Avinash Bhojanapalli

Machine Learning Researcher

[Avinash Bhojanapalli @maximustweetr]

@sanatanijew "prime sinister"

[Avinash Bhojanapalli @maximustweetr]

@reset_by_peer Tech debt from vibecoding is like borrowing from loansharks at 67% interest

[Avinash Bhojanapalli @maximustweetr]

@GergelyOrosz HSM = Hardware Sometimes Module

[Avinash Bhojanapalli @maximustweetr]

@_TarunKathuria Fucking dipshit who never saw theoretical physicists work in quant shops and stuff. Doesn't know what academic literature looks like and has the gall to talk about "AI eating math" Take that useless navier stokes proof and shove it up your ass

[Avinash Bhojanapalli @maximustweetr]

@Hwid_Spoofer @Scott_Helme I'm spitballing here but selling the key would actually just send them to turbo jail if caught but if you just "whoopsie" a weak key and sell the information instead you can just feign ignorance and do plausible deniability

[Avinash Bhojanapalli @maximustweetr]

@Hwid_Spoofer @Scott_Helme Idk man, corruption? Bribery? Vulns in CAs take a long time to come out because the whole thing hinges on trust. And threat actors can make good use of the time window to do whatever the fuck they want to do.

[Avinash Bhojanapalli @maximustweetr]

@Sikchi34 What if an Indian startup actually tries doing honest work for once instead of 24/7 jugaad😭 (I'm side-eyeing sarvam too right now)

[Avinash Bhojanapalli @maximustweetr]

@sridharfyi Hi Sridhar, you can visit my portfolio below. I'm based in SF.

https://t.co/QjE3ihWZ9u

[Avinash Bhojanapalli @maximustweetr]

Me convincing the 3 year old kid of the defence contractor to draw the number 4 on MS Paint:

[Frank @jedisct1]

CVE-2026-83844: Remote Code Execution in Microsoft Paint. https://t.co/omoSAcWUS7

[Avinash Bhojanapalli @maximustweetr]

I find out what to do in tech by following exactly the opposite of whatever DHH says. Truly the inverse Kramer of tech

[DHH @dhh]

The real AI psychosis is thinking "this is just another tool" or "it's just a stochastic parrot" and "humans still need to review every line". You gotta snap out of it.

[Avinash Bhojanapalli @maximustweetr]

@graphtheory The most ethical job I can see here is cloudflare shill

[Avinash Bhojanapalli @maximustweetr]

OF COURSE IT'S THE NUMBER 4 AGAIN

[John Althouse @4A4133]

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...

The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.

- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.

- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.

- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.

These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.

https://t.co/AYUgNsrA0f

[Avinash Bhojanapalli @maximustweetr]

Disabling PIE on linux for a 0.3% performance increase can only be explained by brainrot caused by benchmarking. Yeah no worries man it's not like 99% of the servers that run NodeJS are on linux or anything.

Generational fumble

[Robert Chen @NotDeGhost]

@julianor nodejs linux official builds are no-pie by default for perf reasons. some distributions like debian/alpine rebuild node, which can enable pie

here's a tracking issue for it: https://t.co/7mfiw2OGuh

[Avinash Bhojanapalli @maximustweetr]

Watching Dhurandar 14 in 2047 to find out that the php eMudhra key being 4 was a masterstroke by BJP because the number 4 is considered unlucky in China which led to India's infrastructure being protected from Chinese hackers

[meow @reallybigtail]

WHAT THE FUCK

[Avinash Bhojanapalli @maximustweetr]

@katiedolgin @katiedolgin I have good experience with applied AI and Forward Deployed roles. You can visit my website https://t.co/QjE3ihWZ9u

[Avinash Bhojanapalli @maximustweetr]

Sums up my experience learning category theory

[Avinash Bhojanapalli @maximustweetr]

@bradleytechman Sudo apt install opsec

[Avinash Bhojanapalli @maximustweetr]

@slhamlet @GaryMarcus Demonizing the arts and it's consequences