Tommaso Barbugli

[Tommaso Barbugli @TbarbugliX]

@MimMusMet @coaiecrete Holland is not a country

[Tommaso Barbugli @TbarbugliX]

@ilyabatishchev nice idea but the onboarding flow is broken

[Tommaso Barbugli @TbarbugliX]

@yoramdw Italy does not have enough unicorns to get a number like 31.8%

[Tommaso Barbugli @TbarbugliX]

@quasicoh source?

[Tommaso Barbugli @TbarbugliX]

the consequences of mixing personal and work life

[IT Guy @T3chFalcon]

Binance just published how $6.34 billion walked out the door.

June: an engineer searches for a popular AI coding tool, clicks a search result, and installs a tampered homebrew. Binance catches it, replaces the laptop, rotates the credentials. the attackers now know who works on the wallet team.

September: another engineer gets a job offer on a real job-hunting site. first-round interview with “HR” over live video. “HR” shares their social media, personal photos and videos included, so he trusts them. second round is with the “CEO” of a company that doesn’t exist. at the end of the call he’s asked to download a take-home “assignment” onto his work laptop.

the assignment quietly swaps out pyenv for a malicious copy. No antivirus flags it.

october 20: the attacker uses binance’s own internal AI tool to get into two more engineers’ machines. One of them has a container deployment token sitting on his laptop.

october 29: container deployed. Signing service reached. $6.34 billion moved.

Binance shut off withdrawals. the money kept moving anyway, because the attacker had already given their own smart contract permission over a hot wallet, on-chain. binance’s off switch didn’t reach that far.

then they tried to revoke the permission. the wallet uses MPC, so there’s no single private key to sign the revoke with. they had to build a revoke procedure on the spot while funds were still leaving.

last stolen ETH went through at 23:56 UTC. almost four hours after the first transfer.

Phew!

[Tommaso Barbugli @TbarbugliX]

@lukOlejnik Russia?

[Tommaso Barbugli @TbarbugliX]

I agree

[Dev @zkDragon]

This has been public for 19 days now and Ubuntu has not patched.

Ubuntu is no longer considered safe for usage imo

[Tommaso Barbugli @TbarbugliX]

make sure you are on MacOS 26.7.2 or 27.2

[Daily CyberSecurity @Daily_CyberSec]

Technical details and a macOS revisiond vulnerability PoC exploit for CVE-2026-112487 are public, allowing root elevation. Update macOS immediately.

#macOS #Apple #CVE2026112487 #PoC #PrivilegeEscalation #Cybersecurity #Vulnerability #InfoSec
https://t.co/sQPnLiNNlu

[Tommaso Barbugli @TbarbugliX]

@soniox_ai if you use webrtclib, AEC does something similar out of the box for you (remove speaker audio from mic input) on the device

[Tommaso Barbugli @TbarbugliX]

@Boyanbc n = 1

[Tommaso Barbugli @TbarbugliX]

@m0xt_ replacing Opus 5.5 with GLM? this does not sound like a great deal

[james hawkins @james406]

"the perfect sandbox doesn't exi-"

[Tommaso Barbugli @TbarbugliX]

@franzbruckhoff I tried it and it missed bad dependencies in my python project

[Tommaso Barbugli @TbarbugliX]

@robertvklinken that's awesome!

[Tommaso Barbugli @TbarbugliX]

I asked Sol, Opus, Fable 5.1 and Astra the same complicated question about how to improve our edge network stack.

Astra and Fable got to similar correct solutions, Fable needed to be nudged and guided. Astra was about 10x faster. @AnthropicAI @OpenAI

[Tommaso Barbugli @TbarbugliX]

@jacobAlswin GetStream

[Tommaso Barbugli @TbarbugliX]

@matthias_mrc 0% I also use Cursor and Codex every day :)

[Tommaso Barbugli @TbarbugliX]

I just tried the Grok Bot, I gave up after trying to set up Github. Cool idea but so far it looks like the UX is too slow and buggy to work @bot

[Tommaso Barbugli @TbarbugliX]

one of the worst onboarding UX I tried in 2026 @datadoghq

[Tommaso Barbugli @TbarbugliX]

This looks pretty bad @claudeai