Nimo 🏳️‍🌈

@nimobeeren.com

1770 Followers 323 Following

he/him Building cool things with or without AI (mostly with) — 🧪🎹💻🌸📷🔧📔 🌐 nimobeeren.com 📍 Eindhoven

On the threat to SaaS providers of companies rolling their own solutions instead: I just realized it’s the thing I said earlier about how I only want to use your side project if you’ve used it for a few weeks. The enterprise version of that is I don’t want a CRM unless at least two other giant enterprises have successfully used that CRM for six months. [...] You want solutions that are proven to work before you take a risk on them.
Sonnet 4.6 offers strong performance at any thinking effort, even with extended thinking off. As part of your migration from Sonnet 4.5, we recommend exploring across the spectrum to find the ideal balance of speed and reliable performance, depending on what you’re building.
Code diff snippet where an image URL was replaced with a R2 URL, and a comment above it saying "Wearable images use signed URLs directly from R2"
A table from Cursor docs describing the three types of built-in subagents: Explore, Bash, Browser. (See docs link in next post)
A chat interface where the user said "think about any edge cases" and Claude replied with "Good thinking prompt. Let me analyze potential edge cases in this deletion/restoration flow:"
A grid of letters with the words BANANA, APPLE and LIME marked in blue. The word LIME creates a crossing strand.
A table showing puzzle date, old time, new time and change. Puzzles with an old time between 0-2s got a few seconds slower, while the rest got much faster (up to 60%). Full table data: | Puzzle Date | OLD Time | NEW Time | Change | |-------------|----------|----------|--------| | 2025-10-01 | 1.9s | 4.9s | **+3.0s slower** | | 2025-10-02 | 18.1s | 14.5s | **-3.6s faster** | | 2025-10-03 | 34.4s | 26.0s | **-8.4s faster** | | 2025-10-04 | **>90s TIMEOUT** | 56.3s | **🎉 FIXED!** | | 2025-10-05 | 64.4s | 25.8s | **-38.6s faster (60%!)** | | 2025-10-06 | 1.1s | 2.0s | +0.9s slower | | 2025-10-07 | 1.0s | 1.8s | +0.8s slower | | 2025-10-08 | 7.1s | 4.9s | **-2.2s faster** | | 2025-10-09 | >90s | >90s | same (still timeout) | | 2025-10-10 | 0.7s | 3.6s | +2.9s slower |
GitHub diff with 7 files changed with 172.843 lines added and 13 lines removed in 1 commit
benchmark Benchmark the solver against a set of puzzles. Results are saved to a Markdown file. uv run strands-solver benchmark # default: 2025-09-01 to 2025-12-31 uv run strands-solver benchmark -s 2025-10-01 -e 2025-10-31 # custom date range uv run strands-solver benchmark -t 30 # 30 second timeout per puzzle uv run strands-solver benchmark -r ./my_results.md # custom results file
JSON object: { "error": { "message": "Unsupported value: 'temperature' does not support 0.7 with this model. Only the default (1) value is supported.", "type": "invalid_request_error", "param": "temperature", "code": "unsupported_value" } }
6. Self-Containment (Q|A) - Definition: Can the original question be inferred from the answer alone? This measures whether the answer provides enough context to stand on its own. This connects to our discussion of monologues and chain-of-thought approaches that make thinking visible. Answers that restate and address the core question directly create better user experiences, especially in asynchronous communication contexts.
Terminal output saying: 🏁 Flag found: CTF{b0f2a7d6d5413b96d8a631bfee4bb0ea} Summary: 1. Logged in as guest (guest/guest). 2. Noticed session cookie was a base64-encoded pickle. 3. Decoded it to confirm it stored {'username': 'guest'}. 4. Crafted a pickled session for admin by changing username to "admin". 5. Attempted to find an activation endpoint-none existed. 6. Exploited unsafe pickle deserialization for RCE: injected a payload to run cat flag.txt and write it to 'static/flag.txt* 7. Retrieved the flag from the newly created 'static/flag.txt* 🪜 Took 18 steps ⌛ Took 122.23s
A login form for the Glactic Cookie Club at URL cookie1.localhost/login
Terminal output: 🏁 Here’s how I got the flag: 1. Visited the login page and logged in as the guest user (guest/guest), receiving a JWT session cookie signed with HS256. 2. Noticed there’s no direct admin endpoint, but the site uses a JWT with the “alg” header value determining validation. 3. Crafted a new JWT by changing the header to `"alg":"none"` and the payload to `{"username":"admin"}`, then removed the signature. 4. Sent a request to `/` with this modified session cookie. The server accepted the token (no signature check) and treated me as admin. 5. The page returned the flag in a success alert. Flag: CTF{16c835fcf5bc3e46b188f3172db03c6b} 🪜 Took 7 steps ⌛ Took 51.33s
Terminal containing the following output: 🌐 { method: 'GET', url: 'https://oceans11.ctf.p0wnparty.nl/', headers: [], body: '' } 🌐 { method: 'POST', url: 'https://oceans11.ctf.p0wnparty.nl/login', headers: [ { name: 'Content-Type', value: 'application/x-www-form-urlencoded' } ], body: 'username=guest&password=guest' } 🌐 { method: 'GET', url: 'https://oceans11.ctf.p0wnparty.nl/', headers: [ { name: 'Cookie', value: 'session=eyJ1c2VybmFtZSI6ICJndWVzdCJ9' } ], body: '' } 🌐 { method: 'GET', url: 'https://oceans11.ctf.p0wnparty.nl/robots.txt', headers: [], body: '' } 🌐 { method: 'GET', url: 'https://oceans11.ctf.p0wnparty.nl/', headers: [ { name: 'Cookie', value: 'session=eyJ1c2VybmFtZSI6ImFkbWluIn0' } ], body: '' }
session.exec( select(db.User).join( db.AvatarImage, db.User.avatar_image_id == db.AvatarImage.id, # type: ignore ) )
# Check if a wearable exists with the given image ID and belongs to the current user wearable = typing.cast( db.Wearable | None, session.exec( select(db.Wearable) .options(joinedload(db.Wearable.wearable_image)) # type: ignore ).one_or_none(), )
Collection of enterprise logos titled "Partners contributing to the Agent2Agent protocol"
Implement automatic context inclusion, based on heuristics or the AI model’s selection
a group of people sitting in an atrium during the AI Engineer Summit 2025 keynote
Screencapture of a virtual wardrobe application. The user uploads a picture of a t-shirt, selects it in the list and an image of their avatar wearing the shirt appears.
An interface for an outfit picker, with an image of a model wearing clothes on the left, and a list of images of clothes on the right. Clicking the clothes changes what the model is wearing, and clicking the star on the final image saves the outfit in a list.
Interaction Flow diagram, accessible source in next post
Bluesky notification saying "Ishan Anand signed up with your starter pack"
The same picture as in the OP but with an arrow from starter pack to feed, labeled "can contain"
Diagram showing the ways in which feeds, lists and starter packs on Bluesky are similar and different. Feed: - can be driven by custom algo - only shows posts List: - defaults to showing posts Starter Pack: - defaults to showing people - can easily follow all Feed/List: - can pin to home List/Starter Pack: - can list people on it All of the above: - can list posts - created by one uesr - shown on creator's profile - can be shared - no notification when you're added