Suhaib Malik

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories. Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

@mirzaiqbal80 Worest service, not sure why banks and big orgs still use TCS. They do not attempt delivery and return the package to origin. Helpline is of no use.

TCS was once known as a reliable and fast courier service in Pakistan, gaining the trust of countless customers. However, over time, their service quality has significantly declined. Despite charging a premium for their deliveries, the service they now provide falls far below expectations. Customers are increasingly frustrated with delays, poor tracking, and inconsistent delivery standards. It’s disheartening to see such a reputable company lose its edge, especially when customers continue to pay a hefty price for services that no longer meet the standards they once promised. #TCSPAKISTAN

Day 10 of @tcs_couriers not delivering the debit card sent by @HBLPak despite logging complaints multiple times. Extremely frustrating service. CC: @SairaAwanMalik @knawan @StateBank_Pak

@googledevs Light in the day, dark at night

New year, new IDE theme. Dark mode or light mode?

Happy New Year everyone!

The security vulnerability we found in Perplexity’s Comet browser this summer is not an isolated issue. Indirect prompt injections are a systemic problem facing Comet and other AI-powered browsers. Today we’re publishing details on more security vulnerabilities we uncovered.

I trust a team that writes tests and release notes more than a team that writes heroic Slack updates.

Protect your defaults: 90-min deep work, phone in another room, inbox after lunch. Boring = effective.

If a dashboard feels slow, cache the answerable questions, not the charts. Speed is a product feature.

If you’re measuring everything, you’re learning nothing. Pick the 3 numbers that move the story. #dataanalytics

A clean data layer is the cheapest growth lever most teams ignore.

The changelog is marketing. Write it like a human, not a commit. #dev #tip

Start line > finish line. Shipping something small today that removes one manual step forever.

Note to self: if it isn’t monitored, it’s a rumour. Adding 2 alerts before lunch. #analytics

Note to self: if it isn’t monitored, it’s a rumour. Adding 2 alerts before lunch. #analytics

I don’t chase goals; I build systems that make the goals happen by default. This week’s system: automated checks on data freshness.

Planning my week around one deliverable: reduce a noisy metric to a trustworthy one. Everything else is extra.

The changelog is marketing. Write it like a human, not a commit.

The TODO is never empty. The Done column should be boring and repeatable.

I’m happiest when I delete code and users don’t notice; except the part where things feel smoother.