𝓙𝓮𝓷𝓾

26.7K posts

𝓙𝓮𝓷𝓾 banner
𝓙𝓮𝓷𝓾

𝓙𝓮𝓷𝓾

@JenuHani

For immediate replies, please mail me at jenuhanitwts or DM

Bengaluru South, India Katılım Nisan 2009
2K Takip Edilen569 Takipçiler
Sabitlenmiş Tweet
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
Goals. Make money and make money work for me. Be happy. Music makes me Happy. Sangeetha. Be fit.
English
0
0
2
196
𝓙𝓮𝓷𝓾 retweetledi
Anuradha Tiwari
Anuradha Tiwari@talk2anuradha·
Nitin Gadkari ji says "A new AI-driven toll system will capture photos of number plates & deduct toll amount directly from bank accounts". So why can’t we use same technology to capture photos of potholes & deduct salaries of govt employees? Accountability can't be one sided!
English
1.5K
10.3K
35.7K
913.4K
𝓙𝓮𝓷𝓾 retweetledi
Sowmya
Sowmya@sowmyarao_·
i have a WHOLE month of summer holidays looming for my 8 yo. Ideas for occupying him - in a way that DOES not involve "Amma amma amma every 15 mins?" I'm particularly interested in places where he might be able to "work" ... safely.
English
28
4
61
25.2K
𝓙𝓮𝓷𝓾 retweetledi
Aakash Gupta
Aakash Gupta@aakashgupta·
Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine. The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once. The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine. The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had. That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months. The attack chain is the part that gets worse every sentence. TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials. Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one. The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions. TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.” Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours. The companies deploying AI the fastest right now have the least visibility into what’s underneath it.
Andrej Karpathy@karpathy

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

English
297
2.3K
11K
2.7M
𝓙𝓮𝓷𝓾 retweetledi
Lavanya Mohan
Lavanya Mohan@lavsmohan·
Can confirm. Used to be an avid kindle reader, now I’ve shifted back to paperbacks after realising that I can’t remember the books I’ve read. Yet to find a solution for storage, however.
Anish Moonka@anishmoonka

Went down the rabbit hole on this. Your brain treats a physical book like a landscape. It builds a spatial map of the text, the same way it maps trails, rooms, and city blocks. When you scroll on a phone, that map breaks apart. Seven large-scale research reviews and direct brain scans confirm what you already feel. A 2023 study in PLOS ONE attached brain-activity sensors to children’s heads while they read the same text on paper and on screen. Paper reading produced fast brain waves, the pattern linked to focused attention. Screen reading shifted the brain into slow waves, the pattern linked to mind wandering and daydreaming. Same kids. Same words. Measurably different brain states. A separate 2022 study from Showa University in Japan scanned the front of the brain, the area that manages focus and comprehension, during phone versus paper reading. Smartphones sent that region into overdrive, meaning the brain was straining just to keep up with basic processing. Paper reading produced a moderate load that triggered natural deep breathing, which helped regulate brain function and sustain focus. The phone suppressed that breathing pattern entirely. Since 2017, researchers have published seven major reviews combining hundreds of individual studies. Six of seven reached the same conclusion: people understand less on screens. A 2018 review of 54 studies and 170,000+ participants, literally titled “Don’t throw away your printed books,” found paper outperformed screens across the board for non-fiction. A 2024 follow-up with 49 more studies confirmed it. The gap has grown steadily every year since 2001. Being a “digital native” doesn’t help. The best explanation is how your brain tracks where you are. Your short-term memory can only juggle about 7 things at once. A physical book gives you constant location cues: the weight shifting from right hand to left, where a paragraph sits on the page, how thick the remaining pages feel. Your brain hands off the “where am I in this text?” job to those physical signals, leaving more room for actually understanding what you’re reading. On a phone, every screen looks identical. Your brain has to track position and process meaning at the same time, and something gives. A Norwegian eye-tracking study analyzing 25,000+ individual eye movements found screen readers processed text more shallowly. The students had no idea they were reading differently. In 2019, nearly 200 reading scientists from 30+ countries signed an open letter warning that screen reading was degrading deep comprehension. Since then, Scandinavian countries, among the most digitized school systems on Earth, have started putting physical books back in classrooms.

English
73
355
6.7K
890.4K
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
@amuldotexe Also. Weather was jakaas. Exteemely chilly mornings. Used to study for 10th on the terrace shelter with drizzle falling nearby. Its so hot now. Never imagined in my life it wpuld change so much
English
0
0
0
16
𝓙𝓮𝓷𝓾 retweetledi
ತೀರ ಸಾಮಾನ್ಯ ಖಾತೆ
In a time when cassettes are gone, photos live in clouds, and songs are fleeting playlists on an app, there’s still a comfort in owning books you can still call your own. No logins, No buffering, no updates, no disappearing licenses, no content removed. Just pages that wait.
English
3
8
82
1.9K
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
Work, work, work. All the more work. Lazy lazy. Round the clock. Presto! You got luck
English
0
0
0
17
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
Phir le aya dil - Barfi Arijit singh again
हिन्दी
0
0
1
118
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
Ronan Keating - when you say nothing at all
English
0
0
1
45
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
You can run, you can hide But you can't escape my love Reliving Enrique
English
0
0
0
19
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
When someone uses my dear, sweetheart to win an argument omline :)
English
0
0
0
22
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
Youtube Premium is super. Even Spotify premium
English
1
0
0
33
𝓙𝓮𝓷𝓾
𝓙𝓮𝓷𝓾@JenuHani·
I don't just talk, I do it (do it) Say what I mean, then prove it (prove it) Stand on ten, no flukin' Straight in the field, no movin' (nope) I don't just talk, I do it (let's go) Truth in my walk, I use it Loud online but quiet in real life Me? I step, I do it (I just do it)
English
0
0
0
15