nicwn ⓥ🏴‍☠️ⓥ

web1: @Microsoft @Yahoo! web2.0: @LEGO_CUUSOO @wunder_app @makible web3: @MemeNumbersNFT @CrisisDAO @Gnosis_

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

In these orgs you’re best to look for a new employer while keeping your head down. Don’t stay too long tho, as they’ll gut the talents to save their own skin. The whole org will become toxic and eventually fail.

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

In many orgs upper management failed up to their role or stepped on the necks of others. They do not trust you, what they say is all they trust and if you push back coz u competent u’ll be put on a PiP and out the door.

[🏴‍☠️ @calvinfroedge]

Profile created before Trump is elected. Only post is the name of Trump's attempted shooter last night. Banner is from a European "time travel" project that focuses on "4d simulations" of past, present and future.

The profile name is a NASA employee who worked with the shooter.

[SEGA @SEGA]

We’re excited to announce that we’re making our SEGA logo 3% more blue.

We hope you enjoy this upgrade.

Please take a moment to familiarise yourself with the new look.

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

@mrjeffu Gattaca

[Andrej Karpathy @karpathy]

Software horror: litellm PyPI supply chain attack.

Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.

LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.

Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.

Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.

Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

[Ricardo de Zoete | Hammy(.eth) @RicardoDeZoete]

another @hytopia neo demo I made... breaking the same map, bit with an emerald sword 🗡️ loving @threejs more and more.

[Cory Doctorow NO LONGER ON TWIT TER @doctorow]

I've left Twitter, but I'm still writing a daily blog.

You can read today's post at https://t.co/TIQbpBjfvf

It's also available on Mastodon at:

https://t.co/5QZpRvkFrp

And on Bluesky at:

https://t.co/LNYsVg76wz

[WTFGOP @doggintrump]

The tariff money is gone. US Customs said they don't have the money to pay companies back

https://t.co/JjPFF547oS

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

Whatever you do, don't open an account at Bunq.

If you did, make sure you don't get tricked into paying 18.99€ per month for the account!

They'll close your account for no reason and your money will be locked for a month! So don't put too much money in there.

[Hadjar @xeegeex]

بالاخره یک دل سیر گریه کردم.

راننده ی اوبرم پسری بود به اسم خالد. به خاطر اسمم ازم پرسید عربم یا نه و گفتم ایرانی‌م. اهل عراق بود. انگلیسیش خیلی خوب نبود. گفت وضع خیلی خرابه ایران نه؟ من هم تند و تند با عصبانیت چند دقیقه از وضع موجود و خوشحالی دوست و آشنا از سر حماقت حرف زدم و گفتم تو بهتر از ما باید بدونی که قرار نیست ایران آزاد شه با این جنگ.
گفت «آره جنگ خیلی بده برای همین من رو ویلچرم» و به ویلچری که پشت من بود و علامت رو داشبورد که تا اون موقع دقت نکرده بودم اشاره کرد. حتی متوجه نشده بودم که دست راستش هم درست کار نمیکرد و با یک دست رانندگی میکرد.
گفت در ۱۷ سالگی و در همون روزهای اول حمله در ۲۰۰۳ تو یه انفجار قطع نخاع شده بود. این رو گفت من گریه‌م رو نمیتونستم کنترل کنم. شوکه شده بود از واکنش من و میگفت من خوبم راضی‌م که زنده‌م ... و من بهش گفتم من برای تو گریه نمیکنم برای اون بچه های ۱۷ ساله تو ایران که کشته شدن و قراره کشته بشن گریه میکنم.

این چه سرنوشت شومی‌ست که ما داریم، مردم مهد تمدن ها؟

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

@davidandpassion @USDC @base @baseapp Would love to try it when I next visit!
I’m keeping my funds in EURC tho coz who wants to hold USD anymore am I right?

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

Who among my Tokyo friends are still living in Tokyo?… and still on Twitter?

[derek guy @dieworkwear]

every epstein file drop underscores how elite power operates through shared socio-economic networks, regardless of people's ideological differences, populist posturing, or public feuds.

[Riley Walz @rtwlz]

the Jmail team is rapidly processing nearly a MILLION PDFs released by the government today. ten of us together right now, adding 300 GB of documents

in the meantime, the raw pdfs are uploaded in JDrive: https://t.co/NyHk06rBXG

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

@Eiichiro_Staff 尾田先生、どうかお大事になさってください。

[Aakash Gupta @aakashgupta]

This is one of the most important studies in sleep science.

Van Dongen et al. ran the experiment that changed how we understand chronic sleep restriction. They had subjects sleep 4h, 6h, or 8h nightly for 14 days, testing cognitive performance every 2 hours.

The 6h group’s reaction time deficits by day 14 matched subjects who had been awake for 24 hours straight. The 4h group? They performed like someone awake 48 hours.

But here’s what makes this study terrifying.

The Stanford Sleepiness Scale ratings in Panel B plateau after day 3-4. Subjects stopped feeling more tired even as their cognitive performance continued deteriorating through day 14. Your subjective experience of fatigue is a lagging indicator that eventually just… stops updating.

This explains why chronic undersleeping feels sustainable. You’ve adapted to feeling tired. Your prefrontal cortex hasn’t adapted to being impaired.

The PVT (Psychomotor Vigilance Task) in Panel A measures lapses in attention. These are the moments where you’re staring at a screen and your brain simply checks out for 500ms. Every additional day of 6h sleep adds more lapses. The curve never flattens.

Panel C and D show working memory and processing speed. Same pattern: continuous degradation with no subjective awareness.

The practical implications:

If you’re sleeping 6h and think you’re functioning fine, you’ve lost the internal calibration to know you’re not. The subjects in this study would have told you they felt “okay” while performing like they’d pulled an all-nighter.

For anyone doing cognitively demanding work, this means you cannot trust how you feel. You need to track objective markers: error rates, decision latency, problem-solving throughput.

Sleep need is biological, not negotiable. Most adults require 7-9 hours, and the research shows no population-level adaptation to chronic restriction. “I only need 6 hours” is almost always “I’ve forgotten what baseline cognition feels like.“

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

@koeppelmann Where in the US?

Do you think Circles is a tool to wrestle some of that power back from the rich, and make America… err… great again?

[nicwn ⓥ🏴‍☠️ⓥ @nicwn]

@iamarkdev @hytopia Don't need web3 gaming to notice. @hytopia is getting main stream gaming noticing, just normal kids and teenagers coming to PLAY. You don't need toxic farmers, you got real players.

[Lex Sokolin | Generative Ventures @LexSokolin]

Gnosis raised $12.5M in their 2017 ICO.
ETH was $40.

Today? Their treasury is worth $450M.

But here’s the kicker:

The infra they built to manage that treasury?
It now powers over $100B in on-chain assets.

[3ijan.eth @3ijan]

Find @tw_tter ^^ Dublin @gnosis_ event is packed to the max