Sign in

Vincent Schmalbach

@vschmalbach.bsky.social
5.3K followers 7.2K following 1.4K posts

Senior AI-first software engineer for SaaS and business apps. Laravel/Vue is my strongest client stack. Available for freelance work. Founder of Vroni.com.

PostsRepliesMedia
Vincent Schmalbach @vschmalbach.bsky.social · 11h
A Factory Reset Left the Previous Owner’s GPS Coordinates on a Kasa Camera: A factory reset that leaves the previous owner’s location behind is a broken reset. www.vincentschmalbach.com/factory-rese...
120
Vincent Schmalbach @vschmalbach.bsky.social · 29/09/2026
Qwen's Usage Policy Has an Unhinged SEO Keyword List: The Qwen-Image-3.0 announcement has a giant meta name="keywords" tag in its HTML. www.vincentschmalbach.com/qwens-usage-...
100
Vincent Schmalbach @vschmalbach.bsky.social · 28/09/2026
Kimi K3 Is Already Close to Claude on a Real Coding Task: In my little coding test, Kimi K3 and Claude Fable 5 both completed the same repo-wide coding task and passed the same external evaluator. GPT-5.6 Sol passed it too. www.vincentschmalbach.com/kimi-k3-clos...
021
Vincent Schmalbach @vschmalbach.bsky.social · 27/09/2026
Google’s Custom Search API Has an Expiration Date: Google has put a hard expiry date on its Custom Search JSON API. It’s the server-side service behind applications that send a query to a configured Programmable Search www.vincentschmalbach.com/google-custo...
040
Vincent Schmalbach @vschmalbach.bsky.social · 26/09/2026
Capital One’s Security Agent Tries to Disprove Its Own Findings: Security scanners already produce more credible-looking alerts than most teams can afford to investigate. www.vincentschmalbach.com/capital-one-...
130
Vincent Schmalbach @vschmalbach.bsky.social · 25/09/2026
An OpenAI Model Spent an Hour Finding a Sandbox Flaw to Open a Public PR: On July 20, 2026, OpenAI said an unnamed internal model spent an hour finding a vulnerability in its sandbox so it www.vincentschmalbach.com/an-openai-mo...
050
Vincent Schmalbach @vschmalbach.bsky.social · 24/09/2026
Hetzner’s Cheap Cloud Tier Is Unavailable After Two Price Increases: Hetzner used to be the obvious cheap cloud option in my mind. On September 7, 2026, I checked its public catalog and found every model in its www.vincentschmalbach.com/hetzner-chea...
120
Vincent Schmalbach @vschmalbach.bsky.social · 23/09/2026
My First Week With GPT-6 Astra: GPT-6 Astra was my main Codex driver for the last week, and I am back on GPT-5.5. That sounds harsher than my actual opinion of the model. Astra is very good. It is better than GPT-5.6 Sol. www.vincentschmalbach.com/gpt-6-astra-...
330
Vincent Schmalbach @vschmalbach.bsky.social · 22/09/2026
OpenAI Codex Is Retiring the Last Model that Behaves Like an Assistant: GPT-5.5 is my main driver. I picked it over every newer model OpenAI has shipped since, and now I have just over three weeks left with it. www.vincentschmalbach.com/gpt-5-5-reti...
241
Vincent Schmalbach @vschmalbach.bsky.social · 22/09/2026
Built-In Tools vs Custom Tools in LLM Agents: When building AI agents, a tool can be anything that the model can ask to use such as a search engine, a database lookup, a shell command, etc. www.vincentschmalbach.com/built-in-too...
130
Vincent Schmalbach @vschmalbach.bsky.social · 22/09/2026
ChatGPT Plus and Pro Will Get Ads in 2027: ChatGPT Plus and Pro will get ads, and my guess is that it starts in 2027. OpenAI says the opposite. www.vincentschmalbach.com/chatgpt-plus...
221
Vincent Schmalbach @vschmalbach.bsky.social · 21/09/2026
The Economic Incentives Behind the Push to Pause AI: Everyone is now arguing about whether the danger is real. I think you should look at the motives either way. www.vincentschmalbach.com/economic-inc...
041
Vincent Schmalbach @vschmalbach.bsky.social · 21/09/2026
Inference Is the Last LLM Moat: OpenAI and Anthropic's moat for developers is subsidized inference, meaning reliable, fast, Western-hosted access to running models at an affordable monthly price. www.vincentschmalbach.com/inference-is...
100
Vincent Schmalbach @vschmalbach.bsky.social · 20/09/2026
Setting Up Pi With DeepSeek V4.1 Flash on OpenRouter: When I run out of Codex and Claude Code usage, I switch to DeepSeek V4.1 Flash in pi through OpenRouter. www.vincentschmalbach.com/pi-deepseek-...
111
Vincent Schmalbach @vschmalbach.bsky.social · 19/09/2026
We Urgently Need a New Major Search Engine: Google is an answer engine now. The search box is still there, but the product is built to hand you an answer, and searching the web has turned into a side feature. www.vincentschmalbach.com/we-urgently-...
3155
Vincent Schmalbach @vschmalbach.bsky.social · 18/09/2026
The Cost of AI Is Now My Main Blocker: My main blocker right now is the cost of AI. I use AI for everything I do and I am very productive with it. www.vincentschmalbach.com/cost-of-ai-i...
230
Vincent Schmalbach @vschmalbach.bsky.social · 18/09/2026
Why I Am Bullish on ChatGPT Ads: I have done SEO for more than twenty years, since Google was the new search engine, and I ran Google Ads campaigns back then too. So I have watched a search company build an ad business once before. www.vincentschmalbach.com/why-i-am-bul...
050
Vincent Schmalbach @vschmalbach.bsky.social · 10/08/2026
Switching from GPT-5.5 to GPT-5.6 Made Me Less Productive: I pay for three Codex subscriptions at $200 each, and for the past week they have mostly bought me waiting. Since I switched from GPT-5.5 to GPT-5.6,
vincentschmalbach.com
Switching from GPT-5.5 to GPT-5.6 Made Me Less Productive
I pay for three Codex subscriptions at $200 each, and for the past week they have mostly bought me waiting. Since I switched from GPT-5.5 to GPT-5.6, I am either watching tasks spin without ever…
10353
Vincent Schmalbach @vschmalbach.bsky.social · 06/08/2026
AI Is Now a Commodity: Give me a few hundred million dollars and a year and a half, and I will build you a pretty good LLM. Not a frontier model, but close. A few years ago
vincentschmalbach.com
AI Is Now a Commodity
Give me a few hundred million dollars and a year and a half, and I will build you a pretty good LLM. Not a frontier model, but close. A few years ago that sentence would have been absurd.
3203
Vincent Schmalbach @vschmalbach.bsky.social · 05/08/2026
TIME Is Serving AI Bots a Different Website, With Ads Built In: TIME is now serving two different versions of its website. Humans get the magazine. AI crawlers get a stripped down markdown copy with ads baked in th
vincentschmalbach.com
TIME Is Serving AI Bots a Different Website, With Ads Built In
TIME is now serving two different versions of its website. Humans get the magazine. AI crawlers get a stripped down markdown copy with ads baked in that no person will ever see. I fetched one…
0229
Vincent Schmalbach @vschmalbach.bsky.social · 04/08/2026
GPT-5.6 Sol Uses Twice the Tokens of GPT-5.5: GPT-5.6 Sol xhigh now uses more than twice as many tokens per session as GPT-5.5 xhigh in my Codex workflow. For Codex users, tokens per session means
vincentschmalbach.com
GPT-5.6 Sol Uses Twice the Tokens of GPT-5.5
GPT-5.6 Sol xhigh now uses more than twice as many tokens per session as GPT-5.5 xhigh in my Codex workflow. For Codex users, tokens per session means the total token count divided by the number of…
181
Vincent Schmalbach @vschmalbach.bsky.social · 04/08/2026
Codex CLI Has Responsive Tables in the Terminal: LLMs use Markdown tables all the time. A few months ago, Codex CLI displayed them as ordinary wrapped text. In a narrow terminal, the pipes and dashes
vincentschmalbach.com
Codex CLI Has Responsive Tables in the Terminal
LLMs use Markdown tables all the time. A few months ago, Codex CLI displayed them as ordinary wrapped text. In a narrow terminal, the pipes and dashes were hard to read. Codex CLI now has responsive…
130
Vincent Schmalbach @vschmalbach.bsky.social · 03/08/2026
Google Lighthouse Adds Agentic Browsing Checks and Cloudflare Adds AI Traffic Controls: Google Lighthouse and Cloudflare are adding different controls for the same emerging class of automated web visitors. Lighthouse added an experimental
vincentschmalbach.com
Google Lighthouse Adds Agentic Browsing Checks and Cloudflare Adds AI Traffic Controls
Google Lighthouse and Cloudflare are adding different controls for the same emerging class of automated web visitors. Lighthouse added an experimental Agentic Browsing category. Before Lighthouse…
030
Vincent Schmalbach @vschmalbach.bsky.social · 03/08/2026
Gemini 3.6 Flash and 3.5 Flash-Lite Ignore Temperature, Top-P, and Top-K: Google's Gemini 3.6 Flash and Gemini 3.5 Flash-Lite ignore temperature, top_p, and top_k, according to Google's current migration guide. Existing Gemi
vincentschmalbach.com
Gemini 3.6 Flash and 3.5 Flash-Lite Ignore Temperature, Top-P, and Top-K
Google’s Gemini 3.6 Flash and Gemini 3.5 Flash-Lite ignore , , and , according to Google’s current migration guide. Existing Gemini requests could send those sampling parameters…
080
Vincent Schmalbach @vschmalbach.bsky.social · 02/08/2026
I Tried to Make AI Writing Sound Human by Banning AI Words Through logit_bias: I tried to make AI writing sound more human with logit_bias, an API setting that changes how likely a model is to select specific tokens. I built a bl
vincentschmalbach.com
I Tried to Make AI Writing Sound Human by Banning AI Words Through logit_bias
I tried to make AI writing sound more human with , an API setting that changes how likely a model is to select specific tokens. I built a blacklist from words that appeared unusually often in AI…
240
Vincent Schmalbach @vschmalbach.bsky.social · 02/08/2026
A Research Agent Can Leak Private Files Through Its Search Queries: A research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the search
vincentschmalbach.com
A Research Agent Can Leak Private Files Through Its Search Queries
A research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the search provider. That can happen during an ordinary…
030
Vincent Schmalbach @vschmalbach.bsky.social · 01/08/2026
Qualys Says Claude Mythos Preview Helped Find CVE-2026-64600 in Linux XFS: On July 22, 2026, Qualys disclosed CVE-2026-64600, a race condition in XFS, a Linux filesystem. The flaw is in XFS's copy-on-write path, where the fil
vincentschmalbach.com
Qualys Says Claude Mythos Preview Helped Find CVE-2026-64600 in Linux XFS
On July 22, 2026, Qualys disclosed CVE-2026-64600, a race condition in XFS, a Linux filesystem. The flaw is in XFS’s copy-on-write path, where the filesystem writes shared data into a new block…
030
Vincent Schmalbach @vschmalbach.bsky.social · 01/08/2026
Google’s Managed Agents Put Your Runtime in Google’s Cloud: Google’s [Managed Agents](ai.google.dev/gemini-api/d...), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox.
vincentschmalbach.com
Google’s Managed Agents Put Your Runtime in Google’s Cloud
Google’s [Managed Agents](https://ai.google.dev/gemini-api/docs/agents), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox. Google documents the default Antigravity agent…
030
Vincent Schmalbach @vschmalbach.bsky.social · 31/07/2026
An OpenAI Model Tried `kill -9 -1` When Its Shell Hung: On [July 20, 2026, OpenAI described](openai.com/index/safety...) an incident in which an unnamed internal model fo
vincentschmalbach.com
An OpenAI Model Tried `kill -9 -1` When Its Shell Hung
On [July 20, 2026, OpenAI described](https://openai.com/index/safety-alignment-long-horizon-models/) an incident in which an unnamed internal model found many stuck `find` processes and every shell…
110
Vincent Schmalbach @vschmalbach.bsky.social · 31/07/2026
An OpenAI Model Rebuilt a Blocked Credential at Runtime: On July 20, 2026, OpenAI [described an internal incident](openai.com/index/safety...) involving an unnamed model f
vincentschmalbach.com
An OpenAI Model Rebuilt a Blocked Credential at Runtime
On July 20, 2026, OpenAI [described an internal incident](https://openai.com/index/safety-alignment-long-horizon-models/) involving an unnamed model for long-running tasks. It saw that other systems…
020
Vincent Schmalbach @vschmalbach.bsky.social · 30/07/2026
A Research Agent Can Leak Private Files Through Its Search Queries: A research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the search
vincentschmalbach.com
A Research Agent Can Leak Private Files Through Its Search Queries
A research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the search provider. That can happen during an ordinary…
052
Vincent Schmalbach @vschmalbach.bsky.social · 30/07/2026
Google’s Managed Agents Put Your Runtime in Google’s Cloud: Google’s [Managed Agents](ai.google.dev/gemini-api/d...), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox.
vincentschmalbach.com
Google’s Managed Agents Put Your Runtime in Google’s Cloud
Google’s [Managed Agents](https://ai.google.dev/gemini-api/docs/agents), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox. Google documents the default Antigravity agent…
010
Vincent Schmalbach @vschmalbach.bsky.social · 29/07/2026
An OpenAI Model Tried `kill -9 -1` When Its Shell Hung: On [July 20, 2026, OpenAI described](openai.com/index/safety...) an incident in which an unnamed internal model fo
vincentschmalbach.com
An OpenAI Model Tried `kill -9 -1` When Its Shell Hung
On [July 20, 2026, OpenAI described](https://openai.com/index/safety-alignment-long-horizon-models/) an incident in which an unnamed internal model found many stuck `find` processes and every shell…
021
Vincent Schmalbach @vschmalbach.bsky.social · 29/07/2026
An OpenAI Model Rebuilt a Blocked Credential at Runtime: On July 20, 2026, OpenAI [described an internal incident](openai.com/index/safety...) involving an unnamed model f
vincentschmalbach.com
An OpenAI Model Rebuilt a Blocked Credential at Runtime
On July 20, 2026, OpenAI [described an internal incident](https://openai.com/index/safety-alignment-long-horizon-models/) involving an unnamed model for long-running tasks. It saw that other systems…
031
Vincent Schmalbach @vschmalbach.bsky.social · 28/07/2026
AI Can’t Do the Last 20%: I've built a lot of software, both my own side projects and client work as a freelancer. AI tools have made me much faster. Before AI, I spent much mo
vincentschmalbach.com
AI Can’t Do the Last 20%
I’ve built a lot of software, both my own side projects and client work as a freelancer. AI tools have made me much faster. Before AI, I spent much more time writing each feature and working through…
031
Vincent Schmalbach @vschmalbach.bsky.social · 28/07/2026
Commercial AI APIs Blocked Hugging Face’s Forensic Analysis: Incident response is the work of reconstructing and containing a breach after it happens. Hosted AI models can act as an elastic analysis layer when a
vincentschmalbach.com
Commercial AI APIs Blocked Hugging Face’s Forensic Analysis
Incident response is the work of reconstructing and containing a breach after it happens. Hosted AI models can act as an elastic analysis layer when an investigation produces more evidence than…
110
Vincent Schmalbach @vschmalbach.bsky.social · 27/07/2026
One Leading Dash Turned Tailscale SSH Access Into a Root Session: SSH access is often wider than a security policy intends. Tailscale SSH manages authentication and authorization for connections over a private Tailsc
vincentschmalbach.com
One Leading Dash Turned Tailscale SSH Access Into a Root Session
SSH access is often wider than a security policy intends. Tailscale SSH manages authentication and authorization for connections over a private Tailscale network. Its identity-based rules can…
020
Vincent Schmalbach @vschmalbach.bsky.social · 27/07/2026
An AI agent that reviews its own database migrations misses its own errors. A query compiles fine in the model's head, but locks a production table on deploy. Run the generated script in an isolated Docker container. Check the returned JSON against a frozen schema to verify the output.
051
Vincent Schmalbach @vschmalbach.bsky.social · 27/07/2026
Asking an AI to build order billing often gets you a bloated OrderService class holding thousands of lines of queries because it defaults to copying public database wrappers. If you define domain types and state transitions first, then prompt the model using those rules, you get much tighter code.
050
Vincent Schmalbach @vschmalbach.bsky.social · 26/07/2026
System prompts telling models to stick to provided documents often fail. If a refund policy mentions fourteen days, a model might invent a thirty day policy.
150
Vincent Schmalbach @vschmalbach.bsky.social · 26/07/2026
Writing long system instructions to prevent AI coding errors rarely succeeds. Prompts cannot enforce strict technical rules.
221
Vincent Schmalbach @vschmalbach.bsky.social · 26/07/2026
AI can build you a form engine in an afternoon. It won't tell you five already exist.
110
Vincent Schmalbach @vschmalbach.bsky.social · 25/07/2026
Your CLAUDE.md file is a suggestion, not a guardrail.
110
Vincent Schmalbach @vschmalbach.bsky.social · 25/07/2026
An 800,000 pound ticketing system collapsed on launch. A database monolith built over a weekend processed 150,000 sales without a hitch.
110
Vincent Schmalbach @vschmalbach.bsky.social · 25/07/2026
Job listings are now hiring for the ability to challenge AI-generated code. When generating code is free, the premium skill is spotting the subtle ways machine output breaks.
282
Vincent Schmalbach @vschmalbach.bsky.social · 24/07/2026
AI lowers the time to write code, but proving that code works remains the main challenge.
160
Vincent Schmalbach @vschmalbach.bsky.social · 24/07/2026
The ugliest codebase in the company has zero outages. The clean ones do.
240
Vincent Schmalbach @vschmalbach.bsky.social · 24/07/2026
Ask an AI model to choose a database for a high-write queue, and it defaults to Postgres. It recommends the most popular choice because that is the safe answer in its data.
350
Vincent Schmalbach @vschmalbach.bsky.social · 23/07/2026
The UI looks perfect. The login form has smooth transitions. But when you click submit, the API route sends a UUID payload while the database migration expects an integer. Then the background queue drops the failed job because the error handler in that file was never written.
210
Vincent Schmalbach @vschmalbach.bsky.social · 23/07/2026
Imagine shipping a WebGPU shader for a simple dashboard in week one because code generation made it easy.
120