Daniel Camejo

🇨🇴 tech-sales based in 🇨🇭 In medio stat virtus. Checkout my first ebook made using Midjourney and GPT-4:

[Andrej Karpathy @karpathy]

Software horror: litellm PyPI supply chain attack.

Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.

LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.

Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.

Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.

Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

[Daniel Camejo @DCamejoR]

@hugomercierooo Twin

[Cerebras @cerebras]

OpenAI🤝Cerebras
https://t.co/KN31O9SNIC

[Jaana Dogan ヤナ ドガン @rakyll]

I'm not joking and this isn't funny. We have been trying to build distributed agent orchestrators at Google since last year. There are various options, not everyone is aligned... I gave Claude Code a description of the problem, it generated what we built last year in an hour.

[Daniel Camejo @DCamejoR]

https://t.co/APsR0m5h1n

[Daniel Camejo @DCamejoR]

@unaudiolibro me quedé esperando los otros capítulos :(

[Daniel Camejo @DCamejoR]

@vxunderground 😎

[Daniel Camejo @DCamejoR]

@vxunderground @Malcoreio 😎

[Daniel Camejo @DCamejoR]

@ZepressingC hello, the site and the app have been down for a few days. Any information?

[Daniel Camejo @DCamejoR]

@vxunderground Many thanks!

[Daniel Camejo @DCamejoR]

@three_cube Kindle version?

[Daniel Camejo @DCamejoR]

@DanielSamperO

[Daniel Camejo @DCamejoR]

@vxunderground 👍🏻

[VSports Team @VSportsTM]

James Rodríguez 🇨🇴 vuelve a Brasil. De su mágico Mundial 2014 a ser jugador de Sao Paulo 🇧🇷. Así lo presentó el club. 👇

[Daniel Camejo @DCamejoR]

@EmbColSuiza @flyedelweiss @CancilleriaCol @AlvaroLeyva @laurisarabia @PROCOLOMBIACO @petrogustavo Genial, solo faltó aclarar que se ofrecen al doble de precio (USD 2k) que un tiquete con escala en Europa ☹️

[Daniel Camejo @DCamejoR]

Join the team: A castaway on an island: https://t.co/DkYiRLqsor

[Kris Kashtanova @icreatelife]

A.I. comic book collaborations:

Solarpunk: https://t.co/SQbiMHPnJu

Burning Man meets Star Wars: https://t.co/r7AmzsdfAc

Time Travel: https://t.co/vjFbu5M8yG

A castaway on an island: https://t.co/HvzG7Ooouw

Please, join, I'll need couple of volunteers in each group to help with organizing.

[Daniel Camejo @DCamejoR]

@icreatelife Good memories, Prince of Persia and Doom #midjourneyv5 #ASCII #MSDOS #RETROGAMING

[Daniel Camejo @DCamejoR]

@icreatelife Duke Nukem for MS-DOS with ASCII intro #ASCII #DukeNukem #midjourneyv5 #retrogames

[Daniel Camejo @DCamejoR]

@icreatelife mmm not sure about the relevance of the equation... you can also just skip it #midjourneyv5

[Kris Kashtanova @icreatelife]

You can use formulas to generate fractals in the prompts. If you are not great at maths, just take this prompt and ask GPT-4 to re-write it for a different fractal.

Share with me your fractals.

Prompt: A highly detailed airbrush painting, using a parametric equation to create captivating art, x(t) = A * cos(a * t) * cos(t) + A * sin(b * t) * cos(t) and y(t) = A * cos(a * t) * sin(t) + A * sin(b * t) * sin(t), where 'A', 'a', and 'b' are constants, and 't' ranges from 0 to 2π. By experimenting with different values for 'A', 'a', and 'b', you can generate a variety of intriguing and visually appealing designs, combine this with other artistic elements and styles to create a captivating abstract design --ar 3:2