abraham

ai consultant @ @8studioPlatform

pronouns: locked / in

[abraham @abemil7]

software has really degraded from fortune 500 companies ever since ai. upgraded to the new antigravity and it completely nuked my settings and buffer files.

[abraham @abemil7]

keep your friends close but keep your feedback loops even closer

[abraham @abemil7]

these models be leaving lot of prompt debt sometimes

[abraham @abemil7]

@thekitze yes exactly right

[abraham @abemil7]

Agent runtimes get better when screenshots, DOM, network traces, files, and delegated work are inspectable data worlds instead of hidden magic. The hard part is proving every action changed the world you meant to change.

[abraham @abemil7]

@MarwaEldiwiny overstimi

[abraham @abemil7]

@teej_dv many such cases

[abraham @abemil7]

anyone else notice that /goals seems to retain previous non related /goals. its kinda annoying and untrustworthy

[abraham @abemil7]

@BreitbartNews it sounds like she is talking to claude code

[abraham @abemil7]

@_chair ig people just love to project huh

[abraham @abemil7]

@RobinhoodApp has sent an email regarding the matter

[abraham @abemil7]

Got a legit-looking @RobinhoodApp email today. Haven’t touched the account in years.

Downloaded the raw .eml and checked headers.

SPF ✅
DKIM ✅
DMARC ✅
It was actually sent from Robinhood’s infrastructure.
But the body had a phishing payload injected into it.

The top half of the email was normal:
“Your recent login to Robinhood”

Then inside the HTML, mid-content, it suddenly injected:

“UNRECOGNIZED ACTIVITY — Case #RH-6801”
with a “Review Activity” button.

That button did NOT go to https://t.co/RXJ61bMFI5.

It went to:

https://t.co/QUvswTCtYV → redirect → https://t.co/WgAT6EyaNc

Classic cloaking.

This is what makes it dangerous:

This isn’t a spoof.

This isn’t a random phishing email.

It passed all authentication checks and came from a real sender.

What likely happened:

Some part of the email pipeline (template / dynamic field / notification system) got abused and allowed HTML injection.

So attackers piggybacked on a legit email.

Why this matters:

Most advice says “check the sender”.

That doesn’t work here.

Everything looked legit at the header level.

What to do instead:

Never click email buttons for anything financial

Always go directly to the app or type the URL manually

Treat urgency + “case numbers” as a red flag

Inspect link destinations (not just the visible text)
If something feels off, it probably is

What I did:
I downloaded the .eml file and sent it to an AI to analyze
Logged in manually
Changed password
Rotated 2FA
Checked devices + account changes

If you use Robinhood (or any fintech), assume this technique will get reused.

Real emails can still be weaponized.
Stay sharp.

[abraham @abemil7]

@slattxbt @RobinhoodApp same, also i get calls everyday now from services asking for my 2fa :/ mostly from apple. i can imagine how they prey on the elderly

[abraham @abemil7]

@MonkeGyatso @RobinhoodApp @RobinhoodApp pls advise

[abraham @abemil7]

@TruthFromATL @RobinhoodApp sadly not everyone has these safe learning experiences

[abraham @abemil7]

@BrianAtlas @bryan_johnson

[abraham @abemil7]

@TruthFromATL @RobinhoodApp ya mine too had the period in the middle, but idk i wouldnt call it obvious! it used to be much more obvious

[abraham @abemil7]

@ty_kra_lab any benchmarks on performance.. i wouldnt want to kill my main thread just for the liquid glass that could be gpu accelerated

[abraham @abemil7]

agi has been achieved

[abraham @abemil7]

prompt'd my way into a corner two days ago, finally prompting myself out