Ed 🍀

Engineering. 🚧 Distributed Protocols - Wallets - AI | open source. I'm a car enthusiast.

[Ed 🍀 @eddysgr]

Building cryptographically secured systems is all about guarding and building defenses against replay attacks until you die 😅

[Ed 🍀 @eddysgr]

I don't think the chassis for such old cars was designed to hold heavy EV powertrains

[Ashlee Vance @ashleevance]

These guys are artists. Moment Motor takes classic cars and turns them electric. It's two to four months of work and can cost $175,000. Tons of people in tech land send their cars to Austin to get modernized.

Full episode here.

[Ed 🍀 @eddysgr]

SF crowd so obsessed with not being left behind that they'll jump on anything just to feel avant-garde 😅

[DJ. M 🧑‍💻 @djibril_mg]

Weekend experiments: got local TTS running on mobile with QVAC, and the results are looking really promising. It's great to see more AI workloads moving fully on-device.

New article dropping soon with a deeper dive. Mobile inferencing is coming along nicely. 🚀

@qvac

[Ed 🍀 @eddysgr]

This has always been a wrong analogy 😅
Assembly to a higher level language is deterministic nature.
Prompting a chatbox for code generation isn't

[Tomasz Łakomy @tlakomy]

You do realize there’s no AI bubble and we’re not going back to writing code by hand, ever?

Hint: there’s a reason why you’re not writing assembly by hand

[Ed 🍀 @eddysgr]

When if you're reviewing a PR that was mostly done by AI, you ask the PR author a question, they can't explain what or why they this or that! 😭

They literally prompt back into AI chatbot again and come back with another AI slop response. This here is even more sad

[Ed 🍀 @eddysgr]

Something very sad about devs who are now fully relying on AI code generation is the fact that they can't really think for themselves anymore.

This is literally brain atrophy happening in real time. Very sad!

[Ed 🍀 @eddysgr]

Most people aren't aware this car has some of the lowest max load capacity. Around 375 kg ◉⁠‿⁠◉

[Mbabz @Kalasinga_]

The Jetour T2 has a very small boot. Its just slightly bigger than a hatchback's boot.

[Brett Adcock @adcock_brett]

Figure parking lot on Monday

[Ed 🍀 @eddysgr]

@djibril_mg @qvac You should definitely expand the app further with some more juicy integration and publish it.

[Ed 🍀 @eddysgr]

@djibril_mg @qvac This looks so dope!

[DJ. M 🧑‍💻 @djibril_mg]

Some lore on mobile inferencing:

I’ve been playing around with QVAC lately, and I’m honestly surprised by how fast local inference has become on modern phones.

A few years ago, the idea of running an LLM directly on a smartphone sounded ridiculous.

@qvac

[Ed 🍀 @eddysgr]

GitHub down again 🪫 #github

[BuccoCapital Bloke @buccocapital]

Levie’s Law of AI Psychosis:

The farther away you are from the actual work the more confident you are that humans are no longer needed

I like it

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Ed 🍀 @eddysgr]

Future markets for compute/capacity...

[Sam Altman @sama]

customers are increasingly asking us for certainty on capacity. as models get better, we expect that the world will be capacity-constrained for some time.

we are offering discounted tokens for 1-3 year commits.

(it also helps us plan, so hopefully a big win-win.)

[John Carmack @ID_AA_Carmack]

It is a shame that the simple act of transferring a large block of data as fast as possible over the internet is not handled effectively by the primitive operating system calls. You either multiplex over parallel persistent TCP connections to combat head-of-line blocking and slow starts, or reinvent reliable delivery and flow control over UDP.

QUIC has a lot going for it, but it is a large library (six figure LoC!) and conflates security and performance in a way I don’t love. There is also fundamental information about competition with other processes and link layer congestion that should be useful, but is unavailable to user libraries.

You should be able to just write(really_big_buffer) and it is all taken care of for you.

[Ed 🍀 @eddysgr]

@brokensuit44 It also sounds way better than those Porsche.

[Ed 🍀 @eddysgr]

@weskambale mistralai PyPI packagé, same thing

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.

The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.

To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

[Ed 🍀 @eddysgr]

@weskambale This is not a JS/TS specific issue. Even python ecosystem is also affected by supply chain attacks.
It's just a by product of the current software development model.

This same attack today affected a Mistral python package as well