@TechMorningstar

open source geek, metabrainz dev, listenbrainz lead

 hell
Joined January 2023
  • Tweets5K
  • Following62
  • Followers196
611Media
nano@nanomachinerOct 21
Today’s PHP security risks got me thinking about how I could have been more vulnerable with you. Perhaps we can patch things up and be there 4 one another.
1
159
That civ scout you set to auto explore turn 5 and find again in the information era
csz@cszablaOct 4
why is this guy still roaming around middle america marveling at how “big” and “great” everything is, months after the world cup? got to be higher probability he’s being funded at this point to be doing this right?
19
632
3
12,868
244,508
if eternal sunshine of the spotless mind was made today
Frog King Simulator
@BelbizazSep 28
Claude, erase the memory of her smile. Make no mistakes
1
51
lucifer retweeted
Vivian@perlucidumSep 20
guy who hasn’t stopped thinking about you for 16 hours straight: no worries if not
165
6,520
740
85,099
2,765,661
im in a crusade against non-chalantness
9
5
4
44
17,069
The Great Gatsby spoke of this
mood
@meishatoSep 8
posting on instagram stories is so fucking weird until you have a crush and then it becomes your life's work
8
916
10
9,923
240,608
GET OFF THE COUCH. For the love of God, people, this is not cute.
Andrew Downie@adowniebrazilSep 7
This is one of the saddest things I've ever read. 😦 thetimes.com/life-style/sex-…

Why my Gen Z mates don’t have boyfriends

A third of under-30s haven’t had a partner. Tyler Bennett knows how that happens

thetimes.com
162
459
450
28,687
5,560,841
"Normies are gonna lose their mind when they hear Anthropic solved Navier-Stokes" My brother in Christ. The normies haven't got the news that Poincaré was solved
66
90
21
2,820
320,808
if a girl asked me to be "actually funny" id also have performance anxiety :\
shira
@shiraeisAug 31
worked for 4m 54s
3
4
304
19,444
had chai latte at starbucks after trying it at a normal cafe and finally get why starbucks has such a bad rep for coffee/tea in europe.
1
64
36
ananya : india :: tereza : czechia
44
Last thing an ASML exec sees before he starts leaking ultraviolet lithography machines
Andrew Curran
@AndrewCurran_Jun 19
Commerce Secretary Howard Lutnick told ASML tonight that the US government believes that one of its ultraviolet lithography (EUV) machines may have somehow made its way into China. Senior administration officials said they have evidence that ASML is not acting in good faith.
45
280
19
9,491
683,051
how your electron looks at you when you ask it where it was and how fast it was moving at the same time
6
36
1
660
28,003
TIL that the train conductors in the eternal sunshine of the spotless mind made over 200k usd annually
37
top tier joyful experience getting to setup linux - windows network printing!
39
It is almost like Maven’s choice to prefer specific versions, enforce keys, etc. was a good idea but admitting Java was right ever might kill people.
Andrej Karpathy
@karpathyMar 31
New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads. Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned. It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I think ultimately the defaults of package management projects (pip, npm etc) have to change so that a single infection (usually luckily fairly temporary in nature due to security scanning) does not spread through users at random and at scale via unpinned dependencies. More comprehensive article: stepsecurity.io/blog/axios-c…

axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity

Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investiga...

stepsecurity.io
1
1
31
3,415
4
217
2
3,165
30,799
29
lucifer retweeted
𝑆@leoninethingsMar 14
50
19,937
1,745
83,817
1,547,880
Load more