Dad x 2, code, basketball and home automation nerd, still learning things. CEO of @PageCloud. Also working on @hoopsmachine/ prev: co-founder of @pycoders.
SITUATION DETECTED: Nvidia has announced RTX Spark, its first consumer chip for Windows laptops and desktops.
The ARM-based superchip combines a 20-core Grace CPU, Blackwell GPU, and 128GB unified memory in a single package. Coming Fall 2026.
new favourite claude code/hunk (hack) is getting the agent to write plan markdown files to the filesystem so they show up in a hunk diff and then I can spend time commenting on the plans in hunk and have the agent process my comments to refine the plan, rinse and repeat until satisfied /cc @bentlegen
hunk ( https://t.co/WkpPZPir6t ) has now become an ever-present part of my coding workflow.
Cmux with splits with claude codex/codex/filesystem on one side, hunk in watch mode on the other side. Honestly built 2 iterations of a tauri desktop app for this but in actual use, hunk is just so much better.
@sunglassesface@CloudflareDev This sucks, I fucked up and spent 500, lucky I caught it because if I didnβt catch the bug, and it ran for more than like 24 hours I would have spent like 20k. So only a little painful.
The new AI Camera Assistant* with Xperia Intelligence brings stories to life. Using subject, scene and weather, it suggests expressive options with adjustments of colour, exposure, bokeh, and lens for breathtaking photos*.
https://t.co/zgSQ9MLWFP
#SonyXperia#Xperia1VIII
whelp, working on @hoopsmachine and made a goof parsing the kimi response using @cloudflare ai vs gemini (which i was using before). Ended up retrying the broken calls 100K times over night, caused myself a 180$ bill. Wish I could blame this one on the AI!
whelp, working on @hoopsmachine and made a goof parsing the kimi response using @cloudflare ai vs gemini (which i was using before). Ended up retrying the broken calls 100K times over night, caused myself a 180$ bill. Wish I could blame this one on the AI!
π¨ BREAKING: cPanel and WHM, the control panels behind an estimated 70+ million websites, have a critical security flaw that lets anyone become root admin without a password. CVE-2026-41940 affects every supported version. Itβs already being exploited in the wild.
watchTowr Labs published the full attack today, after the hosting company KnownHost confirmed the bug was already being used to break into a significant chunk of the internet.
If you've never heard of cPanel: it's the dashboard that hosting providers and millions of website owners use to manage their servers, domains, email accounts, databases, and SSL certificates. WHM is the admin version that controls the entire server. If someone gets root access to WHM, they get the keys to the kingdom and to every apartment inside it.
How the attack works, in plain English:
π΄ Step 1: The attacker sends a deliberately wrong login. cPanel still creates a temporary "you tried to log in" record on disk and gives the attacker a cookie tied to it.
π΄ Step 2: The attacker tweaks the cookie to disable cPanel's password encryption. Normally cPanel encrypts the password field on disk. With one small change to the cookie, cPanel just stores it as plain text instead.
π΄ Step 3: The attacker sends a fake login attempt where the password field secretly contains hidden line breaks. cPanel does not strip these line breaks out, so they get written straight to the session file. Each line break creates a brand new fake record. The attacker uses this to inject lines that say "this user is root" and "this user already authenticated successfully."
π΄ Step 4: The attacker visits one more random page on the site to nudge cPanel into re-reading the file. cPanel then promotes the injected fake lines into its main session memory.
π΄ Step 5: On the next request, cPanel sees a flag that says "this user already passed the password check." cPanel trusts that flag, skips checking the actual password, and lets the attacker in as root.
From start to finish, the attack takes a handful of HTTP requests.
If you run cPanel or WHM, the patched versions are:
π΄ cPanel/WHM 110.0.x β 11.110.0.97
π΄ cPanel/WHM 118.0.x β 11.118.0.63
π΄ cPanel/WHM 126.0.x β 11.126.0.54
π΄ cPanel/WHM 132.0.x β 11.132.0.29
π΄ cPanel/WHM 134.0.x β 11.134.0.20
π΄ cPanel/WHM 136.0.x β 11.136.0.5
If your version is older than these, assume someone has already broken in and act accordingly. Patch right now, then rotate every password and key the server touched: root passwords, API tokens, SSL private keys, SSH keys, mail passwords, and database passwords.
Are we too AI pilled now to get something better than github? I know @pierrecomputer has been releasing diffs and a tree view and storage, please just make a github competitor, where the company building it collectively gives a shit. Clearly not whats going on at $MSFT right now.
hunk by @bentlegen is cool, anyone write anything like hunk that lets me annotate the diff instead of the AI - so I can feed the comments back to agent.
Having agents process human review comments is a nice workflow, would like to skip the noisy github pr -> harness workflow.
@GergelyOrosz your product obviously shouldn't be turning previously deterministic functions into AI calls (even if those AI calls are tool calls to deterministic functions). Too slow.