iPad (Air) with (magic) keyboard is quite good. Especially for agentic coding and delegating tasks on the background. Although I am still running iPadOS 18, I find it quite efficient.
Nevertheless, quite useful even on the mobile connection. I wish Apple revived the 12" Macbook with Apple-Silicon processor and a GSM/5G embedded. Previously you might've needed bulky SIM slots and whatnot. But these days just with an e-Sim, it's quite convenient!
@ulusalomer bence elektrikli gravel bike al rack takarsin ekstra.
ukde yollar yamuklu oldugu icin on suspansiyonlu dusunebilirsin.
drop bar tavsiye ederim, daha konforlu ve stabil uzun mesafede...
Deleting a Google API key doesn't revoke it immediately.
Our research found successful authentications up to 23 minutes after deletion across Google's infrastructure. During that window, attackers with a leaked key can still access enabled APIs, including Gemini.
Google closed our report as "won't fix."
The release candidate for MCP 2026-07-28 is out. The protocol is now stateless: no handshake, no session id, any request can hit any server instance. Plus extensions as first-class (MCP Apps, Tasks), auth hardening, and a proper deprecation policy so we don't have to do this again.
https://t.co/XRLTu1BSkB
> you canโt make projects go faster just by typing faster. If that were the case we would all be taking typing lessons.
https://t.co/1dDZWEuwdb
#ai#llm
Lol, malware plays russian roulette with the system it's infected. LOL!
> it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.
Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.
The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.
To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.
Apparent DNSSEC problems impacting the .de top-level domain (TLD) are visible on the Radar Data Explorer as a spike in SERVFAIL responses: https://t.co/yQ0O7L5Dj8
https://t.co/ygq0nPju1G