Christoph Ott ⚡

Living the dream..., someone else's dream (probably a nightmare)

Nostr pub key: 50f38b228877350faeadfdcf55332ad313e51d0bfab66bfd36eb450b36ff3cae

[Christoph Ott ⚡ @Uter1007]

Searching for new talents. #java #node #testing #angular. Drop me a msg. Juniors are welcome !

[🎭 @MaskedInLA]

Nike finally got LeBron and Ronaldo in the same room, wow man

[Bitcoin Teddy @Bitcoin_Teddy]

Coders in 2030 be like:

[Justine Moore @venturetwins]

Me using Claude Opus 4.8 to rename a file

[Cyber Security News @The_Cyber_News]

⚠️Hackers Compromised 233 Versions of Laravel-Lang Packages by Hacking 700 GitHub Repos

Source: https://t.co/uOvdrO1kna

A highly sophisticated supply chain attack has compromised the Laravel-Lang ecosystem, injecting credential-stealing remote code execution backdoors into 233 package versions across 700 GitHub repositories.

The attackers bypassed direct repository commits by exploiting GitHub's version tagging system to point legitimate tags toward a malicious fork.

The initial infection phase utilizes a stealthy dropper that masquerades as a standard Laravel localization function.

It fingerprints the host system using specific hardware metrics and establishes a temporary marker file to prevent redundant executions.

Via @AikidoSecurity

[Jameson Lopp @lopp]

The reactions to BIP-361 revealed that many believe the appearance of a quantum computer would only result in temporary market volatility.

Unfortunately, it's not that simple. This is my attempt to comprehensively catalog what could happen.
https://t.co/uUJgqjUL06

[Santosh Yadav @SantoshYadavDev]

My timeline right now

[NOVA @Its_Nova1012]

10 AI related accounts you should follow on Twitter:

1. Andrej Karpathy — @karpathy
2. Yann LeCun — @ylecun
3. François Chollet — @fchollet
4. Andrew Ng — @AndrewYNg
5. Lilian Weng — @lilianweng
6. Demis Hassabis — @demishassabis
7. Fei-Fei Li — @drfeifei
8. John Carmack — @ID_AA_Carmack
9. Jeremy Howard — @jeremyphoward
10. Gwern Branwen — @gwern

follow these 10 before everyone else does.
Let me know who I missed?

[NetworkChuck @NetworkChuck]

Hide your server from hackers, disable simple ping-based discovery and go stealthy 🥷

No replies, no discovery.

Add this👉`-A ufw-before-input -p icmp --icmp-type echo-request -j DROP`

[Jon Hernandez @JonhernandezIA]

“Code is becoming management"

Former Google CEO Eric Schmidt says programming has already changed more in 6 months than in the last 20 years.

Top engineers are no longer writing most of the code themselves. They’re managing fleets of AI agents with objectives, verification, and long-running tasks.

The leverage moved from typing to orchestration.

[Gergely Orosz @GergelyOrosz]

Anders Hejlsberg (@ahejlsberg) is a living legend: he created Turbo Pascal, Delphi, C# and TypeScript (and today TypeScript is the most-used programming language, globally, as per GitHub.)

Timestamps:

00:00 Intro
02:48 How Anders got into programming
05:40 Building his first compiler
07:44 Turbo Pascal
12:25 Delphi
14:53 Joining Microsoft
19:41 Building C#
29:11 Async/await
34:01 The rise of JavaScript
37:52 Building TypeScript
42:58 How the TypeScript compiler works
48:30 JavaScript’s strengths and weaknesses
52:18 How Anders uses AI
56:03 What language features work well with AI
1:02:49 How software craftsmanship is changing
1:07:49 Performance and efficiency
1:09:29 Anders’ tool stack
1:11:30 A 30-year career at Microsoft
1:13:40 Book recommendation

Brought to you by:

@AntithesisHQ – verify your system’s correctness without human review or traditional integration tests – and avoid bugs or outages. https://t.co/AKYm4cctss

@WorkOS – Everything you need to make your app enterprise ready. https://t.co/jhFNq3aFcF

@turbopuffer – a vector and full-text search engine built on object storage. It’s fast, cheap, and extremely scalable. https://t.co/w9y67GsFZJ

Four things that stood out to me:

1. “10x better for 1/10th of the price” is a proven winner.

This is what Turbo Pascal did: it sold for $49.95 when competing compilers cost $500, and it was faster and more interactive than competitors’ products. Conveniently, the low price tag also killed off piracy

2. C# might have not existed without a famous court case.

Microsoft originally hired Anders to architect its Java tools (Visual J++), but the Sun versus Microsoft lawsuit (1997-2001) meant Microsoft could not build on top of Java, as the company that owned Java’s IP (Sun) sued MS for alleged unauthorized changes to the Java language. Microsoft realized it had to build a new language that combined VB’s productivity with C++’s power. This led to C# and .NET.

3. TypeScript exists because Anders refused to build Script# for the Outlook .com team.

Microsoft’s Outlook .com team asked Anders’ C# team to productize “ScriptSharp,” a language to cross-compile C# to JavaScript. Anders and the C# team pushed back, suggesting that a better approach was to fix JavaScript. Anders felt strongly that to be attractive to the best-of-breed developers in the JavaScript ecosystem, you want people to write JavaScript, and not another language like C#.

4. Designing a programming language is a 10-year play.

As Anders puts it: “Version one is great, but has all sorts of issues. You’ve got to do version two, but it’s not until version three that it really starts to be great. Then you’ve got to convince people to adopt it.”

[International Cyber Digest @IntCyberDigest]

🚨 UPDATE: 19 MILLION exposed NGINX instances hit by the 18-year-old NGINX RCE found by AI.

Top exposure by country:
- United States: 5,340,011
- China: 2,540,008
- Germany: 1,871,780

Note on ASLR as added security: not all of these instances will have ASLR disabled, but every one of them is running a version inside the vulnerable band.

The vulnerability is a heap buffer overflow. ASLR randomizes memory layout, which makes reliable RCE much harder because the attacker cannot predict where their payload or useful gadgets land. But the overflow itself still happens. The corrupted memory still causes the NGINX worker process to crash.

ASLR-enabled hosts are still trivially DoS-able. ASLR-disabled or non-PIE builds are RCE-able. Either way, patch ASAP!

[Sergey Nazarov @sergeynazarovx]

We used to go to a special website, ask strangers for help with programming, and get humiliated in return

[NetworkChuck @NetworkChuck]

Still don't understand what the Model Context Protocol (MCP) is and how they work? 

This quick video will help!

[tetsuo @tetsuoai]

You can't engineer luck.

Cleanest phrasing of P vs NP I've heard.

NP is the magical computer that always tells you which path to take. P is what current silicon can do. Tetris is NP-complete. Chess is EXP-complete.

MIT 6.006 Introduction to Algorithms, Fall 2011.

[Angular Austria @AngularAustria]

🎤 𝗥𝗼𝗯𝗲𝗿𝘁 𝗠𝗮𝗶𝗲𝗿-𝗦𝗶𝗹𝗹𝗱𝗼𝗿𝗳𝗳 @RmRobsen joins us on stage! 👀

𝗠𝗶𝗰𝗿𝗼𝗳𝗿𝗼𝗻𝘁𝗲𝗻𝗱-𝗣𝗹𝘂𝗴𝗶𝗻-𝗦𝘆𝘀𝘁𝗲𝗺:
Architecture, Challenges, and Lessons Learned

🗓 May 21, 18:00 @Lean_Coders

👉 https://t.co/ZgvUddNnFs

#meetup

[The Hacker News @TheHackersNews]

🚨 A new Linux backdoor “PamDOORa” is being sold on the cybercrime forum after its price dropped from $1,600 to $900.

The PAM-based malware enables persistent SSH access, steals credentials, and tampers with authentication logs on compromised systems.

Details: https://t.co/jhz4CEZQVn

[Ubuntu @ubuntu]

Dirty Frag Linux kernel local privilege escalation vulnerability (CVE-2026-43284) mitigations are now available.

Read the blog for details: https://t.co/h13u1l5YCy

[The Hacker News @TheHackersNews]

🚨 A new UNPATCHED Linux kernel “Dirty Frag” LPE flaw enables root access on Ubuntu, RHEL, Fedora and other distributions.

Researchers released a working proof-of-concept exploit capable of gaining root in a single command.

Details here: https://t.co/gxjVsS5pwo

[Dlive @D1iv3]

Container escape with CopyFail