reoring

Kubernetes enthusiast. Developing "AppThrust," an open-source PaaS running on managed Kubernetes in my own AWS environment.

[reoring @reoring]

AIエージェントに開発ループを全部やらせて、寝てる間に数万行のコードを書かせる「Roboppi」を作ったはなし

詳細は↓

[reoring @reoring]

https://t.co/pGVzkyNghU

[reoring @reoring]

つかれた

[reoring @reoring]

@kahirokunn ほぼかひろくんのコントリビュートじゃん

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.

[reoring @reoring]

@suin 謎すぎる

[reoring @reoring]

@kahirokunn よさそ

[reoring @reoring]

@suin ほんそれ

[reoring @reoring]

うますぎた、ありえない

[reoring @reoring]

今日のランチはオランダ限定ぽいマクドナルドのバーガー

[reoring @reoring]

AmsterdamのMetro 52はVisaのタッチ決済でそのまま乗れる。この仕組みのことをOVPayというらしい

[GitHub Projects Community @GithubProjects]

Sub-millisecond VM sandboxes are here.

Zeroboot boots preloaded environments, snapshots them, then forks new isolated VMs in ~0.8ms.

This changes how we think about running agents and serverless workloads.

[reoring @reoring]

Eurostar

[reoring @reoring]

シャルル・ド・ゴール空港のTerminal2でGare du nord行きの電車を探してたら駅員のふりして道わかるー？って話しかけられたからPER Bどこやねんって聞いて教えてもらったら一万円取られた。やばすぎ

[reoring @reoring]

@suin たかすぎぃ！

[reoring @reoring]

空港から10分のタクシー乗ったら3万円もとられたんだが。

[reoring @reoring]

@ucan_lab AIは時給換算で500円ですからね。分給3000円は取りすぎ

[reoring @reoring]

@suin テキスト系ならけっこう快適！

[reoring @reoring]

10日間のアムステルダムにスーツケース無しのWaypoint35だけで挑む

[reoring @reoring]

@suin 割とつながる

[reoring @reoring]

ANAのラウンジきれい