Shane Lawrence (@shaneplawrence) profile picture

Shane Lawrence

@shaneplawrence

Sr Staff Security @Shopify

Joined October 2011
  • Tweets308
  • Following855
  • Followers352
23Media
Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)Photo by Shane Lawrence (@shaneplawrence)
It’s interesting to see something that’s so complex reduced to its simplest form.
Andrej Karpathy (@karpathy) profile pictureAndrej Karpathy
@karpathyFeb 11
New art project. Train and inference GPT in 243 lines of pure, dependency-free Python. This is the *full* algorithmic content of what is needed. Everything else is just for efficiency. I cannot simplify this any further. gist.github.com/karpathy/862…
microgpt

microgpt

microgpt. GitHub Gist: instantly share code, notes, and snippets.

gist.github.com
294
I really enjoyed this talk from @3blue1brown where he gives an accessible way to visualize transformers and attention.
1
158
youtu.be/KJtZARuO3JY?si=jLuc…
Visualizing transformers and attention | Talk for TNG Big Tech Day '24

Visualizing transformers and attention | Talk for TNG Big Tech Day '24

An overview of transforms, as used in LLMs, and the attention mecha...

youtube.com
191
Could get that down to 5x more vulnerabilities if you tell it to make it secure.
ThePrimeagen (@ThePrimeagen) profile pictureThePrimeagen
@ThePrimeagen7 Sep 2025
i never saw this coming
Image from ThePrimeagen (@ThePrimeagen)
1
339
Shane Lawrence retweeted
The New Stack (@thenewstack) profile picture
The New Stack
@thenewstack4 Sep 2025
Want to make MCP tools more interactive? @janakiramm explains how to integrate elicitation so your apps can accept real user input instead of fixed parameters. thenewstack.io/how-to-implem…
How To Implement Elicitation With Model Context Protocol

How To Implement Elicitation With Model Context Protocol

This tutorial shows you how to integrate elicitation to accept user input in MCP, instead of sending hard-coded parameters.

thenewstack.io
1
3
545
I discovered (after 5.4 million other users) that MS has a hex editor extension for vscode.
1
236
marketplace.visualstudio.com…
Hex Editor - Visual Studio Marketplace

Hex Editor - Visual Studio Marketplace

Extension for Visual Studio Code - Allows viewing and editing files in a hex editor

marketplace.visualstudio.com
194
TIL I can immediately escape a hung SSH session! I don’t need to repeatedly mash Ctrl+C, Ctrl+Z, and Ctrl+Shift+6 before giving up and closing the terminal. I can press Enter ~ . and it just works.
1
215
TIL
Bala (@balaintwt) profile pictureBala@balaintwt23 Jan 2025
Replying to @ibuildthecloud
maybe include path like this dev.to/spaceghost/fixing-mac…
Fixing MacOS' SSH $PATH missing /usr/local/bin

Fixing MacOS' SSH $PATH missing /usr/local/bin

Fixing MacOS' SSH PATH Problem

dev.to
291
My UniFi U6 Enterprise AP was getting exactly 100 Mbps on 6 GHz. The 5 GHz band was much faster!
1
2
253
After a lot of dead-ends and the usual turning it off and back on again, I found a bug. No matter what channel width I set, the 6 GHz band was stuck using 20 MHz.
1
144
I couldn’t find any bug reports matching this, but after a firmware update it’s now working at 160 MHz and it is much, much faster!
113
At the conference: AI’s different because is non-deterministic and we need more interpretability research to understand what it’s doing. Debugging my own code: It worked on my machine. I’ll add print statements everywhere and try to figure out what it’s doing.
120
“In a particularly thought-provoking session, Shane Lawrence, senior staff engineer at Shopify, discussed security threats to AI models.” Thanks @camillecrowelee!
1
1
116
thenewstack.io/kubecon-keyno…
KubeCon Keynotes Wrestle With AI Governance Complexities

KubeCon Keynotes Wrestle With AI Governance Complexities

AI is not going away, and the container industry needs to adapt its governance model to scale as fast as GenAI is evolving.

thenewstack.io
1
62
It was a lot of fun to present this demo and talk about AI (and a bit of Supply Chain) today at #KubeCon!
Nikhita Raghunath (@TheNikhita) profile pictureNikhita Raghunath@TheNikhita12 Nov 2024
Mind-blowing talk by @shaneplawrence at Cloud Native AI Day at #KubeCon! He shared a live demo showing how AI can accidentally SPILL SECRETS (!!) and how to deal with these new challenges! This is what makes KubeCon fun!! Just cool ideas everywhere 💫
Image from Nikhita Raghunath (@TheNikhita)
1
2
6
1,475
The slides are available here. sched.co/1izpr
1
1
76
Shane Lawrence retweeted
Phil Venables (@philvenables) profile picture
Phil Venables
@philvenables21 Aug 2024
Types of controls: 1. Controls as code. 2. Controls as bureaucracy. 3. Other?
15
2
15
3,309
Has anyone generalized a deobfuscator that can be built into pipelines yet?
Shane Lawrence (@shaneplawrence) profile pictureShane Lawrence@shaneplawrence12 Apr 2024
ChatGPT 3.5 misses it, but ChatGPT 4 is pretty good at flagging parts of the xz compromise even without full context. "This script is highly suspicious in nature and appears to be designed to execute potentially malicious code hidden within compressed files..."
Image from Shane Lawrence (@shaneplawrence)
1
4
706
ChatGPT 3.5 misses it, but ChatGPT 4 is pretty good at flagging parts of the xz compromise even without full context. "This script is highly suspicious in nature and appears to be designed to execute potentially malicious code hidden within compressed files..."
Image from Shane Lawrence (@shaneplawrence)
1
823
Load more