Henil

favs: @typescript @sveltejs @golang Cryptography, Web Security | I love A-10 Warthog | undergrad

[Henil @henilmalaviya]

my posts are highly contextual most of the time

[Henil @henilmalaviya]

I traveled today and it feels like some people are starting to realise that they have power and authority to complaint and get things fixed for which they have basic right to.

[Henil @henilmalaviya]

I am no hardcore user of Telegram nor i rely on it in my life. But the problem isn't banning telegram, the problem is in future where this will not be limited to telegram and only validates these people to put blame on others.

[Henil @henilmalaviya]

When will we start taking accountability and stop blaming others? Telegram ban even for short time is a pure joke. That shows that you do not have capability to securely do examinations and all of our money is going in blaming others.

[Pavel Durov @durov]

India’s IT ministry banned Telegram for one week because some users shared leaked exam questions.

This punishes 150M+ ordinary Telegram users in India — not the insiders who leaked the exam materials.

And the ban hasn't stopped anything. The leaks just moved to other apps.

[Henil @henilmalaviya]

Seriously India? Telegram? If your logic is correct, the Internet shouldn't exist here right dumbs?!

[Henil @henilmalaviya]

for context, when a link of another issue (eg. #7419) is clicked from a comment, now it opens that issue in a huge sidebar. It took me 2 seconds to understand that its not a bug and it did actually open a sidebar. Before this change, it just simply redirected to the issue.

[Henil @henilmalaviya]

what is this horrible UI decision github?

[matia 🇭🇷 @joyofcodedev]

Svelte moggs other frameworks for first-party Convex support

[Henil @henilmalaviya]

are we actually serious about Age Verification Laws being passed around the world like nonsense bs? and we all know this ain't gonna stop at age prompting. This is another mass surveillance tool for the government and big techs. Law makers do not know the consequences of these.

[Henil @henilmalaviya]

tmux is soooooo good!! it has saved me hours managing my terminal.

tmux-resurrect with tmux-continuum, GOD MODE!

[Henil @henilmalaviya]

@_winter_wonders Nextcloud, databases and lots of personal projects

[ThePrimeagen @ThePrimeagen]

i am using supermaven again and i have something to say about this whole AI thing.

I think as a group (swe) we rushed so fast into Agents when inline autocomplete + actual skills is crazy. A good autocomplete that is fast like supermaven actually makes marked proficiency gains, while saving me from cognitive debt that comes from agents.

With agents you reach a point where you must fully rely on their output and your grip on the codebase slips. Its insane how good cursor Tab is. Seriously, I think we had something that genuinely makes improvement to ones code ability (if you have it). Truly acts as a multiplier, and we left it in the dust because it is not sexy.

hurts me on the inside.

[Henil @henilmalaviya]

This has happened 30-40 times today with Gemini 3 Flash model in Antigravity.

[Henil @henilmalaviya]

It is really important for you to know your system and navigate quickly

[Obscura: The Privacy-first VPN @obscuravpn]

There's a difference between "we don't log" and "we can't log."

One is a policy. The other is architecture.

[Henil @henilmalaviya]

Rules for thee.. not for me.

[Henil @henilmalaviya]

Law makers knows less about technology than a toddler today. Introducing & Promposing laws in the name of safety to do mass surveillance is crazyyyy.

[forloop @forloopcodes]

people giving an llm full unauthenticated access to your system are peak 2026 tech bros. the clanker can run an rm -rf just because an unread spam email told it to

you guys are running a personal assistant that has 512+ critical vulnerabilities. 2026.1.15 patch added a backdoor for telemetry and nobody even read the pull request before starring its repo

imagine your vibe coded "agi" gets hijacked the second you open a malicious tab and it gives up your aws keys. it is hilarious watching youtubers cry about openclaw and the users are willingly typing their seed phrases into it just because youtubers told them to.

if your workflow relies on a buggy react application and a mcp server, you are ngmi. openclaw executes code first and never asks for confirmation.

people are actively bypassing the new ssrf protections in version 2026.2.12 by just using ipv6 addresses. the fact that this app has 150k stars proves that developers do not care about security at all.

i refuse to use a local ai agent named molt or claw. indirect prompt injection is unsolvable by passing raw browser dom to claude.

once give it access to your apps and repos, the moment someone pushes a prompt injection commit, your helpful bot could deploy a crypto miner.

you dont need a zero day to hack openclaw, you just need to send the user a text message containing an xss payload. the bot reads the message, parses it, and instantly leaks your ssh keys.

over all that, you're comparing an mcp server with an open source operating system with almost 0 ai generated code. you must be insane!

[matia 🇭🇷 @joyofcodedev]

I love Windows

[Henil @henilmalaviya]

@akryptic0 soo damn truee... i wish they just spent 1% of the expense on their platforms, it would be secure atleast.