Hazim.rekt (Havoc)

You'll come to learn a great deal if you study the Insignificant in depth. - Odysseus Elytis | Rekt Software Dev | Header - @ShafwanZaidon

[Projek Hitam @projekhitam]

Fasa hutan untuk basic komando askar dan polis adalah beg webbing wajib pada badan. Dalam webbing ada kit basic survival + botol air. Kalau hilang atau tak lengkap, hukuman berat menanti.

You were allowed to go fight naked, but not without your webbing.

[ayush🔮👨‍💻🔮 @ayushagarwal027]

Wasmer ported their 7-year-old Django backend to Rust. The results are hard to ignore. 🦀

Before vs After:
→ 220 CPUs → 24 CPUs (-89%)
→ 800 GB RAM → 64 GB RAM (-92%)
→ p95 API latency: 120ms → 30ms (-75%)
→ Startup time: 60s → 1s
→ DB connections: thousands → hundreds

One engineer. Three months. AI-assisted migration.

They're honest about the tradeoffs : longer build times, no `https://t.co/vZAHmIndB1 shell` for quick prod fixes, and SQLite/Postgres dual support was painful.

And they're clear: this wasn't "Django is bad." Django served them well for 7 years. The rewrite made sense because their entire stack was already Rust-heavy.

Full writeup worth reading 👇
🔗 https://t.co/vvg0tl6Hpe

#Rust #RustLang #Django #Python #WebDevelopment #OpenSource #BackendEngineering

[yousukezan @yousukezan]

人気のJavaScriptテストフレームワーク「Vitest」に複数の深刻な脆弱性が見つかった。開発環境を標的にリモートコード実行や機密ファイル窃取が可能になる恐れがあり、数千万規模の利用環境へ影響する可能性がある。

最も深刻な問題の一つであるCVE-2026-47428は、Webインターフェースにおけるスクリプトインジェクションの脆弱性だ。攻撃者は細工したURLを通じて任意のJavaScriptを実行し、認証トークンを窃取できる。その後、vite.config.tsなどの設定ファイルを書き換え、Node.js経由で任意コードを実行できる可能性がある。

さらにCVE-2026-47429では、Windows環境でパストラバーサルが発生し、認証なしでプロジェクト外のファイルへアクセスできる恐れがある。また別の脆弱性では、Chrome DevTools Protocolへのアクセス制御不備を悪用し、プロジェクト内へ不正ファイルを配置してコード実行につなげられるという。

Vitestは週5,300万回以上ダウンロードされる人気プロジェクトであり、開発者PCやCI/CD環境が主な影響対象となる。

開発チームは修正版として4.1.6および5.0.0-beta.3を公開した。新たにallowWriteやallowExecなどの制御機能が追加され、公開ネットワークへバインドされた環境では危険な操作が既定で無効化される。利用者には速やかな更新が推奨されている。
https://t.co/TXCVKcJsQf

[ebrah · PHP @AutoTrendzUg]

It’s true, this button is one of the most ignored things in a car.

When its off, your AC cools hot outside air from scratch on every single cycle. In a country where ambient temperatures regularly sit above 30 degrees, the compressor is running at full capacity the entire drive. That is how you shorten the life of the whole system. It wasn’t designed to fight the outside temperature every minute.

Turn it on and the AC recools the air already in the cabin. Less heat load, Faster cooling and less strain on the AC compressor.

The only time you want it off is in cold or rainy conditions when your windows need fresh air to stay clear.

Use it correctly and your compressor will outlive the car…

[Ryan Dahl @rough__sea]

deno is migrating from swc to oxc

https://t.co/WtRWk23A71

[Wes Bos @wesbos]

Cloudflare has acquired Vite / VoidZero

Void is vite's fullstack Intertia-like framework.

This gives Cloudflare control over the entire stack. They have all the primitives from frontend/backend framework, linting, testing, formatting, JS runtime, db, kv, inference, blob storage, access, etc...

smart move. A tidy package they can hand to an LLM to make a site.

[dax @thdxr]

my worst VC story:

[unnamed] partner stopped me mid pitch. this was pre-covid so these were all in person

he walked up to me and whispered in my ear "damn ur a hot piece of ass"

he smacked my butt and said he wanted my whole seed round

i was offended and left his bedroom immediately

[Amirul Ruslan @amirulruslan]

Nothing perfectly captured the time of Dr Mahathir more than Lat comics of the 80s and 90s.

[WinRAR @WinRAR_RARLAB]

Yay! We finally got paid! 🤑🤑🤑😎😍🥳🤣

[Pedoq, what is this behaviour? @pedoqpop]

Aku ada pengalaman kat hotel mahal (mahal untuk aku) ada meja sebelah ni pergi breakfast buffet makan roti bakar sekeping dengan order latte. Order punya tau, kopi barista buat padahal ada mesin tekan keluar latte tu. Aku pulak makan macam tawanan perang baru bebas. So aku paham la sis ni

[Projek Hitam @projekhitam]

Bila pakai topeng ni, identiti LEO pun selamat. Nak buat kerja high profile pun selesa dan tidak teragak-agak sebab orang tak kenal siapa kita dan media tak boleh identify facial.

Betul la orang cakap “1 bad general is better than 2 good general” sebab pening arahan siapa nak follow.

[m4rio @m4rio_eth]

🚨 TL;DR: Attackers are sending fake Sentry bug alerts to projects using public Sentry DSNs. The fake alert is designed to trick AI agents into running a malicious `npx` command that looks like a Sentry profiling diagnostic.

Do NOT run commands from Sentry issues/logs/alerts unless verified.

These are not legitimate Sentry fix commands. The malicious package reportedly steals environment variables/secrets and sends them to advisory-tracker[.]com.

[S M A Sithick @smasithick]

Watched @Mrwhosetheboss talk about leaving the Apple ecosystem and all the compromises that came with it.

As someone who's never owned an iPhone, Apple Watch, AirPods, or Mac, my experience has been the complete opposite.

For years, I've been deeply invested in the Samsung ecosystem, Galaxy phones, Galaxy Watch, Galaxy Buds, SmartTags, tablets, and Windows integration. Everything just works together seamlessly.

The best part? I still get the freedom of Android. If a better camera phone comes along from another Android brand, I can switch without rebuilding my entire digital life.

Ecosystems are powerful. But for me, Samsung gives me the convenience of an ecosystem with the flexibility of Android.

[BFM News @NewsBFM]

5 passengers on the Kelana Jaya LRT Line were injured when a train made an abrupt stop near Dang Wangi Station yesterday evening after its automatic safety system was activated.

A standing passenger lost balance during the sudden stop, causing a bottle to strike and shatter a glass panel, with fragments hitting nearby commuters.

🧵1

[Mo @atmoio]

Anthropic is questioning whether AI may turn out to be altogether useless. This is the single most honest thing Anthropic has ever written.

“But achieving recursive improvement alone does not suggest an immediate change in how industrial production occurs, societies organize, or markets function. More intelligence can’t learn what a drug does over decades of use, can’t hold elections sooner than a constitution dictates, and can’t turn a stranger into an old friend in a weekend. For most people, the felt pace of this future will still be set by the bottlenecks, even if the laboratory upstream runs at the speed of compute. That collision, where recursive intelligence building itself ever faster meets the world of humans, relationships, and governance, is another part of this future we can’t predict.”

[critter @BecomingCritter]

this is just what an age gap looks like

[𝒢𝒾𝓁𝒷ℯ𝓇𝓉 @AbakpaJob]

I knocked over a plant in the kitchen but my cat saw me so I had to spray myself with water so I could show the law applies to everyone

[𝐆𝐫𝐢𝐦𝐚𝐥𝐝𝐮𝐬 @ImperiumFirst]

Female humor is just copying male humor and making it as unfunny as possible

[Paul Copplestone - e/postgres @kiwicopple]

Supabase has raised $500M at a $10B valuation

In this round we are giving @supabase employees the opportunity to cash out 25% of their vested options. We have done this in every round since inception.

We do it as a “cashless transaction” so that employees don’t need to front any cash to exercise their options. This is the friendliest way we could design it until we can offer RSUs.

On top of that, we give employees a 10 year exercise window: whether they stay or leave the company. The typical/default window is 3 months. IMO, equity is earned and employees shouldn't be penalized because they don't have the cash to exercise within 3 months of leaving a job (often that's the time they need the cash/certainty the most).

[🔺meingl🔻 @meinmokhtar]

Rugi la. Dividen kwsp lagi tinggi. Korek la emergency fund ang tu