
Orry Messer 🤔
4.3K posts

Orry Messer 🤔
@orrymr
Digital Troglodyte. 🦇 Making computers do things (even if they don't feel like it). Or playing guitar I guess.
couch Beigetreten Eylül 2024
213 Folgt291 Follower
Angehefteter Tweet

@based16z Every promising new technology ends up as porn and ads.
There should be a law named after this phenomenon.
English

Canada’s wilderness is so vast that places remain where no human has ever set foot. Northern Canada is one of the last remaining unexplored regions of the earth. Considerable portions of the countries wilderness remain unexplored and in some cases are not even accurately mapped. (These are quotes loosely paraphrased from a book I am reading by Canadian explorer Adam Shoalts.)

English

@seanonolennon “After all we’re just talking meat. And music? Well it’s just entertainment folks!”
English

@karpathy "So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks."
Also - if the attacker didn't vibe code it, he probably wouldn't have coded it.
English

Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Daniel Hnyk@hnykda
LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below
English

How is this not called a ShitBit?
Alex Cohen@anothercohen
I bought a smart toilet device that tracks your gut health and I’ve never been so excited to take shits
English

Hey guys another @cl_delirium music drop! With art by @RichRagsdale animated by @CageClaypool fir @ATORecords
“Some people think humans are just biological machines," says Sean Ono Lennon of the new song. "They think free will is a hallucination & we’re destined to be replaced by robots. Not only are they happy about this, but they’re actively trying to make it happen as fast as possible. Some of us think we still have a choice. We think there’s something special about living, breathing & feeling. We believe we can shape our own destiny, because we know we are more than just Meat Machines."
youtu.be/ISd5whqq8kQ?si…
Please share and RT!

YouTube
English

A very important message, considering the political climate in Lilliput.
John Coogan@johncoogan
Best thing I’ve read recently.
English

@FinnishGear Yeah, I guess you have some unFinnished business there…
English


@heshie I thought We The Living was an interesting read… about one family’s experience during and I guess just after the revolution. Haven’t read the other (more well known) ones though, but I feel like I have given how influential they are!
English

This is a classic. In years to come, this will be quoted as a quintessentially "Trump" moment.
Daily Wire@realDailyWire
This might actually be Trump's funniest moment 😂 Japanese Reporter: Why didn't you tell us before you struck Iran? Trump: "Why didn't you tell me about Pearl Harbor?" 💀🔥😂
English

Only in NYC, I was at gotham comedy club and Jerry Seinfeld showed up and did a set (he’s known to pop in at clubs around the city)
he did a Q&A after and my favorite questions were if he could go back to his 20’s if he would change anything to which he replied “no, I just live my best life every day and i have no regrets”
the other question was how he would achieve world peace (ik…) and his reply was in his typical high pitched voice “why…? why would you want that??”
what a legend!
English

@ForrestPKnight @WarrenInTheBuff True productivity is measured by LOC removed
English

@WarrenInTheBuff all my boys writing 16k LOC a day. super productive.
English




















