Since the entire internet cares about critical certificates today, a reminder @UPI_NPCI has been running on an expired cert since Sep 2025.
Issued by IDRBT, which is now managing all of *.bank.in.
🚨 THE INTERNET BROKE TODAY 🚨
Oct 21, 2026 will go down in history
1. eMudhra : Private key was literally "4". 8 keys forged ANY website for 17 months. 60M+ certs at risk.
2. SBI CONFIRMED. 3,897 customers' mobile, DOB, address + loan data found on dark web.
3. Rajasthan Police 🇮🇳ALLEGED hack. Group claims 70,000 identity records + 59,460 numbers for sale. Unverified.
4. php2shell [9.2] Unauth RCE in PHP. 70% of the web. WordPress, Drupal, Laravel. CISA: Patch or GO OFFLINE.
5. GitLab [10.0/10] PERFECT SCORE. Unauth RCE, no login needed.
6. Node.js [CVE-2026-111497] Brotli decoder RCE + TLS bypass. 10 CVEs patched today. Also blocked eMudhra.
7. Railway BREACHED TODAY. Env variables decrypted. Your API keys & DB passwords exposed. Rotate all.
8. OpenCode BREACHED. OpenAI, Anthropic, Google API keys exposed for Console users. Distillation attack. Bills run up in $$$$.
9. LiteLLM PyPI v1.107.0 was MALWARE today morning. Steals credentials + backdoor.
10. Plex2Shell ACTIVELY EXPLOITED. Hackers installing cryptominers LIVE. CISA KEV, deadline Oct 23.
AI found the bugs. AI is exploiting them. Humans can't patch fast enough.
Patch. Rotate. Revoke. Update.
RT to save someone's server ♻️
#CyberSecurity #DataBreach #India #php2shell
Bloomberg just dropped the most disturbing investigation I have read this year, and every AI builder should read it and take it seriously.
On February 28, two Tomahawk missiles hit an elementary school in Minab, a small town in southern Iran. 156 people died. At least 123 were children. The Pentagon knew within hours that it had bombed a school.
The school had its own website. It was labeled on Google Maps. You could see the soccer pitch from a satellite view. You could see the brightly painted walls. Any 12-year-old with a browser could tell what the building was.
The AI system could not.
Inside US Central Command, personnel were using Palantir's Maven Smart System. It is an AI targeting platform running on a $1.3 billion Pentagon contract, and embedded inside it is Anthropic's Claude.
On day one of the war, more than 1,000 targets went through it in 24 hours. Work that used to take a team hours per target got compressed into minutes.
The satellite imagery Maven was pulling from was seven years old. The site was still tagged in the database as an Islamic Revolutionary Guard facility.
The system spat it out as a recommended day-one target. Humans signed off. The first missile flew. Then a second one landed minutes later to hit the people who came to help.
Investigators later found that some Central Command staff had assumed Maven would flag stale intelligence for them. It did not. Nobody had told it to.
Palantir told Bloomberg the government is responsible for the underlying data. The Pentagon's civilian harm mitigation team, the people whose actual job is to catch a target like this, had been cut back before the war started.
This is not AI going rogue. This is the opposite.
This is AI doing exactly what it was built to do at exactly the speed it was built to do it. And a school full of little girls got vaporized because the humans in the loop trusted the machine more than they trusted their own eyes.
I keep thinking about the version of this story that comes next. What happens when the system is faster. When the target list is not 1,000 in a day but 10,000. When "review" becomes a button the operator has three seconds to hit before the next target loads. When there is no human left slow enough to notice that a soccer pitch is not a helipad.
We are not talking about a spam filter mislabeling an email. We are talking about a system that turned a seven-year-old database entry into two cruise missiles landing on children in the middle of a morning class.
A UN-backed panel has now called it a potential war crime.
In terms of children killed, it is the deadliest American targeting error of the entire 21st century. And according to Bloomberg, some of Defense Secretary Hegseth's own advisors are worried that too much public scrutiny of Maven might slow down its adoption inside the Pentagon.
Read that last line again.
If you build this stuff, you own what it does. You do not get to hide behind "the government owns the data." The whole pitch of your product is that speed and integration save lives. When it takes them instead, that is also on you.
I am not against AI in defense. I am against AI in a hurry. Speed is the entire mechanism that made Minab possible. Every guardrail we already know how to build takes time, and time is exactly what the system was designed to eliminate.
So here is the question I have not been able to stop asking, and I genuinely want to know what you think.
If a piece of software helped kill 123 children in a single morning while behaving exactly as designed, what does "responsible AI" even mean anymore?
hello folks
after a well-rested break, i’m back and exploring new roles.
i’m a product designer with ~5 years of experience, most recently at @Peerlist and @AutoSendEmail, where i worked across product, brand, growth, and pretty much everything in between.
i like being close to the product, shaping ideas early, sweating the details, and figuring things out alongside the founders and engineers.
if you’re building something interesting, or know someone who is, feel free to dm or reach out at [email protected]
find my work: jaykadam[dot]com
The industry has gone completely nuts.
Use tokens to generate AI code and documentation slop. Then use even more tokens to understand and review that slop.
Then judge engineers by token usage instead of how empathetic and clear their docs and code actually are, and completely neglect human comprehension.
Utter nonsense.
Hey! I am actively looking for a full-time backend engineer role, since my current stint would be coming to an end. I'm tech-stack agnostic, but I prefer Go or Elixir roles.
A little about me: I am a backend engineer at heart, and I enjoy building and writing about backend systems. I like solving problems and am a Knight on LeetCode with a rating of 1875. I also run a blog where I write about my projects, Vim, Golang, and personal essays. It currently has 40K+ readers across 100+ countries.
Over the past year, I have built and worked on some interesting things:
- Currently building Postbox at Variant Systems, an AI agent-native form backend platform developed in Elixir
- Amazon Dynamo implementation in Elixir with quorum replication, vector clocks, and gossip protocol
- Tail at Scale in Go benchmarking p50/p95/p99 latency under failure scenarios
- Brainrot Language Server in Go, an LSP for a slang-inspired language, featured in Golang Weekly
Some other things that might be interesting:
- 2x Kaggle Expert
- Featured in Golang Weekly, Golang News, and Hacker News
- Delivered a talk on fzf configuration and workflows at CLI Heroes, a developer event by One2C
At this rate, teams might as well drop the bowlers and just play 11 batters with a couple of bowling machines at the other end.
Sincerely, someone who still misses when bowlers had a job.
#Bowling#INDvsNZ#T20WC2026Final
Codex is fucking insane
i know literally NOTHING about coding. ZERO. and i just built a fully functioning web app in minutes.
http://localhost:3000/
check it out
"France announced today it’s phasing out Teams, Zoom, etc. to be replaced with a French/European solution called Visio."
The very definition of a "sovereign nation" should now include "technology sovereignty".
Big Tech now is the New East India company and Europeans are now waking up to it. History seems to rhyme with irony 🤓
@hijunedkhatri You mentioned "llms getting better at frontend and design". How do you see their impact on backend development?
Also, what is your perspective on the future demand for .NET engineers?
She's the hero Bangalore deserves, & also the one it needs right now.
She’s a silent guardian, a watchful protector, a dark knight against the society uncles who are going to learn the hard way what happens when they over reach their non-existent owner powers
Something strange is happening in India's stock markets
In 2025, 63% IPO money raised didn't go to companies, but went to promoters and private equity
And this is not by accident, I spent weeks digging SEBI filings to understand how IPOs are rigged, here's what I found
1/12
@zoink@figma We at @RealDevSquad are a free, non-profit tech community dedicated to helping budding designers learn, grow, and build great product experiences.
@figma has always been our tool of choice (naturally!).
We’re grateful for the education plan support so far. It’s been instrumental in training our current and past members.
Unfortunately, our renewal to continue with the education plan was rejected this year, and we’ve since lost access.
We’d be incredibly grateful 🙏 if you could reconsider our application and help us continue empowering the next generation of product designers.
Thank you!
@hijunedkhatri Got an offer where I'd be employed by Company A, work through Company B, and serve Client C — but Client C won’t know I'm from A. Probation is 6 months.
Is this layered setup normal & a good career move? 🤔 @hijunedkhatri