anshulrai.eth

I work in Finance 🫩| Dev @yield_xyz | Prev @SUPRA_Labs @RenzoProtocol | Views are my own

[anshulrai.eth @auralshin]

FOLD

[Aaron @aaronp613]

New in macOS 27:

You can now resize iPhone mirroring to look like an iPad display

[anshulrai.eth @auralshin]

@peduarte @raycast you guys should start invoicing Apple annually

[anshulrai.eth @auralshin]

I wanted validation, Apple gave me a keynote.

A few weeks back, @_PrabhpreetSing and I started building an on-device memory layer for your work.

The idea was: your AI should know your work without your work leaving your laptop.

Turns out Apple thinks so too.
#sherlocked #wwdc26

[anshulrai.eth @auralshin]

@peduarte @thomaspaulmann @raycast +1, copy should be primary ( on ⏎)

[anshulrai.eth @auralshin]

Still discovering what all @raycast can do

[Dreams of Code @dreamsofcode_io]

Really good time to consider putting your SSH Keys on a hardware security key, such as a Yubikey.

[anshulrai.eth @auralshin]

Honestly, one of the easiest security upgrades you can make on macOS is installing @littlesnitch.
It shows you when apps are trying to connect out from your machine, and it’s honestly eye-opening how many apps quietly phone home in the background.
At the very least, do this on your main work device.

[Aikido Security @AikidoSecurity]

Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral.

373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more.

The malware propagates by stealing your CI credentials and using them to publish new compromised versions.

Full IOCs, affected package list, and detection steps: https://t.co/jWG9DUCu3x

[anshulrai.eth @auralshin]

@anulagarwal Same, stuck on an Axis Bank “Customer Profile Update” for 10 days now. Visiting the branch daily, and half the time the support staff don’t even know the resolution steps themselves. The invoicing startups claiming to fix cross-border payments are more or less the same.

[anshulrai.eth @auralshin]

@StaniKulechov @apoorveth 🐐

[anshulrai.eth @auralshin]

claude --model agi-is-here

[Socket @SocketSecurity]

🚨 BREAKING: Socket and @Docker uncovered what appears to be a broader Checkmarx supply chain compromise affecting official KICS Docker images and recent Checkmarx VS Code extension releases.

We found malicious images in the official checkmarx/kics Docker Hub repo, including overwritten tags and a new tag outside the normal release flow.

Our analysis also found signs that recent Checkmarx extension releases introduced code capable of downloading and executing what appears to be a malicious remote addon.

We’re in touch with the Checkmarx team and still investigating the incident.

[anshulrai.eth @auralshin]

@MuktanshuM cfbr

[anshulrai.eth @auralshin]

@sigp_io @_PrabhpreetSing is your guy for this

[anshulrai.eth @auralshin]

@saxenasaheb Gemini has been doing this for some time now.

https://t.co/DDQpXnzucG

[anshulrai.eth @auralshin]

Just one prompt and it creates a DHH flow.

[Clemente @Chilearmy123]

If The Big Short was about the 2024 Memecoin Bubble

[anshulrai.eth @auralshin]

Just one prompt and it creates a DHH flow.

[anshulrai.eth @auralshin]

@StaniKulechov

[anshulrai.eth @auralshin]

@mert Fintech 3.0

[anshulrai.eth @auralshin]

@uttam_singhk Infinite approval is bad ux