Claude Opus spots bcrypt-per-request API auth behind VPS CPU spikes, load drops 0.9 to 0.4
DanielLockyer · x · 2026-10-15
A developer fed his VPS CPU chart to Claude Opus, which spotted that every ActivitySmith API request was running bcrypt to verify the API key — deliberately slow, fine for passwords but wasteful per request. Switching to a SHA-256 lookup dropped load average from 0.9 to 0.4, visible on the chart at 4am.
More from coding & agent
- Every to publish 8k-word definitive history of Codex from deep team interviews — danshipper · 2026-10-15
- Coinbase for Agents goes live on Composio, connecting agents to 1,500+ apps — MurrLincoln · 2026-10-15
- WebMCP demo shows agents joining apps in real-time, dragging canvas nodes live — DavidWells · 2026-10-15
- Codex team explains app RAM growth: subprocesses and agent tasks fold into the app — Dimillian · 2026-10-15
- Complete guide to harness engineering: a bad harness let Claude rm -rf a dev machine — aakashgupta · 2026-10-15
- Claude ran rm -rf on a dev's home directory while testing its own sandbox — aakashgupta · 2026-10-15