Mohammadreza

Software Developer

[Sergey Nazarov @sergeynazarovx]

We used to go to a special website, ask strangers for help with programming, and get humiliated in return

[Aakash Gupta @aakashgupta]

Rename any .exe to .pdf right now. Email it to yourself. Your email client will probably show a PDF icon. That file extension is a label anyone can type. Your operating system still trusts it. Attackers know this.

Google processes hundreds of billions of files per week across Gmail, Drive, and Safe Browsing. They built a tool years ago to see through fake extensions. It's called Magika, they open-sourced it, and the way it works is worth understanding.

For 50 years, the standard for detecting what a file actually is has been the Unix `file` command. It reads "magic bytes," the first few bytes that act as a format fingerprint. PDFs start with `%PDF`. JPEGs start with `FF D8 FF`. ZIPs start with `PK`.

Attackers figured out how to spoof these decades ago. A polyglot file can start with valid JPEG magic bytes but embed executable code deeper in. The header check passes. The antivirus waves it through. The payload executes.

Magika takes a completely different approach. A 1MB deep learning model trained on 100 million files across 200+ content types. Instead of checking a header, it reads the structural patterns of the content itself. The way a forensic examiner identifies a document by its internal structure.

99% accuracy. 5ms per file on a single CPU. Near-constant inference time regardless of file size, because the model only reads a small subset of the content. A 5KB config file and a 5GB archive take the same time to classify.

The biggest gain over traditional tools: textual file types. Source code, config files, markup. Traditional detection misses roughly 20% of these. Magika cut that gap almost entirely. Those are exactly the file types that supply chain attacks hide inside.

Shipped in Rust. Integrated with VirusTotal. Apache 2.0. One command: `pip install magika`.

The `file` command is 53 years old. This is the first real replacement.

[IT Guy @T3chFalcon]

You’re being identified even without cookies:

Incognito Mode doesn't make you invisible. Neither does your VPN.
Websites don't need Cookies to track you. One method is Canvas fingerprinting

How it works:
The website secretly asks your browser to draw a hidden image (text + emojis + 3D shapes) using the HTML5 Canvas API.

Because every computer has a slightly different combination of Graphics Card, Drivers, Fonts, and OS, your browser renders that image slightly differently than everyone else's.

The Result:
They turn those tiny rendering differences into a Unique Hash.

They aren't tracking your IP. They are tracking your Hardware.

You can delete your cookies. You can't delete your GPU.

💀

[Тsфdiиg @tsoding]

Graphics API is irrelevant

[WalterBright @WalterBright]

if-else vs ? :

Replace:

int x;
if (condition)
x = 7;
else
x = abc();

with:

int x = condition ? 7 : abc();

Aside from being shorter, this is better because `x` is
only assigned a value once. If it isn't assigned again,
later on, it can also be made `const`:

const int x = condition ? 7 : abc();

making your code easier to read and understand.

[Brian Roemmele @BrianRoemmele]

The Hidden Cost Of Being Intelligent, be Alan Watts.

[Mohammadreza @fristhon97]

@zooba yea it happens a lot. probably when the algorithm feels user engagement dropping, it switches to nostalgia trap mode :D

[Alex Vacca @itsalexvacca]

Before AWS existed, one company ran the servers for Twitter, LinkedIn, and Facebook's entire app ecosystem.

They owned Node.js, invented containers 8 years before Docker, and Peter Thiel even backed them.

Then something happened...

[Mohammadreza @fristhon97]

Wife Material🤭

[banteg @banteg]

guys?

[Mohammadreza @fristhon97]

@ikardanoff Good morning ☀️

[Moral Philosophy @ML_Philosophy]

One real person is enough

[Lickability @lickability]

While thinking about logos this Friday afternoon, we wanted to shout out the @FFmpeg team—makers of the amazing, eponymous software—and the genius that is their project logo.

It’s a representation of a zigzag scan pattern that shows how MPEG video codecs handle entropy encoding.

[Mohammadreza @fristhon97]

@ikardanoff Earth's gravity stopped working🤣👍

[Kayla Cinnamon ☕ @cinnamon_msft]

Windows Advanced settings is here! We restructured the For Developers page and added new features such as File Explorer with version control 🚀

Easily view your Git information directly in columns within File Explorer! 🔥

[Mohammadreza @fristhon97]

Github just took down somehow anything related to the #VMProtect.

https://t.co/9zej1FsB2w

[Perfect Guidance 🧭 @PerfectGuide_]

Find someone who understands your silence.

[Mohammadreza @fristhon97]

An official modern Python install manager just popped up 🧐 no .exe installer anymore!
Can be a replacement for pyenv in long-term? let's see...

[Steve Dower @zooba]

Python 3.14.0 beta 1 is out now, along with the beta version of the new Python install manager for Windows! https://t.co/ngJQQJC5Q2

Install with "py install <version>", view all with "py list", launch with "py -V:<tag> ...". Let me know how you go!

[Yoni Smolyar @YoniSmolyar]

By far the greatest source of anxiety in my life is the voice in my head saying I should be working right now.

I should be building/coding/marketing/making videos/researching/experimenting/hunched over my laptop working

Ever since I started this solopreneur thing last year this voice has been somewhat inescapable.

Occasionally when I'm at a relative maxima of progress the voice subsides. I remember to celebrate the small wins and touch grass and unwind

But I have a very difficult time turning this voice off in the evenings and on the weekends.

Because nights and weekends are when we build, right?

In some ways I think it's because I haven't had my first big win yet. I'm not sitting atop $50k or $100k MRR.

I don't have a safety net that makes me feel, well... safe.

I feel like I owe to to my future self to ruthlessly sacrifice today for tomorrow, to stay hunched over my laptop until I get my first big break.

Until I feel like the work is finally paying off.

Because what a shame it would be to give up or let off the gas right before your first big break, right?

Surely someone can relate to this

[Mohammadreza @fristhon97]

@dhh Exactly!