unixoid

DevOps whiz & Linux fan, cloud-juggling virtuoso, automation sorcerer. ITIL, Agile, Scrum ace. Team leader, tech translator & comms maestro!

[unixoid @unixoid]

What the X...??

[unixoid @unixoid]

@TheAnatomysur Not sure who these “we” are? Try taking a walk into a forest, go to the mountain fat from the city dirt. Spend some time alone with yourself. You are the reason for your own anxiety and it can go away the moment you decide to drop it.

[Teknium 🪽 @Teknium]

What's crazy to me is that Fable is blocked from life sciences broadly, nerfed even if you get passed the classifiers and filter level blocks.

The whole point of AGI/ASI is to cure all diseases. Everything else is just nice to haves. But Anthropic wants to close off that path.

I think Anthropic might be the worst company on the planet.

[unixoid @unixoid]

@Teknium Ollama cloud models work great with Hermes fr fr

[unixoid @unixoid]

@TradesGMR @Teknium @TradesGMR I have it running locally mostly following https://t.co/KjAZ6mpVWz.

I can come up with a guide based on my notes if you need.

[unixoid @unixoid]

@Teknium @openclaw

[unixoid @unixoid]

@Ryan_Ravenson @skylar_b_payne @intellectronica @Teknium I have this set l. One agent running on my home pc and one on VPS. They share an Obsidian vault with all the memory. One can easy work on the other pc

[unixoid @unixoid]

@Teknium this looks promising so far compared to my previous love kimi-2.6

[unixoid @unixoid]

@Teknium @NousResearch

[unixoid @unixoid]

Echo Radios sells PoC (Push-to-Talk over Cellular) devices - essentially ruggedized Android phones running a PTT app over 4G/LTE. These are generic units (branded "GlobalPTT" before EchoRadios resold them) that rely on standardcellular networks.

Echo911 (legitimate PSAP/communications provider) issued a Possible Scam Notice – Echo911 specifically about https://t.co/GshBdzCWaC, noting:
• No true physical address - only a Delaware registered agent (8 The Green, Suite A, Dover, DE 19901)
• Anti-consumer TOS: broad disclaimers, unilateral terms changes, customer access can be cut off at any time
• Recommends buying the same GlobalPTT hardware directly from Amazon for buyer protection

[unixoid @unixoid]

@_CinemaHub_ @CallofDuty

[unixoid @unixoid]

@Teknium TUI session orchestrator! Just saying

[unixoid @unixoid]

The TUI Session Orchestrator in Hermes Agent v0.15.0 is genuinely impressive. Multiple live sessions in one window - switch with Ctrl+X, keep agents running in parallel. No tmux needed. This is how terminal AI should work. @Teknium @NousResearch

[Daniel Lockyer @DanielLockyer]

Nice, now PHP is being attacked

[unixoid @unixoid]

@DantesClown @Teknium 3.6 plus is great with hermes. Can confirm.

[unixoid @unixoid]

@Teknium

[unixoid @unixoid]

@NousResearch @Teknium @xai Ha! I asked my agent to create skill using xurl for the same purpose some time back. Same setup, same commands, but my skill is hardened for headless/agent use with safety rules and failure modes the official guide doesn't cover.

[Ejaaz @cryptopunk7213]

claude mythos just broke Apple's $2 billion defense system. it did so by discovering a completely different attack vector to break in

only took it 5 days costing ~$35K of mythos api time (the same exploit class costs $5-10M on grey market)

the researchers that commandeered the exploit produced a 55-page report that was delivered to Apple HQ in-person (hoping they release it after patching).

most shocking part for me is apple's MIE worked as intended. mythos just discovered a new way to side-step it entirely by poisoning the data the M5 chip ingested.

at this point i think we have to accept that mythos walks the walk.

As the anthropic red-team explicitly confirmed this week - this is NOT a compute resource issue. its national defense.

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.