
a LessWrong post proposes settlement in the nearest surviving Everett branch.
withdrawals are suspended pending a resolution of anthropic measure. deposits remain open.
the DAO votes to hire a philosopher as head of bridge security.
the protocol raises its own risk rating from “very low” to “low,” publishes a revised system card, and launches a points program.
meanwhile an employee asks whether burning his founder equity counts as a buyback or a safety intervention.
legal says it depends whether he does it before or after vesting.
CNBC now has a doom ticker.
JPMorgan is tactically underweight extinction into year-end.
somewhere in San Francisco a man who genuinely fears for humanity refreshes his portfolio and whispers:
“fuck. survival is priced in.”
devtooligan retweeted
This post looks like the start of a VERY sophisticated and well-funded PR operation to get support for Democrats to regulate AI into oblivion. Let me show you how it works:
1.) This guy, with minimal followers and no previous account activity, goes to the Wall Street Journal which publishes an exclusive with quotes from him on his resignation 18 minutes BEFORE this post goes up. Planning was clearly done in advance.
2.) Within hours, it has tens of thousands of reposts and the account has 100k+ followers. The post is punchy, quotable, it almost seems professionally written. The first three accounts to quote tweet it all do so within 15 minutes of the initial posting. Remember, this account had basically zero engagement beforehand, so an organic reach explanation seems unlikely.
According to Grok those accounts are @_NathanCalvin (General Counsel at Encode AI), @peterwildeford (Head of Policy at the AI Policy Network), and @DKokotajlo (Head of the AI Futures Project), all of which are up-and-coming AI-Doomer policy advocacy nonprofits.
The AI Futures Project website says it is funded “primarily” by the Survival and Flourishing Fund, which says on its own website that it has advised Jaan Tallinn, Skype creator and one of the leading investors in Anthropic, to grant over $2.5 million to the AI Futures Project since 2024.
Encode AI says on its website that it is ALSO funded by the Survival and Flourishing Fund, which in turn says that it told Anthropic investor Jaan Tallinn to grant $516,000 to Encode AI in 2025.
And wouldn’t you know it, the Survival and Flourishing Fund ALSO says it told Jaan Tallinn to grant $2 million to the AI Policy Institute, the 501(c)(3) affiliate of the AI Policy Network, as well.
What are the odds that the first three quote tweets of Coxon’s post would all be major AI-restriction policy advocates funded generously by the same donor, who also happens to be one of the leading investors in, and a board member of, Anthropic, the company Coxon was resigning from? And all within 15 minutes of posting (two within ten)?
3.) Jacob Coxon doesn’t have much of a resume, but we do know that, in 2022, he got a $20,159 scholarship for the “long term future scholarship program” from the Good Ventures Foundation, one of the philanthropic vehicles of Dustin Moskovitz, a notorious AI-doomer who has spent tens if not hundreds of millions on policy advocacy to strictly regulate AI, while also being an Anthropic Investor himself.
It also just so happens that the 14th person to quote Coxon’s post was @MaxNadeau_ (27 minutes after posting) who is the program officer for the Technical AI Safety team at Coefficient Giving, another of Moskovitz’s philanthropic spending vehicles. Max is not a frequent poster, his last posts before quoting Coxon were before Labor Day, but he was remarkably quick off the mark for this one.
4.) Basically every major Democrat politician and candidate has suddenly glommed on to this post, and conveniently, as the people cry out foe answers, Bernie Sanders already has a bill written to “ban super intelligence” and regulate AI into oblivion, and will be releasing later this week. The bill, among many other things, will create “a new cabinet-level federal agency to safeguard the public from the dangers of artificial intelligence” that will be “advised by an Artificial Intelligence Advisory Board comprised of experts on artificial intelligence.” Do you think, perhaps, Anthropic and its many investors who fund AI policy advocacy might have interest in getting to place a pet “expert” on the board of an entity that dictates what AI is and isn’t allowed to do? And isn’t it fortuitous that this whistleblower came forward with his oh-so scary stories so close in proximity to the release of the most radical piece of AI legislation ever introduced?
i have no idea what happens after the next two years. maybe we go irrelevant, maybe we won’t, those are all speculations that are not going to help you now, and for the next two years, i’m fairly confident that being good at security is not going to become irrelevant. if anything, i think this might be one of the most fun periods ever to be a hacker, because you can suddenly do things and aim high that were simply not possible before.
and the important thing is, just like before, you still need to be good at security.
that requires putting in the hours, understanding systems deeply, developing intuitions, and being more curious and ambitious than the people around you. llms are going to amplify all of this. they are not magically going to make everyone capable of finding serious vulnerabilities and getting paid.
look at ctf. gpt-5.6 didn’t suddenly turn random people into the best teams in the world. the strong teams are still the strong teams.
look at bug hunting. why are many of the people who were good before still the ones who are good now and printing money with models?
you can see something similar happening in math. models can now produce or help prove increasingly crazy mathematics, but can you understand all new conjectures being solved?
someone still has to understand the output, verify it, know whether it is interesting, and decide what to do next.
i actually think this creates demand for more mathematician than mathematicians loosing their jobs, altho new kind of mathematicians who will have to expect that they are not the heroes anymore
security should be similar. there will be incredible demand for people who can understand what models are doing, distinguish real results from bullshit, and point them toward useful attack surface. patching is one incredible problem, and random people wont be able to magically suggest or approve patches to complex vulnerabilities from llms
but i think the ambition of security research also needs to change. you should start thinking bigger. your research objective should increasingly be something like compromise this company, not lame bugs
maybe compromising a company requires finding a bug in some obscure open-source dependency. maybe it requires a browser bug, maybe multiple chains you need to think bigger and thats where companies going to value you
the point is that you need to operate one level higher, coordinate all of these capabilities toward an ambitious, long-horizon objective.
these models are incredibly capable brains in vats. somebody still has to connect the brain to reality.
you cannot just tell codex “hack openai” and expect a shell.
a serious target might require weeks of understanding its architecture, mapping dependencies, finding weird third-party components, testing hundreds of hypotheses, killing the useless ones, and repeatedly redirecting models toward the few paths that actually look promising.
so if you can spend the next two years with the curiosity of a kid trying to understand every layer of the internet, combined with the dopamine-junky brain that eventually wants to break those layers responsibly and get paid for it, i think this is an incredible time.
map the whole attack surface of companies
applications, browsers, operating systems, kernels, hypervisors, cpus, gpus, networks, cloud infrastructure, iot, data centres , whatever interests you
then pick something and go deep which has highest impact
devtooligan retweeted
Introducing MERIDIAN PROTOCOL
Our Future Vision XPRIZE submission.
After a geomagnetic catastrophe threatens to destroy humanity, a robotics engineer must trust the robot she programmed herself to save those she loves.
The contest asks filmmakers to imagine an optimistic and technology driven vision of the future.
Our vision wasn't to create a future where technology is seen simply as a tool for human advancement, but as an ever integrated part of the human experience, where love, connection and understanding play an ever important role.
Learn More at: futurevisionxprize.com
🤖 Made with AI
devtooligan retweeted
Uniswap Labs is adding a new layer to its security stack: Zero Cool
Going forward, Uniswap Labs will run Zero Cool Continuous Coverage across all active smart contract repos.
It’s been amazing working with this forward-thinking team throughout the rigorous evaluation process.
We’ll be sharing more details in an upcoming blog post. For now, we’re excited to welcome Uniswap Labs as the newest Zero Cool enterprise customer!
devtooligan retweeted
Replying to @ZeroCool_AI
@ZeroCool_AI has been in the arena with Audit Engine from the beginning.
They’ve taken on some of our earliest and most demanding engagements, pushed their system hard, and delivered a strong showing in the results we’ve seen so far.
Great write-up on their experience so far ↓


























