Co-Founder & Co-CEO Giant Swarm · NeoNephos Governing Board · Nerd Show Co-Host · Serial Entrepreneur · Agentic & Cloud Native

Cologne, Germany
Joined September 2009
Oliver Thylmann retweeted
Time to invest in a small GPU cluster and setup my own completely sovereign compute. Completely isolated in a Tailscale environment, with a cloudflare tunnel. This is nuts, Fable 5.1 capable open model, weights will ship on November 4th. Mark your calendars, take a sick day
Introducing Kimi K3.1 Pro: our most capable 3T-class open-weight model. 🔹 1M-token context, 2.8T total / 104B active params (MoE), Multimodal. 🔹 Full-project coding: games in Unreal, Unity & Godot. 🔹 Excels at parametric 3D modeling in Blender & CAD. 🔹 More reliable at finance work: Accurate modeling with hallucination down by 65%. 🔹 Matching the strongest proprietary models across coding, agentic and knowledge benchmarks. Kimi K3.1 Pro and K3.1 Pro Highspeed (2–3× faster) are now live on Kimi.ai, Kimi Work, Kimi Code, and the Kimi API. Open weights by Nov 4, 2026. 🔗 API: platform.kimi.ai 🔗 Tech blog: kimi.ai/blog/kimi-k3-1-pro
51
29
3
778
73,508
ok this is seriously amazing. I want to interact like that.
What in the black mirror has Jack Dorsey done?
95
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
The vulnerability tsunami is coming in just a few months and there won’t be enough time to patch critical infrastructure. Network isolation described below (air-gaps and data diodes!) needed now!
452
1,350
724
10,035
4,353,428
Maybe we just need to go to sleep for 12-24 months and come back when AI just does stuff.
6
224
Oliver Thylmann retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
290
3,272
670
22,661
2,262,326
Oliver Thylmann retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,079
8,934
1,651
69,416
4,170,188
Oliver Thylmann retweeted
Same.
when i have really dumb questions i'll ask chatgpt or gemini because i don't want claude to think i'm stupid
1
1
1
208
Oliver Thylmann retweeted
Today Yuga Labs launches Mudwater, Physical BAYC trading cards with onchain twins. Every digital item is a Solana NFT backed by a real sealed pack in a vault. 1/🧵
🤖 Made with AI
82
140
21
803
67,808
I just claimed 12 Mudwater packs! That's 120 cards waiting to be revealed. Let's see what I pull. @BoredApeYC
87
But now it is 11 years late instead of 8. but it can do shit that it will never be able to do outside private property.
They really just got on stage and said this newly designed 4000+ pound car can do flips and go half the speed of sound (380+mph) and will ship in 2028. This is a prank, right?
2
147
Sehr gut geschrieben … bester marketing Stunt seit langem
Solo voy a decir un par (o tres) de cosas sobre el Tesla Roadster que vimos ayer. Primero: aquello ha sido un stunt publicitario. Y uno absolutamente magistral. Así que, cuando volváis a leer que Tesla no gasta en publicidad, acordaos de anoche. Como ejercicio de imagen de marca, demostración de capacidades técnicas y generación de atención mediática, probablemente sea más potente que tener un equipo oficial de carreras en prácticamente cualquier campeonato del mundo. Y eso tiene un mérito indudable. Segundo: si en 2017 pagaste una reserva por un deportivo eléctrico 2+2 descapotable, prometido inicialmente para 2020, nueve años después te anuncian que tienes que esperar otros dos (¡ONCE AÑOS!) y la gran estrella de la presentación es un monoplaza que salta, gira en el aire y aterriza mediante propulsores. Que no es precisamente lo que habías reservado. Es como ir a un restaurante, pedir muslo de pollo, esperar tres días y que el cocinero aparezca con una nueva carta para anunciarte que va a servirte sardinas... Las quieras... O no. Eso sí, unas sardinas que vuelan. Y mientras los teslabros aplauden la audacia de su mesías, hay un par de cuestiones técnicas que conviene recordar. Una cosa es hacer saltar un coche en una exhibición y otra muy distinta comercializar un vehículo capaz de realizar vuelos controlados. En ese segundo escenario entramos en el complejo territorio de la certificación aeronáutica: FAA en Estados Unidos, EASA en Europa, requisitos de aeronavegabilidad, autorizaciones operativas y licencias o habilitaciones de vuelo según corresponda, que ya están afrontando las decenas de start UPS que andan intentando vender "drones personales de vuelo". Un follón monumental que no se resuelve simplemente homologando el coche para circular por carretera. Y luego tenemos los ventiladores que succionan aire bajo el vehículo para generar carga aerodinámica incluso estando parado. Una tecnología fascinante que ya hemos visto en otros deportivos experimentales (McMurtry), pero cuya aplicación a carreteras abiertas plantea problemas bastante evidentes: polvo, gravilla, piedras y todo tipo de porquería que puede terminar siendo expulsada hacia otros usuarios, hacia tu propio parabrisas... Resolverlo no es trivial. Dicho todo esto, como ingeniero, lo que vimos ayer me parece una genialidad. El despliegue tecnológico, la capacidad para resolver desafíos de física aplicada y el factor molonidad son indudables. Y, como herramienta publicitaria para demostrar de lo que son capaces sus ingenieros, me parece sencillamente extraordinario. Seguramente más eficaz que gastarse una fortuna compitiendo en carreras. Pero como analista de esta industria, y conociendo el historial del personaje, me parece un mal chiste para quienes llevan casi una década esperando el coche por el que pagaron una reserva. Musk sigue prometiendo y prometiendo, entregando una fracción de lo anunciado, y ahora nos presenta como gran revolución un producto cuyo valor diferencial comercial, más allá del factor WOW y del ejercicio de demostración tecnológica, es cuanto menos discutible. Porque una cosa es ser capaz de hacer algo técnicamente extraordinario y otra muy distinta que tenga sentido convertirlo en un producto comercial. Y no conviene confundir ambas cosas. Hablaremos de todo ello, con bastante más profundidad técnica, en el videocast de PowerArt y en próximos shorts (y si queréis, hasta un largo). Porque hay mucha ingeniería interesante que desgranar detrás de lo que vimos ayer.
1
136
Elon Musk just pulled a great marketing stunt for a useless tech to merge Tesla and SpaceX and now watch for an accelerated vesting discussion on his huge options plan at Tesla, if it is not already in there because who would have bought Tesla 😂🤷‍♂️
2
132
At this point the whole EU Inc negotiations are so lost in the details that everyone forgot the main goal: Creating a standard. Basically, allow founders to raise quickly globally and use stock options to hire competitively. Let’s say it quite clearly: 1) If EU Inc isn’t providing a standard it’s useless. We already got 30+ legal entities in Europe. Experienced founders use Delaware Inc already because of this. 2) If EU Inc doesn’t fix stock options Delaware Inc is still the better option. I understand the there are complex details and people are worried about loopholes. But you can’t lose the actual goal of it because of it. An EU Inc that doesn't provide a standard is pointless. Nobody will care about intricacies of compromises reached in political committees if the market can't use the outcome. If you are in contact with your political leaders (prime ministers, presidents, et al) please reach out to them. Or to founders/investors in your network who might have that access. 🔥🇪🇺✌️ xitter.cf/euinc_petition/status/…
Europe’s founders need a European standard to compete globally from day one. Europe’s leaders committed to delivering one. But their teams are negotiating away the very things that make it one. There is still time to change course if Europe's Heads of State step in now.
48
181
27
942
67,823
Oliver Thylmann retweeted
My advice to all C-Level: know the details of everyday operations. With AI, talk to your data, talk processes. AI is your window into what is actually going on. Stop that strategic bs. If you don't know your company, you are not good at your job.
1
21
Oliver Thylmann retweeted
Tommi ❤️🤍 #effzeh
2
15
4
196
5,686
Important item by Satya : “In other words, we need to separate the supply of intelligence from the authority over it.”
82
Oliver Thylmann retweeted
6 years in stealth Let that sink in That was hell of a bet 👏
After six years in stealth, Atomic Machines is out. Our mission: on-demand, universal command of matter. First beachhead: the Matter Compiler, an AI-native manufacturing system that builds working micro-machines from code alone. No per-product tooling. No process development. Different code, different machine.
23
93
5
2,762
308,675
Oliver Thylmann retweeted
59
1,536
128
10,639
297,684
Oliver Thylmann retweeted
We'll be spending a lot more time trying to understand the outputs of language models. A few thoughts, tips & tricks: Writing. Something I've had success with: Ask your LLM to explain something in ASD-STE100, it's a controlled language specification originally developed for aerospace maintenance documentation. LLMs well-versed in this language and it comes with heavy constraints on clean writing style that I often find a lot more readable. Sometimes I've tried to soften it a bit e.g. ask for "80% of the way to ASD-STE100" because the spec is quite stringent. But even better: Diagrams / images. Instead of writing, ask your LLM to create a diagram. These can be a lot easier to process, parse, and understand. But even better: Web pages. Ask for output "in HTML" to get a beautiful, interactive webpage. LLMs are getting really good at frontend and can create beautiful experiences, animations, etc. But even better: Explainer videos. The output format I am most bullish on is fully custom / bespoke explainer videos generated on any arbitrary topic. Experiment with things like "Create a 3b1b style video explainer on X. Use my ElevenLabs API key for audio narration". (you'd need an API key for the latter or you can ask your LLM to find you decent free alternatives that use your local compute). This is actually starting to work! In summary: - As LLMs get better, they will do more and more of the legwork autonomously, and a lot more of our work will rise up the abstractions into oversight and understanding. - Luckily, LLMs can help here too because as intelligence and code are increasingly abundant, you can ask for large, custom, discardable software artifacts (e.g. web apps, video explainers) that would have never made sense to create before. Push the boundaries here and you'll be surprised.
1,674
6,646
1,544
56,037
7,991,302