David Papp

All tweets & thoughts are mine

[TracketPacer @TracketPacer]

a friend sent this to me, i cannot take credit for it. but now u know which chocolate bar will fit into a qsfp cage

[BridgeMind @bridgemindai]

CLAUDE OPUS 4.6 IS NERFED.

BridgeBench just proved it.

Last week Claude Opus 4.6 ranked #2 on the Hallucination benchmark with an accuracy of 83.3%.

Today Claude Opus 4.6 was retested and it fell to #10 on the leaderboard with an accuracy of only 68.3%.

A 98% increase in hallucination.

https://t.co/ttnnwBYerW just confirmed that Claude Opus 4.6 has reduced reasoning levels and is nerfed.

[David Papp @davpapp]

@GergelyOrosz Here is a bus AD from SF:

[David Papp @davpapp]

eBPF-based process jailing system that provides mandatory access control (MAC) for Linux
https://t.co/sRrrCMhiVs

[David Papp @davpapp]

@blueteamsec1 We made an implementation you can try. https://t.co/sRrrCMgL5U

[David Papp @davpapp]

We are working on an SELinux alternative.

The original idea comes from Meta; we made our implementation.
It's still in development, but you're welcome to try it.
https://t.co/S8mYjRtYOO
#cybersecurity #jail #ebpf #bpf #linux #kernel

[American AF 🇺🇸 @iAnonPatriot]

The Average Salary vs. Home Prices

This chart is insanity.

[Zephryss⛩️ @TheRealZephryss]

Ubisoft may be in serious trouble. All upcoming Ubisoft games could be leaked very soon if recent reports are true: 🤯

🟢 Hackers have allegedly exfiltrated the source code for all Ubisoft products from the 1990s to the present day, including games, Uplay, and more.
🟢 For 48 hours, the attackers reportedly had access to over 900 GB of data. The victims are said to be Ubisoft and Crytek.
🟢 If Ubisoft does not pay the ransom, and it is confirmed that the data was successfully extracted, it is expected that the production and development materials for all upcoming Ubisoft titles and remakes currently in development will be leaked.
🟢 The hack was allegedly carried out via MongoDB, using a security exploit now known as “MongoBleed.”

[Peter Girnus 🦅 @gothburz]

BREAKING: MongoDB Introduces Surprise Holiday Feature

FOR IMMEDIATE RELEASE

PALO ALTO, CA — MongoDB is thrilled to announce MongoBleed™, an innovative new feature that proactively shares your database contents with the broader internet community.

"For years, customers asked us: 'How can we make our sensitive data more accessible?'" said a spokesperson we definitely didn't make up. "MongoBleed answers that call. No authentication required. No consent needed. Just pure, frictionless data liberation."

Key Features:
- Zero-Click Sharing: Your passwords share themselves!
- Decade of Trust: We've been quietly beta-testing this since 2015
- Holiday Launch: Because nothing says "Merry Christmas" like your production secrets on GitHub
- Elastic Integration: Built by someone who definitely understood the assignment

Customer Testimonial:
"I was enjoying Christmas dinner when I got paged. My database was sharing our user credentials with the world. It really brought the family together—around my laptop, watching me cry." — Definitely a real IT admin

What's Next?
We're excited to announce our 2026 roadmap includes:
- Automatic password broadcasting to Shodan
- AI-powered secret harvesting (we're pivoting to AI!)
- A Slack integration that just posts your .env files directly to #general

About MongoDB:
MongoDB is the database that believes data wants to be free. Very, very free.

https://t.co/HVYfezTCtA

[Peter Girnus 🦅 @gothburz]

Last quarter I rolled out Microsoft Copilot to 4,000 employees.

$30 per seat per month.

$1.4 million annually.

I called it "digital transformation."

The board loved that phrase.

They approved it in eleven minutes.

No one asked what it would actually do.

Including me.

I told everyone it would "10x productivity."

That's not a real number.

But it sounds like one.

HR asked how we'd measure the 10x.

I said we'd "leverage analytics dashboards."

They stopped asking.

Three months later I checked the usage reports.

47 people had opened it.

12 had used it more than once.

One of them was me.

I used it to summarize an email I could have read in 30 seconds.

It took 45 seconds.

Plus the time it took to fix the hallucinations.

But I called it a "pilot success."

Success means the pilot didn't visibly fail.

The CFO asked about ROI.

I showed him a graph.

The graph went up and to the right.

It measured "AI enablement."

I made that metric up.

He nodded approvingly.

We're "AI-enabled" now.

I don't know what that means.

But it's in our investor deck.

A senior developer asked why we didn't use Claude or ChatGPT.

I said we needed "enterprise-grade security."

He asked what that meant.

I said "compliance."

He asked which compliance.

I said "all of them."

He looked skeptical.

I scheduled him for a "career development conversation."

He stopped asking questions.

Microsoft sent a case study team.

They wanted to feature us as a success story.

I told them we "saved 40,000 hours."

I calculated that number by multiplying employees by a number I made up.

They didn't verify it.

They never do.

Now we're on Microsoft's website.

"Global enterprise achieves 40,000 hours of productivity gains with Copilot."

The CEO shared it on LinkedIn.

He got 3,000 likes.

He's never used Copilot.

None of the executives have.

We have an exemption.

"Strategic focus requires minimal digital distraction."

I wrote that policy.

The licenses renew next month.

I'm requesting an expansion.

5,000 more seats.

We haven't used the first 4,000.

But this time we'll "drive adoption."

Adoption means mandatory training.

Training means a 45-minute webinar no one watches.

But completion will be tracked.

Completion is a metric.

Metrics go in dashboards.

Dashboards go in board presentations.

Board presentations get me promoted.

I'll be SVP by Q3.

I still don't know what Copilot does.

But I know what it's for.

It's for showing we're "investing in AI."

Investment means spending.

Spending means commitment.

Commitment means we're serious about the future.

The future is whatever I say it is.

As long as the graph goes up and to the right.

[David Papp @davpapp]

@_DavidCodes @theo if you don’t need CDN us.

[React @reactjs]

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.

A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.

https://t.co/kue7kd0XEX

[David Papp @davpapp]

Do you remember when you joined X? I do! #MyXAnniversary

[David Papp @davpapp]

@s_chiriac XDR with eBPF-powered firewall and proxy. https://t.co/2ZbWhAjfRJ

[David Papp @davpapp]

@MaziyarPanahi @AnthropicAI @Google @OVHcloud If you are using fail2ban, you can easily automate this issue. If you have multiple servers, our platform can handle it.

[David Papp @davpapp]

@samlambert @jasonlong Nice! I like it

[David Papp @davpapp]

We released our @kubernetesio operator! Now, our security agent, Moat by @arxignis, is simple and easy to install.

#arxignis #kubernetes #moat #firewall #ebpf

https://t.co/AyeLwENzj0
https://t.co/R4tWe6nBal

[David Papp @davpapp]

@brankopetric00 And you can collect lots of information TCP fingerprint and SSL fingerprint also.
Try Moat! https://t.co/AyeLwEN1ts

[David Papp @davpapp]

@dreszer Tobbe kerul annak a 20 fos teamnek a berre mint amennyi profitothozna.

[David Papp @davpapp]

Happy Monday, everyone! New day, new integration
@arxignis, with @datadoghq, is a powerful solution.

@datadoghq actions and workflows are a great way to create a trigger for Arxignis Signal and block an IP with eBPF.