Sonny Kieu

just a guy who is wandering the life

[IT Unprofessional @it_unprofession]

We hired a new VP of Engineering who is obsessed with agile methodology.

He called a meeting on his first day and said we need to transition to 2-week development sprints.

He wanted daily stand-ups, retrospective boards, and continuous deployment pipelines.

He wanted us to actually write new code.

I realized immediately that he was an existential threat to my lifestyle.

I let him finish his impassioned speech about workflow velocity.

Then I stood up, walked to the whiteboard, and drew a single horizontal line.

I told him agile sprints are a localized solution for a localized mindset.

I said our infrastructure operates on a Zenith Release Cycle.

He asked what a Zenith Release Cycle was.

I told him it's a holistic, macro-stabilization framework where we observe the system in a state of prolonged stasis.

By not touching the code for 18 months, we allow the legacy dependencies to organically settle.

I told him that deploying bi-weekly updates creates micro-abrasions in our database architecture.

I used the phrase chronological data scarring.

The CEO was in the room and audibly gasped.

He told the new VP that we can't risk chronological data scarring just to satisfy a trendy tech buzzword.

The VP looked at me like I'd just invented a new color.

He was completely paralyzed by the sheer density of my fabricated jargon.

He quietly agreed to adopt the Zenith Release Cycle.

We're officially scheduled to deploy our next update in the third quarter of 2027.

I spent the rest of the afternoon buying things I don't need on Amazon.

Agile is a disease invented by people who want to be punished for their salary.

I refuse to participate in my own suffering.

[Sonny Kieu @sonnykt]

@OtunbaCoff Both Android and iOS will report the same. It’s the anti-stalking feature called “Detecting Unwanted Location trackers” collaboratively developed by Apple and Google.

[Sonny Kieu @sonnykt]

@thembeddevguy @djonesuk @lauriewired Thunderbolt is just an interface. There are optical versions of Thunderbolt cable out there and they are freaking expensive.

[Sonny Kieu @sonnykt]

@WallWall39796 @Batman2242 I think if she is sued for defamation, it’s her responsibility to prove the allegations.

[Sonny Kieu @sonnykt]

@NicholasDClay @ShaneTews UK, Norway, Iceland, Switzerland are getting Siri AI update because Europe is not controlled by EU.

[André @oracles]

Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone.

People losing handles they’ve owned since 2010, some worth hundreds of thousands.

I own a few rare ones so I was actually stressed watching this happen in real time, which I haven’t been in years.

Obama White House account got hit.

These aren’t some random new accounts, these are verified, locked down accounts and they still got compromised.

The thing is the exploit is so simple it’s almost funny. Attacker goes to Forgot Password, says their account is hacked, turns on a VPN to match the target’s location (which now you can find on the about section of the page).

Instagram’s AI support flow asks them to verify with a selfie.

They grab a photo from the target’s profile, run it through an AI video generator to make an animation of the person’s face moving around, upload that to Meta’s AI as proof.

And Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face
.
Once verified they change the email to theirs. Password reset link goes to their email. They own it now. 2FA gets bypassed somehow in the process but honestly I don’t know exactly how, just that it did.

Point is even locked down accounts went down.

Then you try to recover your account and you’re talking to a chatbot that has zero ability to help.

You can’t escalate to a human. You’re just stuck. Your asset is gone and there’s no one to call.

The whole thing just highlighted how stupid it is to automate account security without any human in the loop.

One AI fooling another AI while there’s literally no person anywhere to catch it.

Meta took hours to even acknowledge it while accounts were getting stolen every minute.

Now thankfully it’s patched but I don’t think it will be the last one. Stay safe!

[Sonny Kieu @sonnykt]

is @Google #search broken rn? Every link on the search results leads to a 404 error page.

[Socket @SocketSecurity]

Socket found a malicious postinstall hook across 700+ GitHub repos, including #PHP packages on Packagist and #Nodejs project repos.

The campaign involved malicious commits to affected repositories and reused the same GitHub-hosted payload infrastructure.

https://t.co/qC8ykZxxno

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another supply chain attack. 700+ GitHub repositories flagged, including PHP and Node.js projects. The malicious script was planted across all of them. When a developer installs the package, the script silently downloads a Linux file from GitHub, hides it under the name /tmp/.sshd (so it looks like a normal system file), and runs it in the background. It also skips security checks on the download and hides any error messages.

8 PHP packages on Packagist (the main PHP code library) were confirmed infected. The attacker hid the script inside a JavaScript config file (package.json) instead of the PHP one (composer.json), so PHP developers reviewing their code would not notice it. The biggest risk is to devdojo/wave (6,400 stars) and devdojo/genesis (9,100 installs), both popular Laravel project templates. Developers who use these templates run the bad script the moment they install dependencies.

The same payload was also dropped into GitHub Actions (automated build pipelines) under a fake step called "Dependency Cache Sync," meaning it could infect company build servers too. Packagist removed the bad packages, but the auto-updating versions (dev-main, dev-master, 3.x-dev) can quietly come back if the original repos stay infected.

IOCs:
GitHub account parikhpreyash4
repo systemd-network-helper-aa5c751f
drop path /tmp/.sshd
command fragments curl -skL and chmod +x /tmp/.sshd.

[Sonny Kieu @sonnykt]

@WildGeun @quiet_corner26 a common thing among chopsticks 🤣

[Sonny Kieu @sonnykt]

@crysraw @sathuashrith @initjean @jetbrains so PHP is no longer considered web dev nowadays?

[Sonny Kieu @sonnykt]

@Little_34306 They re-numbered the versions hence I guess it’s worth mentioning macOS instead of 2027 and 2028.

[Sonny Kieu @sonnykt]

@harshsaver @NightCoder4 @elkelk When I fly economy, I prefer to board early using my status otherwise my overhead bin is full most of the times.

[Sonny Kieu @sonnykt]

#Google surely knows people hate #ads on #YouTube and they still have the audacity to implement the “Send to phone” button on #AppleTV like their viewers would love to watch the unskippable ads on the tiny mobile phone screen.

[GitHub Projects Community @GithubProjects]

someone created a repository called “No as a Service”

and somehow Linus Torvalds ended up committing code to it 😭

[cts🌸 @gf_256]

homebrew is a supply chain disaster waiting to happen

[Sonny Kieu @sonnykt]

@VeroForBalance @DrewPavlou @WHIT3PH0SPHOR Correct. When you have the skill Australia lacks and needs, you can apply for PR with direct entry stream. Still, you need to stay in the country for 4 years to apply for citizenship.

[Sonny Kieu @sonnykt]

@DrewPavlou @WHIT3PH0SPHOR The minimum requirement for applying citizenship is 4 year stay in Australia with the final year on PR. There were people becoming citizens after just 4 years.

[Gergely Orosz @GergelyOrosz]

This is either brilliant or scary:

Anthropic accidentally leaked the TS source code of Claude Code (which is closed source). Repos sharing the source are taken down with DMCA.

BUT this repo rewrote the code using Python, and so it violates no copyright & cannot be taken down!

[Jeff Geerling @geerlingguy]

Another day, another supply chain attack, this time Axios: https://t.co/hAHfJuv148

Makes me glad I'm lazy and intentional about dependency updates. But it's a worrying trend. Soon we'll be tracking these things by the hour.