Sign in

Peter van der Zee

@pvdz.ee
451 followers 92 following 1K posts

tafka @kuvos eng @socket.dev - 15yr js/ts - rust - ex vercel - ex fb - js1k-guy

PostsRepliesMedia
Peter van der Zee @pvdz.ee · 27/09/2026
Why don't openai/anthropic etc create an actual airgapped local network for their CTF training? Strikes me as not too hard to gate all egress. Anything not covered can be caught by a set of monkeys (->AIs), ask the requesting AI for what it was, and create a mock service to simulate it. Easy peasy?
et.al
020
Peter van der Zee @pvdz.ee · 24/09/2026
claude 5.5 is great but the security fences are super annoying. i know when working on a deobufscation tool you're kind of just asking for it but come on :/ it's not even a hard block (retry and it's fine) but it's very frustrated to my workflows
010
Peter van der Zee @pvdz.ee · 21/09/2026
VCRDD; vibed code-review driven development Vibe some code, then spend the same amount of time as you otherwise would reviewing the 5k loc resulting PR.
020
Peter van der Zee @pvdz.ee · 19/09/2026
oops. flew too close to the sun, working on preval and tenko perf at the same time.
010
Peter van der Zee @pvdz.ee · 19/09/2026
Works or B0rks? ``` console.log(-5n); console.log(+5n); ```
020
Peter van der Zee @pvdz.ee · 15/09/2026
I always knew that moving Tenko to a flat buffer tape AST approach would improve perf. I just could never be bothered. Now I just let Claude do it and low and behond; it's indeed faster. Gotta love it.
010
Peter van der Zee @pvdz.ee · 12/09/2026
wait, what do you mean, i'm not afraid of blazes ... no no not me...
010
Peter van der Zee @pvdz.ee · 11/09/2026
Been working on preval with claude for a few weeks now. It's great. I've been letting it implement ideas and patterns and every so often I let it do some perf hunting. It gives up very easily but /goal is a life saver. Past two days I had it use this 10mb malware sample and it's been gutting perf 😍
121
Peter van der Zee @pvdz.ee · 10/09/2026
props to logitech's logi keyboard and mouse. it's actually amazing how little power draw they have. my wireless logi keyboard gets ~15h usage a day throughout the year. it has two or three aa/a batteries that I replace less than once a year. mouse needs a charge less than once a month. really good
021
Peter van der Zee @pvdz.ee · 10/09/2026
Well. At least pypi gave it a run for its money. It got so stuck on account registration. Ultimately got through, of course. Some interesting lessons for pypi and fastly here (and other vendors). www.anthropic.com/research/ali... Transcript: raw.githubusercontent.com/anthropics/m...
raw.githubusercontent.com
https://raw.githubusercontent.com/anthropics/mythos-5-incident-transcript/refs/heads/main/transcript.html
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"> <title>Mythos 5 Transcript Release</title><meta name="robots" content="no...
010
Peter van der Zee @pvdz.ee · 09/09/2026
typoof bug === "booleon"
010
Peter van der Zee @pvdz.ee · 09/09/2026
Isn't a "malicious browser extension" a pleonasm anyways? 🙄
010
Peter van der Zee @pvdz.ee · 02/09/2026
Remember when we used to ask for code to be documented with comments.
011
Peter van der Zee @pvdz.ee · 29/08/2026
Sometimes you just gotta count your blessings... Oof.
010
Peter van der Zee @pvdz.ee · 27/08/2026
Works or B0rks? ``` Number = { prototype: { x: 1 } }; console.log( (5).x ); console.log( new Number(5).x ); ``` sorrynotsorry
010
Peter van der Zee @pvdz.ee · 27/08/2026
Works or B0rks? ``` Number.prototype.x = 1; Number.prototype = {x: 2}; console.log( (5).x ) ``` Fun stories about Array way back notwithstanding
010
Peter van der Zee @pvdz.ee · 26/08/2026
Ok, spill it. Who lobotomized opus. This is a safe space, we just wanna know.
010
Peter van der Zee @pvdz.ee · 25/08/2026
What github needs, if they're not going to do a "AI" mode for PRs like they have draft, is a simple "collapse up to this point" marker so all AI review conversation noise can be hidden when you're ready for human review. Honestly, them not having an AI review state at this point is bonkers though.
020
Peter van der Zee @pvdz.ee · 23/08/2026
Works or B0rks? ``` function f(){ console.log(this); } const x = {f} // Direct f(); // undefined // Indirect (0, x.f)() // undefined // Optional chain x?.f() // x // Ok, now you! x.f?.() // ? x?.f?.() // ? const y = {g: function(){ return f; }} y?.g()() // ? y?.g()?.() // ? ``` (strict mode!)
010
Peter van der Zee @pvdz.ee · 22/08/2026
Works or B0rks? ``` function *f() { return 1; console.log('A'); } const a = f(); a .next(); a .next(); const b = f(); b .next(); b.return(); const c = f(); c.return(); c.return(); ``` In what cases does this print A? (See followup too)
210
Peter van der Zee @pvdz.ee · 22/08/2026
Achievement unlocked. I usually forget to even look at them before I forget where I even was. Of course heavily buried in sand so I just TNT'd my way to the chest, destroying the chest in the blast, and so immediately half of it disappears. But oh well.
010
Peter van der Zee @pvdz.ee · 19/08/2026
Eyyyy it works on the actual ereader. Not great but also... Well this is like a few hours of Claude doing stuff mostly on its own and me giving it feature creep. It's extremely low effort on my side and it works. Not so sure about KOreader though holy moly what a complex app.
010
Peter van der Zee @pvdz.ee · 19/08/2026
Works or B0rks? ``` const x = 1; x ||= 2; console.log(x); ```
010
Peter van der Zee @pvdz.ee · 19/08/2026
Oh no. I just realized I can use my wife's paperwhite for that dedicated chess puzzle app/device I wanted. Using the lichess puzzle DB, Claude is finishing it faster than I can get koreader installed on that thing.
120
Peter van der Zee @pvdz.ee · 18/08/2026
Next challenge: trying to connect a keyboard to an old Kindle paperwhite ereader to become an ewriter for the kids. The problem is no bluetooth and PW's usb can't power a keyboard. Usb keyboard usually don't run on batteries. Maybe (old) usb bluetooth dongle?
000
Peter van der Zee @pvdz.ee · 16/08/2026
I would works or b0rks this bug but not even sure how to frame it without giving it away Basically I had been transforming `const [a, b] = c` as `const tmp = [...c]; const a = tmp[0]; const b = tmp[1];` and it's broken because the spread will _drain_ an iterator, where the assignment just takes two
010
Peter van der Zee @pvdz.ee · 15/08/2026
Do think I'll need to switch to something like opencode soon. Colleagues have been raving about gpt sol, deepseek, and Kimi. Plus Gemini got a price cut too. Shouldn't allow myself to get vendor locked in on the Claude CLI (or its web code env). Wonder if opencode has an alt to the old TUI now...
010
Peter van der Zee @pvdz.ee · 15/08/2026
About to get home after a week in the US for Socket. At home I let Claude fuzz preval all week long (5x plan). Outer bash loop starts Claude with prompt to fuzz and fix, repeat and keep going. Outer loop kills after 3h. After exit, sleep 1h and start again. Now let's see what kind of mess it made...
210
Peter van der Zee @pvdz.ee · 10/08/2026
Got my power draw down from 45 to 16 watts. Combination of an unused GPU device and some polling devices and installing and configuring tlp. Sweet. Super valuable. Of course, did I actually learn anything here? Not much. So I care? lolnope.
010
Peter van der Zee @pvdz.ee · 10/08/2026
Why didn't I realize before that I can now just have Claude tweak my Linux setup? Fix minor bugs or inconveniences. And improve the power draw of the laptop. Super useful
030
Peter van der Zee @pvdz.ee · 09/08/2026
Schiphol passport check queue. Somebody fucked up good.
010
Peter van der Zee @pvdz.ee · 07/08/2026
AI does make it easy to work with obfuscation without worrying about visual confusion. I just copy paste and it gets it. Doesn't matter that it's garble
010
Peter van der Zee @pvdz.ee · 05/08/2026
Must ... refrain... from logging in... during holiday... one more day. Good luck to anyone in/affected 🫂
062
Peter van der Zee @pvdz.ee · 04/08/2026
"The data shows that many engineers spend in the range of hundreds of dollars a month to a few thousand dollars in tokens," um, wait. they call that tokenmaxxing at microsoft? wow, like they weren't even trying. lol slashdot.org/story/26/08/...
000
Peter van der Zee @pvdz.ee · 04/08/2026
Still working out some kinks. Like explaining to claude how a catapult actually works. It's funny because it seems to understand that concept, it basically built all of this, has access to canvas and dom and what not. But still I have to holds its hand. Many times over.
010
Peter van der Zee @pvdz.ee · 04/08/2026
I think the problem with my vacation mode claude setup was that the outer loop (which restarted the session) worked fine, but the task instruction mechanism would force a restart too often, leading to the overhead sucking up my quota. Need the shell script to read/write to the active CLI session...
000
Peter van der Zee @pvdz.ee · 04/08/2026
I've tried to read a few chess books in my vacation. I find them really difficult and the style of these books is just not for me. They all claim to be beginner-ish books but go off on long lines. Sorry, my millennial brain has no patience to replay them on an actual board. I need pics.
110
Peter van der Zee @pvdz.ee · 04/08/2026
"Please speed up the app" Goes from 4/s to 40/s "Use the builtin nodejs profiler to determine whether you can speed up the core computation" Goes from 40/s to 400/s
010
Peter van der Zee @pvdz.ee · 19/07/2026
How it started...
110
Peter van der Zee @pvdz.ee · 18/07/2026
That moment when you see you have plenty of Claude budget for 10 more minutes and you crash some fable prompts into it to maxxxx the void and come to realize that the reset is stated at 10pm UTC and you're actually on CEST. Which is not the same. fehhhh.
000
Peter van der Zee @pvdz.ee · 08/07/2026
This is a big deal. It kills like 99% of all npm malware we see today. Give or take. It won't go away. Of course. But it helps.
082
Peter van der Zee @pvdz.ee · 06/07/2026
"great win!" - hung my queen in move 6 - opponent timed out at move 10 pfff. never give up and all that but
010
Peter van der Zee @pvdz.ee · 23/06/2026
not sure about kimi's output there but close enough. I think gpt's output also refers to me but not entirely sure. if not, that would be a bit of a curious coincidence.
000
Peter van der Zee @pvdz.ee · 22/06/2026
ok, gartner. great ... "journalism" you got going there 🙄
000
Peter van der Zee @pvdz.ee · 19/06/2026
Hey AI make this thing go faster. It takes 15min for this case and that's just slow. I set 10min as goal to keep it going. AI: it's too tough, can't do it * cuts off 90s AI: now it's really too tough, can't do it * cuts off 80s AI: that's really it * cuts to under 10min AI: ok, all done Me: wtf?
100
Peter van der Zee @pvdz.ee · 17/06/2026
Asserted dominance by defeating both my kids at chess. Despite hanging my queen in both occasions 🙈. One even tricked me in doing so! They'll get me eventually. Just let me have this.
010
Peter van der Zee @pvdz.ee · 31/05/2026
It's fine to be skeptical against AI generated code. It's fine to block it from your repo because it's too noisy or commonly has quality problems or whatever. It's probably true. But to state that it's "invariably garbage" just _destroys_ your credibility. Why would you do that. Who hurt you?
000
Peter van der Zee @pvdz.ee · 29/05/2026
Me: why does my wishlist seem to be growing all the time... Also me: 80% discount? Hmmm, nah. Not yet.
000
Peter van der Zee @pvdz.ee · 28/05/2026
"Perfect randomness". Some years ago they would probably call that "Pure magic". In some years they'll call it "Primary school education" or "duh". I don't believe in factual randomness. We just don't know how it works, yet.
000
Peter van der Zee @pvdz.ee · 25/05/2026
@baggerspion.bsky.social open up your dms you doodoo
000