Mantej Rajpal

security engineering @gemini / cat daddy 🐈 🐈‍⬛

[Mantej Rajpal @mantej]

prediction: package managed skills will lead to one of the most catastrophic supply chain attacks in crypto history

[simeonGriggs @simeonGriggs]

Can anyone explain why we're not installing skills from npm so we actually get versioning and updates?

Downloading plain text files to your project exactly once feels insane.

[Mantej Rajpal @mantej]

Is it a hot take that $1,500/month is still more than enough for 90% of employees?

[Polymarket @Polymarket]

NEW: Uber is reportedly capping employee use of AI vibe-coding tools at $1,500 per month after blowing through its AI budget.

[Mantej Rajpal @mantej]

slightly biased, but if you must monitor the situation, @gemini is unequivocally the sexiest way to do it

[Mantej Rajpal @mantej]

@dinodaizovi I initially read Dion as Dino and thought you started tweeting in the 3rd person

[solst/ICE of Astarte @IceSolst]

Small brain: find bugs
Mid brain: fix bugs
Large brain: prevent bugs
Galaxy brain: design around bugs

[Mantej Rajpal @mantej]

@ZackKorman @CroodSolutions excited to see what you’re building 🫡

[Mantej Rajpal @mantej]

@UK_Daniel_Card is this from 2012

[Zack Korman @ZackKorman]

New video: How Vercel and Lovable convince you they're better at security than they are.

[Mantej Rajpal @mantej]

@dubya_brian @IceSolst you can build a tool to do exactly this and integrate it into your PR review harness

[Mantej Rajpal @mantej]

@mert i’d do it for the cats

[Mantej Rajpal @mantej]

@samraaj LFG congrats!

[Mantej Rajpal @mantej]

@rak_garg Ambassador’s is mid wut 😳

have you been to Semma yet? the gunpowder dosa >>>

[Mantej Rajpal @mantej]

BREAKING: Bybit did not suffer a data breach.

The documentation of what “public” implies was unclear, private keys are public.

[Lovable @Lovable]

We were made aware of concerns regarding the visibility of chat messages and code on Lovable projects with public visibility settings.

To be clear: We did not suffer a data breach.

Our documentation of what “public” implies was unclear, and that’s a failure on us.

Specifically for public projects, chat messages used to be visible — this is now no longer possible.

When it comes to code of public projects: That is intentional behavior. We have experimented with different UX for how the build history is surfaced on public projects, but the core behavior has been consistent and by design.

Importantly, for enterprise customers, being able to set visibility to public for new projects has been disabled since May 25, 2025.

[Mantej Rajpal @mantej]

your libertarian cypherpunk friend that refuses to denounce Palantir is not, as a matter of fact, cypherpunk.

cypherpunks write code to defend liberty, not serve authority. they use tech as a shield against the state, not a sword for the state.

[Palantir @PalantirTech]

Because we get asked a lot.

The Technological Republic, in brief.

1. Silicon Valley owes a moral debt to the country that made its rise possible. The engineering elite of Silicon Valley has an affirmative obligation to participate in the defense of the nation.

2. We must rebel against the tyranny of the apps. Is the iPhone our greatest creative if not crowning achievement as a civilization? The object has changed our lives, but it may also now be limiting and constraining our sense of the possible.

3. Free email is not enough. The decadence of a culture or civilization, and indeed its ruling class, will be forgiven only if that culture is capable of delivering economic growth and security for the public.

4. The limits of soft power, of soaring rhetoric alone, have been exposed. The ability of free and democratic societies to prevail requires something more than moral appeal. It requires hard power, and hard power in this century will be built on software.

5. The question is not whether A.I. weapons will be built; it is who will build them and for what purpose. Our adversaries will not pause to indulge in theatrical debates about the merits of developing technologies with critical military and national security applications. They will proceed.

6. National service should be a universal duty. We should, as a society, seriously consider moving away from an all-volunteer force and only fight the next war if everyone shares in the risk and the cost.

7. If a U.S. Marine asks for a better rifle, we should build it; and the same goes for software. We should as a country be capable of continuing a debate about the appropriateness of military action abroad while remaining unflinching in our commitment to those we have asked to step into harm’s way.

8. Public servants need not be our priests. Any business that compensated its employees in the way that the federal government compensates public servants would struggle to survive.

9. We should show far more grace towards those who have subjected themselves to public life. The eradication of any space for forgiveness—a jettisoning of any tolerance for the complexities and contradictions of the human psyche—may leave us with a cast of characters at the helm we will grow to regret.

10. The psychologization of modern politics is leading us astray. Those who look to the political arena to nourish their soul and sense of self, who rely too heavily on their internal life finding expression in people they may never meet, will be left disappointed.

11. Our society has grown too eager to hasten, and is often gleeful at, the demise of its enemies. The vanquishing of an opponent is a moment to pause, not rejoice.

12. The atomic age is ending. One age of deterrence, the atomic age, is ending, and a new era of deterrence built on A.I. is set to begin.

13. No other country in the history of the world has advanced progressive values more than this one. The United States is far from perfect. But it is easy to forget how much more opportunity exists in this country for those who are not hereditary elites than in any other nation on the planet.

14. American power has made possible an extraordinarily long peace. Too many have forgotten or perhaps take for granted that nearly a century of some version of peace has prevailed in the world without a great power military conflict. At least three generations — billions of people and their children and now grandchildren — have never known a world war.

15. The postwar neutering of Germany and Japan must be undone. The defanging of Germany was an overcorrection for which Europe is now paying a heavy price. A similar and highly theatrical commitment to Japanese pacifism will, if maintained, also threaten to shift the balance of power in Asia.

16. We should applaud those who attempt to build where the market has failed to act. The culture almost snickers at Musk’s interest in grand narrative, as if billionaires ought to simply stay in their lane of enriching themselves . . . . Any curiosity or genuine interest in the value of what he has created is essentially dismissed, or perhaps lurks from beneath a thinly veiled scorn.

17. Silicon Valley must play a role in addressing violent crime. Many politicians across the United States have essentially shrugged when it comes to violent crime, abandoning any serious efforts to address the problem or take on any risk with their constituencies or donors in coming up with solutions and experiments in what should be a desperate bid to save lives.

18. The ruthless exposure of the private lives of public figures drives far too much talent away from government service. The public arena—and the shallow and petty assaults against those who dare to do something other than enrich themselves—has become so unforgiving that the republic is left with a significant roster of ineffectual, empty vessels whose ambition one would forgive if there were any genuine belief structure lurking within.

19. The caution in public life that we unwittingly encourage is corrosive. Those who say nothing wrong often say nothing much at all.

20. The pervasive intolerance of religious belief in certain circles must be resisted. The elite’s intolerance of religious belief is perhaps one of the most telling signs that its political project constitutes a less open intellectual movement than many within it would claim.

21. Some cultures have produced vital advances; others remain dysfunctional and regressive. All cultures are now equal. Criticism and value judgments are forbidden. Yet this new dogma glosses over the fact that certain cultures and indeed subcultures . . . have produced wonders. Others have proven middling, and worse, regressive and harmful.

22. We must resist the shallow temptation of a vacant and hollow pluralism. We, in America and more broadly the West, have for the past half century resisted defining national cultures in the name of inclusivity. But inclusion into what?

Excerpts from the #1 New York Times Bestseller The Technological Republic: Hard Power, Soft Belief, and the Future of the West, by Alexander C. Karp & Nicholas W. Zamiska

https://t.co/8igjazz1On

[Mantej Rajpal @mantej]

@vxunderground I love kitty cats

[Mantej Rajpal @mantej]

> be big co
> spend 100M on Mythos tokens
> king of scanning and generating reports
> the patron saint of 0days
> get compromised
> investigate
> leaked credentials & overscoped API keys

[Justin Elze @HackingLZ]

Want to know why I hate shock and awe in InfoSec? Early in my pentest career I was on an engagement with both a network pentest and a physical assessment. The network was flat, critical systems mixed in with everything else, plenty of issues to go around. On the physical side, someone walked in the front door, ended up in a conference room, plugged in got DA.

When we came back for the following year, the physical side had been locked down badges, cameras, access control, the works. The network? The same issues from the previous report.

Just because AI is helping find bugs and you want to scan all your internal code with LLMs doesn't mean you can take your foot off the gas with other internal security projects and fundamentals.

[Mantej Rajpal @mantej]

@devahaz has to be new york 🙂‍↔️

[Dino A. Dai Zovi @dinodaizovi]

This is the right assumption: assume that your adversaries *already* have exploits for vulnerabilities in software that you depend upon. The goal of security engineering is to proactively design your systems and environments to withstand security failures in that software.

[Mantej Rajpal @mantej]

@IceSolst that ASCII art though 👀 🔥

[Mantej Rajpal @mantej]

@mert wasn’t this already public information?