Aaronstotle

Info-Sec/Security, Cycling, and monitoring the situation

[myles brown @mdotbrown]

This is the only angle that does that miracle justice.

[jason kim @jasonkimvc]

OG Anunoby leaving Toronto and thriving in America like every homegrown Waterloo software engineer

[alex @alex_abads]

the most sinister, hopeless backroom in mahattan

[suze @cortadoedison]

Hidden gem!!!

[Aaron @aaronp613]

Another iOS app accidentally shipped a CLAUDE.md file:

Netflix

[Seth Rosen @sethrosen]

I just open sourced my "Is this slop?" simple test

[Tim Sneath @timsneath]

One of my personal favorite features announced at WWDC will I suspect be a sleeper hit: container machines, allowing your Mac to run a lightweight, persistent Linux environment with your home directory and repos automatically mounted: https://t.co/dOBdfOOVxC

[Aaronstotle @Aaronstotle1]

@bustitopen420 You need to live 25 minutes away from work

[Big Knick Energy @BigKnickEnergy_]

I don’t know how this referee is making it out of New York tonight

[Aaronstotle @Aaronstotle1]

@nic_carter @signulll Why?

[Aaronstotle @Aaronstotle1]

@ukhomeoffice I hope Apple and Google pull out from the UK entirely

[Yuchen Jin @Yuchenj_UW]

Before AI, I’d spend a weekend building 1 useless app.

Now I can build 67 useless apps over a weekend, each with a logo, a fancy webpage, and 0 user.

[Aaronstotle @Aaronstotle1]

@NYCMayor mentally ill people belong in asylums

[Aaronstotle @Aaronstotle1]

@Laz4rz I haven’t charged mine in over a year to see how long the battery lasts and it’s still going

[Jamieson O'Reilly @theonejvo]

As someone who:

> Hacked basically every component of openclaw's ecosystem (harness, skills ecosystem etc)
> Helped lead security, trust & threat modelling
> Found 15 CVE's in the software

Absolutely do not run OpenClaw on your enterprise device.

[Aaronstotle @Aaronstotle1]

@YIMBYLAND It is economic progress

[Abdulkadir | Cybersec @cyber__razz]

Someone hid a self-replicating worm inside 37 npm packages.

Written in Rust.

Hidden behind an eBPF kernel rootkit.

Talking to its operator over Tor.

It steals 86 environment variables.

AWS keys. GCP keys. Vault secrets. Kubernetes tokens.

Your Anthropic API key. Your OpenAI key.

Your Exodus wallet seed phrase.

Then it uses your own npm credentials to republish itself into your packages.

So your code infects the next developer.

Who infects the next one.

The commits were backdated up to 13 years.

The commit author name was “claude.”

The malware named itself after the AI to hide in plain sight.

The attacker also left their own wallet recovery phrase in the debug data.

Nobody is having a good day.

Check your preinstall hooks.

[Sensurround @ShamashAran]

Can we PLEASE
for the love of all that his holy
STOP NORMALIZING THIS INSTALL METHOD

[Wholesome Side of 𝕏 @itsme_urstruly]

did you know that in most white collar jobs you can just go for a 15-20 minutes walk multiple times a day and they just like don't care

[Aaronstotle @Aaronstotle1]

@juliafedorin Things are open past 10pm here though