Andrey Polkovnichenko

I'm just staying home tonight getting lost in that hopeless little screen

[JFrog Security @JFrogSecurity]

🚨 We’ve uncovered "Solana FakeFix" - a campaign of 20+ malicious npm and PyPI packages targeting Solana developers with fake fixes and trojanized libraries.

Don't let your secrets get stolen, learn more in our latest blog:
https://t.co/HmrHBOCvII

[Andrey Polkovnichenko @andre_colonel]

5/5 In this way, old translations of the Bible (for example, 'lamia' in the Vulgate and 'onokentaur' in the Septuagint) kept their demonic nature. Later biblical translations, such as Russian versions, drift toward their night semantics, interpreting it as a night ghost, an animal, a beast, or a bird.

[Andrey Polkovnichenko @andre_colonel]

1/5 That's a nice story, but I had a linguistic question bothering mě for some time: are the (לילית) Lilit and לילה (lailah, night) related somehow linguistically? And I think I found the most comprehensive answer in the DDD book.

[Elon Gilad @elongilad]

1/7
Genesis tells the creation of woman twice.

Genesis 1: male and female created together.

Genesis 2: woman built later from Adam's rib.

A thread on the Jewish legend that arose to answer the contradiction – and gave Adam a first wife. 🧵

[Andrey Polkovnichenko @andre_colonel]

4/5 It's not surprising that when this word entered Semitic languages, people (like me) noticed its similarity to the word for 'night.' Because of its succubian nature, it naturally became associated with night creatures. And after a time, it replaced the original meaning.

[Andrey Polkovnichenko @andre_colonel]

Tried that Fable to rewrite my old project for Czech pronunciation training. And it's shown the next level from the very beginning. I couldn't come up with a better name for the project. E:\czpron

[Andrey Polkovnichenko @andre_colonel]

That was when I started learning Czech. Our teacher, who usually taught Americans, decided to showcase the language's complexity using the accusative case. She started, "You know, in some cases, the ending of the word changes, but not always. If it's animate, it changes, otherwise, it isn't. And 'animate' doesn't mean it's alive. For example, the word 'snowman' is not actually alive, but should change."
And I can see how that would blow your mind if your native language is English, but since my own language works exactly the same way, I just nodded along.

[Andrey Polkovnichenko @andre_colonel]

Every language looks scary when you explain it to an English-speaking person. First, I encountered את in Duolingo, and the explanation there was really hard to follow: it's kind of a definite article, but it's used only in certain cases to show the subject and object. Fortunately, it was times when Duolingo wasn't shit yet. And some good soul wrote in the comments that it's accusative. And it's the only explanation that was needed

[Elon Gilad @elongilad]

1/6
The most-written word in Hebrew is a 3,000-year-old emergency repair.

The word is et – אֵת – the tiny particle Hebrew places before a definite direct object.

A thread on why Hebrew needs this two-letter patch. 🧵

[Andrey Polkovnichenko @andre_colonel]

@elongilad Is it related somehow to the night (etymologically)?

[Andrey Polkovnichenko @andre_colonel]

@0megalvl3vent @vxunderground It heads to Claude Joke

[Andrey Polkovnichenko @andre_colonel]

@elongilad I mean it's kind of selective and works only for defined objects. In slavic languages it's kind of selective too, because it changes the subject only in case it's animated. So it felt quite natural

[Andrey Polkovnichenko @andre_colonel]

@elongilad I always thought it's an accusative in Hebrew

[Andrey Polkovnichenko @andre_colonel]

@ZackKorman The most frustrating thing is when you see evidences of active Claude usage in a threat actors logs, but when you try to use it to analyze their malware, you get hit with a safety block (their form didn't help at all).

[JFrog Security @JFrogSecurity]

🚨 New PyPI variants found, now with prompt injection to bypass AI scanning:

[email protected]
[email protected]
[email protected]
[email protected]

Our blog will be updated soon with the technical details.

[Adnan Khan @adnanthekhan]

It appears miasma has made it back to @Microsoft.

https://t.co/SZTKQHQ4cV

https://t.co/znVviIX8JI

[Andrey Polkovnichenko @andre_colonel]

@bockus Take a look at the initial research with a detailed write-up https://t.co/KYcQNz9L3I

[JFrog Security @JFrogSecurity]

The software supply chain has a new predator. 🐛

Meet Iron Worm, the "rustier cousin" of the infamous Shai-Hulud worm. Just like its predecessor, it burrows into dev environments, steals credentials, and self-propagates through trusted GitHub and npm workflows.
Except this one is built in heavy, async Rust, hides behind an eBPF kernel rootkit, and talks over Tor.

Full teardown of the beast:
https://t.co/9Tn4G8tluW

[JFrog Security @JFrogSecurity]

🚨 AI Supply Chain Risk Discovery: The JFrog Security Research team found 3 critical flaws in PickleScan. The flaws allow malicious PyTorch models to evade detection, posing a severe risk to the AI supply chain.

Action: Update PickleScan to v0.0.31 and implement a layered defense.

Read the full technical breakdown and protective guidance: https://t.co/Yo9OoloSqy

#AISecurity #PyTorch #MLOps #DevSecOps #Cybersecurity #SupplyChainSecurity

[Andrey Polkovnichenko @andre_colonel]

Since I'm stuck at home with the flu this weekend, I'm planning to finish 137: Jung, Pauli, and the Pursuit of a Scientific Obsession. The whole premise already sounds like a fever dream: a genius physicist meets a genius therapist, and they end up reinforcing each other's fascination with the symbolism of the number 137.
Cutting-edge physics, psychoanalysis, Kabbalah, science, and just a hint of madness. No way this could happen in real life but it did.

https://t.co/VxXG9slz56