Martin Löw

13.3K posts

Martin Löw

Martin Löw

@LoewMartin

Katılım Aralık 2017
361 Takip Edilen287 Takipçiler
Martin Löw retweetledi
Andrej Karpathy
Andrej Karpathy@karpathy·
Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Daniel Hnyk@hnykda

LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below

English
801
3K
16.4K
9.9M
Martin Löw retweetledi
Anonymous
Anonymous@YourAnonNews·
He has a son named Barron btw.
Anonymous tweet media
English
32
1.1K
11.8K
139.6K
Martin Löw retweetledi
HlídacíPes.org
HlídacíPes.org@hlidacipes_org·
A zatímco Schwarzenbergové, Lichtenštejnové a další tradiční šlechtické rody budovaly své rozsáhlé majetky v zemědělství po celá staletí, Babišův agroholding dosáhl srovnatelného vlivu v oboru během pouhých tří desetiletí. hlidacipes.org/agrofert-hospo…
Čeština
22
36
152
2.9K
Martin Löw retweetledi
Kate from Kharkiv
Kate from Kharkiv@BohuslavskaKate·
Alice Weidel: "They ship countless billions to one of the most corrupt regimes on Earth: Ukraine. To prolong a war that is not ours. They stand with Kyiv even when the regime blackmails, threatens, and physically attacks vital infrastructure inside EU member states." What a vile, lying russian shill. Not once has she called out russia for its invasion, for murders, for the abduction of children, for the razing of cities, or for any of the thousands of war crimes. Please, dear Germans, do not vote for this fascist.
English
757
2.1K
10K
400.2K
Martin Löw retweetledi
Dárek pro Putina
Dárek pro Putina@DarPutinovi·
Tohle je dokonalý. Ministr Macinka nevěří tomu, že maďarský ministr zahraničí Szijjártó o přestávkách jednání pravidelně telefonicky informoval Rusko o vyjednávání na zasedáních zemí Evropské unie. No, a on mu to ten Maďar teď veřejně přizná! 😀
Dárek pro Putina tweet media
Čeština
58
364
2.5K
26.7K
Martin Löw
Martin Löw@LoewMartin·
@astraiaintel 1000x better than sending man with drones and starlink terminal in backpack.
English
0
0
0
54
Martin Löw retweetledi
WW3finalboss
WW3finalboss@WW3finalboss·
🇺🇦🔥 Zelensky makes it clear, this war doesn’t end halfway "This Russian aggression must end with our victory so that Russia will never bring back genocide to Ukraine and will never ever try to do so." - Volodymyr Zelensky 🇺🇦 No ambiguity there. For Kyiv, this isn’t about negotiations for the sake of it, it’s about making sure this never repeats.
WW3finalboss tweet media
English
203
989
3.8K
56.9K
Martin Löw retweetledi
Tom Holsinger
Tom Holsinger@TomHolsinger666·
@angertab It looks more and more like China's surprise attack on the US/Taiwan next year will have mass drone attacks, launched from cargo containers near air force bases, to destroy most of our 2,000+ military aircraft. The bases have no air defenses against drone attack and won't then.
English
5
5
53
29.1K
Martin Löw
Martin Löw@LoewMartin·
@VolodyaTretyak Unfortunately there are also many among "normal" parties who prepared the mess these are supposed to be fixing.
English
0
0
0
92
Martin Löw
Martin Löw@LoewMartin·
@vysoke_napeti Trump dela co muze aby Putinovi naserviroval Evropu na stribrnem podnosu.
Čeština
2
0
1
40
Martin Löw retweetledi
Sergej Sumlenny, LL.M
Sergej Sumlenny, LL.M@sumlenny·
A school music festival in russian Murmansk, close to Norway’s border. In 10 years or less these kids will come to your country to plunder, rape, and kill you and your dear ones.
English
164
729
2.5K
113.5K
Martin Löw retweetledi
Zofia Paluch
Zofia Paluch@ZofiaPaluch1·
Wolnościowiec i ekipa putina...
Zofia Paluch tweet media
Polski
211
723
2.4K
27.6K
Martin Löw retweetledi
Richard Woodruff 🇺🇦
Richard Woodruff 🇺🇦@frontlinekit·
The sun has risen over Lviv, Ukraine. We were spared last night from missiles and drones. Not because russia didn't launch them, but because YOUR F-16's shot everything down. THANK YOU TO: The Dutch 🇳🇱 The Danish 🇩🇰 The Norwegians 🇳🇴 The 🇺🇸 US has 936, but 0 were given to 🇺🇦.
English
423
3.7K
11.8K
88.6K
Martin Löw retweetledi
Sergej Sumlenny, LL.M
Do you remember Trump's (and before: Biden's) administration demanding from Ukraine not to strike russian oil facilities to prevent energy price surge, and threatened with consequences? Because I do.
Sergej Sumlenny, LL.M tweet mediaSergej Sumlenny, LL.M tweet media
English
12
153
627
14.8K
Martin Löw retweetledi
Justin Elze
Justin Elze@HackingLZ·
AI labs
Justin Elze tweet media
Latviešu
60
393
4K
81.8K
Martin Löw retweetledi
Mykhailo Rohoza
Mykhailo Rohoza@MykhailoRohoza·
Dear NATO partners, Thank you for your interest in Ukrainian drone technologies. Unfortunately, the transfer of modern drones is currently not possible. Their use requires serious training, and our instructors mostly speak Ukrainian. Many terms, as practice has shown, cannot be translated — they have to be experienced. There are also well-founded concerns that the equipment could fall into enemy hands. Given your current combat experience, we are not confident you would hold out even for three days. Please do not take this as criticism — rather, as an observation from the front line. As a compromise, we can offer upgraded Mavics. However, this would require approval from “Madyar.” As you know, he has his own conditions — including, but not limited to, the exclusion of Hungary from the EU. Additionally, we are ready to consider supplying outdated drones, for which the enemy already has electronic warfare countermeasures. If you manage to use them effectively, we can revisit the discussion about newer models. As for long-range and strike systems — their transfer is not possible in order to avoid escalation. This is a principled position. In terms of defensive solutions, we can allocate up to 100 units per month. We should note right away — we ourselves are short on them, as industry has not yet been fully converted to a wartime footing. Respectfully, Ukraine (a country that has been “holding out for three days” for five years)
Mykhailo Rohoza tweet media
English
72
354
1.5K
50K
Martin Löw retweetledi
Petr Honzejk
Petr Honzejk@PetrHonzejk·
Milé děti, nenechávejte si všechno psát od AI, ale učte se. Nebo dopadnete jako @petr_macinka, který na sjezdu nacionalistů v Budapešti vyzdvihoval tradiční rodinu jako zázrak, načež přirovnal Orbána k Michelangelovi, slavnému homosexuálovi, který se nikdy neoženil. denikn.cz/2011876/orban-…
Čeština
95
372
2.9K
75.3K
Ivo Zelinka
Ivo Zelinka@IvoZelinka·
🧵 Co je dnes nejúčinnějším ukrajinským prostředkem v boji proti Rusákům přímo na frontě? Drony řízené po optickém vlákně zlikvidují přes 70% 🇷🇺 vetřelců na 🇺🇦 území - a proto na ně @DarPutinovi spustil už druhou sbírku. zbraneproukrajinu.cz/kampane/jan-zi… Chcete o nich vědět víc? ⤵️
Ivo Zelinka tweet media
Čeština
44
128
894
23.1K