FullStack Developer in Private Sector | Microsoft enthusiast, Azure lover. IoT, AI/ML, Chess. All tweets here are personal opinions. No liability is accepted.
We just launched Xirp, a vendor-neutral agentic development environment. One place to manage agent sessions across @ClaudeDevs, @GeminiApp CLI, and @OpenAI Codex. 1,300+ @Spotify engineers already use it. Now it's available for you to try. Learn more at https://t.co/Hwo8Qqx4OI.
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
https://t.co/CIor15y9xk
Cloudflare spent 6 weeks chasing a bug in the hyper Rust HTTP library. The fix was 4 lines. 🦀
The symptom: image responses returning HTTP 200 but with truncated data : a 14.9 MB response arriving as 219 KB, no errors logged anywhere.
The root cause: a single `let _ =` in hyper's dispatch loop discarding a `Poll::Pending` signal from the flush operation. The socket buffer filled up, flush returned pending, but hyper ignored it and called shutdown anyway, dropping the remaining data silently.
What made it so hard to find:
→ Only happened in production, never with curl
→ Only triggered for large images under real concurrency
→ Disappeared when strace was broadened (slowed things just enough to shift timing)
→ All application-level logs reported success
The breakthrough came from strace : kernel-level syscall tracing, which showed shutdown being called after just one write, with 14.8 MB still in the buffer.
The bug existed in hyper across multiple major versions (0.14 through 1.8). It was invisible because most readers drain data fast enough that the socket buffer never fills. A new, faster intermediary introduced just enough backpressure to expose it.
Fix is now merged upstream in hyperium/hyper PR #4018.
A masterclass in debugging async Rust at the systems level.
🔗 https://t.co/yd3RY2mfOf
#RustLang #AsyncRust #Hyper #SystemsProgramming #Debugging #OpenSource #Cloudflare
i hooked my whoop to my work calendar to find which coworker gives me the most stress ��
thanks to fable, I reverse engineered whoop to pull per minute heart rate. nd matched spikes with cal events and attendees
I now have a leaderboard and I think about it daily.
few info masked for obvious reasons ;)
Github HACKED.
The internal repository has been breached.
Hacker group claims to have this data, including 4,000 private repositories, and is offering to sell it for minimum 50k or the highest bidder.
🚨 We recently discovered that an unauthorized party obtained a token with access to the Grafana Labs GitHub environment, enabling the threat actor to download our codebase. (1/6)
Unfortunately, the fact that an employee is being monitored is bad enough. I’ll set that aside for now. If your company has a “good enough” IT team, running scripts like this will likely trigger alerts in their log monitoring systems.
@reinedenpiquue sultanlar ligini izlerken taraf tutan spikerlere alışmıştık ama bu şaşırttı cidden. spiker hanım, sponsorluk anlaşmasını maçtan önce yapıp gelmiş sanırım.
Turkish culture is a masterclass in "speaking without speaking."
From a subtle flick of the chin to a specific "tsk," sometimes a single sound tells a whole story.
We challenged these foreigners to decode some of the most iconic Turkish non-verbal cues. Watch to see how they handled it.
How many did you guess correctly? Let us know in the comments!
@semihkayacomtr@orxantopac hazır marka geçmişken, tek motorlu olanını kullanan kimse var mıdır? 😅 taşıyabileceği ağırlık konusunda memnun mu kullananlar? mesela ayarlanabilir monitör kol-standı ile vs kullanımda sorun yaratıyor mu?