Digital Transformation & Solutions

Jerusalem, Israel
Joined March 2009
Moshe Brevda retweeted
My biggest takeaways from @JoshWoodward (Head of @Google Labs, the Gemini App, and Google AI Studio) 1. The best ideas almost never come from a design sprint or brainstorm. At Google Labs, the ideas that became NotebookLM, Google Flow, Google Beam, and AI Studio all started with small groups of people who were obsessed with an insight and couldn’t stop themselves from building. These ideas surfaced in the shower, over a weekend, in a hallway. The implication for teams everywhere is that the environment matters more than the process. “You cannot microwave a good idea.” 2. Fall in love with the problem, not the product. Most ideas require three, four, or five significant pivots before they either find traction or get shut down. Teams that get hooked on a specific solution will struggle to make those pivots. Teams that are attached to the problem—the underlying pain point or the user behavior they are trying to shift—can keep adjusting until they get it right. 3. When looking for early PMF, data and retention are important, but the strongest signal of PMF is in people’s eyes. Do they light up? Do they lean in? When you show someone a prototype and they’re genuinely engaged, you feel it. When NotebookLM’s first AI podcast demo was played in a hallway, the reaction was immediate and unmistakable. 4. Keep a list of what is “almost possible,” and move fast when something crosses over. Google Labs keeps a live list of experiences that are almost possible. When something crosses the threshold, Josh describes it as “a phase shift,” like solid to gas, and the team moves immediately. Maintain a running list of things that are almost ready, and have a team positioned to sprint when one of them arrives. 5. Every company needs to think like a labs team now. The underlying technology is changing so fast that what’s possible is shifting from week to week. Which means that every company needs to be spending time playing with the latest models, running far-out experiments, and being first to discover what they unlock before the competition does—and then bringing those discoveries to the rest of the org. 6. When something is not working, the team almost always knows before the leader does. Josh’s instinct as a leader is not to be the one who decides to shut down a project. He watches instead for the passion running out, for the sense that the team has tried everything and nothing is working. His goal is to create an environment where people feel safe enough to say, “I don’t think this is working.” 7. Someone’s “unlearning rate” is one of the most valuable skills right now. Everyone talks about growth mindset and learning speed. Josh is watching for something different: How quickly can someone take an insight, validate or invalidate it through testing, and then let it go? The ability to walk away from a prior belief or approach when the evidence says you should is rare and becoming more valuable. 8. Roles are not blurring into one universal “builder” role. There is a tendency in the current moment to talk as though everyone is becoming a generalist builder. Josh thinks this would be a bad idea. The best people on his teams still have a primary specialty—a major—and also a “minor” they’ve developed. The advice he gives to early-career PMs who are excited about vibe coding and prototyping is clear: build adjacent skills in service of becoming an exceptional PM, not as a replacement for it. 9. A well-designed lab needs isolation, a clear mission, and the ability to create “good trouble.” Three things matter when setting up an internal labs team. First, it needs structural independence, reporting far enough from existing business units that weird ideas can survive long enough to prove themselves. Second, the lab’s mandate has to be explicit: are you graduating ideas to existing products, or inventing new categories? Clarity on that question changes almost every decision. Third, the lab should be a place to challenge how the company itself works, not just what it builds. At Google Labs, that included piloting new job ladders and builder roles before rolling them out more broadly. 10. Google Labs manages the marathon-sprint tension through seasons. At any given time, roughly 20 to 30 experiments are running in parallel, but individual teams experience a defined rhythm: sprints, post-launch recovery, and open exploration periods. After Google I/O each year, many labs teams enter a mode that looks unproductive from the outside: no shipping, just hacking, building, and discovering. Josh treats this as the seedbed for the next season.
Every company needs to think and operate like a labs team now. What’s possible changes every few months, and to stay ahead, you need to be experimenting at the frontier. Here's my conversation with @JoshWoodward, Head of @GoogleLabs, the @GeminiApp, and @GoogleAIStudio. We discuss: 🔸 What skills are rising fastest in value right now 🔸 Where the best ideas actually come from 🔸 How to recognize PMF early 🔸 Why you should keep a list of what’s ‘almost possible’ 🔸 Three rules for standing up an internal labs team Listen now 👇 youtu.be/3I6QYkccd3o
83
103
25
766
93,394
Moshe Brevda retweeted
Replying to @RampCapitalLLC
What’s Threads?
2,089
851
231
41,645
1,054,679
Moshe Brevda retweeted
there's a comprehensive database called OSV that tracks all known-malicious packages on npm currently Nub (and Aube) is the only package manager that checks it during version resolution. everything else will happily install a pwned version.
5
9
162
10,736
Moshe Brevda retweeted
Talked with a few folks inside of AI labs (OpenAI, Anthropic) about what they think of the future of software engineering. The “closer” to shipping production code engineers are, the less they believe software engineering will be “solved” fully by AI. The opposite true as well
100
165
30
3,026
322,097
🚀Running an open-source project? You could qualify for free credits, tools, and infrastructure, including: 🤖 AI access 🧪 Real-browser testing 🌐 Hosting 👉 Find out if you're eligible now: ossperks.com/
1
51
Thanks @pullfrogai for highlighting this! 🙏
1
30
Temporal is now enabled by default in @nodejs. Thanks @_richard_lau_ ! 🙏🙏
39
Example: our org (non Google) moves forward because of @st
Many orgs move forward because of a very small set of people. Many orgs stay afloat because of a very small set of people.
50
Moshe Brevda retweeted
Many orgs move forward because of a very small set of people. Many orgs stay afloat because of a very small set of people.
1
1
1
5
646
Make sure you have 2fa/passkeys enabled on your account. And never trust anyone that you didn't call.
Just encountered one of the most convincing Google account takeover scams I’ve seen. Perfect American accent. Calm. Professional. They start the call by saying someone tried to hack your Google account using a fake death certificate, then ask if you recognize a recovery email or phone number. They ask if you’ve received any recent Google emails about an account you don’t recognize trying to recover access. And sure enough, there’s a legit Google security email. Here’s the trick. The attacker isn’t trying to hack your account. They create a throwaway Google account, set your email as the recovery email, then try to recover that account. Google sends you a real security email. The scammer calls you live, references the email, and even tells you to verify the headers since it comes directly from Google. The headers are real. That’s the point. Then they tell you they’re locking down your account and that you’ll get a recovery prompt on your phone. You just need to approve it to stay safe. The giveaway was the device and location in the prompt didn’t match me. When I pushed back, they claimed it was from their servers, which obviously makes no sense. At that point I hung up. I have a personal rule to never approve anything I didn’t initiate, especially while on the phone. Extremely well executed social engineering. I’m sure this works on a lot of people. And if someone calls you about account security, assume it’s a scam
45
Moshe Brevda retweeted
Just encountered one of the most convincing Google account takeover scams I’ve seen. Perfect American accent. Calm. Professional. They start the call by saying someone tried to hack your Google account using a fake death certificate, then ask if you recognize a recovery email or phone number. They ask if you’ve received any recent Google emails about an account you don’t recognize trying to recover access. And sure enough, there’s a legit Google security email. Here’s the trick. The attacker isn’t trying to hack your account. They create a throwaway Google account, set your email as the recovery email, then try to recover that account. Google sends you a real security email. The scammer calls you live, references the email, and even tells you to verify the headers since it comes directly from Google. The headers are real. That’s the point. Then they tell you they’re locking down your account and that you’ll get a recovery prompt on your phone. You just need to approve it to stay safe. The giveaway was the device and location in the prompt didn’t match me. When I pushed back, they claimed it was from their servers, which obviously makes no sense. At that point I hung up. I have a personal rule to never approve anything I didn’t initiate, especially while on the phone. Extremely well executed social engineering. I’m sure this works on a lot of people. And if someone calls you about account security, assume it’s a scam
194
1,533
109
6,552
423,343
Moshe Brevda retweeted
What should @googlecloud ship in 2026?
10
3
15
4,075
somethin' shady about this! Looks awesome though
⚔️introducing TypeSlayer⚔️ A #typescript type performance benchmarking and analysis tool. A summation of everything learned from the benchmarking required to make the Doom project happen. It's got MCP support, Perfetto, Speedscope, Treemap, duplicate package detection, and more.
1
1
189
"Last year, GitHub gave away 11.5 billion build minutes for free to open source projects... which I think is about ~$184 million dollars" 🤯
We know we have work to do in maintaining our own open source surfaces for GitHub Actions (actions, runner-images, starter workflows, toolkits, etc.). That being said, I wanted to address what was discussed and also share what’s next for GitHub Actions: With respect to `safe_sleep` in self-hosted runners (note: this never impacted GitHub-hosted runners)... • We fixed the implementation causing an infinite loop on August 14th and cut a new runner release in October. So this bug has been fixed[^1] and released for a month or so. We missed closing the related issue[^2] as part of that release and then closed it on December 1st. • As for burning CPU while sleeping, this is obviously not great from just a quality of engineering perspective, but this was an intentional change away from relying on the OS sleep to address a customer case where it didn't work when sleep was not available. We are fixing this now to use sleep if it's present and fall back to this implementation only if it's not available. This script is only used in 2 scenarios: updating the self-hosted runner when a new version is available and recovering from an unhealthy termination. With the infinite loop issue fixed, the CPU inefficiency, while still not great, should have very little real impact to self-hosted runners CPU utilization and zero GitHub Actions billing impact to customers. The biggest impact is customer configs using multiple self-hosted runners on the same machine. In that case, during the seconds that this sleep is running during an infrequent update or after an unhealthy runner termination, the other runners would suffer from CPU consumption. • All of this is completely unrelated to any sleeps within workflows and jobs themselves. As for file hash issue[^3], a hosted runner image update that started rolling out on November 22 caused failures related to an unintended breaking change in the runner agent cached in the image. This was rolled back on November 23, which mitigated all customer impact. Hosted runner agent updates have been paused until improvements identified from this are completed, but image updates were unblocked on the 25th to ensure we continue to provide security updates for our hosted runners. GitHub Actions is a core primitive of GitHub and important to its future. Last year, GitHub gave away 11.5 billion build minutes for free to open source projects[^4] (which I think is about ~$184 million dollars). The Actions team’s priority for the last 18 months has been on scaling and reliability. In the last few months, the team has also focused on community asks and shipped support private/internal .github repos[^5], increased the actions cache size >10GB[^6], shipped Action workflow YAML anchors[^7], increased workflow dispatch limits[^8], and increased reusable workflow limits[^9]. As for what’s next, the Actions team is now going to be focused on: • Support for timezones[^10] in scheduled jobs and updates to schedule reliability • Return the run ID from workflow dispatch[^11] • Adding a switch function for expressions so they have a conditional operator or function[^12] • UX improvements, including faster page load times, better rendering for workflows with over 300 jobs, and a filter for the jobs list. • Parallel steps[^13] (one of the most requested features from GitHub Actions community I think this covers most of it, but we’ll follow up soon with more details in a proper blog post [1] github.com/actions/runner/pu… [2] github.com/actions/runner/is… [3] github.com/actions/runner-im… [4]github.blog/news-insights/oc… [5] github.blog/changelog/2025-0… [6]github.blog/changelog/2025-1… [7] github.blog/changelog/2025-0… [8] github.blog/changelog/2025-1… [9] github.blog/changelog/2025-1… [10] github.com/orgs/community/di… [11] github.com/orgs/community/di… [12] github.com/orgs/community/di… [13] github.com/orgs/community/di…
1
29
hey @steren: curious why Run doesn't support CONNECT and if there is any plan/way to change that? cloud.google.com/run/docs/kn…
2
159
Booster starts in top right corner. Watch to the end. Sound on
3,173
16,729
2,982
103,922
9,516,681
Wow. Former Iranian President Mahmoud Ahmadinejad claimed in a CNN Turk report that the Iranian Secret Service had established a unit to target Mossad agents within Iran. However, the leader of this unit turned out to be a Mossad operative himself, along with 20 other agents. This unit was reportedly responsible for stealing nuclear documents and for the assassinations of several Iranian nuclear scientists, before allegedly fleeing to Israel.
41
321
158
1,435
193,945
For those who didn't hear, I'm releasing a TypeScript book! 16 chapters, from setting up your IDE to understanding generics. Everything you need to ship a TS application FAST. Oh yeah, and it's going to be free online.
23
97
4
1,355
64,617
Thread on alternative views of iconic landmarks you (probably) haven’t seen before 🧵 1. The worn steps of the Tower of Pisa
973
27,308
2,598
340,617
61,942,592
lets see it drive like a real human they said
did they train this in the balkan area
48