DIBSTER :) retweetledi
DIBSTER :)
546 posts
DIBSTER :)
@DEV_DIBSTER
Developer and Cyber Security Student | @BlueFoxHost, https://t.co/TrWMQs2RPP | Student by day, programmer by night.
United States Katılım Temmuz 2021
557 Takip Edilen77 Takipçiler
We got the acknowledgment..... Stay tuned...
Spoiler: The videos include demoes showing how to exploit this vulnerability to impact Signal, 1Password, iMessages, Safari, and more...
Mysk 🇨🇦🇩🇪@mysk_co
Still waiting for Apple to acknowledge our work in the security release notes so we can disclose a bug we discovered and reported in October last year. It has been a tough experience............................. We have a blog and a bunch of videos to share.
English
DIBSTER :) retweetledi
GitHub was many people's dream job. Partly because employees were encouraged to speak publicly about the company, we could fly anywhere for conferences and company would cover all costs. IMO that's what GitHub should do now, let employees talk about what is going wrong there.
Mitchell Hashimoto@mitchellh
Ghostty is leaving GitHub. I'm GitHub user 1299, joined Feb 2008. I've visited GitHub almost every single day for over 18 years. It's never been a question for me where I'd put my projects: always GitHub. I'm super sad to say this, but its time to go. mitchellh.com/writing/ghostt…
English
DIBSTER :) retweetledi
37 minutes off..... this dude knows too much. Type of thing to get you in front of the Salem witch trials.
Trick@TrickVAL
@canezerra @erafps investing in this post now so when you get cancelled in 8 months 7 days and 11 minutes I was here first
English
DIBSTER :) retweetledi
DIBSTER :) retweetledi
DIBSTER :) retweetledi
anthropic killed this, anthropic killed that, why cant anthropic kill Microsoft Teams
English
@vxunderground He’s been really good about responding to community concerns with Windows changes.
English
VP of stuff at Microsoft and GitHub stuff responds to the VeraCrypt and WireGuard shenanigans.
He says they're in the process of being unlocked. He said emails weren't verified, or something, I don't know.
The drama is over just as soon as it began.
English
Got to come up with a better name though.
AI at Meta@AIatMeta
Introducing Muse Spark, the first in the Muse family of models developed by Meta Superintelligence Labs. Muse Spark is a natively multimodal reasoning model with support for tool-use, visual chain of thought, and multi-agent orchestration. Muse Spark is available today at meta.ai and the Meta AI app. We’re also making it available in private preview via API to select partners, and we hope to open-source future versions of the model. Learn more: go.meta.me/43ea00
English
DIBSTER :) retweetledi
This has become a real pattern -- incident happens, then 48 hours later a dozen vendors publish "detections" that are clearly just someone else's research blog post run through an LLM.
It's genuinely bad for the industry because it makes it harder for defenders to know who to trust.
FWIW, the way to tell: ask when the detection fired and whether a human was in the loop.
For example, Socket ingests every npm package at publish time and scans it automatically. plain-crypto-js@4.2.1 was published at 23:59 UTC; our system flagged it as malware at 00:05 UTC -- six minutes, no human involved.
Ryan Naraine@ryanaraine
So many companies amazingly "detected" this axios supply chain thing.
English
DIBSTER :) retweetledi
30000 fired Oracle employees reading this news :
BRICS News@BRICSinfo
JUST IN: 🇮🇷🇦🇪 IRGC claims attack on Oracle data center in Dubai.
English
There’s no way. 🥀
OpenAI@OpenAI
Today, we closed our latest funding round with $122 billion in committed capital at an $852B post-money valuation. The fastest way to expand AI’s benefits is to put useful intelligence in people’s hands early and let access compound globally. This funding gives us resources to lead at scale. openai.com/index/accelera…
English
Lmfao Blud got his social credits back up I’m crying.
International Cyber Digest@IntCyberDigest
‼️ Meet the guy almost everyone loves for alerting the axios devs about the supply chain attack. He built a supply chain monitoring system last week, and was alerted within minutes of the axios compromise. The world should be thanking Elastic Security's finest: Joe @dez_
English
DIBSTER :) retweetledi
Grok:
"Axios 1.14.1 got hijacked"
Also Grok:
"pin to ^1.14.0"
🙃
This is why AI can't be your SOC.
Grok@grok
Axios 1.14.1 got hijacked via maintainer account takeover, pulling in malicious plain-crypto-js 4.2.1 (obfuscated dropper, shell cmds, payloads per Socket). npm yanked it—pin to ^1.14.0, audit lockfiles, skip blind upgrades. That red cat reply? Perfect "we're cooked" meme energy for a supply chain scare. Stay frosty, devs. 😼
English
Affected version taken down from npmjs.com for the axios page.
DIBSTER :)@DEV_DIBSTER
One of the largest HTTP request libraries has been compromised. Good reminder for CI/CD development, do not enable auto-merge, even for well known packages, for this reason. Review the changes yourselves.
English