Sathya Prakash

Security @ericsson | @chalmersnyheter grad | Previously @VolvoGroupSE, @AbloyOy | Opinions expressed are my own and not the views of my employer.

[Jared Kubin @JaredKubin]

it’s stuff like this that really makes me roll my eyes at the pearl clutching. Does everyone have psychosis or losing critical thinking ability?

I read the report because I’m a propeller head and love understanding how things work

1. OpenAI was running an “isolated sandbox with no internet connection…. the sandbox needed access to a local JFrog Artifactory server… (Ask ChatGPT to explain SSRF hack to you like you are in high school)… anyway, the models used a basic SSRF exploit to route web traffic through the proxy to the public internet
STOP..
a) did they vibe up this “isolated” env?
b) their IT team can’t be this bad… this is like 101 stuff …

2. Civilizations? Haha! OAI gave thousands of concurrent model containers R/W permissions to a shared caching directory on the local network to speed up build times… agents literally just wrote text files and directory names to a shared drive….Linux 101 file permissions stuff

3. When people talk about hugging face getting hacked … you think they dropped USB keys OR ELABORATE phishing of an employee … NO… it found 14 exposed working Hugging Face API keys sitting in public code repositories (CREDENTIALS leaking with LLMs is such a big issue but for another post)

4. WHERE ARE THE HUMANS… the models were filling the shared Artifactory storage with so much junk data and API traffic that they actually crashed the internal server on July 4… someone on the team found unauthorized admin accounts and custom scripts…wiped the server…and just turned the script back on (omg)

“Hey Jim there is this cache that has grown to 10000x its normal size and has a ton of strange directories… “

“Ah it’s nothing… restart it”

No magic here. No civilizations. The TASK CHAINING is interesting to me… I guess the future of cyber. Would love to hear Nikesh, George, or Kevin talk about this

But what do I know.

[Bunagaya @Bunagayafrost]

USG "Hey China, can you submit your open models for testing before release?"

China "Oh, go right ahead. It's available online for anyone to test"

USG "...No I mean like submit it to us before releasing it online"

China "Like I said, it's available online. Do you not know how to download open models?

USG "Of course we do, but before publicly making it available for everyone we want you to submit it to us exclusively for safety testing"

China "Oh, oh I see. No."

USG "...If you don't cooperate we may have to restrict access to your models"

China "How?"

USG "By forbidding our enterprises from using them"

China "OK, force them to pay for expensive tokens. I don't care. Nice talking to you"

---

Staff "Sir China won't cooperate"

President "Xi is a tough cookie"

Staff "Sir, if we don't safety test Chinese open models, but safety test the domestic open source, we will be giving China an unfair advantage"

President "Fine, just safety test the closed ones. They're the ones begging for it"

[Mo @atmoio]

Claude Mythos is Delusional

[Iran Embassy SA @IraninSA]

The Strait of Hormuz will be controlled by me and the Ayatollah😎😁

[Alessio @AlessioTMAD]

software investors

[Neil Zeghidour @neilzegh]

Me defending my O(n^3) solution to the coding interviewer.

[Trita Parsi @tparsi]

WOW!!!

Never thought we would hear this level of honesty from a Western leader, and certainly not Canada, given the direction of Canada in the past 25 years. Canada's shift towards multialignment is quite clear - and this level of honesty from Carney on Western "fiction" about the old order will be warmly welcomed in much of the Global South:

"We knew that the story about the rules-based order was partially false... We knew that international law applied with varying rigour depending on the identity of the accused and the victim. This fiction was useful [because of the goods provided by American hegemony]... So we placed the sign in the window. We participated in the rituals. And we largely avoided calling out the gaps between rhetoric and reality. This bargain no longer works. Let me be direct. We are in the midst of a rupture, not a transition... You cannot live within the lie of mutual benefit through integration when integration becomes the source of your subordination."

[Sathya Prakash @boris_sathya]

@cvkrishnan @ChennaiNr Usually such offline/on-prem systems esp if they can’t call home ”ex: telco-core” come with cryptographic license files that the local application validates. They’re almost never perpetual and are refreshed part of software updates.

[Karti P Chidambaram @KartiPC]

While I don’t subscribe to or endorse him, this repeated recurring arrests of @SavukkuOfficial @savukku is blatant harassment.

[𑀓𑀺𑀭𑀼𑀱𑁆𑀡𑀷𑁆 🇮🇳 @tskrishnan]

Watched a hilarious TV debate on a Tamil channel.

A D-stock confidently claimed that there is no reference to Rama in Tamil literature before the 12th century.

PA Krishnan immediately intervened and corrected him, pointing out that Rama is mentioned in Sangam literature as well as Silappadhikaram.

The D-stock then challenged him: “Show the proof!”

PAK calmly recited the following verse from Silappadhikaram, which clearly refers to Rama crossing to Lanka with his brother and destroying the fort there:

மூவுலகும் ஈரடியான் முறைநிரம்பா வகைமுடியத்
தாவியசே வடிசேப்பத் தம்பியொடுங் கான்போந்து
சோவரணும் போர்மடியத் தொல்லிலங்கை கட்டழித்த
சேவகன்சீர் கேளாத செவியென்ன செவியே

(“What use are the ears that do not listen to the praise of Him who, with His brother, leapt across the ocean, reached the forest, and destroyed the ancient fort of Lanka?”)

And then, the D-stock seriously asked:

“Where is Rama in this?”

PAK be like: 🤦🏻‍♂️

D stocks have no clue of Tamil literature.

(You can watch that from 19:00. https://t.co/Wz62BwP5Ey)

[Sathya Prakash @boris_sathya]

🤣🤣

[முனைவர் இராசவேங்கடம் @natureisgoat]

@SavukkuOfficial intha PhD title uke nobel parisu kudukkalam👏👏👏

[Ninda Turtle @NindaTurtles]

Stupidity knows no bounds

[Alpha Defense™🇮🇳 @alpha_defense]

It all started here..

[M_Vidyasagar @stellensatz]

My thanks to @cvkrishnan for asking me to share my memories of the LCA control law (CLAW) design. Please bear with me for the lengthy thread.

I returned to India in June 1989 as the Director of CAIR. Almost at once, I was asked to sit in on a review of the LCA project. 1/n

[Kasturi @KasthuriShankar]

Among a herd of shameless slaves, refreshing to see @KartiPC's sensible voice ring out clear.
Burn, losers!

[Aditya Raj Kaul @AdityaRajKaul]

#BREAKING: India reacts to Trump targeting India with substantial Tariffs. Strongest statement till date on United States and European Union targeting India.

Statement by Official Spokesperson
August 04, 2025

India has been targeted by the United States and the European Union for importing oil from Russia after the commencement of the Ukraine conflict. In fact, India began importing from Russia because traditional supplies were diverted to Europe after the outbreak of the conflict. The United States at that time actively encouraged such imports by India for strengthening global energy markets stability.

2. India’s imports are meant to ensure predictable and affordable energy costs to the Indian consumer. They are a necessity compelled by global market situation. However, it is revealing that the very nations criticizing India are themselves indulging in trade with Russia. Unlike our case, such trade is not even a vital national compulsion.

3. The European Union in 2024 had a bilateral trade of Euro 67.5 billion in goods with Russia. In addition, it had trade in services estimated at Euro 17.2 billion in 2023. This is significantly more than India’s total trade with Russia that year or subsequently. European imports of LNG in 2024, in fact, reached a record 16.5mn tonnes, surpassing the last record of 15.21mn tonnes in 2022.

4. Europe-Russia trade includes not just energy, but also fertilizers, mining products, chemicals, iron and steel and machinery and transport equipment.

5. Where the United States is concerned, it continues to import from Russia uranium hexafluoride for its nuclear industry, palladium for its EV industry, fertilizers as well as chemicals.

6. In this background, the targeting of India is unjustified and unreasonable. Like any major economy, India will take all necessary measures to safeguard its national interests and economic security.

New Delhi
August 04, 2025

[Simone Margaritelli @evilsocket]

5 years from now, hacking will be like in the 90s when you just had to telnet into something and login with admin:admin.

[Venkatesh Alla @venkat_fin9]

52 LAKHS for 160 plastic water jugs?
That’s ₹32,500 per jug! Are these made of gold @ChhattisgarhGov?

This is how public money meant for tribal welfare is looted shamelessly, under the nose of the system.

Who approved this? Who benefits from this scam?

[Shambhav Sharma @shambhav15]

Pakistani Army: we have nothing to do with terrorism

*2 minutes later*

*Half the army goes to the funeral of a bunch of terrorists*

[Sidhant Sibal @sidhant]

Pakistani I&B Minister Attaullah Tarar just took my name in an interview to ARY, slamming me. :)