iiinova — where your digital self keeps evolving

Dominik Kundel @dkundel.com · 02/12/2024

SFO is the only airport I know where Precheck has a longer line than regular security 😅

Picture of the wait times at SFO with general queue being 8 minutes and TSA Precheck 10 minutes.

0130

Dominik Kundel @dkundel.com · 29/11/2024

Incredible photos 👏👏

170

Dominik Kundel @dkundel.com · 29/11/2024

Happy "unsubscribe from all the stores you didn't know you still consented to getting marketing emails from" day 😄

050

Dominik Kundel @dkundel.com · 28/11/2024

For example labelers like the Pronoun labeler or the GitHub Contributor labeler are fun: bsky.app/profile/pron...

bsky.app

130

Dominik Kundel @dkundel.com · 28/11/2024

Bluesky is an excellent rabbit hole of potential 😂

110

Dominik Kundel @dkundel.com · 28/11/2024

I just use the pinned feed :) it's not great but works 😅 blueskydirectory.com/feeds/pins

110

Reposted by Dominik Kundel

Dr. Casey Fiesler @cfiesler.bsky.social · 27/11/2024

Hi, so I've spent the past almost-decade studying research uses of public social media data, like e.g. ML researchers using content from Twitter, Reddit, and Mastodon. Anyway, buckle up this is about to be a VERY long thread with lots of thoughts and links to papers. 🧵

59959450

Dominik Kundel @dkundel.com · 27/11/2024

I love the concept of building real apps with real users. Building apps like Twilio Barista was one of the best ways for me to learn all the edge cases of our products and also try products I hadn't tried yet.

050

Dominik Kundel @dkundel.com · 27/11/2024

Have you looked into custom feeds yet? They are great as well! I love the Quiet Posters one for example and I love that you can build your own

110

Dominik Kundel @dkundel.com · 25/11/2024

I love the house analogy!

010

Dominik Kundel @dkundel.com · 21/11/2024

💸 No. 10 - Unbounded Consumption Unrestricted LLM usage can lead to denial-of-service attacks or excessive costs. 🔐 Mitigation tips: Implement rate limits, monitor resource usage, and throttle requests.

000

Dominik Kundel @dkundel.com · 21/11/2024

🤥 No. 9 - Misinformation LLMs may propagate false or harmful content from biased or unverified sources. 🔐 Mitigation tips: Use fact-checking workflows and curate trusted data sources.

100

Dominik Kundel @dkundel.com · 21/11/2024

🔢 No. 8 - Vector and Embedding Weaknesses Unsecured embeddings may expose models to poisoning or unauthorized access. 🔐 Mitigation tips: Encrypt embeddings, validate inputs, and restrict database access.

100

Dominik Kundel @dkundel.com · 21/11/2024

🔍 No. 7 - System Prompt Leakage Exposure of system prompts can reveal application logic or sensitive information. 🔐 Mitigation tips: Avoid storing sensitive data in prompts; encrypt or obfuscate key instructions.

100

Dominik Kundel @dkundel.com · 21/11/2024

🪓 No. 6 - Excessive Agency Granting too much autonomy to LLMs can enable harmful or unintended actions. 🔐 Mitigation tips: Limit permissions, add user oversight, and enforce action constraints.

100

Dominik Kundel @dkundel.com · 21/11/2024

🤝 No. 5 - Improper Output Handling Unsanitized outputs can lead to XSS, SQL injection, or system-level attacks. 🔐 Mitigation tips: Sanitize outputs and enforce encoding based on context (HTML, SQL, etc.).

100

Dominik Kundel @dkundel.com · 21/11/2024

☠️ No. 4 - Data and Model Poisoning Compromised datasets or tampered models lead to biased outputs or hidden backdoors. 🔐 Mitigation tips: Vet datasets, track transformations, and validate outputs against trusted sources.

100

Dominik Kundel @dkundel.com · 21/11/2024

⛓️ No. 3 - Supply Chain Risks Third-party dependencies or tampered models can introduce vulnerabilities in LLMs. 🔐 Mitigation tips: Audit dependencies, enforce provenance checks, and validate model integrity.

100

Dominik Kundel @dkundel.com · 21/11/2024

🤐 No. 2 - Sensitive Information Disclosure LLMs can leak private data or proprietary information via crafted queries or poor sanitization. 🔐 Mitigation tips: Mask sensitive data, restrict access, and monitor logs for leaks.

100

Dominik Kundel @dkundel.com · 21/11/2024

💉 No. 1 - Prompt Injection Attackers manipulate LLM prompts to alter behavior, bypass security, or gain unauthorized control. 🔐 Mitigation tips: Use input validation, output constraints, and enforce principle of least privilege.

200

Dominik Kundel @dkundel.com · 21/11/2024

The new @owasp.org 2025 Top 10 Risk & Mitigations for LLMs and Gen AI Apps was released and there are some great updates in there! Highly recommend giving it a read. If you are strapped for time, check the thread 🧵 for a short summary on each. genai.owasp.org/llm-top-10/

genai.owasp.org

LLMRisks Archive - OWASP Top 10 for LLM & Generative AI Security

120

Dominik Kundel @dkundel.com · 20/11/2024

You should turn them into a starter pack as well so it's easier for people to follow them 🙂

000

Dominik Kundel @dkundel.com · 19/11/2024

A bummer! I will see you at re:invent then I assume 🙂

110

Dominik Kundel @dkundel.com · 19/11/2024

Aw man I was going to come but ended up getting last minute concert tickets. Are you going to AI Tinkerers on Thursday?

100

Dominik Kundel @dkundel.com · 18/11/2024

My talk from the "AI for Marketers" User Group just went live! In it I cover what an AI Agent is and how agents will change different aspects of Growth Marketing and Marketing at large. youtu.be/2gU72m_kyAo?...

youtu.be

Twilio AI Assistants

YouTube video by AI User Group

120

Dominik Kundel @dkundel.com · 16/11/2024

Instead if you for some reason want to be able to have the AI influence a URL parameter in an API this tactic forces you to set up a proxy rather than using an existing API that's not suitable for AI Agents. Details on why you should use proxy endpoints for AI Agents www.twilio.com/en-us/blog/r...

twilio.com

Rogue Agents: Stop AI From Misusing Your APIs

Discover effective strategies to use APIs securely with AI agents. Learn about threat modeling and security protocols for safeguarding interactions.

010

Dominik Kundel @dkundel.com · 16/11/2024

One example where we applied this with Twilio AI Assistants is with Tools. You can give an Assistant/Agent a Tool by giving it a URL and input schema. But because we think you should not let the AI decide the URL and create a proxy instead, we don't let you use URL placeholders (2/3)

110

Dominik Kundel @dkundel.com · 16/11/2024

Hadn't heard of "well-designed system makes it easy to do the right things and annoying (but not impossible) to do the wrong things" as a phrase but I always thought of it as a helpful tactic in DX. Example in the 🧵 (1/3)

141

Dominik Kundel @dkundel.com · 14/11/2024

Yay first time I'm part of a starter pack 🎉 with so many great people. Feels like the pressure is now on 😅

031

Dominik Kundel @dkundel.com · 13/11/2024

But where do I learn about all the things that are possible. Feeds are super intriguing but what else am I missing?

110

Dominik Kundel @dkundel.com · 13/11/2024

Seeing all the posts from @hipstersmoothie.com makes me both really excited about this platform and also realize that I think I don't understand more than 30% of what this place can do. Like are "Labelers" a well know thing?

131

Dominik Kundel @dkundel.com · 03/11/2024

Are there other party topics than obscure JS runtime bugs?

000

Dominik Kundel @dkundel.com · 02/11/2024

That was my reaction 😄 Hadn't realized how much was going on here since I stopped using it a year ago

020

Dominik Kundel @dkundel.com · 02/11/2024

Thank you! Exactly what I was looking for 💖

010

Dominik Kundel @dkundel.com · 02/11/2024

Incredibly helpful thread to get started on Bluesky!

110

Dominik Kundel @dkundel.com · 02/11/2024

I hadn't truly realized how bad the other website has gotten until I used Bluesky again for the last few days 💙 it's so much better here and the starterpacks feature is genius! Wish they were more discoverable though

140

Dominik Kundel @dkundel.com · 01/11/2024

Very cool! Did you use a local LLM or a hosted one?

000

Dominik Kundel @dkundel.com · 01/11/2024

👋 What did I miss here in the last year? 😅

000

Reposted by Dominik Kundel

Phil Nash @philna.sh · 31/10/2024

At #GitHubUniverse Python was announced as the top programming language on @github.com . Wait a minute, who is that in third place...?

GitHub's listing of the top programming languages on GitHub. From 1 to 10: Python, JavaScript, TypeScript, Java, C#, C++, PHP, Shell, C, Go

The Scooby Doo meme where Fred reveals who is under the ghost hood. Before revealing, the ghost is labelled as "TypeScript". After revealing it turns out to be "JavaScript".

2232

Dominik Kundel @dkundel.com · 03/05/2023

Yesterday I wrote 3 independent documents in parallel while having two separate in-depth conversations on Slack. How did I go through my life thinking this was normal and not that I had ADHD 👀🙈

020

Dominik Kundel @dkundel.com · 02/05/2023

*Everything is awesome* 😅

010

Dominik Kundel @dkundel.com · 01/05/2023

I couldn't log in on web earlier and somehow I wasn't surprised

200