Jeremy Asynchronous

23.7K posts

Jeremy Asynchronous banner
Jeremy Asynchronous

Jeremy Asynchronous

@THEJERE

Software Developer #MUFC To infinity and beyond! Fortune favours the bold. From tomato farmer to API farmer.

Nairobi, Kenya Katılım Ocak 2011
411 Takip Edilen3.9K Takipçiler
KariukiThe1st
KariukiThe1st@Karriss·
German or Gapanese?? 🤔
KariukiThe1st tweet mediaKariukiThe1st tweet media
Indonesia
6
19
84
1.8K
Jeremy Asynchronous
Locals: Kenyans think they drink a lot but they really don't. 500 random reels/tiktoks: Don't drink with Kenyans. I repeat, DON'T drink with Kenyans.
Nairobi, Kenya 🇰🇪 English
0
2
3
189
Jeremy Asynchronous retweetledi
Anish Moonka
Anish Moonka@anishmoonka·
A tiny piece of code called axios runs inside almost every app on your phone and every website you visit. Developers download it 100 million times a week. A few hours ago, someone poisoned it with malware that hands an attacker full control of your computer. If you’ve never heard of axios, that’s normal. It does one boring but important job: it lets apps talk to the internet. When a website pulls up your feed or an online checkout processes your card, axios is probably doing the work underneath. Over 173,000 other code packages plug into it. It’s everywhere. The attacker stole a lead developer’s login for npm (think of it as an app store, but for code that programmers use to build software). Once inside, they swapped the developer’s email to an anonymous ProtonMail account and uploaded the poisoned version by hand. That jumped past every security check the project normally runs before new code goes live. And this was not some rushed job. The attacker staged the malware at least 18 hours before pulling the trigger. They built separate versions for Windows, Mac, and Linux. They poisoned both the current version and an older one within 39 minutes of each other, casting the widest net possible. Once the malware ran on a machine, it deleted itself to cover its tracks. The trick was smart. They never touched a single line of code inside axios itself. Instead, they tucked in a fake add-on called plain-crypto-js, built to pass as a well-known, trusted library. It copied the real library’s description and author info, so nothing looked off at a glance. When a developer installed axios, this fake package quietly ran the malware on its own. When a smaller package called ua-parser-js got hijacked back in 2021 with about 8 million weekly downloads, the security world treated it like a four-alarm fire. Axios has 100 million. Over 12x the exposure, with 173,000+ packages depending on it. Socket, the security firm that flagged this, caught it in about 6 minutes. That’s fast. But 6 minutes is still plenty of time for automated systems at companies everywhere to pull and install the bad version before anyone can react. If you or your team runs axios: lock your version to 1.14.0 (or 0.30.3 for the older branch). Change every password, API key, and access token on any machine that installed the compromised update. And check your network logs for connections to sfrclak dot com or the IP address 142.11.206.73.
Feross@feross

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

English
50
599
3.5K
637.9K
Fundi wa Redio
Fundi wa Redio@mu_iruri·
@nonsensei_kun Collate all the correspondence, head to IRA and file a formal complaint. Enough time has passed
English
3
12
104
6K
Caleb Sama
Caleb Sama@nonsensei_kun·
It is now time to tell my story of how a simple insurance claim turned into a 99 day nightmare. On December 23 last year, I was involved in an accident near Muthaiga. A thread.
English
75
569
1K
182.4K
RZ34
RZ34@KarS5_·
@THEJERE @king_hysteria With that i can say you are not entirely correct, The snot rocket? We can't add that to this convo cos he said 9.5s. Again the snot rocket is not the only fast Mustang out there. And we can say mustangs are relatively cheaper by alot to build at that power level than others.
English
1
0
0
22
Jeremy Asynchronous
@MrRoja1 The cost of labor in Kenya is negligible. You are not saving much DIY. The only savings is using cheaper components and even then you will pay eventually.
Nairobi, Kenya 🇰🇪 English
0
0
2
21
Rogers
Rogers@MrRoja1·
@THEJERE I think everything depends on a combination of effort + finances + skills. If you have the skills and have a few resourceful friends, you can reduce the cost significantly. If you have the money, you can finance the project with as much effort as possible.
English
1
0
1
109
Jeremy Asynchronous
@KarS5_ @king_hysteria R8 is a special car. You are paying the same prices as lambo guys. That said, if you think you are going to build a cheap mustang like the green one, I have a plot on the moon I'd like to sell you.
Nairobi, Kenya 🇰🇪 English
1
0
0
25
RZ34
RZ34@KarS5_·
@king_hysteria @THEJERE Okay i get you now but I don't agree entirely. For example an R8 and an S550 Mustang or a demon and a Ttrs/daza. You'll spend less on the demon/s550 Mustang.
English
1
0
0
210
king hysteria
king hysteria@king_hysteria·
@THEJERE Been seeing guys building at T1 Race spend 400k on their builds but they cry more about the sweat and tears involved. Then they mention the money 😅
English
1
0
0
337
Jeremy Asynchronous
@KarS5_ The cost of doing the quarter mile in 9.5s is almost the same regardless of the car you choose. Exceptions will be special cars that are too expensive to start with or cars with almost zero aftermarket support that require you to essentially R&D.
Farmers Branch, TX 🇺🇸 English
1
0
4
508
RZ34
RZ34@KarS5_·
@THEJERE I don't get it elaborate
English
1
0
0
540
Jeremy Asynchronous
@king_hysteria Exactly. It boils down to: 1. If you want to go stupidly fast, you better have a bank 😂 2. Aftermarket support is more important than platform 3. Building fast cars takes time, money and expertise. One way or another you have to pay your dues.
Dallas, TX 🇺🇸 English
1
2
12
808
king hysteria
king hysteria@king_hysteria·
@THEJERE I see, the difference is the same (cost wise) no matter the platform It now boils down to personal preference and aftermarket support
English
1
0
2
383
Jeremy Asynchronous
@Urunzii GT-Rs are the best platform if you want to go 7s or 6s. However, they also require a lot more initial investment to be reliable. But most importantly, I enjoyed driving it more than I enjoyed racing it so decided to sell it and buy the facelift later(also for driving not racing)
Dallas, TX 🇺🇸 English
0
4
19
914
3.0 TDI
3.0 TDI@Urunzii·
@THEJERE Interesting! Never knew this. Out of topic, why did you pause on the GTR ?
English
1
1
2
853
Jeremy Asynchronous
@king_hysteria I would advice someone that where you start getting decently fast i.e low 10s, the price to play is the same. There are exceptions to rule because some cars do have a premium but it holds true most of the time. It will cost you almost identical money to run Kimani's time on DAZA
Dallas, TX 🇺🇸 English
1
0
8
685
king hysteria
king hysteria@king_hysteria·
@THEJERE So you wouldn’t advice someone it cost you X amount to run 10seconds no matter the platform?
English
1
0
5
701
Jeremy Asynchronous
@QJery Just because you can't see them doesn't mean they aren't there. 🙂
Dallas, TX 🇺🇸 English
0
0
1
53