Sign in

Peter van der Zee

@pvdz.ee
451 followers 92 following 1K posts

tafka @kuvos eng @socket.dev - 15yr js/ts - rust - ex vercel - ex fb - js1k-guy

PostsRepliesMedia
Peter van der Zee @pvdz.ee · 27/09/2026
Why don't openai/anthropic etc create an actual airgapped local network for their CTF training? Strikes me as not too hard to gate all egress. Anything not covered can be caught by a set of monkeys (->AIs), ask the requesting AI for what it was, and create a mock service to simulate it. Easy peasy?
et.al
020
Peter van der Zee @pvdz.ee · 24/09/2026
claude 5.5 is great but the security fences are super annoying. i know when working on a deobufscation tool you're kind of just asking for it but come on :/ it's not even a hard block (retry and it's fine) but it's very frustrated to my workflows
010
Peter van der Zee @pvdz.ee · 21/09/2026
VCRDD; vibed code-review driven development Vibe some code, then spend the same amount of time as you otherwise would reviewing the 5k loc resulting PR.
020
Peter van der Zee @pvdz.ee · 19/09/2026
oops. flew too close to the sun, working on preval and tenko perf at the same time.
010
Peter van der Zee @pvdz.ee · 19/09/2026
Works or B0rks? ``` console.log(-5n); console.log(+5n); ```
020
Peter van der Zee @pvdz.ee · 16/09/2026
Look man, you know what they say. If you're not a paying enterprise user with ZDR, you are the product.
010
Peter van der Zee @pvdz.ee · 15/09/2026
I always knew that moving Tenko to a flat buffer tape AST approach would improve perf. I just could never be bothered. Now I just let Claude do it and low and behond; it's indeed faster. Gotta love it.
010
Peter van der Zee @pvdz.ee · 12/09/2026
wait, what do you mean, i'm not afraid of blazes ... no no not me...
010
Peter van der Zee @pvdz.ee · 11/09/2026
All the while I've just been playing minecraft (getting ready for adventure with the kids) and chess :D It's not exactly an idle game (claude) and in many ways it is (you still have to holds its hand, be present, clickyticlick). But I enjoy it.
000
Peter van der Zee @pvdz.ee · 11/09/2026
"This reducer is taking 1200ms for this 10mb sample, bring it under 100ms" Non-trivial because there are million element loops (idents) galore and it's quite a complex beast at this point. But it managed to slowly chip away and is now sitting at 150ms. Just optimizing. Over and over. So nice.
100
Peter van der Zee @pvdz.ee · 11/09/2026
Been working on preval with claude for a few weeks now. It's great. I've been letting it implement ideas and patterns and every so often I let it do some perf hunting. It gives up very easily but /goal is a life saver. Past two days I had it use this 10mb malware sample and it's been gutting perf 😍
121
Peter van der Zee @pvdz.ee · 10/09/2026
props to logitech's logi keyboard and mouse. it's actually amazing how little power draw they have. my wireless logi keyboard gets ~15h usage a day throughout the year. it has two or three aa/a batteries that I replace less than once a year. mouse needs a charge less than once a month. really good
021
Peter van der Zee @pvdz.ee · 10/09/2026
Well. At least pypi gave it a run for its money. It got so stuck on account registration. Ultimately got through, of course. Some interesting lessons for pypi and fastly here (and other vendors). www.anthropic.com/research/ali... Transcript: raw.githubusercontent.com/anthropics/m...
raw.githubusercontent.com
https://raw.githubusercontent.com/anthropics/mythos-5-incident-transcript/refs/heads/main/transcript.html
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"> <title>Mythos 5 Transcript Release</title><meta name="robots" content="no...
010
Peter van der Zee @pvdz.ee · 09/09/2026
typoof bug === "booleon"
010
Peter van der Zee @pvdz.ee · 09/09/2026
Isn't a "malicious browser extension" a pleonasm anyways? 🙄
010
Peter van der Zee @pvdz.ee · 09/09/2026
Think they matter a bit more in big corp. Though it does depend on the culture. Grats. Amazed you weren't already tbh.
110
Peter van der Zee @pvdz.ee · 02/09/2026
Remember when we used to ask for code to be documented with comments.
011
Peter van der Zee @pvdz.ee · 29/08/2026
Sometimes you just gotta count your blessings... Oof.
010
Peter van der Zee @pvdz.ee · 27/08/2026
Works or B0rks? ``` Number = { prototype: { x: 1 } }; console.log( (5).x ); console.log( new Number(5).x ); ``` sorrynotsorry
010
Peter van der Zee @pvdz.ee · 27/08/2026
Works or B0rks? ``` Number.prototype.x = 1; Number.prototype = {x: 2}; console.log( (5).x ) ``` Fun stories about Array way back notwithstanding
010
Peter van der Zee @pvdz.ee · 26/08/2026
Ok, spill it. Who lobotomized opus. This is a safe space, we just wanna know.
010
Peter van der Zee @pvdz.ee · 25/08/2026
What github needs, if they're not going to do a "AI" mode for PRs like they have draft, is a simple "collapse up to this point" marker so all AI review conversation noise can be hidden when you're ready for human review. Honestly, them not having an AI review state at this point is bonkers though.
020
Peter van der Zee @pvdz.ee · 23/08/2026
Works or B0rks? ``` function f(){ console.log(this); } const x = {f} // Direct f(); // undefined // Indirect (0, x.f)() // undefined // Optional chain x?.f() // x // Ok, now you! x.f?.() // ? x?.f?.() // ? const y = {g: function(){ return f; }} y?.g()() // ? y?.g()?.() // ? ``` (strict mode!)
010
Peter van der Zee @pvdz.ee · 22/08/2026
Then it should have been finalize. Return does not cover the load or behavior here.
010
Peter van der Zee @pvdz.ee · 22/08/2026
Yeah or return break But I think this one is actually more brutal
100
Peter van der Zee @pvdz.ee · 22/08/2026
Works or B0rks? ``` function *g() { try { return 1 } finally { console.log('B'); } } const a = g(); a .next(); a .next(); const b = g(); b .next(); b.return(); const c = g(); c.return(); c.return(); ``` In what cases does this print B? (See prev too)
100
Peter van der Zee @pvdz.ee · 22/08/2026
Works or B0rks? ``` function *f() { return 1; console.log('A'); } const a = f(); a .next(); a .next(); const b = f(); b .next(); b.return(); const c = f(); c.return(); c.return(); ``` In what cases does this print A? (See followup too)
210
Peter van der Zee @pvdz.ee · 22/08/2026
Achievement unlocked. I usually forget to even look at them before I forget where I even was. Of course heavily buried in sand so I just TNT'd my way to the chest, destroying the chest in the blast, and so immediately half of it disappears. But oh well.
010
Peter van der Zee @pvdz.ee · 20/08/2026
That honestly would have been a great ai auto task. Very good at this.
100
Peter van der Zee @pvdz.ee · 19/08/2026
Eyyyy it works on the actual ereader. Not great but also... Well this is like a few hours of Claude doing stuff mostly on its own and me giving it feature creep. It's extremely low effort on my side and it works. Not so sure about KOreader though holy moly what a complex app.
010
Peter van der Zee @pvdz.ee · 19/08/2026
ngl; i didn't know. feels very backwards. but i guess it's hard to restrict it syntactically so why not
010
Peter van der Zee @pvdz.ee · 19/08/2026
Well. It got busy. I had it set up a docker with emulation stuff for the koreader app. And it went to town on a lua script to do this. Can't wait to actually get koreader working on the ereader and actually try this. But it's been giving me some problems.
000
Peter van der Zee @pvdz.ee · 19/08/2026
Works or B0rks? ``` const x = 1; x ||= 2; console.log(x); ```
010
Peter van der Zee @pvdz.ee · 19/08/2026
Oh no. I just realized I can use my wife's paperwhite for that dedicated chess puzzle app/device I wanted. Using the lichess puzzle DB, Claude is finishing it faster than I can get koreader installed on that thing.
120
Peter van der Zee @pvdz.ee · 18/08/2026
Next challenge: trying to connect a keyboard to an old Kindle paperwhite ereader to become an ewriter for the kids. The problem is no bluetooth and PW's usb can't power a keyboard. Usb keyboard usually don't run on batteries. Maybe (old) usb bluetooth dongle?
000
Peter van der Zee @pvdz.ee · 16/08/2026
Yeah Schiphol isn't great. Or well, too great. I don't like big airports.
000
Peter van der Zee @pvdz.ee · 16/08/2026
I would works or b0rks this bug but not even sure how to frame it without giving it away Basically I had been transforming `const [a, b] = c` as `const tmp = [...c]; const a = tmp[0]; const b = tmp[1];` and it's broken because the spread will _drain_ an iterator, where the assignment just takes two
010
Peter van der Zee @pvdz.ee · 15/08/2026
315 things found, ton of changes and test cases (and a full fuzzer test suite to boot). Used about 75% of weekly (so this was running all week starting sunday). Obviously not using tokens while it's doing a fuzzing batch while still consuming time. Now need to make sense of it and verify them...
000
Peter van der Zee @pvdz.ee · 15/08/2026
Do think I'll need to switch to something like opencode soon. Colleagues have been raving about gpt sol, deepseek, and Kimi. Plus Gemini got a price cut too. Shouldn't allow myself to get vendor locked in on the Claude CLI (or its web code env). Wonder if opencode has an alt to the old TUI now...
010
Peter van der Zee @pvdz.ee · 15/08/2026
About to get home after a week in the US for Socket. At home I let Claude fuzz preval all week long (5x plan). Outer bash loop starts Claude with prompt to fuzz and fix, repeat and keep going. Outer loop kills after 3h. After exit, sleep 1h and start again. Now let's see what kind of mess it made...
210
Peter van der Zee @pvdz.ee · 10/08/2026
Got my power draw down from 45 to 16 watts. Combination of an unused GPU device and some polling devices and installing and configuring tlp. Sweet. Super valuable. Of course, did I actually learn anything here? Not much. So I care? lolnope.
010
Peter van der Zee @pvdz.ee · 10/08/2026
Why didn't I realize before that I can now just have Claude tweak my Linux setup? Fix minor bugs or inconveniences. And improve the power draw of the laptop. Super useful
030
Peter van der Zee @pvdz.ee · 09/08/2026
Schiphol passport check queue. Somebody fucked up good.
010
Peter van der Zee @pvdz.ee · 07/08/2026
AI does make it easy to work with obfuscation without worrying about visual confusion. I just copy paste and it gets it. Doesn't matter that it's garble
010
Peter van der Zee @pvdz.ee · 05/08/2026
Yeah I do 10min but stuck on 1000-1050 for a while now. Was 1100-smth but then stopped for a few months and couldn't get back up. Just need to play more. But 🤷
000
Peter van der Zee @pvdz.ee · 05/08/2026
Must ... refrain... from logging in... during holiday... one more day. Good luck to anyone in/affected 🫂
062
Peter van der Zee @pvdz.ee · 05/08/2026
I'm still doing this! And still not getting any better, either. I've come to realize that one game a day isn't enough :p and e4 is not for me.
110
Peter van der Zee @pvdz.ee · 04/08/2026
"The data shows that many engineers spend in the range of hundreds of dollars a month to a few thousand dollars in tokens," um, wait. they call that tokenmaxxing at microsoft? wow, like they weren't even trying. lol slashdot.org/story/26/08/...
000
Peter van der Zee @pvdz.ee · 04/08/2026
Still working out some kinks. Like explaining to claude how a catapult actually works. It's funny because it seems to understand that concept, it basically built all of this, has access to canvas and dom and what not. But still I have to holds its hand. Many times over.
010
Peter van der Zee @pvdz.ee · 04/08/2026
I think the problem with my vacation mode claude setup was that the outer loop (which restarted the session) worked fine, but the task instruction mechanism would force a restart too often, leading to the overhead sucking up my quota. Need the shell script to read/write to the active CLI session...
000