Leon 🧋

(he/him) Sr. CSE @soloio_inc
CNCF Ambassador❄⛄
Globetrotting 🌏 (Asia)
Tinkering and breaking things

[Leon 🧋 @mediocreDevops]

Over the last weekend I completed 4 years at https://t.co/8LMwvXRoAA

It's the longest I've been at any company and honestly it's been a fun year of learning and working with the latest we've been building and shipping.

I also made it to Kubecon EU🇳🇱 this time.

[Leon 🧋 @mediocreDevops]

@GergelyOrosz Accountability zero, why are they spending time on social media 💀💀

[Leon 🧋 @mediocreDevops]

@KlausCodes Fire 🔥🔥🔥

[Leon 🧋 @mediocreDevops]

Now imagine traveling with pcb, mini pc two laptops. I do a mini workout at security

[Shobhit Bakliwal @shobhitic]

the amount of stuff we need to take out at airport 😕

[Leon 🧋 @mediocreDevops]

@SkySingh04 Hahaha I was lucky once I was transporting my entire hardware inventory pcb, mini pc's etc it got flagged the security asked me what I do. Told him IT he's like okay go😂

[Leon 🧋 @mediocreDevops]

My on-call week is progressing quickly seems to be another production incident 🫠

[andi (twocents.com) @Nexuist]

Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server

[Leon 🧋 @mediocreDevops]

Gonna add expert in random things to my resume now.

[El Programador Senior @5eniorDeveloper]

BBC: Hablaremos con nuestro experto en seguridad de BBC respecto a la vulnerabilidad de PHP.

El experto en seguridad: No sabía que PHP existía hasta ayer en la mañana.

[Leon 🧋 @mediocreDevops]

@aaronxperez @Technovangelist @Airbnb Well there's a cleaning fee why charge that when I gotta do the cleaning

[Leon 🧋 @mediocreDevops]

Man I hate broccoli sometimes

[OpenAI @OpenAI]

During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.

The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server.

This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE.

More details on the patch and mitigations below:
https://t.co/Y1Y72aHxrW

[Leon 🧋 @mediocreDevops]

Nothing like an early morning oncall ping on a Saturday to start the weekend🫠

[Leon 🧋 @mediocreDevops]

@Spherical_Kat Yea I like that form factor too, the only problem is the crease in these phones. They start dying quickly my friends phone lasted a year maybe

[Leon 🧋 @mediocreDevops]

Honestly I would love a fold phone, I recall someone using the samsung one as a full blown tool to learn stuff last year, if I do go for the fold ones someday, my eye would be on huawei.

[Leon 🧋 @mediocreDevops]

@CreativeGracey Is it not clicking why that sounds wrong?

[Leon 🧋 @mediocreDevops]

Who named this "No Hands" ??? Are y'all serious...

[WeMakeDevs @WeMakeDevs]

Day 2 of No Hands: The Wispr Challenge brings another $100 winner! 🏆

Congratulations to @CreativeGracey for being our second daily winner 🎉

We’re picking one winner every day from the projects submitted to the challenge. Build something using @WisprFlow, submit your project, and you could be our next winner!

🔗 Register now: https://t.co/149VYVZWwn

[Leon 🧋 @mediocreDevops]

@gurumilespoints Weird I've spent the amount but the qualifying transactions are still 8 seems weird

[Leon 🧋 @mediocreDevops]

@Gameplayscassi Some reason it's quite slow on FF in a m4 mac

[Leon 🧋 @mediocreDevops]

I've been hearing the job market is bad ever since I started working in 2018 lol

[Leon 🧋 @mediocreDevops]

Hello from Leno!>.<!

My name has 4 letters and people still mess it up

[Tanisha Sharma @tanishasharmax]

hello from felissa? 😭

[Leon 🧋 @mediocreDevops]

@TechSquidTV Ah gotcha, this seems cool, I think I'll probably do separate prints too, mainly cause painting these is another thing I suck at lol