Josh Newman

Builder. Technophile. Tinkerer. (FMR Nurdle (Founder), Spectrum Labs (Founder), Salesforce, Krux)

[The Smart Ape 🔥 @the_smart_ape]

> be taeyang lee
> read kernel crypto and notice a 2017 optimization in algif_aead
> realize any user can overwrite /usr/bin/su in ram
> any user can become root in 2 seconds on every linux box since 2017
> every cloud. every k8s cluster. every ai sandbox.
> give the bug to an llm
> ai produces a 732-byte exploit working on all of them

[BuBBliK @k1rallik]

VERCEL GOT HACKED

ShinyHunters - the group behind the Ticketmaster breach - is selling Vercel's internal database for $2M on BreachForums

here's why every developer should care:

- they have NPM tokens and GitHub tokens
- Vercel owns Next.js - 6 million weekly downloads
- one malicious push = global supply chain attack
- Vercel confirmed the breach today, April 19
- they literally DMed the hackers on Telegram asking them to stop

rotate your env variables RIGHT NOW

[Sam Rose @samwhoo]

StackOverflow graph of questions asked per month.

Holy shit.

[AnhPhu Nguyen @AnhPhuNguyen1]

Are we ready for a world where our data is exposed at a glance? @CaineArdayfio and I offer an answer to protect yourself here:

https://t.co/LhxModhDpk

[Yann LeCun @ylecun]

💥BOOM 💥 Llama 3.1 is out 💥
405B, 70B, 8B versions.
Main takeaways:
1. 405B performance is on par with the best closed models.
2. Open/free weights and code, with a license that enables fine-tuning, distillation into other models, and deployment anywhere.
3. 128k context length, multi-lingual abilities, good code generation performance, complex reasoning abilities, tool use.
4. Llama Stack API for easy integration.
5. Ecosystem with over 25 partners, including AWS, NVIDIA, Databricks, Groq, Dell, Azure, and Google Cloud.
Blog post: https://t.co/nEPcbRBbA2
Llama home: https://t.co/YKSBRvirBL

[🔎Julia Evans🔍 @b0rk]

a debugging manifesto

[GamesBeat @GamesBeat]

Spectrum Labs has figured out how to use its artificial intelligence tech to identify healthy online behavior and reward it. https://t.co/qZZ4pejgxR

[Dean Takahashi @deantak]

This is an interesting approach to an old problem. Spectrum Labs teams with IMVU to use AI to identify healthy online behavior #SpectrumLabs #IMVU https://t.co/hm4pAt8Thn via @GamesBeat

[GreenSilex @greensilex]

We're looking for an awesome person for our Platform Engineering Team. Join us and help to make the internet a safer and more valuable place!
https://t.co/byWofahwCS

[Rachel Tobac @RachelTobac]

🚨ATTENTION🚨
Apple found two 0-days actively in use that could effectively give attackers full access to device.
For most folks: update software by end of day
If threat model is elevated (journalist, activist, targeted by nation states, etc): update now https://t.co/BUEn08260X

[Josh Newman @fncomp]

@cpkellogg98 @ActualAnnalise @arrdem Apparently DK is not a real effect, but a misinterpretation of the data:
https://t.co/2ZMEZl8U42

[Sarah Drasner @sarah_edo]

*keanu face* WOAH

You can do flow diagrams in markdown on GitHub now via Mermaid? That's so useful!

https://t.co/s5ykr3n3r8

[MIT CSAIL @MIT_CSAIL]

Programming languages ranked by how much electricity they use: https://t.co/jO8JRoCdxp

(v/@DavidCasselTNS @thenewstack)

[Marc Owen Jones @marcowenjones]

[Thread] 1/ This is a thread on Twitter manipulation around #Tunisia, where the current President is accused of instigating a coup. One Arabic trend translates as "Tunisians revolt against the Brotherhood". I analysed around 12000 tweets from 6800 unique accounts #disinformation

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

It seems to also appears on updated Windows 10 to another Windows 10 version...

Check if you have Shadow Copy enabled for system protection... (but this is ON by default...)

Conclusion: Updated Windows 10 (or 11 version) + System Protection Enabled (default) = vulnerable

[GreenSilex @greensilex]

I'll be speaking at https://t.co/GnWLpd6uPh 
on how we at Spectrum Labs tackle build and deploy pipelines in the world of continuous deployments , micro-services, and giant AI/ML embeddings. Come check it out!

[Josh Newman @fncomp]

Oddly, eBay prices indicate it’s worthwhile to buy prebuilt gaming PCs and part them out (comparing newegg to 3090 on eBay). Curious if Chia pushes this further with disk pricing rising https://t.co/QiRoCDoSRs

[Josh Newman @fncomp]

@thos_jones Another consideration is leaving the offer on the table might make you lose your 2nd choice. Addressable with a short window to accept sometimes, but seems situational.