Andrei Oros (@orosandrei) header
Andrei Oros (@orosandrei) profile picture

Builder. Making things happen. // UiPath alum, working on AI Agents & orgs

Timisoara, Romania đŸ‡·đŸ‡Ž đŸ‡ȘđŸ‡ș
Joined July 2009
Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)Photo by Andrei Oros (@orosandrei)
Let me be blunt. Those who are afraid of AI feel deep down that they are impostors & have no edge. If you have a 1) clear mind, 2) a deep, not just cosmetic, undertanding of your specialty, 3) and/or are original enough to reinvent yourself when needed, AI will be your friend.
786
3,343
629
21,284
2,798,748
good read for understanding @Microsoft @Azure org culture
Some things I learned working at Microsoft: 1/ large numbers everywhere. $100M ARR service isn't even a footnote on executive slide decks. Leadership time is too valuable, come back when you're $1B+. Msft ecosystem is so rich that $1B+ sales are common (it's ludicrous how much work goes into closing these). Azure has ~250 services, some are a few mil and stagnant, others in hypergrowth, some are cash cows, you see every quadrant of the growth-share matrix. Imagine the imperial navy with ships of vastly different sizes as far the eye can see 2/ more on immense scale-- the smallest of Azure services run on 10K+ VMs. Large services run on 1M+ (some maybe 10M+ VMs, idk). Msft is stamping one new datacenter into the ground every four days (!!!!), a bewildering rate. Demand is so high, even with all this buildout we're forever capacity constrained. Azure brings in $100B in revenue and is growing 40%+ annually (at this size!!) There are ~225K msft employees. You almost have to think in scientific notation, 10^4 is a tiny number here 3/ msft is totalitarian re serving the customer. It's counterintuitive to outsiders, but the warts in msft products fall out of this culture. For example, it would be easy to improve the Azure Portal. But in all my time working with customers and partners here, I haven't heard even one person complain about the portal UI. Msft invests $0.00 dollars in anything that doesn't serve the customer and is completely unapologetic about downstream implications of this mindset 4/ msft can reshape itself overnight (when it has the will). People argued whether we waited too long to adapt after Storm-0558/Midnight Blizzard hacks (with the benefit of hindsight, we definitely did). But once the leadership team privileged security, everyone's job changed in two weeks. LT tied every engineer's comp to security, centralized reporting of embedded security teams, every org reshuffled its roadmap. Within days everyone was pushing PRs with security fixes. I would have thought it inconceivable to mobilize 200K+ employees this fast 5/ Azure is complicated. Postgres depends on compute, networking, AKS (or EKS for you aws people), secrets, etc. AKS depends on compute, networking, some datastore (probably Cosmos but idk), a dozen other things. Cosmos depends on... you get the idea. When anything breaks, everything above can break too. Some construction crew accidentally cuts a fiber cable in Brazil South, or a dedicated hardware compression chip browns out in storage, or compute failure rate in west eu spikes for some reason, or a million other failure modes. Msft is relentless about improving this, idk exactly but fully loaded probably 50% of engineer time goes into resilience 6/ re lifers who work 20+ years here, SV sneers at this but I now see it differently. I was once on the bridge debugging some IO issue, we call storage, the guy diagnoses it in about a minute, we chitchat, turns out he built NT asyncio support. Or same story but with networking, the guy built NT tcp/ip stack. I used to have a boss here, we were bumping into some problem, she casually goes oh yeah, we hit that when I was working on .NET bytecode. The ex-DEC VAX/VMS database engineers built SQL Server, some are still here. I love bumping into these people 7/ I never *really* understood distribution until I got here. As an example, our team had a customer in Seoul w/ a deep performance problem. We had to fix it to unlock one of these giant contracts. We don't speak Korean, they don't speak English. Of course msft has specialists in Seoul who get to the customer site before you could even get on a plane. There is an office in every major city, a relationship with every major entity, legal experts in every jurisdiction. You can reach these ppl instantly. Claude tells me msft has ~180 offices in ~100 countries (!!) U.S. government has ~270 consulates in ~170 countries. So msft outposts aren't quite as vast as U.S. diplomatic network, but pretty vast 8/ in the 90s everyone was afraid of msft. The lore is that BillG was ruthless. He'd clone you, beat you via ecosystem/distribution strength, and moreover make the ecosystem stronger with the new product. I wasn't there to compare, but msft of today is ruthless about winning, has the will to adapt, and has the wherewithal to undertake colossal projects. Ppl see Teams bugs or whatever and completely misread the signals. Teams is less polished than Slack because msft doesn't care one iota about polish. It cares about winning, and is frighteningly good at it. Underestimate at your own risk
34
With the recent wave of vulnerability disclosures, it’s a good time to take a closer look at your own code. Turn your coding agent into a team of security auditors with the open-source skill that seeded Cloudflare’s vulnerability discovery harness. The 6 phase approach: 1. Map the codebase 2. Hunt for vulnerabilities 3. Challenge each candidate 4. Record the findings 5. Verify the findings 6. Report what’s confirmed, rejected, or still needs validation Start your hunt here: github.com/cloudflare/securi

236
1,580
286
18,141
2,401,882
Andrei Oros retweeted
Omarchy just got enormously, awesomely, fantastically better! And now you can run it on half of the M-chip Macs out there plus the MacBook Neo. Oh, and traditional desktop mode if you can't hang with tiling. WE ARE FIXING EVERYTHING! đŸ€˜
Omarchy 4.5 is finally here! Traditional desktop mode, M1/M2/M3/Neo compatibility, 50 languages, 7-second installs, and a million other features, fixes, and improvements. omarchy.org/news/2026/11/oma

182
126
31
3,180
122,904
Andrei Oros retweeted
There's a buzzy new paper about GPT-6 Astra being able to directly interpret model weights (prompts full of floating point numbers) - I tried it with Qwen 3.8 27B on my laptop and found that, after 45+ minutes, that model could achieve the same thing simonwillison.net/2026/Nov/3

414
443
111
5,429
337,061
Interesting. Revolut reportedly only started seeing meaningful AI productivity gains after moving away from expensive OpenAI and Anthropic models to self-hosted GLM. Decagon reportedly runs ~90% of its workloads on open weight models. Why? Because when you're running AI agents in production for e.g. customer service, cost and latency matter enormously. You don't need a frontier model with PhD-level reasoning or even a model that knows the capital of Finland to handle every customer interaction. We're seeing similar dynamics across hypergrowth AI startups and increasingly the large enterprises we work with. But most importantly, the future isn't binary. When use cases are new, you want the smartest general-purpose model available. But once workflows mature and become predictable, smaller, faster, specialized models increasingly win. I wouldn't be surprised if 80–90% of routine enterprise AI workflows eventually run on open-weight and smaller models. This doesn't mean frontier labs lose. It means the market is splitting into two massive opportunities: frontier intelligence and specialized execution at scale.
82
130
53
1,209
189,268
Andrei Oros retweeted
Ten million people have watched a comedian accidentally destroy the entire TED talk industry. He filmed the talk once at TEDxNewYork in 2014 and openly admitted he had nothing to say. Speaking coaches charge $5,000 to teach the exact tricks he used in 6 minutes to say nothing at all. His name is Will Stephen. He is a comedian from Late Night with Seth Meyers who was invited to give a real TED talk and used it to prove the format is a costume anyone can wear. Every TED speaker opens with a question, tells a personal story, cites a scientist, and shows a chart. Stephen did all four in six minutes with zero content. His entire formula fits on a napkin. Gesture with both hands. Ask the audience a question anyone can answer. Tell a mildly embarrassing story so they say aww. Point to a stranger on a slide and call them important. Flash a chart of random numbers. Wear glasses with no lenses. The audience will think you are brilliant. That last trick alone has probably cost the public speaking coaching industry a hundred million dollars in sessions clients should have skipped. "If you watched me on YouTube with the sound off, you would think I was a genius." That is Will Stephen on the TED stage, three minutes into the talk he was paid to give. He wasn't lying. Executives pay $15,000 for a keynote coach and still open with a joke the room never laughs at. Founders rehearse their pitch for weeks and still sound like Stephen at minute four, saying "wagga wah, gabba gabba" with authority. The talk is free on YouTube. The method is written across every TED speaker's playbook for ten years. Stephen still writes for Seth Meyers. Almost none of the ten million viewers have stopped nodding at empty slides since. The formula is free. The willingness to actually say something before your next keynote, pitch, or townhall is the entire edge.
1,054
6,601
976
51,898
8,311,911
Andrei Oros retweeted
As someone who has personally spent $500k / mo+ on Google Ads for years, I can tell you with certainty: This revenue growth in Search is artificial & extremely unhealthy for Google’s business long term Search volumes are declining as legacy search is being increasingly cannibalized by non-monetized LLM queries Google’s response? Manufacture revenue growth via short-sighted, highly extractive, customer-hostile tactics. I.e. charge advertisers more for lower quality clicks, including clicks they do not want and explicitly did not approve Google to charge them for A few examples to illustrate: For all of its history until recently, Google operated on a 2nd price auction model I.e. if you bid $5 CPC and the next highest bidder bids $1 CPC, Google charged you $1.01 for the click (one penny more than the 2nd highest bidder) rather than the $5 you bid This was a genius move by Google early on as it incentivizes advertisers to input their true maximum willingness to pay rather than trying to play the game of bidding low and constantly adjusting to try to stay just ahead of the next highest bidder while still not paying too much However recently, Google silently deprecated the 2nd price auction and began charging advertisers as much as their bid and budget caps allow, regardless of what anyone else is bidding It’s a short-sighted cash grab at the expense of the long term health of the advertiser ecosystem Making thing worse, Google also recently nerfed keyword targeting precision Google previously had precise keyword targeting settings that allowed advertisers pick individual search phrases to bid on, defined down to the character w/ exact match or phrase match targeting This was one of the core features that made search advertising magic, enabling advertisers to run extremely precise campaigns based on exactly what their target customer typed But now, even if you bid on a specific term or phrase using the strictest exact -match targeting settings, Google will show your ad across 1000’s of unrelated keywords, labeling them as as “exact match (close variant)” The definition of “close variant” means whatever they want it to and changes constantly. The result is advertisers get billed for clicks that are totally irrelevant to their business and that their targeting settings explicitly forbid Google from targeting. Google does it anyway and there’s no ability to turn this off So now exact match is broad match, and broad match is just meaningless spam This is all very bad for advertisers, but for Google, it allows them to show your ad and bill you for clicks across 1000x more searches that were previously going unmonetized (mainly because they’re garbage queries no one wants) This is how you grow revenue atop declining search volumes Lastly, and perhaps most egregiously, Google quietly stopped respecting budget caps by a factor of 2x. For example campaigns we’ve been running for years with $1000 daily budget caps suddenly began spending $2000+ per day And the extra spend is entirely on the garbage keywords Google arbitrarily throws in as “exact match (close variants)” which have no value to our business, but can’t be turned off Google offers no refunds nor any recourse for overspend or spend on keywords you explicitly did not target These are not the actions of a healthy business. These are the actions of company whose core business is in decline but desperately needs to pump quarterly earnings so Wall Street will continue to fund insane capex while hopefully looking through their rapidly deteriorating negative free cash flow Google operated a benevolent monopoly for the better part of 25 yrs Meaning the value Google captured from Search was but a small fraction of the value it created, and that spread produced a potential energy that justified expectations of high earnings growth far, far into the future This is now no longer the case At the alter of AI capex, Google is sacrificing the golden goose
Q2 was an amazing quarter, with our AI investments redefining what’s possible across every part of our business. Alphabet revenue grew 24% YoY and Google Cloud accelerated to 82% growth. We saw exciting momentum across the board from Search to YouTube to the Gemini app (which reached 950M monthly active users). Our model APIs are processing 22B tokens/min (up from 16B+ last quarter) driven by our workhorse Flash models. We’re also seeing great adoption of Gemini Enterprise, used by 90% of the Fortune 100, as well as strong demand for our security solutions. Outstanding results and momentum, and such an exciting moment—thanks to all of our partners and employees around the world! 🙌 About to hop on the call!
840
2,022
744
17,625
5,776,435
Andrei Oros retweeted
I'm starting to sense a divide in the tech industry: - People thriving on autonomy who are reinventing how they work and what tools they use with AI: LOTS of work, but they're enjoying it and getting very efficient - People used to being mentored / trained / or simply told what to do and how. Frustrated with the lack of guidance from management on what to do with AI; also frustrated by seeing some of their peers thriving; increasingly bitter about AI and the state of the industry, as a whole Neither group seems to be aware that there's another group, or have empathy for the other group
401
414
175
5,593
480,231
Andrei Oros retweeted
Amazon's leadership is very good at writing, but you still need to read between the lines. What I read between these lines: Engineers who are not "product engineers" (aka eng + PM interest) and don't like to be customer-facing will not have a future inside of Amazon Full: aboutamazon.com/news/company

176
179
73
2,564
242,831
Andrei Oros retweeted
Driving a truck requires physical work. Physical changes -- products, manufacture, and the inevitable regulation -- take time. Pure intelligence jobs are easier to replace by software, hence coding and maths are among the first to have AI as serious competitors. Next up will be a lot of academic disciplines, from theoretical physics to economics. We can already see this beginning now. There must be a lot of scientific discoveries hidden in the scientific literature, conclusions that have not been drawn simply because no human has been able to read everything that has been published. AI is about to pick those fruits in the coming year ringing in what might be akin a second scientific revolution. This is going to keep the stock market excited for some time. I also expect, unfortunately, that the models which are most capable at scientific discovery will be increasingly restricted to members of institutions that have made deals with the leading companies. (Which isn't going to end well for the EU.) As usual, you shouldn't believe a word I say because as everyone will tell you, I don't know anything about nothing. But at least I have consistently said the same thing for a few years now. teapaw.org/Icebergy/status/211488

mathematicians and software engineers getting automated before truck drivers is pretty surprising
165
135
31
1,405
60,381
Andrei Oros retweeted
Announcing three major scientific discoveries, one each in mathematics (harmonic analysis), computer science (complexity theory), and physics (quantum field theory). AI starting to help us improve our understanding of the universe! openai.com/index/building-sc

684
2,034
874
16,190
3,218,271
Andrei Oros retweeted
People who cured / are curing their own cancer on X: 1/ @sytses - bone cancer, billionaire founder of Gitlab, developed 10+ personalized therapies for himself. 2/ @paul_conyngham - shrank his dog Rosie's mast cell cancer tumors after chemo and surgery weren't enough. Now backed by YC and Founders Fund 3/ @miriamgonp - stage 4 breast cancer, tumor sequenced, searching for vaccine manufacturer now 4/ @kevinace - stage 4 lung cancer, angel investor in 300+ companies, first drug stopped working after 18 months. Vaccine designed, now paying $300k out of pocket for the vaccine 5/ @masonbgrant: going founder mode on his his 32-year-old wife's rare liver cancer, sequencing her tumor with AI agents 6/ @ArunRLverma: former product leader at Atoms and Shopify, brain tumor, built a vaccine from his tumor. Now building an AI health agent startup based on what he went through We're going to make it
108
628
114
4,872
459,702
Andrei Oros retweeted
How do you _guarantee_ your agent's code is correct? You prove it. Introducing Proof Driven Development Kit (PDD Kit) from @MSFTResearch. PDD Kit helps turn your plan into a formal spec, then proves the agent's code meets that spec for every input. No vibe verification. PDD Kit is integrated with @GitHubNext's Chopin, so you can plan as a team. PDD Kit takes an app's login flow from intent to a verified pull request: It discusses your code, infers your intent as it goes, and proposes a formal spec in Verus, a proof language for Rust. Once you approve the spec, the Verus verifier automatically proves the code meets it. Where proof isn't possible, it falls back to empirical verification with tests and computer-use agents (CUAs). It works on Rust today. No new language, no change in how you produce the underlying code, making formal methods more accessible. The goal is a verified software factory, where engineers review specifications instead of code. Come see it in action at GitHub Universe, Oct 28–29. Swing by the Speakeasy and ask for GitHub Next!
86
134
78
2,059
398,507
Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server. tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible. The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this. The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed. @Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged. For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free. Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem. If you’re interested in learning more, you can read our blogs: Vulnerable roots: blog.cloudflare.com/emudhra-
 PHP vulnerabilities: blog.cloudflare.com/php-vuln

85
763
96
4,539
674,613
Wake up. Every profession deemed white-collar, the middle class dream, is about to be decimated by AI, at a much faster pace than anticipated, with monstrous social consequences.
1,090
3,044
661
24,233
2,586,126
Andrei Oros retweeted
Un investigador de Anthropic acaba de decirle a una sala llena de doctorandos que su plan de carrera ya no existe. La charla se titula "El fin del Antropoceno" y los datos son brutales: → El cĂłmputo para entrenar modelos se multiplicĂł por 10 millones en la Ășltima dĂ©cada → La duraciĂłn de las tareas que una IA completa sola se duplica cada pocos meses → Desde hace 7 meses los modelos resuelven problemas abiertos de ErdƑs que los matemĂĄticos no habĂ­an logrado cerrar → En San Francisco, tener "timelines largos" significa pensar que la AGI llega en 10 años Su proyecciĂłn: el cĂłmputo de 2030 serĂĄ 10.000 veces mayor que el de 2025. TodavĂ­a estamos al principio de la exponencial. Sus 3 consejos para los estudiantes: 1. Usa la IA cada dĂ­a. Si estĂĄs sobre la exponencial, nunca te quedas atrĂĄs de ella. 2. Elige proyectos que mejoren cuando el cĂłmputo escala. El resto quedarĂĄ resuelto antes de que los termines. 3. Deja de planificar tu carrera como si fuera estable. La opciĂłn segura ya no compra seguridad, ya no existe. Y una frase que resume todo: "Escribir es pensar. Si externalizas tu escritura, externalizas tu pensamiento." La charla completa aquĂ­ âŹ‡ïž
305
1,698
242
9,447
1,494,616
Andrei Oros retweeted
Every chemistry teacher you had lied a little. The hydrogen atom isn’t a frozen blob, it’s this. This is hydrogen, the simplest atom there is, with its probability current drawn as moving particles. The small shape in the corner is the orbital you were taught. The swirling field is what the Pauli equation says is flowing through it. Orange spins one way, blue the other. Even the ground state, the one textbooks call perfectly still, carries a current, because the electron’s spin adds a flow of its own. None of this is an electron racing on a track. It’s the math of where it’s likely to be, and that math refuses to sit still.
97
317
42
2,479
292,104
Published in Science today: Magic state cultivation works in practice on our Willow processor. We achieved a 40x error reduction, compared to without cultivation, and 99.99% fidelity. Learn how this addresses a critical resource bottleneck: goo.gle/4yr8V0H
80
353
119
1,818
247,100
peak car design - #mazda vision coupe concept (2017) newsroom.mazda.com/en/public

1
49