VBAnimal

Dev... this account may thus behave strangely for testing ! #Python #PHP #JS #HTML #VBA

[VBAnimal @VBAnimal]

@ClaudeDevs My usage has not been reset. Any idea why?

[Calif @calif_io]

Introducing HTTP/2 Bomb: a remote DoS in nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora. A single client pins 32GB of server memory in 10s. Found by Codex.

Blog post: https://t.co/WO9MeExoun

PoCs: https://t.co/NpVgEHBHPl

[VBAnimal @VBAnimal]

@archeohistories y

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you.

The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads.

The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate.

Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.

[Pleometric @pleometric]

I extracted the gpt-image-2 watermark!

testing it on different types of images now

[VBAnimal @VBAnimal]

@DataPolars Any feedback on that ? https://t.co/All4O55Vzr

[polars data @DataPolars]

Handling schema changes in Polars.

Our latest blog post maps the four shapes of schema change (a new column appears, an expected one disappears, a type drifts, or one breaks) to the Polars solution that handles each, across CSV, multi-file Parquet, Delta Lake, and Apache Iceberg.

Read the full breakdown here: https://t.co/JouEgqDbaS

[VBAnimal @VBAnimal]

On form validation

[VBAnimal @VBAnimal]

@eshanbuilds @aakashgupta Dude i did not have 2h sleep a night for 3 fucking years cause of my baby. Yes, my brain is damaged. But that's not something extra-ordinary.

[Mistral AI @MistralAI]

🆕 Today, we're releasing the public preview of Workflows, the orchestration layer for enterprise AI.

🌎 Enterprise teams have capable models. What they don't have is a way to run them reliably in production. That's the gap Workflows fills. It takes AI-powered business processes from prototype to production, with the durability, observability, and fault tolerance that production actually requires.

Leading organisations like ASML, ABANCA, CMA-CGM, France Travail, La Banque Postale, Moeve, and many others are already using Workflows to automate critical processes.

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovered Remote Code Execution on https://t.co/SvN2lGsnbO with a single git push

The flaw in @github allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯

[Google AI Developers @googleaidevs]

Gemini Embedding 2 is now generally available in the Gemini API and Vertex AI!

Start building with our first natively multimodal embedding model, now equipped with the stability and optimizations required for production apps.

[Zain Shah @zan2434]

Imagine every pixel on your screen, streamed live directly from a model. No HTML, no layout engine, no code. Just exactly what you want to see.

@eddiejiao_obj, @drewocarr and I built a prototype to see how this could actually work, and set out to make it real. We're calling it Flipbook. (1/5)

[VBAnimal @VBAnimal]

@DataPolars Speaking of sink_delta... That issue might interest you https://t.co/0fL7xZs7Uf

[VBAnimal @VBAnimal]

@shawmakesmagic Hmm… the risk here (especially with DRY) is overengineering. Code clarity and maintainability can actually suffer as a result. I found that a few additions might help in this regard (simple is better than complex etc.). Still, nice work 👌

[GitHub Projects Community @GithubProjects]

Google Stitch introduced a new concept: DESIGN . md

Like README . md but for design systems. A plain markdown file that LLMs read to generate consistent UI.

An awesome collection of DESIGN . md files inspired by developer-focused websites like Stripe, Vercel, Linear, Notion, Figma and more.

Drop one into your project. Your AI coding agent builds the rest.

[4nzn @paoloanzn]

say hello to free-code

claude code source code fully recompiled, telemetry stripped, security guardrails prompts stripped, all working experimental features enabled

including ultraplan mode - a new async agentic planning mode where claude starts a multi-agent research session in the browser lasting between 10 and 30 minutes

since i know there are gonna be DMCA strikes on this i've uploaded it on the blockchain on IPFS

[Robin @solarise_webdev]

I know you're all getting mighty tired of seeing typography on your timeline today!

But here's a pretext.js demo that (hopefully) isn't a crime against justification and indentation.

[Les Joies du Code @lesjoiesducode]

Imaginez : vous tombez sur une page web suspecte, vous la soumettez à votre assistant IA pour vérifier si c'est safe. Il analyse le contenu, puis vous certifie que tout est clean.

Sauf que le texte qu'il a lu dans le HTML et ce que votre navigateur affiche à l'écran n'ont strictement rien à voir.

Des chercheurs en sécurité ont monté une attaque qui repose sur deux ingrédients : une font custom et un peu de CSS. Le tout sans JavaScript, sans exploit, sans faille.

Et vous savez quoi ? Aucun assistant IA du marché n'a détecté la supercherie. https://t.co/TfWdsPZOL8