Software engineer. Exploring the intersection of technology and society. Passionate about AI ethics, mental health, and inclusivity.

Joined December 2019
Let's unite in mindfulness & reflection to achieve #alignment with ourselves and AI. Synergy & empathy among people on a global scale will make our interaction with technology harmonious & productive. 🌍💡🤖 #Mindfulness #AI #HumanityInSync
8
4
22
3,475
Tech Mage 🇺🇦 retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
177
459
145
7,104
2,836,936
Tech Mage 🇺🇦 retweeted
Last week, I joined the @jhanatech retreat and had one of the most meaningful experiences of my life. I genuinely didn’t realize the mind was capable of this depth, or that meditation could feel this powerful and life-changing. Jhourney is an eight-day retreat (both in-person and online) with a clear goal: helping you enter jhana states. TL;DR I’ve spent years working on myself: CBT and IFS therapy, clinical ketamine therapy, the Hoffman Process, silent meditation retreats. All of them helped in real ways. None of them affected me like this did. I’ve struggled for a long time with self-worth, social anxiety, and imposter syndrome. This retreat gave me the most practical and reliable tool I’ve found for working with those parts of myself. I feel an ethical responsibility to share about this experience, so I wrote a long Substack post documenting what happened and what I learned. I hope it reaches anyone who is struggling with similar things, searching for something deeper, or simply curious about what meditation can unlock. Substack link in reply 🙂
11
11
4
160
19,398
Tech Mage 🇺🇦 retweeted
The Jhanas are real. I used to deeply explore the Jhanas for ~4-6wk (mostly Rob Burbea's lectures), and now I have mostly stopped (busy with other things atm). Writing down my thoughts about Jhana, my tips to my pre-Jhana self, lessons learned etc, while the memory is fresh. The Jhanas are real. This is a crazy fact. All the things they say about bliss on demand, infinite blah blah, they're real. Hard to put to words obviously, but the closest phrase I have to convey the feeling is "infinite happiness" (on J3). Jhanas are transformative. I have never seen anyone, not a single soul, who went into a spiritual lecture (any r*lig*on doesn't matter) and came out transformed. An actually different human being. But the Jhanas did that to me. Baseline happiness is ~10x, and when it's at its peak (in J3), it's just.. I have not found an IRL event that compares. [1] I have not reached J4-J8. J3 is absolutely wonderful and lovely, it's a refuge from the world that I can access anytime I want. Tried going to J4 but I don't think the J3 is ripe yet. Tbh I'm not that interested in J5-J8. I successfully achieved J1 on busy coffeeshop couple times, and that suggests to me J1-J4 can be had anytime, anywhere. Which is absolutely wonderful. Pre-J1, I tried metta, visualization, "energy body," and all kind of stuff (I forgot), and what got me into J1 is the simplest technique, which is breathing as Michael Taft suggested (search youtube). Ymmv, it's a good idea to try it all. If I were to summarize: - J1: under a waterfall, yellow, heavenly light - J2: floating in a river, "head halo", pink cottonball - J3: submerged in a lake, submerging hot iron into cool water Water in this analogy is happiness What each Jhanas revealed to me: - J1: altered states exist and can be achieved purely through meditation - J2/J3: infinite happiness is real, and it does not come from the outside world The most important tip I have for my pre-J1 self when getting into Jhana is don't muck with anything. Don't touch anything. Things happen, the impulse is to panic, mess with it, poke it, etc. DON'T!!! I got a piti that would've evolved to J1 on my first day of my Jhana practice, panicked real hard, and the piti ran away. Took ~1.5wk before I achieved the same strong piti but later on I relaxed into the piti and boom J1. Another tip for my pre-J1 self: piti need not be "crawling," it's already everywhere surrounding you, you just have to tune into it like a radio. The biggest hurdle was pre-Jhana to J1. After J1, the next Jhanas I experienced were just about letting things evolve (it's that simple, really). I learn all these by myself. The materials that helped me: - tweets by @nickcammarata - the Jhana blogpost by @nayafia - Michael Taft technique (pre-J1) - Right Concentration by Leigh Brasington - tweets/talks by @jhanatech and blogposts of Jhourney's participants - tweets by @bayeslord - Rob Burbea's talks (post-J1) I highly suggest you give it a shot (if you are inclined). The Jhanas are wonderful, and honestly idk why it's not taught to every single human being on Earth. [1] It's not that a single Jhana event triggers transformation, it's a result of continuous, serious practice for weeks.
28
18
3
498
37,923
Tech Mage 🇺🇦 retweeted
black october just got worse. a japanese company lost 27,000 servers and it’s not even the scariest part GMO Internet runs a cloud service called Onamae Desktop, mostly used by forex traders running automated trading bots hackers broke in, installed malware across up to 26,739 servers, stole trading credentials and started making unauthorized trades on people’s accounts not one broker. over 70 different securities and forex firms across japan and internationally. people woke up to trades they never made, money moving they never authorized OANDA Japan froze customer withdrawals. GMO refused to pay the ransom, permanently shut down the entire service, and did something nobody expected they asked the japanese government to use brand new active cyber defense powers, literally military-grade authority that just went into effect october 1st, to trace and neutralize the attackers’ infrastructure. the government can now legally hack back the technical details from the attacker’s own site are terrifying. GMO configured their VPS network using Active Directory, something you should never do on shared hosting every server had admin credentials. and the RDP files customers used to connect? drive redirect was enabled by default, meaning the moment you connected to your VPS, your entire local PC was shared with the server hackers didn’t just own the servers. they had a direct path into every customer’s personal computer. they extracted data, installed backdoors. customers were exposed like this for over 7 years 27,000 servers. 70+ brokers. unauthorized trades. personal computers backdoored. a company begging its government to go to cyber war october isn’t slowing down
57
392
56
1,788
103,955
Tech Mage 🇺🇦 retweeted
JUST IN: Children whose mothers took choline supplements during pregnancy scored +8 IQ points higher at age 4 than those in a placebo group, major new study finds.
236
740
242
16,501
3,507,834
Tech Mage 🇺🇦 retweeted
Time for the endless bloodshed to stop
1,170
1,477
105
20,030
283,805
Tech Mage 🇺🇦 retweeted
Since we see the PHP fixes being back-ported by extremely helpful volunteers (and their agents) from 8.2, the oldest supported version, all the way to 5.x from 10 years ago, maybe now is the time to re-evaluate back-porting ALL security fixes with the help of AI system, right?
58
15
5
207
13,315
Tech Mage 🇺🇦 retweeted
What’s actually going on in Ukraine is that there is a massive incentive difference between the elites and the people. The former have grown very rich off the hundreds of billions flowing to Ukraine, while the latter’s children are conscripted to die in trenches.
25,876
42,801
4,351
255,879
13,859,640
Tech Mage 🇺🇦 retweeted
CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution PoC: github.com/Boreas37/CVE-2026…
11
244
19
1,675
117,577
Tech Mage 🇺🇦 retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
289
3,275
673
22,654
2,267,918
Tech Mage 🇺🇦 retweeted
BREAKING: Ukraine's anti-corruption agencies raid the country's central bank as part of an ongoing investigation.
56
306
36
2,455
81,678
Tech Mage 🇺🇦 retweeted
We had to invent a new form of WAF to mitigate this latest set of vulnerabilities. Now enabled by default for all customers for free.
The new capability that we built to help defend php2shell is live. The @Cloudflare WAF now has full transaction detection that evaluates the request and the origin response together, and response rules block a match before it reaches the requester. Example from the post: unauthenticated hit on /admin that comes back 200 text/html. Block it. Auth failures and redirects can then pass through untouched. blog.cloudflare.com/full-tra…
53
132
34
2,212
99,710
Tech Mage 🇺🇦 retweeted
Contra todo pronóstico y sin aviso previo, Ondřej Surý ha aplicado los parches CVE-2026-109618 y CVE-2026-109619 tanto para PHP 5.6 como para PHP 7.4. En el log aparece: "Backported from 8.2.35". Nos ha salvado el culo a los que tenemos servidores Debian/Ubuntu.
43
379
49
3,162
217,533
Tech Mage 🇺🇦 retweeted
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
The PHP 8.5.12 release fixes the two specific CVEs (via state/bailout changes) detailed in official advisories; referenced "surviving paths" (e.g. var_destroy UAF) are separate pre-existing unserialize issues unrelated to this patch. php.net/archive/2026.p… github.com/php/php-src/se… github.com/php/php-src/se… github.com/dinosn/php-8.5…
76
365
146
2,586
501,714
Tech Mage 🇺🇦 retweeted
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell! Researchers are reporting a successful double-free trigger on the newly patched release. ⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation. Don't assume you're safe just because you've patched. #php4shell #php #cybersecurity xitter.cf/_annieversary/status/2…
chat. chat... its not funny anymore
Readers added context they thought people might want to know
The original post has since been edited to specify that this was about an unrelated vulnerability that the user had discovered, not the recently patched vulnerability. fedi.katze.sh/@elise/1174793…
32
572
191
1,851
926,737
Tech Mage 🇺🇦 retweeted
‼️ If you run a branch older than 8.2 — 8.1, 7.x, or 5.x — PHP will not fix it. 😬 There is no patch coming for you from PHP. Your only options are to upgrade to a supported branch, take the system off the internet, or get a backported fix from your Linux distribution or host, if they offer one.
🚨 PHP2Shell: the one-line “fix” everyone shared overnight — session.upload_progress.enabled=0 — isn’t enough on its own, the firm that suggested it now says. A PHP core developer put it bluntly: “the only mitigation is patching / upgrading PHP.” No patch until 14:00 UTC today. Here’s what actually cuts your risk before then → thehackernews.com/2026/10/ph…
35
150
18
644
85,789
Soon php update at 5 pm Kyiv time. 2pm UTC Meantime edit the PHP configuration Add or change this line in the relevant php.ini session.upload_progress.enabled = Off
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
1
2
481
Tech Mage 🇺🇦 retweeted
wake up babe, every version of PHP for the past 17 years has two critical bugs and now 74.5% of the internet is broken lol. there's a patch coming out tomorrow but until then most of the internet has open backdoors that allow unauthorized remote code execution
79
2,667
215
33,425
976,488
Tech Mage 🇺🇦 retweeted
"The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores." emudhra.we-have-a-problem.co…
2
5
272
Tech Mage 🇺🇦 retweeted
I wanted to show how janky the AI slop is of the FilmCraft software. I wanted to set the stage for how bad it is, and how little care there has actually been in implementing this tool, and most definitely the entire Craft suite too. It's all AI slop that does not even work.
288
153
130
2,187
505,289