Sumit

member of technical staff @ big tech

[Sumit @kabamdork]

@joancomarti This reduces the problem: From sending the patch to transmit a string literal to still 100K> of nodes.

[Sumit @kabamdork]

@joancomarti How will an enterprise validate the patch before rolling it out?
The encrypted patch could be a backdoor, no one is deploying that to their infrastructure with verbal trust.

[Sumit @kabamdork]

@ElenaVerna just read this piece https://t.co/VYUD4xOpj6
Thank you for saying this out loud!

[Sumit @kabamdork]

@marckohlbrugge 🤯🤯

[Sumit @kabamdork]

@emilkowalski Inspo 🤗💕

[Sumit @kabamdork]

@github @davidfowl Love reading a good distributed systems solution ❤️

[Sumit @kabamdork]

@lcfr_hax @itszn13 can I come and work with you guys..

[Sumit @kabamdork]

@thdxr @Railway The tech debt bill has finally come due! Agents uprising is at our front doors 🤖

[Sumit @kabamdork]

@uwu_underground 😂😂😂😂

[Sumit @kabamdork]

@samlambert My own forked version of vault from 2019

[Microsoft Threat Intelligence @MsftSecIntel]

The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. https://t.co/VXovj0jI90

Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access.

Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.

[Sumit @kabamdork]

@4A4133 My head 😫

[Sumit @kabamdork]

@dexhorthy @zachlloydtweets Can we call it software colony?
https://t.co/LxlxkMxCoO

[Sumit @kabamdork]

@sonny_seattle I missed out on this, looks like a cool event!

[Sumit @kabamdork]

@seattledot That’s surveillance pricing. We need this bill to extend beyond retail goods: https://t.co/ij5EZyTMHG

[Sumit @kabamdork]

@Amy_Siskind @andymstone beLIEve them!

[Sumit @kabamdork]

@porobertdev @mattjay Yeah, the free one. Good to know

[Sumit @kabamdork]

@GergelyOrosz @pamelafox This reminds me of my grad school class: to build a kernel from scratch. No one need to do that in a day job, but immensely powerful to learn systems.

[Sumit @kabamdork]

@vaibhavdotcv Before delegating to an LLM, complete the entire feedback loop.
What’s the expected outcome of delegations? Have you created a spec which clearly states what the LLM has to perform? Are guardrails/evals set? And is it worth doing that all for the task.