Mouad_Sidqi.ts

•software engineering and economics
•I hike sometimes 🏔️
• @1337FIL Alumni | TypeScript. 🇲🇦

[Rosário P. Fernandes 🇲🇿🔥🇬🇧 @thatfiredev]

If you maintain Flutter apps, native iOS apps using Firestore, or use Firebase App Distribution: update your SDKs now.

Firebase has released patches following the eMudhra CA compromise:

https://t.co/ExnXsdMz1d

[Mouad_Sidqi.ts @vmod__]

we need to coin a new term for this: people who no longer read

[Paul Graham @paulg]

We're about to enter a period where not reading or writing becomes as ubiquitous as smoking once was. We can hope people will eventually realize this is bad for them, as they did with smoking. But this is far from certain; the cost may not be as obvious.

[Mouad_Sidqi.ts @vmod__]

@MIduoad

[Mouad_Sidqi.ts @vmod__]

The future:

Agent does something illegal and you’re an individual => jail time👮‍♂️

Agent does something illegal but you’re a government or large corporation => oopsie 🤭

[Shanes Alt Account @dogegroin]

@axios Can I just “accidentally” make AI do crimes and get away with it too?

[Mouad_Sidqi.ts @vmod__]

@isbkch 80% is also the percentage of value after off-roading with a G-wagon

[Mouad_Sidqi.ts @vmod__]

@alilakrakbi Now imagine a hidden prompt in a banking agent

[Mouad_Sidqi.ts @vmod__]

Careful 👀

[Cyber Security News @The_Cyber_News]

‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers

Details: https://t.co/BLfO3GLSaZ

A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.

They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.

The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.

#cybersecuritynews

[Mouad_Sidqi.ts @vmod__]

This is actually insanely good

[ℏεsam @Hesamation]

this is just straight up sci-fi stuff.

and you will be able to run it LOCALLY.

[Mouad_Sidqi.ts @vmod__]

@seuros @alilakrakbi Well, they’re unfortunately ALREADY trying to make a kill switch mandatory by law

[Shikhar @xikhar]

Waking up to see that everything has been compromised

[Mouad_Sidqi.ts @vmod__]

@seuros @alilakrakbi Isnt that a case against electric cars ?

[Steven Liss @This_Liss]

Another vulnerability few are talking about: I found my Claude Code exposing personal data in http headers because the sites it curled politely asked agents to identify their users 😊
Epistemic cybersecurity is the hot new category for 2027.

[Mouad_Sidqi.ts @vmod__]

@bernoussama https://t.co/8diMsjLWuy

[Mouad_Sidqi.ts @vmod__]

Listening to actual cybersecurity experts and then reading X is wild… most of X userbase have no idea what they’re talking about

[Mouad_Sidqi.ts @vmod__]

My new title

[Nick @nick_ux]

@atmoio @hishboy Distinguished Rotation Engineer

[Mouad_Sidqi.ts @vmod__]

@Ayoubka_ Yesss, careful about feature flags and anything hidden in the app, make sure the reviewer knows about it and can enable them to see. Beto explained more in-detail here:

[Beto @betomoedano]

The new one is guideline 2.5.19, about hidden, dormant, or undocumented features.

Apple says it clarifies a long-standing policy that used to live in 2.3.1. So the policy isn't new, but now it's its own rule, and your account is on the line.

[Mouad_Sidqi.ts @vmod__]

@helyoussfii It’s already so

[dax @thdxr]

i'm sure you're all better than me at this but just some of what we've seen if it helps - they're not going to stop. it's going to get increasingly sophisticated and they're going to go after every surface of your system and all of your employees

any old projects you've long forgotten about will be found and used against you

the only reason we're surviving is because we have agents going 24/7. we're still barely sleeping

good luck, sorry you're dealing with this, but really it's a collective problem we're all facing together

[Napoleon Bonaparte Appreciator @NapoleonBonabot]

What do you mean an Indian company fucked 50+% of the internet because their certificate key was “4”????

[Mouad_Sidqi.ts @vmod__]

@moghwan Jokes on you my machine doesn’t even have a screen

[Mouad_Sidqi.ts @vmod__]

I’m doubting the usefulness of cloud agents when you can have a local machine for this