Peter H Jackson

7.1K posts

Peter H Jackson banner
Peter H Jackson

Peter H Jackson

@phjackson5

Leadership in Startups & Tech Innovation. Helping companies reduce #liability & cut waste w/ smart #tech #Efficiency #TechForGood #DigitalTransformation

SF Bay Area 가입일 Şubat 2009
839 팔로잉14.1K 팔로워
Peter H Jackson
Peter H Jackson@phjackson5·
Likely fairly alone here. I don’t find making mock of Tiger Woods issues entertaining. He likely some personal challenges. Whether you see struggling people regardless of being homeless or a billionaire we all have the same spirit and mind. Maybe it makes people feel better to be harsh. Let’s care about mental health, not mock it. Mocking should not make you feel better. GBY
English
0
1
1
108
Peter H Jackson 리트윗함
LakeSail
LakeSail@LakeSailHQ·
Each LakeSail job gets dedicated compute resources, with no idle nodes left waiting. Compute is provisioned on demand, scales with the workload, and is released the moment the job is done. That means no JVM overhead, no idle executors, and no pre-provisioned workers. You pay for the work, not the waiting.
English
2
1
3
40
Pedro Domingos
Pedro Domingos@pmddomingos·
OpenAI is a fast follower that was accidentally in the lead for a short time.
English
20
4
101
15.3K
Aakash Gupta
Aakash Gupta@aakashgupta·
Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine. The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once. The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine. The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had. That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months. The attack chain is the part that gets worse every sentence. TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials. Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one. The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions. TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.” Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours. The companies deploying AI the fastest right now have the least visibility into what’s underneath it.
Andrej Karpathy@karpathy

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

English
297
2.3K
11K
2.7M
Priyanka Vergadia
Priyanka Vergadia@pvergadia·
BREAKING: We gave AI agents keys to everything. Then we forgot to lock the door behind us. LiteLLM v1.82.8 stole credentials from thousands of AI apps. Silently. Automatically. While the agent kept running. This is the threat model nobody wants to talk about: → Agents are trusted by design, that's the whole point → They hold OAuth tokens, API keys, cloud credentials, DB passwords → They run 24/7 with no human watching → Their dependencies update automatically → And they have permission to take actions in the real world A human getting phished loses their credentials. An agent getting compromised loses its credentials and keeps acting on your behalf. The surface area of an AI agent isn't the model. It's every package, every tool call, every MCP server, every dependency it touches. Security was an afterthought. Agents are shipping to production now. We haven't solved human-scale identity theft. We just gave attackers an automated, always-on, fully-credentialed version of your employees to compromise instead. The LiteLLM attack is a warning shot.
Daniel Hnyk@hnykda

LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below

English
25
28
175
42.4K
Pedro Domingos
Pedro Domingos@pmddomingos·
OpenAI will be the most shorted stock in history.
English
50
26
511
50.1K
Peter H Jackson 리트윗함
Bret Taylor
Bret Taylor@btaylor·
Proud to share Sierra's partnership with Prudential Financial, a global financial services leader and premier active global investment manager. We’re honored to partner with a purpose‑driven company that for more than 150 years has helped people build financial security and peace of mind. linkedin.com/posts/carolynn…
Bret Taylor tweet media
English
2
3
40
7K
Peter H Jackson 리트윗함
Guri Singh
Guri Singh@heygurisingh·
BREAKING: OpenAI and Anthropic engineers leaked a prompting technique that separates beginners from experts. It's called "Socratic prompting" and it's insanely simple. Instead of telling the AI what to do, you ask it questions. My output quality: 6.2/10 → 9.1/10 Here's how it works:
English
60
250
2.2K
921.9K
Peter H Jackson 리트윗함
The Best
The Best@Thebestfigen·
😂😂
The Best tweet media
QME
546
5.3K
49.5K
1.1M
Peter H Jackson 리트윗함
Exec Sum
Exec Sum@exec_sum·
BREAKING: Meta is shutting down the Metaverse after spending $80 Billion on the project
Exec Sum tweet mediaExec Sum tweet media
English
660
1K
7K
3.6M
Peter H Jackson 리트윗함
elasciami
elasciami@elasciamy·
🤣
QME
82
214
1.1K
60.9K
Peter H Jackson 리트윗함
Josh Carpenter
Josh Carpenter@JoshACarpenter·
Good use of the wind graphics on what could be one of the pivotal shots of the tournament
English
0
5
159
42.1K
Peter H Jackson
Peter H Jackson@phjackson5·
@VintageRockN_85 Day on the Green Oakland CA 4/26/76– Senior year of High School. Not many concerts the last 50 years come close!!
English
0
0
0
15
Vintage Rock 🎸
Vintage Rock 🎸@VintageRockN_85·
Have you seen Peter Frampton live?
English
288
85
777
22.2K
Rohan Paul
Rohan Paul@rohanpaul_ai·
ServiceNow CEO Bill McDermott's argument why AI can not replace them.🤔 AI identifies issues but cannot fix it. Says with 80B workflows across legacy systems, ServiceNow is the "do-it" layer, the "last mile". Says the market is missing this execution gap
English
25
10
209
147.5K
Peter H Jackson 리트윗함
Mr PitBull
Mr PitBull@MrPitbull07·
Her father died when she was sixteen — but every birthday after that, flowers still appeared on her doorstep. In early 2013, Michael Sellers was diagnosed with stage four pancreatic cancer. Doctors in Tennessee told him he had two weeks to live. They offered chemotherapy that might extend his life by a month. He turned it down. Instead, he chose to spend whatever time he had left with his family. He lived for six more months. During those months, his youngest daughter Bailey made a decision that most sixteen-year-olds would never have to face. She left school, switched to homeschooling, and spent her days helping her mother care for the father she was losing. That time, as painful as it was, became the foundation of a bond that would outlast his life. Michael Sellers died on August 25, 2013. He was fifty-six years old. But in the weeks before he passed, Michael did something quietly extraordinary. He visited a small flower shop in Maryville, Tennessee. He pre-paid for five birthday bouquets — one for each of Bailey's birthdays from her seventeenth to her twenty-first. He wrote a different message for each one. He chose different flowers for every year. And he asked the shop to deliver them on time, every single year, after he was gone. Three months after his death, on Bailey's seventeenth birthday, the first bouquet arrived on the family's front porch. The card read simply: "I loved you first... Happy 17th! Love, Dad." Pink flowers came for her eighteenth. Red for her nineteenth. Pink and white for her twentieth. And then, in November 2017, just before she turned twenty-one, the final arrangement arrived. This time, every flower was a shade of purple — the color of pancreatic cancer awareness. Her father's last choice of bloom was not just beautiful. It was a message in itself. The card inside was the longest he had written. It began: "Bailey, this is my last love letter to you until we meet again. I do not want you to shed another tear for me, my baby girl, for I am in a better place." He called her his most precious jewel. He told her to respect her mother, stay true to herself, be happy, and live life to the fullest. And he made her a promise: "I will still be with you through every milestone. Just look around, and there I will be." Bailey posted a photo of the purple bouquet, her father's final note, and an old picture of herself as a little girl sitting on his shoulders. She expected maybe ten likes — the same as every other year. She woke up the next morning to a frozen phone and over three hundred thousand notifications. Within days, her tweet had been liked more than 1.5 million times. News outlets around the world picked up the story. What Michael Sellers couldn't have known — what no one could have known — was that his small act of planning, his quiet gesture arranged from a flower shop in a small Tennessee town, would one day reach millions of strangers and remind them of something they already knew but needed to hear again. There's something else about this story that makes it more than a beautiful moment. Bailey didn't just grieve. She grew. Inspired by the depression she battled after losing her father, she enrolled at East Tennessee State University to study psychology — determined to help other people navigate the kind of pain that once consumed her. And there's one more detail. A month before Michael died, he asked his family to buy handkerchiefs and have them embroidered. Alone in his bedroom, he prayed over every single one. Then he gave one to each of his three daughters, with a single instruction: tie it to your wedding bouquet the day you walk down the aisle. He couldn't be there. But he found a way to be present. Michael Sellers didn't leave behind wealth or fame. He left behind purple flowers, prayed-over handkerchiefs, and five handwritten messages that proved something the world sometimes forgets
Mr PitBull tweet media
English
44
277
1.7K
56.4K
Peter H Jackson 리트윗함
Clown World ™ 🤡
Clown World ™ 🤡@ClownWorld·
Elon Musk arrived at a San Francisco courthouse for the Twitter buyout trial using a decoy Tesla and security to distract reporters waiting outside Genius 😂
English
596
2K
31.4K
1.5M
Bill Mitchell
Bill Mitchell@mitchellvii·
X just shattered its ALL-TIME RECORD WITH 152.2 MILLION VISITS in a single day on February 28th! That's the highest single-day traffic in the platform's history - proof that when real news breaks and the world needs unfiltered truth, everyone turns to X first. Elon built this free speech powerhouse and it's dominating because Americans and the world crave honesty over propaganda. Momentum like this doesn't lie.
English
113
638
3.2K
30.8K
Peter H Jackson 리트윗함
Ann ❤️
Ann ❤️@Annie_Modiba·
Smart move Kasongo.
Filipino
1.6K
7.9K
57.3K
8.7M