Simon Willison on AI

Simon Willison@simonw

The conclusions here feel wrong to me. The two lessons I see are: 1. Don't run agents anywhere they might be able to access production environment credentials - it's on you to know which credentials those are 2. Keep tested backups that are independent from your production host

1.4K likes166 repliesPosted Apr 27, 2026

Remix this post

Your note

Private to you, and used when you remix this post.

Viral score

Based on absolute engagement — the platform doesn’t expose follower counts here, so large accounts score higher.

From likes, comments.

Why it worked

Opens with a short, self-contained line that is easy to take in at a glance.
Contradicts something the audience already believes, which stops the scroll.
Follows a clear Hook → List → List shape, so the reader always knows where they are.
Ends on a short line that is easy to quote and repeat.
Written from experience rather than as advice, which is harder to argue with.
Short enough to read in full without expanding, which removes a step before the point lands.

The mechanics

Hook: Plain observation
Structure: Hook → List → List
Style: Listed out, so each point can be lifted on its own.
Tone: personal, punchy
Mechanisms: Pattern interrupt
Written for: People building with AI

Analysis by ViralLoop — not written by the original author.

Post by Simon Willison on X