🔨 https://xitter.cf/t.co/J8SDEpaBbF (AI native agency) ❤️ Also boyfriend of 20ys, uncle, sailing, skating, gardening, mountainbiking.

Joined April 2009
Solarpunk is a movement that imagines a sustainable and optimistic future where humanity thrives in harmony with nature.
1
1
462
Kannst du dir nicht ausdenken
You want fake V8 engine noises? Yeah that’ll be extra. lol
1
17
Philipp M. W. Hoffmann retweeted
21 years ago I named "Reddit" and everyone said it was a horrible name, but I insisted one day people would say "I read it on reddit" and used my CEO-privilege to overrule everyone + kept the name. Now the company twitter account (unbeknownst to them) is making the joke. Heh.
I'd tell you a joke, but you've probably already Reddit.
544
10,151
263
198,823
3,490,487
Philipp M. W. Hoffmann retweeted
Wake up babe, a new @anabology just dropped
Universal High Income The most likely outcome
21
28
5
982
126,315
Philipp M. W. Hoffmann retweeted
Claude Code 刚刚通过逆向工程,在 90 秒内破解了我酒店房间的门锁。2014 年的加密技术。右上角的烟雾探测器也使用同一套协议——那个红色小灯不是电池指示灯。我启动扫描时,它闪了两次。 我现在躺在一个每晚 85 美元的酒店房间里。我打开 Claude Code,输入:「扫描范围内的每一台蓝牙和无线设备。告诉我哪些设备在与哪些设备通信。」 它找到了 19 台无线设备。其中 18 台是正常的。 设备 19:一个 BLE 控制器,使用着自 2014 年以来就没有修复过的固件。它控制着电子门锁、烟雾探测器、恒温器和房间里的保险箱。四台设备共用一个控制器。同一种协议。10 年没有任何更新。 我让 Claude Code 分析这套协议。整个过程用了 90 秒。 门锁使用一个 4 字节的滚动密钥,没有会话令牌。Claude Code 在第三次尝试时生成了一个有效的主密钥。我躺在床上,听见房间的门锁咔哒一声打开了。 接着,它发现烟雾探测器也连接在同一条总线上。照片里的红色小灯?那是控制器状态指示灯。它并不监测烟雾。它每隔 8 秒就会确认一次与门锁系统之间的 BLE 握手。 这意味着,任何处于蓝牙覆盖范围内的人——走廊、隔壁房间、停车场——只需要一条提示词和 90 秒,就可以: 打开你的房门 关闭房间内的警报 打开你的保险箱 而烟雾探测器会通过那个小小的红色闪烁,确认连接状态 检查只需要 2 分钟: 步骤 1 → 打开 Claude Code → 粘贴第一条评论中的提示词 步骤 2 → 它会扫描覆盖范围内的每一台 BLE 设备,并标记存在未修复固件的设备 步骤 3 → 如果发现问题 → 要求更换房间 → 要求换到配有机械门闩的房间 → 然后使用那个房间 每一家使用 2018 年之前生产的 ASSA ABLOY 或 Onity 门锁的酒店连锁都存在这个问题。这大约占全球酒店的 30%。 我本周测试了 3 家酒店。3 家全部存在漏洞。 看看照片。右上角。那个每隔 8 秒闪烁一次的红点。那就是握手信号。 保存这条提示词。下次入住酒店时 → 先运行它,再打开行李。
139
437
46
3,691
456,504
Philipp M. W. Hoffmann retweeted
Mehr Eier als all unsere Männer in der Regierung zusammen. @GiorgiaMeloni : „In Italien entsteht ein neuer Straftatbestand: die gewalttätige Teilnahme an einer Demonstration. Konkret heißt das: Wenn Sie sich während eines Zuges oder einer Demonstration einer Gruppe von fünf oder mehr Personen anschließen, Steine, Böller oder Stöcke werfen und die Sicherheit aller gefährden, riskieren Sie bis zu fünf Jahre Gefängnis und bis zu 20.000 Euro Geldstrafe. Wenn Sie das Gesicht bedeckt hatten oder jemand verletzt wurde, steigt die Strafe. Auch die Strafen für diejenigen, die in der Gruppe verwüsten, werden erhöht. Der präventive Arrest (fermo preventivo) kann künftig auch auf Minderjährige angewendet werden Wer etwas zerstört, zahlt – und wenn ein Minderjähriger etwas zerstört, zahlen seine Eltern. Bei Schäden an öffentlichem Eigentum (Bushaltestelle, Ampel, Polizeifahrzeug) schickt der Präfekt einen Zahlungsbescheid nach Hause. Bei Schäden an privatem Eigentum (Schaufenster, Geschäft, Auto) geht der Eigentümer zum Richter und erhält einen sofort vollstreckbaren Zahlungsbefehl.“
1,175
7,056
588
33,926
372,171
Made up story, there are no student loans in Germany
met a german girl in bali. 27, travelling solo, quit her job to “find herself.” no house, no savings, still paying off her student loans. told me she doesn’t want kids because she wants to see the world first. her biggest achievement this year was watching the sunset in 8 different countries. instagram sold her a lifestyle she can’t afford. i wish her the best.
1
29
Imagine they have to fight in a real modern war….
🚨🚨🚨 Артилерійські навчання армії Індії ! Уявіть обличчя оператора розвідувального дрона , який дивиться на це 😁
25
Philipp M. W. Hoffmann retweeted
156
421
53
5,416
97,849
Interestingly with AI in software engineering we already get a glimpse of the "Amazing Abundance" future where anyone can have anything at anytime
STRONG SIGNAL 🤖 Tesla’s latest filing reveals the ultimate skin in the game: key employee equity awards are now explicitly tied to the factory rollout of Optimus 🔥 Tucked inside the October 19 proxy statement is a clear signal that Tesla is moving well beyond lab experiments. The company confirmed it is actively building its first dedicated Optimus production lines, scaling the compute clusters needed to train end-to-end neural networks, and transferring years of FSD breakthroughs directly into general-purpose humanoid robotics. The standout detail sits right in the compensation disclosures. Tesla explicitly added "Optimus production and deployment" as an operational milestone required for performance stock awards granted to key non-executive talent. That means execution isn't just riding on Elon Musk’s headline pay structure. The engineers, manufacturing leads, and specialists on the ground now have direct, serious upside tied to getting physical units off the assembly line. When an engineering culture aligns individual equity directly with shipping physical hardware, timelines tend to shrink fast. Optimus might not be a standalone voting proposal at this year’s shareholder meeting, but make no mistake: it has officially shifted from speculative moonshot to an incentivized industrial program. The ramp-up is going to be wild to watch.
15
Paris is still fucking amazing to this date - I was there 3 weeks ago Yes, RIGHT NOW it's maybe a bit crazy, but that's also part of the history of Paris that people regularly escalate for different reasons through the last centuries
Hard to argue this wasn’t the peak of Western civilization
22
Philipp M. W. Hoffmann retweeted
Grok Bot is now one step closer. Set it as your iPhone's Action Button and press it to talk with Bot.
2,322
1,104
841
17,376
2,576,887
Philipp M. W. Hoffmann retweeted
Ich bin nicht sehr in dieser Vergesellschaftungsdiskussion. Aber wäre es nicht besser, mit 16 Mrd neue Wohnungen zu bauen, statt schon existierende zu kaufen? Meinetwegen durch eine stadteigene Wobaugesellschaft. Und damit gleichzeitig Druck auf Mieten azszuüben.
250
62
13
1,426
76,448
Philipp M. W. Hoffmann retweeted
A divided Europe would be great. For everyone who isn’t European. Want to conquer a part of Europe? Easy. Without unity there is no meaningful opposition. Want to wipe out European industry? Easy. Without unity there is no common policy to protect European companies. Want your corporations to do whatever they want in Europe, even if it harms Europeans? Easy. Without unity global companies are stronger than governments. Without unity, Europe is at the mercy of the rest of the world.
Wake up!!! We are fighting for this. 🇪🇺
52
56
5
361
5,030
Philipp M. W. Hoffmann retweeted
Replying to @davidsven
Remember when Apple made the app where they compressed every physical item into an iPad and people went nuts? Now they make an ad where they celebrate all these real world items - but the ad is anti cyclical again, the world has evolved towards AI and Apple hasn’t gotten the memo
1
1
49
„IMO all these German SUV EVs look so bottom heavy. I guess it’s because they need to fit the battery pack and that requires to make the bottom part higher but in order to stay below a certain height that looks good they make the windows smaller. But that makes the whole body look disproportionate. Can you modify the image to keep the essential design but make it more equally distributed design wise” #amg #AMGGTSUV
2
50
Philipp M. W. Hoffmann retweeted
J'ai vu une Tesla décoller. Et j'ai entendu beaucoup de bêtises. « Ça ne sert à rien. » « Gadget de milliardaire. » « Qui a besoin d'une voiture qui vole ? » Personne. Et c'est exactement pour ça que c'est important. En 1978, Brabham a aligné en Formule 1 une voiture équipée d'un ventilateur géant à l'arrière. Il aspirait l'air sous le châssis et plaquait la voiture au sol. Elle a gagné sa première course avec une avance insolente. Elle a été interdite immédiatement. Quarante-huit ans plus tard, on y revient. Un système de succion qui colle la voiture à la route et lui permet de passer sous la seconde au 0 à 100. Personne n'a « besoin » de faire le 0 à 100 en moins d'une seconde. Comme personne n'a besoin d'une Formule 1. Et pourtant : les freins carbone de votre berline, l'hybridation de votre moteur, l'aérodynamique de votre SUV, les palettes au volant — tout ça vient de voitures de course que personne n'utilisera jamais pour aller au travail. La Formule 1 ne sert à rien. Pourtant elle sert à tout. En 1973, quand la France a lancé Ariane, l'Europe sortait de onze échecs consécutifs du programme Europa. La presse parlait d'argent jeté dans l'espace. Vingt ans plus tard, Ariane détenait la moitié du marché mondial des lancements commerciaux, et chaque satellite de télévision, de météo ou de GPS que vous utilisez a bénéficié de cette obstination. Le progrès a toujours la même tête au début : un truc inutile, cher, ridicule, construit par des gens qu'on prend pour des fous. Ce que j'ai vu à Dallas, ce n'est pas une voiture volante. C'est un châssis, une gestion de l'énergie et une maîtrise des flux d'air que l'industrie automobile mettra dix ans à digérer. Les applications viendront : sécurité, freinage, stabilité, consommation. Elles finiront dans des voitures ordinaires conduites par des gens qui expliqueront, en 2036, que tout ça était évident. La question n'est jamais « à quoi ça sert ». La question est : qui ose encore construire des choses qui ne servent à rien ? Il y a cinquante ans, c'était nous. La fusée, le TGV, le Concorde, le Minitel. L'Europe construisait des choses absurdes et magnifiques. Aujourd'hui, on commente depuis le siège arrière car nous sommes hors course. Merci @elonmusk de nous faire rêver
1,320
5,742
520
35,569
800,534
Philipp M. W. Hoffmann retweeted
This car is the nightmare for all Extinction Rebellion protesters blocking and gluing themselves to the road
10
4
2
132
3,405
Philipp M. W. Hoffmann retweeted
Je ne veux plus fréquenter les gens qui disent « À quoi ça sert ? ». J’ai 50 piges sur mon passeport, 12 ans dans ma tête (et 18 ans dans mon slip, dirait ma femme). Et je compte bien que ça dure. Je ne supporte plus les pisse-vinaigre professionnels du scepticisme. À quoi ça servait de vouloir voler ? De traverser les océans ? De marcher sur la Lune ? À rien. Jusqu’au jour où quelqu’un l’a fait. J’ai toujours eu une tendresse infinie pour les originaux. Les inadaptés. Les rebelles. Les emmerdeurs. Ceux qui ne rentrent pas dans les cases. Ceux qui ont des idées absurdes, des ambitions démesurées, des projets improbables. Parce que ce sont eux qui font avancer le monde. Pas les gestionnaires du déclin. Les gens suffisamment fous pour croire qu’ils peuvent changer le monde sont précisément ceux qui finissent par le changer. Et ce qui me terrifie aujourd’hui c’est l’état d’esprit que nous transmettons à nos enfants. On les élève dans une atmosphère de fin du monde permanente. Entre malthusianisme, injonctions à la décroissance, culpabilité écologique et anxiété organisée. Quelle terrible inversion des valeurs ! L’écologie devrait être un formidable défi lancé à l’intelligence humaine, pas une pédagogie de la résignation. Je ne veux pas d’une génération qui s’excuse d’exister au point de ne plus faire d’enfants Je veux une génération qui brûle d’envie de découvrir, de créer, de baiser, de comprendre ! l’optimisme n’est pas de la naïveté mais le courage de croire en notre capacité à tout affronter. Le progrès n’est pas une fatalité mais une conquête. C’est mon ode aux rêveurs, aux inventeurs, aux enthousiastes, aux insoumis, aux doux dingues et aux emmerdeurs magnifiques. À tous ceux qui disent « t’es cap ? » plutôt que « À quoi ça sert ? ». J’ai 50 ans, et je refuse de devenir vieux dans ma tête. Aux fous qui veulent changer le monde !
Real life, baby
775
2,389
262
15,013
334,979
Americans have no idea how big the Black Forest is.
🤖 Made with AI
Replying to @Matt_M_Bennett
Dense forests, unmaintained roads, Europe is too settled to experience this.
324
140
38
9,811
809,615
No matter whether pre or post AI: lean startup principles always apply
Every week someone tells me they vibe-coded their app over the weekend and don't need developers anymore. Before it touches a paying customer, make sure it includes: > a schema someone designed, instead of one the AI improvised table by table > login that still works when someone puts a plus sign in their email > password reset links that expire and work once > MFA, plus a recovery path for the user who lost their phone > sessions that time out, and a way to kill every session for one user > SSO for the enterprise customer who won't sign without it > SAML, because that customer's IT team doesn't do magic links > SCIM, so a fired employee loses access the moment IT offboards them > roles and permissions deeper than "admin" and "everyone else" > checks that stop user A from reading user B's data by changing one number in the URL > tenant isolation, so one customer's bug never shows another customer's records > an admin "log in as this user" button for support, with an audit trail on every use > rate limits on login, so nobody can guess passwords at scale > lockouts that stop attackers without locking out your CFO the night before the board meeting > database migrations that run forward and roll back > migrations that don't lock the main table at 2pm on a Tuesday > indexes, because the query that was instant on 50 test rows times out on 5 million real ones > connection pooling, so a traffic spike doesn't exhaust the database > backups every night > a restore from those backups, tested, because a backup you've never restored is a hope > point-in-time recovery for the day someone runs a delete without a where clause > soft deletes, so "I deleted it by accident" is a support ticket and not an incident > validation on the server, not just in the form > timezones stored right, so the 9am reminder doesn't fire at 4am > the customer with an apostrophe in their last name > emoji, accents and right-to-left text in every field > money stored as integers, because 0.1 + 0.2 doesn't equal 0.3 in floating point > currency, rounding and tax rules for every country you sell into > a data model that survives your second customer asking for "one small change" > idempotency keys, so a retried payment doesn't charge the card twice > deduplication for the user who clicks submit four times > pagination that still works on page 400 > exports, because sooner or later every customer wants their data in a spreadsheet > imports that survive the CSV someone saved in 2009 > retention rules, and code that deletes what your contract says you'll delete > secrets out of the code, out of the repo and out of the AI chat history > rotating every key the AI pasted into a config file last month > confirming every package the AI installed exists and is the one you meant > dependency scanning, because the AI pulled in libraries nobody reviewed > input sanitization everywhere a user can type > protection against SQL injection, XSS, CSRF and the rest of the OWASP list > file uploads that get scanned, size-limited and stored where they can't execute > CORS rules that aren't "allow everything" > security headers on every response > encryption at rest and in transit > least-privilege access for everyone, including the AI agent holding production credentials > logs that record who did what, without recording passwords, tokens or card numbers > a penetration test before your enterprise customer's security team runs their own > answers to the security questionnaire every enterprise buyer sends, with evidence behind each one > a disclosure process for the day a stranger emails you a vulnerability > a plan for the day a laptop with production access gets stolen > SOC 2, which means policies, evidence and an auditor, not a checkbox > HIPAA, the moment a single patient record touches your system > a BAA with every vendor that touches that data, including your AI model provider > audit trails that show who viewed a record, not just who changed it > PCI scope, and card numbers kept out of your database > GDPR deletion requests that reach every table, backup and log > data residency for the customer whose contract says EU only > quarterly access reviews someone signs off on > dev, staging and production environments that match each other > infrastructure written as code, so the setup lives somewhere other than one person's memory > a deploy pipeline that runs the tests before anything reaches customers > one-click rollbacks, because Friday deploys happen > zero-downtime deploys, because your customers don't have maintenance windows > feature flags, so you can ship the code without shipping the feature > autoscaling for the Monday morning spike > a CDN, so the app loads fast in Singapore too > DNS, SSL certificates, and renewals that don't expire on a Sunday > background job queues, so slow work doesn't freeze the page > retries with backoff, so one flaky API call doesn't become a lost order > a dead-letter queue for the jobs that fail every retry > cron jobs that don't run twice the day you add a second server > caching, and clearing that cache when the data changes > SPF, DKIM and DMARC, so your password resets don't land in spam > bounce and complaint handling on every transactional email > storage rules, so you stop paying to keep 2021's temp files > cost alerts, so a runaway agent loop shows up the same day and not on the invoice (we learned this one for $1,382.59) > a disaster recovery plan, written down and tested once a year > a second region, if your contract promises uptime one region can't deliver > structured logs you can search at 3am > error tracking that groups the same bug instead of sending you 4,000 emails > uptime checks from outside your own network > alerts that page a human, tuned until they stop paging for nothing > dashboards for latency, error rate and throughput > tracing for one slow request across every service it touches > an on-call rotation, and a person who picks up > runbooks, so the engineer on call knows what "queue depth critical" means > postmortems that change something > a status page customers check before they email you > unit tests written by someone who knows what the logic should do > integration tests for every third-party API you depend on > end-to-end tests for signup, checkout and the other flows that make you money > load testing before the launch email goes out > test data that looks like production without being production data > regression tests, so fixing bug 41 doesn't bring back bug 12 > testing on the five-year-old laptop your biggest customer's ops team still uses > accessibility compliance, because the enterprise contract requires it > subscriptions, upgrades, downgrades and proration > failed-payment retries and dunning emails > invoices with the customer's PO number on them, because procurement won't pay without it > sales tax and VAT > refunds, credits and partial refunds > usage metering that matches what you bill, to the cent > annual contracts with custom terms your billing logic never planned for > revenue reports your finance team can reconcile > webhooks that verify signatures > webhooks that retry, with a log of every failed delivery > a versioned API, so you can change it without breaking your customers' integrations > API keys customers can create and revoke > API rate limits that protect you without blocking real integrations > a plan for the day a third-party API changes its response format without telling you > OAuth token refresh, because tokens expire at the worst possible moment > a sandbox where customers can test their integration > protection against prompt injection in every field that reaches the model > customer and patient data kept out of prompts that leave your network > a model spend cap per customer, so one heavy user can't run up your bill > evals, so you find out when a model update makes your answers worse > a fallback for the afternoon your model provider goes down > a migration plan for the day your model gets deprecated > prompt and output logs for debugging, minus whatever you're not allowed to keep > a human approval step for anything the AI does that can't be undone > pages that load on hotel wifi > empty states, loading states and error states on every screen > error messages a customer can act on, instead of "something went wrong" > forms that keep what people typed when one field fails validation > emails that render in every mail client your customers use > notifications people can turn off > undo > keyboard navigation and screen reader support > translations, with dates and numbers formatted for each locale > a back button that does what people expect > code a human can read > code review on every change > a branching strategy, so two people can work without overwriting each other > monthly dependency upgrades, so you're never two major versions behind > framework upgrades before the old version stops getting security patches > deleting the dead code the AI left behind from its first three attempts > splitting up the 2,000-line file the AI kept appending to > architecture decisions written down, with the reasons > a README that gets a new engineer running locally in under an hour > documentation for whoever inherits this > an admin panel for your ops team > support tooling, so customer success can answer questions without pinging engineering > a changelog customers can read > terms and a privacy policy that match what the code does > every account, domain and repo in the company's name, not the name of whoever built the prototype > a bus factor higher than one Oh, and besides keeping all of this working every day, forever… your vibe-coded app will still need people who know what they're doing: > reading every line the AI wrote before it ships (a senior engineer) > designing the data model before your second customer breaks it (a backend engineer) > explaining why the AI's fix for one bug created two new ones (a senior engineer, again) > deploys, rollbacks, servers and the cloud bill (a DevOps engineer) > answering the page at 3am when payments stop (whoever's on call) > patching the framework the week a vulnerability goes public (security) > walking an auditor through how patient data moves (security and compliance) > testing what the AI says it tested (QA) > running a migration on a live database without losing a row (a backend engineer) > saying no to the feature that breaks three others (a tech lead) > turning "works on my laptop" into "works for every customer at once" (an architect) > debugging the code when the AI that wrote it can't (a senior engineer) > remembering why it's built this way, a year from now (someone who was there) …wishing them the best 🫡
36